Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft
File: Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft (raw, json)
Hash identifier: lcTvL71vjIUnJjvruSZ7w3Gc7jtsGJMnV5nSHkvr/gw=
Subject key identifier: 26:8E:0E:1E:7B:CF:A0:03:9B:E4:87:4F:6C:29:BC:E4:6C:57:FF:E6
Authority key identifier: 5D:FF:73:A8:B2:18:35:82:BB:4E:FD:7D:E8:57:D4:81:F6:D4:B4:60
Certificate issuer: /CN=5dff73a8b2183582bb4efd7de857d481f6d4b460
Certificate serial: 019D265FA1BE01B6C1AA69745874E235AC83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xf9zqLIYNYK7Tv196FfUgfbUtGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft
Manifest number: 1268
Signing time: Wed 25 Mar 2026 19:01:34 +0000
Manifest this update: Wed 25 Mar 2026 19:01:34 +0000
Manifest next update: Thu 26 Mar 2026 19:01:34 +0000
Files and hashes: 1: Jqfmht0PAQt2HnSQZ-I_FzAJ46Y.roa (hash: cjrDpM/5EqcBfOXqNWcxU7B1Z2/Qb7RmnI4w4dT/TqI=)
2: Xf9zqLIYNYK7Tv196FfUgfbUtGA.crl (hash: lQK9vYNvYfMJDqFzyVybJe6is1rVTjpS/cXCEOiKRj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xf9zqLIYNYK7Tv196FfUgfbUtGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:a1:be:01:b6:c1:aa:69:74:58:74:e2:35:ac:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dff73a8b2183582bb4efd7de857d481f6d4b460
Validity
Not Before: Mar 25 19:01:34 2026 GMT
Not After : Mar 26 19:01:34 2026 GMT
Subject: CN=268e0e1e7bcfa0039be4874f6c29bce46c57ffe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:03:30:e1:b9:77:ac:93:97:a7:08:0d:79:58:
35:1b:03:e4:62:8a:5d:84:21:95:54:59:21:6f:67:
b3:63:96:47:6a:6f:9d:66:bd:6f:3f:1d:2b:6a:97:
9e:85:b1:50:38:aa:0f:09:d0:64:9b:f0:30:9c:1c:
b5:9e:5b:5d:35:3b:9f:72:86:84:e8:df:3c:ad:56:
37:bc:48:5d:00:e6:65:df:c8:c9:81:4e:62:84:d1:
78:37:14:81:bd:8a:cb:fd:16:f3:a2:c4:04:57:2e:
3f:7e:96:e2:66:3e:ba:b5:bf:82:b4:ce:d7:6a:cf:
c8:36:58:11:70:a4:09:aa:af:1a:71:ce:ae:ff:2f:
1f:f4:1f:f5:7a:7e:ec:b3:b7:f8:a9:d7:f8:37:fb:
87:49:eb:43:50:93:18:bb:16:20:17:d5:d7:18:b9:
60:c9:1c:0f:6c:0a:90:52:86:51:95:96:92:5e:a6:
38:62:1e:30:59:61:e9:d0:60:b5:ee:67:4c:d9:13:
ed:77:09:70:4c:21:4e:91:4d:73:2c:c7:51:f7:06:
0b:56:91:23:3c:d0:ac:91:7e:29:b6:1c:05:b2:36:
5c:b8:67:ba:f2:59:51:5a:58:df:0e:94:bb:5c:9e:
d8:3d:d7:91:65:5c:a8:e8:b2:15:52:77:71:c2:eb:
a6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:8E:0E:1E:7B:CF:A0:03:9B:E4:87:4F:6C:29:BC:E4:6C:57:FF:E6
X509v3 Authority Key Identifier:
keyid:5D:FF:73:A8:B2:18:35:82:BB:4E:FD:7D:E8:57:D4:81:F6:D4:B4:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xf9zqLIYNYK7Tv196FfUgfbUtGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:af:b9:61:ec:2f:bc:7e:e6:72:25:42:90:17:b1:29:00:90:
ab:c6:f2:b0:45:e4:7d:c7:6e:a3:48:a8:3a:af:e5:20:e5:92:
a2:10:5e:f3:46:81:10:68:2d:ff:f0:a9:6f:ee:55:e2:47:bd:
32:8b:af:8c:e0:bb:48:c7:3d:99:0f:a3:4e:64:04:52:52:b2:
64:8f:f5:c3:4f:ea:2f:cd:d1:6e:3c:a6:ed:c8:7c:42:5a:1e:
77:8d:7a:69:84:78:02:97:85:51:20:19:c9:cf:0c:3e:66:0b:
a2:12:95:07:9d:47:5e:b5:57:f2:81:05:39:5c:1b:aa:ac:0a:
c2:89:3f:e1:fc:23:69:de:86:a3:94:1e:9e:5f:6c:30:36:b3:
be:35:27:de:c8:84:4e:2f:a7:4e:da:b0:84:99:a1:a0:70:fe:
dc:9b:3a:c9:99:a9:6e:47:b4:3a:b0:76:60:67:16:ed:9d:ac:
5c:ff:21:40:40:e5:f6:7d:10:af:f2:9a:05:e3:ad:80:94:58:
a2:50:2e:89:fb:5d:60:38:23:28:b9:d4:06:26:46:a7:bc:70:
8b:3d:e1:e7:65:28:70:5a:f7:56:a5:78:a3:d6:b3:a2:02:43:
b4:6f:9c:c5:00:4a:68:1b:8f:b8:ad:df:4e:02:a8:38:94:17:
3e:23:30:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:34:26 2026 by rpki-client