Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft
File: X4rRNUEr-QQb5f0I50okEg2z7sc.mft (raw, json)
Hash identifier: q5GhHshsk6UmQH1aMxUihEsDuD/gFB7wxyUrPs775h8=
Subject key identifier: 0C:E5:BF:A8:0C:66:52:27:4F:FD:7E:AD:5B:7D:81:7A:30:D3:CD:07
Authority key identifier: 5F:8A:D1:35:41:2B:F9:04:1B:E5:FD:08:E7:4A:24:12:0D:B3:EE:C7
Certificate issuer: /CN=5f8ad135412bf9041be5fd08e74a24120db3eec7
Certificate serial: 019D3308A48486D08C6CE9E391FF1371AAF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4rRNUEr-QQb5f0I50okEg2z7sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft
Manifest number: 0CDF
Signing time: Sat 28 Mar 2026 06:01:37 +0000
Manifest this update: Sat 28 Mar 2026 06:01:37 +0000
Manifest next update: Sun 29 Mar 2026 06:01:37 +0000
Files and hashes: 1: X4rRNUEr-QQb5f0I50okEg2z7sc.crl (hash: ZJzXO+Z3/3CY/tSEHJmdZx8hDG5TGNEk2j3C+mKHmxY=)
2: s48bE7zPFBsdxI3PwTkDcvxFl10.roa (hash: LCQZLSRk+w6NsXbM56XYTWWTkMECSvsvXOz9oSXfsiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/X4rRNUEr-QQb5f0I50okEg2z7sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:08:a4:84:86:d0:8c:6c:e9:e3:91:ff:13:71:aa:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f8ad135412bf9041be5fd08e74a24120db3eec7
Validity
Not Before: Mar 28 06:01:37 2026 GMT
Not After : Mar 29 06:01:37 2026 GMT
Subject: CN=0ce5bfa80c6652274ffd7ead5b7d817a30d3cd07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e8:6b:e6:3f:9a:56:41:5c:a0:7d:a8:ce:fd:
39:69:7e:a4:3f:f7:d6:01:3f:f8:dd:21:ab:fc:c0:
9f:76:d4:19:6d:b6:01:49:08:b4:c4:25:4d:da:8f:
65:60:85:62:ca:59:a6:64:e7:c6:f5:7a:45:01:90:
28:a1:12:2d:b9:1a:91:63:0d:29:79:01:36:94:df:
35:ce:dc:26:ca:ec:e8:b0:6f:64:3d:6f:9a:fd:a4:
7b:c8:ed:17:74:b3:40:d4:f0:86:98:90:d7:66:2e:
ea:14:18:d3:1b:45:54:17:14:d9:41:75:cd:29:ee:
ae:48:6f:b6:d6:65:2b:cb:93:c3:09:da:d7:ee:30:
70:49:97:7a:f3:81:63:c7:d3:f2:84:24:1f:92:78:
3e:3d:8e:69:59:42:fa:b9:67:93:c3:a2:84:a1:3b:
22:2a:30:ce:7e:52:58:4a:a6:da:ac:a8:91:19:5b:
bf:d3:f8:5c:cc:bd:48:00:7a:28:f0:2b:56:66:b9:
3c:c6:5c:9c:57:00:66:12:32:40:a4:dc:62:b4:4b:
5e:28:88:f0:b0:8e:de:a0:88:b6:e1:0a:92:ed:d3:
36:5a:86:bd:d8:fe:74:9b:53:ae:72:b5:cf:2c:f1:
a0:60:eb:59:8c:20:5c:33:39:37:8c:df:37:13:f8:
7a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E5:BF:A8:0C:66:52:27:4F:FD:7E:AD:5B:7D:81:7A:30:D3:CD:07
X509v3 Authority Key Identifier:
keyid:5F:8A:D1:35:41:2B:F9:04:1B:E5:FD:08:E7:4A:24:12:0D:B3:EE:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4rRNUEr-QQb5f0I50okEg2z7sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:6b:c9:d7:24:98:74:44:24:49:a1:20:38:35:5e:8b:14:b3:
d2:3e:c5:88:0c:4e:1f:43:6f:ae:ee:b9:26:27:07:e7:da:db:
ce:23:ab:38:c6:46:38:ac:b5:7f:88:b4:4b:ea:e1:3b:e0:f8:
87:97:b5:d1:53:a9:ed:0b:ec:32:63:5b:d0:1c:b4:47:86:06:
c6:37:85:cf:8f:61:84:d9:00:0b:cb:fb:6f:17:d4:17:d8:05:
28:a9:66:2c:b3:df:06:47:cf:f9:0c:3c:f7:d0:9e:70:19:d6:
28:c8:f4:1d:76:95:d1:76:a0:9f:11:c2:1b:60:52:c0:5a:57:
14:4a:0f:82:a1:19:a9:5e:38:a8:bd:78:f7:56:6b:92:af:3d:
f5:eb:bc:82:e8:67:81:82:91:77:f7:97:b6:aa:a7:a4:25:c3:
d8:41:1c:2e:af:c1:d9:87:e7:27:f7:57:e1:86:f1:45:7d:0f:
9a:cf:08:4e:86:44:1b:fa:bc:28:a1:75:59:52:af:77:b6:48:
ff:02:1c:a5:1e:43:2a:06:e3:a1:c7:66:d0:70:9d:6d:8e:1b:
9c:9d:1d:24:5e:c9:ff:d0:21:31:4e:c0:77:1c:4f:0c:d7:82:
88:ed:5c:42:23:05:cd:1f:ac:a3:cb:b3:02:55:86:6e:6a:86:
fd:0e:71:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:46:31 2026 by rpki-client