Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.mft
File: 500-XZlL7NPyWMQd858fY-xWPh0.mft (raw, json)
Hash identifier: u0qxyaUPuBYreqANEtMmGKzDoLoH6G5RiRwAUSWaTq0=
Subject key identifier: 2B:6A:CA:32:33:18:47:59:9C:B6:80:87:67:0A:D7:A2:44:B5:83:3C
Authority key identifier: E7:4D:3E:5D:99:4B:EC:D3:F2:58:C4:1D:F3:9F:1F:63:EC:56:3E:1D
Certificate issuer: /CN=e74d3e5d994becd3f258c41df39f1f63ec563e1d
Certificate serial: 019D27DFF2D8D57E526F0CCA622B4B50E566
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/500-XZlL7NPyWMQd858fY-xWPh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.mft
Manifest number: 1231
Signing time: Thu 26 Mar 2026 02:01:21 +0000
Manifest this update: Thu 26 Mar 2026 02:01:21 +0000
Manifest next update: Fri 27 Mar 2026 02:01:21 +0000
Files and hashes: 1: 500-XZlL7NPyWMQd858fY-xWPh0.crl (hash: 1NkFndcrUGQ9uACJ/5nqh/55BGhuQxYzBmMLFy21Sgc=)
2: xJQkEE-myuee2xusX84h4jOXGkk.roa (hash: bgfimRITzgygmGvHr8W4DzraqoP9/oX3mukFAiSIHn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/500-XZlL7NPyWMQd858fY-xWPh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:f2:d8:d5:7e:52:6f:0c:ca:62:2b:4b:50:e5:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e74d3e5d994becd3f258c41df39f1f63ec563e1d
Validity
Not Before: Mar 26 02:01:21 2026 GMT
Not After : Mar 27 02:01:21 2026 GMT
Subject: CN=2b6aca32331847599cb68087670ad7a244b5833c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4b:6e:4d:85:7c:95:7f:44:b6:d0:3e:dc:b2:
09:54:97:25:ea:67:1f:fa:b5:ee:6a:3a:94:52:35:
c4:6b:ce:32:b4:09:9b:84:5b:ad:61:8c:0b:4c:ab:
f4:04:a1:05:e4:c5:9a:36:b3:32:1a:e3:93:e8:5f:
64:31:6d:8b:1f:35:89:cc:39:f8:39:2f:8b:9d:bf:
1b:e6:7f:9e:5a:45:7d:8f:9d:f1:f8:e0:90:db:67:
1b:fc:29:08:85:eb:46:e0:06:ac:ea:4f:b1:0d:6b:
8c:d3:df:ac:4d:4c:03:0d:62:b0:42:09:24:0e:f5:
aa:4d:83:f6:fb:06:ac:9f:91:83:9d:cb:da:a4:5b:
3d:3f:55:f1:6f:69:d9:7f:0c:ec:e5:cb:41:1e:a6:
c1:2f:89:4c:e2:8a:d8:b2:0f:35:fa:e9:b0:b6:3b:
66:81:14:3d:0c:c9:37:7c:d2:3f:0c:b7:6d:7c:23:
e0:12:1f:bd:5e:d0:83:ec:3b:44:4f:75:45:5e:62:
88:63:a7:33:60:5c:f2:ea:58:b6:ce:6a:29:aa:47:
61:af:82:c6:d6:c6:6e:2a:fe:b3:d5:d2:ab:3f:b7:
c8:8d:a1:31:22:9a:dd:6d:c5:18:db:ff:f3:b1:32:
7b:f8:9f:a7:cc:a5:44:74:b5:8f:1b:54:d6:ce:28:
4b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:6A:CA:32:33:18:47:59:9C:B6:80:87:67:0A:D7:A2:44:B5:83:3C
X509v3 Authority Key Identifier:
keyid:E7:4D:3E:5D:99:4B:EC:D3:F2:58:C4:1D:F3:9F:1F:63:EC:56:3E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/500-XZlL7NPyWMQd858fY-xWPh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:cc:62:e6:ba:8e:1c:26:83:80:c8:f2:69:b0:97:59:7f:a7:
e1:bc:21:72:2a:5b:e3:f3:0a:f0:76:16:74:df:f8:1b:15:16:
ff:f6:4d:dd:b5:27:48:b7:f3:f6:2f:15:35:d4:f2:ee:b8:1e:
30:1c:a6:d9:d4:93:be:33:f2:19:66:4c:ab:6e:4e:bb:ce:01:
b1:1b:92:4f:6d:3c:9f:ac:38:8c:63:2a:4a:fd:06:18:45:04:
57:ac:90:27:7d:fa:79:ce:e4:db:51:25:58:f1:fb:e8:67:5a:
43:ef:b5:9b:4e:9a:99:f4:d5:59:cb:28:cf:24:15:d9:37:17:
10:31:ca:1a:35:38:92:b3:75:5e:a3:a2:db:33:f8:ca:b0:85:
8b:bf:7a:d7:72:0f:17:4e:cb:dc:1b:8f:0d:5d:bf:0d:a2:ee:
3e:7a:22:95:f4:f8:f2:3d:83:81:27:8b:c7:cf:41:01:f0:8d:
ab:d4:23:49:3f:2f:88:39:93:63:9c:86:51:78:01:5c:44:72:
8b:6c:7d:ce:f1:42:74:02:f6:99:da:7b:1a:cc:ec:f1:54:da:
ff:0a:84:e1:53:f4:7f:0f:ff:fa:ae:1c:f6:78:a5:38:98:e7:
f3:08:d4:72:13:ba:b4:19:4f:ed:86:82:79:51:92:df:d1:a0:
93:f4:1c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:27:50 2026 by rpki-client