Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft
File: XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft (raw, json)
Hash identifier: 5HVIzRbzQFYAQM2/nxPh8mGwytUu8uYx59H5xqeYs/g=
Subject key identifier: 2F:DA:A3:E5:3C:D5:F5:D7:D5:76:11:1C:9B:3C:4F:A3:FE:CA:4A:E9
Authority key identifier: 5C:68:A2:79:76:9D:19:3D:F3:F9:78:1D:2B:A4:C1:D9:27:7B:4F:D6
Certificate issuer: /CN=5c68a279769d193df3f9781d2ba4c1d9277b4fd6
Certificate serial: 019D2A3C5AAC5AFF0C894F27BABD895925B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGiieXadGT3z-XgdK6TB2Sd7T9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft
Manifest number: 06B8
Signing time: Thu 26 Mar 2026 13:01:31 +0000
Manifest this update: Thu 26 Mar 2026 13:01:31 +0000
Manifest next update: Fri 27 Mar 2026 13:01:31 +0000
Files and hashes: 1: IrwpzwNbD7ixeqg3vbCTik-T_Lc.roa (hash: HyILMqlsRAkiSlovY1KbO4nirms1nXEWPqExv/4Zspw=)
2: XGiieXadGT3z-XgdK6TB2Sd7T9Y.crl (hash: lB6ZU7x/CDPJ06BieILs+n54Ay5dqYwmK1/He94XqSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGiieXadGT3z-XgdK6TB2Sd7T9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:5a:ac:5a:ff:0c:89:4f:27:ba:bd:89:59:25:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c68a279769d193df3f9781d2ba4c1d9277b4fd6
Validity
Not Before: Mar 26 13:01:31 2026 GMT
Not After : Mar 27 13:01:31 2026 GMT
Subject: CN=2fdaa3e53cd5f5d7d576111c9b3c4fa3feca4ae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:25:3d:5c:30:e5:51:23:29:6e:b9:86:46:92:
87:36:d4:db:77:39:ed:63:15:e4:fc:6f:b7:22:0d:
dc:86:b6:3e:9c:52:83:28:52:da:54:69:76:c9:5b:
e2:42:6e:26:97:f4:c7:35:38:78:3b:32:cc:48:c4:
2d:45:fa:97:f9:10:4d:9d:36:d4:1c:74:1a:68:40:
e5:47:74:99:7f:9f:39:28:63:d6:cc:cc:09:3a:87:
e2:1b:ec:f2:3d:dc:1e:b2:5c:12:b9:64:9e:59:bc:
c2:66:62:83:ab:0e:5a:43:22:cd:b1:5b:39:56:d0:
a1:d9:7f:14:a8:9b:ee:78:3d:a7:d3:a6:12:aa:1c:
4d:5c:54:3d:4a:7a:ec:6b:2f:cc:db:58:18:2c:73:
ed:1d:d1:dc:ff:9a:b4:1c:3a:9d:73:08:77:ff:eb:
92:b9:3f:81:67:23:a3:c0:b4:bc:63:76:87:17:e0:
51:c7:7a:39:ab:f2:a9:4a:15:21:61:59:14:8b:92:
95:89:88:3d:c4:c5:ea:63:92:e2:82:e0:0a:4b:3d:
2a:f3:4a:0f:4c:63:f2:75:b1:70:37:ea:21:1c:62:
0a:63:fc:44:a6:ba:8f:78:6f:2e:c8:a4:e9:e5:39:
41:c8:5e:71:cd:f0:3e:fa:45:1b:c8:a9:41:af:d5:
2d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DA:A3:E5:3C:D5:F5:D7:D5:76:11:1C:9B:3C:4F:A3:FE:CA:4A:E9
X509v3 Authority Key Identifier:
keyid:5C:68:A2:79:76:9D:19:3D:F3:F9:78:1D:2B:A4:C1:D9:27:7B:4F:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGiieXadGT3z-XgdK6TB2Sd7T9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:42:40:c9:52:f3:c4:65:55:aa:25:dd:a1:1e:82:1d:03:8e:
08:42:06:6e:a3:a6:37:75:be:1a:4e:ab:bb:9e:99:1e:7f:cc:
b7:d9:df:ed:04:ce:91:bb:21:52:31:d8:c5:e5:f7:cd:a1:3f:
cb:be:f1:4e:92:26:90:ab:e0:ae:d7:06:ba:b1:4b:be:cd:b7:
94:e2:04:52:bb:a0:1e:75:27:a5:fe:77:e7:dc:78:62:5d:bf:
a4:28:39:bd:b1:25:2b:36:15:44:fb:91:0d:55:d4:f8:d7:bf:
46:2c:0d:c8:5d:d2:66:30:3d:ea:f9:c4:60:51:f2:e5:98:2a:
06:18:c2:be:2d:e8:ca:17:c9:37:7d:2e:f7:0c:f3:6a:8c:92:
c7:ad:1f:8b:92:4c:ae:e0:8e:b9:be:c2:d4:48:1c:28:06:8e:
7d:84:7a:28:70:92:0b:25:98:98:8b:da:2d:b4:b6:80:01:03:
7f:d3:8e:fc:2b:ab:30:b8:98:0f:a0:fa:b4:04:39:df:b6:c4:
af:5a:75:82:69:68:a5:88:9c:ad:ed:5c:c9:fd:d6:51:15:96:
80:ed:ca:05:59:55:0e:92:e0:23:30:c8:f5:34:7d:70:aa:fc:
95:e3:97:e6:72:56:4a:3e:3e:a5:cc:5e:cc:cf:24:e4:a8:7f:
7d:af:b7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:06:10 2026 by rpki-client