Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
File: XdE5iXay9IdyW8E9f66-0-Ftgsk.mft (raw, json)
Hash identifier: G3fxSXoqoHxA6wiVB3ClZlghtDGANlmh0WDACGwVUQw=
Subject key identifier: D9:DE:EE:FA:4E:C3:48:6D:25:DF:53:7A:45:70:B0:7C:66:D9:92:70
Authority key identifier: 5D:D1:39:89:76:B2:F4:87:72:5B:C1:3D:7F:AE:BE:D3:E1:6D:82:C9
Certificate issuer: /CN=5dd1398976b2f487725bc13d7faebed3e16d82c9
Certificate serial: 019D265F3D02632DC5D539A05CEB919A79BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
Manifest number: 06A6
Signing time: Wed 25 Mar 2026 19:01:08 +0000
Manifest this update: Wed 25 Mar 2026 19:01:08 +0000
Manifest next update: Thu 26 Mar 2026 19:01:08 +0000
Files and hashes: 1: 1yTxuvJTgzp3vueVNPtMM4HSlnE.roa (hash: C3mQ9ASRyTlSwgnHvOngoGQirohvWMvEni68YFNubqo=)
2: XdE5iXay9IdyW8E9f66-0-Ftgsk.crl (hash: zo+eY079B2Yhahk32atbRAHPJxQnTLs2Rp8yJ6+TInI=)
3: xweu5qCO47VIbmMKNVD40EQTVOU.roa (hash: 2Ggr+oJ9NSlt1DGrtrpkA0zHBUc5XOHY+zg99GvfTiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:3d:02:63:2d:c5:d5:39:a0:5c:eb:91:9a:79:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd1398976b2f487725bc13d7faebed3e16d82c9
Validity
Not Before: Mar 25 19:01:08 2026 GMT
Not After : Mar 26 19:01:08 2026 GMT
Subject: CN=d9deeefa4ec3486d25df537a4570b07c66d99270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:20:80:ac:9f:49:10:7a:73:c4:0e:d7:70:15:
b9:6c:69:fa:bb:57:05:2e:ff:28:f7:15:c6:4e:54:
d4:81:82:15:10:1b:ec:c2:03:7a:06:f7:03:86:8f:
39:2a:56:83:1a:02:74:48:65:91:59:fc:78:b7:18:
b8:f5:9c:e0:3a:b6:a4:7b:78:91:57:53:77:4e:11:
61:da:4a:53:4b:89:49:2d:52:3f:9f:68:1a:48:7c:
d6:aa:b2:09:c7:28:b3:37:de:5c:2e:bc:0e:04:13:
69:a3:94:78:d1:b9:5f:16:bf:dd:9a:25:1c:86:95:
ff:34:4f:a4:5e:c6:39:f3:13:28:48:cb:37:9e:7d:
cd:01:ba:d1:83:4a:01:c4:51:45:38:e7:ae:f5:e3:
ba:de:31:8d:74:e0:63:27:2f:ac:6a:4c:bc:14:5d:
fb:dc:a5:2b:4d:90:c1:d3:29:dc:da:b8:b5:26:dd:
62:4d:de:a4:6e:3c:ec:26:59:f5:17:35:7f:44:40:
f8:37:c8:25:62:a4:be:bc:62:59:c1:57:90:2a:07:
fb:45:5c:b0:f6:92:8b:ab:4f:08:f6:62:ef:98:f4:
06:75:be:cb:b8:99:d5:d3:a0:27:6e:4b:c9:5d:60:
8f:f2:8d:83:ee:77:d2:ba:97:17:aa:9e:45:a8:83:
b1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:DE:EE:FA:4E:C3:48:6D:25:DF:53:7A:45:70:B0:7C:66:D9:92:70
X509v3 Authority Key Identifier:
keyid:5D:D1:39:89:76:B2:F4:87:72:5B:C1:3D:7F:AE:BE:D3:E1:6D:82:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:44:8b:af:d8:73:50:83:41:38:1f:bd:2c:3a:9c:64:5c:21:
77:7f:3d:c6:d3:ff:b4:c2:68:30:96:c4:cc:39:fe:66:d4:75:
47:fc:82:6f:68:27:e2:f8:54:7c:7f:1a:6d:88:dc:df:8c:b6:
ea:58:c4:8e:0d:91:5a:9b:6d:04:a5:ae:f6:59:f3:2f:e5:40:
44:7b:1c:e5:e7:43:ac:0e:6a:b2:16:59:e8:a9:9e:eb:9a:1b:
bb:38:dc:cc:97:14:26:fe:da:e8:5d:4b:b7:10:bb:21:51:e3:
3f:f2:30:33:58:49:8a:33:76:b0:d9:75:ef:dc:f1:f1:4b:6f:
61:49:75:07:b7:c4:9c:ae:a7:f6:b5:33:9e:58:73:8d:0e:15:
b0:29:94:0a:67:be:21:f6:6b:05:11:71:f2:5e:89:f4:62:61:
ec:ab:79:7e:ef:68:f9:31:bb:4d:e4:b9:68:f5:91:ed:e9:d8:
08:25:02:f8:98:22:8e:52:f6:af:2a:6e:51:38:c6:99:5a:0f:
25:81:cc:5b:e9:9e:b4:8b:b7:15:db:bf:d4:de:5e:81:e5:e9:
4d:19:5b:ec:c3:12:06:1d:4d:fb:a2:23:06:fa:a5:ca:36:b3:
64:32:f3:85:ad:58:13:7c:f0:1f:f5:bb:5d:8c:fd:37:15:27:
5c:3c:51:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:50 2026 by rpki-client