Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
File: XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft (raw, json)
Hash identifier: 3YUfuI1PNgb/aH+Z2x1zYBFFN3z61TDadgFCekWGgQE=
Subject key identifier: D8:34:A0:C0:E6:F1:AB:90:5B:8B:22:8F:CF:62:AA:6A:44:B1:AE:41
Authority key identifier: 5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96
Certificate issuer: /CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96
Certificate serial: 019D28F23687624BBB23A019658A128AA872
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
Manifest number: 13BE
Signing time: Thu 26 Mar 2026 07:00:55 +0000
Manifest this update: Thu 26 Mar 2026 07:00:55 +0000
Manifest next update: Fri 27 Mar 2026 07:00:55 +0000
Files and hashes: 1: 1-rh3SVK_l4oC_Y7ih51PfkV69KE.roa (hash: NJ7OHlFB+x8OrDZE2G7eqZGbDxSKcSz5o8ZkkHAui3k=)
2: 5WVKFC0tIs3qECrATtHYfjSRy9U.roa (hash: 0laLmepgzK3PsoUCQzvdtjbDgKkvW1Qb5dCLcjPTJAs=)
3: DmAsoEh_ftaKPOhVRscVORbXGKo.roa (hash: K5t41X9Sj7F3OsASCaPLgv9lGQLlL9EDWZMrPiqu4D4=)
4: XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl (hash: oB5QMgN0zRjGWu8MqdAuk2yR++FmFkrIhtZ95eaWlzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:36:87:62:4b:bb:23:a0:19:65:8a:12:8a:a8:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96
Validity
Not Before: Mar 26 07:00:55 2026 GMT
Not After : Mar 27 07:00:55 2026 GMT
Subject: CN=d834a0c0e6f1ab905b8b228fcf62aa6a44b1ae41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:36:b8:3f:2a:28:e2:5d:2d:d9:9e:f9:27:03:
3c:0a:c2:0f:bf:35:64:5f:74:e8:e5:a0:47:c8:a9:
d7:5f:90:a9:e1:ae:95:9f:71:7a:87:07:52:e4:e4:
19:92:f0:b0:08:16:13:6c:8f:0a:c2:5a:b8:09:09:
37:f6:7d:08:dc:fa:d7:47:75:c6:53:80:b0:2e:1d:
a7:7b:9c:7a:03:21:8c:31:0c:67:c7:af:5c:00:4a:
ff:96:f7:29:de:47:50:e9:65:b3:fb:d5:f6:9d:77:
f1:d4:74:bb:dd:1f:a6:0c:e2:39:19:ed:1d:82:db:
ca:25:a3:31:c0:92:84:81:3a:57:00:41:01:cb:f6:
c3:d6:6a:4f:3d:d4:e6:32:4d:f1:4a:46:3e:48:04:
f7:76:1a:30:8f:e7:60:51:0e:4e:b5:37:d9:45:d4:
0e:a5:d6:c7:b7:7c:22:65:f0:31:24:67:55:e1:c1:
71:36:b8:a2:13:98:7a:df:ec:cd:00:df:d0:2f:6e:
59:11:43:fe:f9:3b:ef:1d:51:0f:df:c2:c2:0a:0d:
b2:e3:b2:08:7d:02:63:9e:9f:5f:99:8e:a7:dd:cc:
78:81:56:20:2f:2f:a6:87:2d:3b:6c:d7:94:56:16:
ef:01:8c:a0:84:2c:c8:64:08:e7:d7:3f:83:4e:a0:
39:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:34:A0:C0:E6:F1:AB:90:5B:8B:22:8F:CF:62:AA:6A:44:B1:AE:41
X509v3 Authority Key Identifier:
keyid:5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:f9:63:9a:1d:a5:03:0f:e5:ee:2d:bd:9c:f2:5a:97:ee:6b:
21:a5:d7:cc:cc:c6:50:95:6c:62:20:64:fb:8b:95:be:f9:93:
e4:a9:87:82:1d:ad:78:25:86:c4:0d:4f:94:a3:c7:ef:2a:d7:
83:67:99:d3:d5:d1:3f:a0:04:75:70:a2:7f:b0:1d:55:04:61:
46:41:d8:c9:bd:27:3a:b0:ac:0f:9a:b6:3b:4f:23:f3:8f:b2:
1e:fe:aa:92:85:83:83:d6:ba:2f:c1:dd:b9:70:22:ee:e1:45:
c3:d9:81:83:5f:2f:56:9a:85:39:17:55:e4:1d:24:48:5a:b7:
2b:ad:cd:94:fd:c5:f8:10:47:63:ca:b2:f1:a7:62:10:ae:ee:
4c:32:d9:66:80:c1:53:fc:b5:d2:bf:96:b2:23:ab:6c:76:4a:
89:48:6b:e0:cd:e8:2d:5e:72:25:3d:5f:42:9d:31:b3:80:be:
63:b0:c4:44:37:a7:bb:26:5c:96:0a:b9:0d:52:2f:7a:cf:ce:
7c:70:28:b6:8a:c9:f6:e2:be:4c:cf:c4:c1:e2:88:d6:ee:f6:
63:9b:9b:ac:61:57:31:95:2d:bd:18:6c:f0:85:56:76:6a:84:
24:ee:63:ea:17:db:a8:32:df:c2:e9:5a:4a:74:fe:49:8a:1f:
e7:0b:69:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:27:13 2026 by rpki-client