Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.mft
File: XFe2FhFxnsfI4AErGv9-gfx2ib0.mft (raw, json)
Hash identifier: ZmSUuYJVMcBrsh4nvNSZAdyclj65AItPRc5dLGKzBY8=
Subject key identifier: 10:27:1F:D3:9A:B8:CB:87:85:09:23:20:74:1C:4D:C0:44:04:2C:5E
Authority key identifier: 5C:57:B6:16:11:71:9E:C7:C8:E0:01:2B:1A:FF:7E:81:FC:76:89:BD
Certificate issuer: /CN=5c57b61611719ec7c8e0012b1aff7e81fc7689bd
Certificate serial: 019D2A72A3459D326DFC85C8C3E5D6D6205E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XFe2FhFxnsfI4AErGv9-gfx2ib0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.mft
Manifest number: 1283
Signing time: Thu 26 Mar 2026 14:00:49 +0000
Manifest this update: Thu 26 Mar 2026 14:00:49 +0000
Manifest next update: Fri 27 Mar 2026 14:00:49 +0000
Files and hashes: 1: XFe2FhFxnsfI4AErGv9-gfx2ib0.crl (hash: OBjX+xqQ4gsa2n4W3RDHb7N3BCGg2eC3HEf0I+avdZo=)
2: gyaoxZQ9pcA6k1D-cPBeZilXomE.roa (hash: EbmIg7/Lcotp9RQcNaPrOgD1blVN8hxve+ufr918Fkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XFe2FhFxnsfI4AErGv9-gfx2ib0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:a3:45:9d:32:6d:fc:85:c8:c3:e5:d6:d6:20:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c57b61611719ec7c8e0012b1aff7e81fc7689bd
Validity
Not Before: Mar 26 14:00:49 2026 GMT
Not After : Mar 27 14:00:49 2026 GMT
Subject: CN=10271fd39ab8cb8785092320741c4dc044042c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:09:17:d5:f4:81:ce:23:d1:46:f2:e3:24:cb:
91:39:2a:6b:45:eb:28:2e:99:b5:e6:d6:db:dd:49:
e5:2b:88:43:eb:8b:e0:51:56:93:c8:0c:4e:e7:e9:
b5:3e:fc:56:e2:71:51:e1:4f:ee:d1:09:e4:8e:26:
c2:9c:74:08:6f:dc:51:e9:d2:74:be:1e:aa:e8:e1:
aa:55:9a:cc:d6:1e:8d:1a:fe:29:d7:25:07:19:27:
a8:9e:4b:4e:11:ed:50:76:57:01:ec:f4:da:14:89:
e9:d3:85:e8:43:3f:04:1c:5e:1a:b8:2a:30:4d:92:
c2:fd:41:b0:08:19:2b:d0:29:b2:2c:0d:a3:1a:a4:
19:d0:ab:de:44:0a:19:f3:94:9e:91:95:dd:ab:50:
41:a2:99:30:31:eb:8f:37:c4:86:6a:c6:ce:20:a7:
69:37:e2:64:db:ce:c1:0d:1b:ac:15:92:e1:d4:a3:
34:22:22:fb:ae:6b:17:1b:21:38:a6:28:38:0b:aa:
ce:76:dd:d5:f6:05:76:f3:36:c4:e1:0c:a5:38:ac:
b5:93:6b:14:dc:3c:b0:87:a1:e8:f3:3b:92:df:9c:
c2:f6:a4:73:af:95:70:64:5b:4e:4d:da:98:1d:3e:
b9:f4:fc:8f:c7:7b:d5:b1:89:69:7e:9f:b9:00:6d:
34:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:27:1F:D3:9A:B8:CB:87:85:09:23:20:74:1C:4D:C0:44:04:2C:5E
X509v3 Authority Key Identifier:
keyid:5C:57:B6:16:11:71:9E:C7:C8:E0:01:2B:1A:FF:7E:81:FC:76:89:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XFe2FhFxnsfI4AErGv9-gfx2ib0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:ec:02:1f:71:16:3a:98:62:d3:f2:bf:25:a7:8c:ff:e2:67:
d6:2c:41:23:a5:65:83:90:8a:30:57:d2:54:18:e3:0a:d3:3f:
f2:85:2c:c1:2f:bf:71:34:c2:4c:e0:f6:01:98:45:5b:93:a4:
3c:e3:a5:1c:b0:a1:fd:3c:fe:8b:10:9e:90:76:fc:10:6d:12:
07:b6:16:8c:8d:fe:e4:c1:9a:eb:23:48:c4:cf:a9:18:e7:9c:
0c:f0:7a:e5:18:f5:ca:4c:e0:a9:93:f3:c1:f5:8a:79:9c:ab:
8c:42:fa:02:d5:19:60:35:d5:97:14:a9:14:86:cd:a1:67:32:
e9:5a:8d:c1:69:61:56:54:57:fa:09:24:fc:ef:22:c2:16:80:
3a:a0:ca:68:1b:ae:07:94:07:1a:5c:89:cb:76:9a:57:4e:a3:
5f:56:59:2b:a2:21:60:a5:c4:88:60:97:7a:07:70:04:7d:eb:
ae:56:4e:24:65:ba:7a:38:30:05:60:5a:30:04:b3:ac:1c:f4:
6c:ae:08:24:8e:7e:46:54:82:15:2b:6a:df:2c:90:6c:12:45:
38:98:ba:60:59:87:8a:62:5d:18:ef:75:ff:35:1c:51:a7:8c:
34:7d:b6:36:e6:c7:d2:72:b9:66:5b:0c:39:2a:b2:f4:5e:b2:
46:85:7b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:52:37 2026 by rpki-client