Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.mft
File: XiZI8SkNRHG821C4K-TtkyADCU0.mft (raw, json)
Hash identifier: icgpxXGXaGwUh1lU1tJrVCMNjw06FcP5wlsSBBcKl1E=
Subject key identifier: 9C:88:31:FC:BB:93:B4:DB:C4:F5:85:CD:CD:9E:F9:54:D4:7C:98:54
Authority key identifier: 5E:26:48:F1:29:0D:44:71:BC:DB:50:B8:2B:E4:ED:93:20:03:09:4D
Certificate issuer: /CN=5e2648f1290d4471bcdb50b82be4ed932003094d
Certificate serial: 019D26CD1A18CCE91633A5AA7D4D54C1EAA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XiZI8SkNRHG821C4K-TtkyADCU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.mft
Manifest number: 1818
Signing time: Wed 25 Mar 2026 21:01:08 +0000
Manifest this update: Wed 25 Mar 2026 21:01:08 +0000
Manifest next update: Thu 26 Mar 2026 21:01:08 +0000
Files and hashes: 1: XiZI8SkNRHG821C4K-TtkyADCU0.crl (hash: 7IYwb2sTepk/qeGbMxlOn9PjCs4z8foAEe5FwiOzfYg=)
2: sq8rzyi0UVog1iS5Ju1CZc-6dl0.roa (hash: hTNSZci/jvQbgI5g6zcbraZud5VHWLa8WEC2pVISMYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XiZI8SkNRHG821C4K-TtkyADCU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:1a:18:cc:e9:16:33:a5:aa:7d:4d:54:c1:ea:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e2648f1290d4471bcdb50b82be4ed932003094d
Validity
Not Before: Mar 25 21:01:08 2026 GMT
Not After : Mar 26 21:01:08 2026 GMT
Subject: CN=9c8831fcbb93b4dbc4f585cdcd9ef954d47c9854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f2:9a:ca:6b:d6:33:a8:67:46:45:0c:4d:fe:
55:cb:b6:cf:97:aa:86:b9:bf:d6:d8:77:be:62:84:
29:97:cc:35:c0:5b:46:c4:40:1a:2d:9a:66:46:7b:
a2:d1:38:76:ea:fe:0e:bc:3c:25:65:b7:50:82:f7:
08:e5:00:7b:71:e0:69:c1:32:7c:f7:e5:09:6c:dc:
90:0b:ed:25:b9:a0:1e:ae:af:e5:d1:4f:4e:9c:3d:
83:b0:be:6a:6d:94:75:47:0a:c7:22:92:36:cb:0e:
aa:5a:80:d2:30:24:de:ea:1f:a0:aa:3c:5d:69:76:
ac:42:74:19:1f:58:fd:9b:7b:7b:f2:68:f4:b5:77:
10:f2:d2:7f:ac:13:04:78:13:dd:d0:f0:55:06:d2:
2d:f2:2a:1a:ab:24:e6:f3:95:d6:f0:9c:8d:77:48:
c2:71:fb:65:fc:53:4f:78:00:53:95:a1:01:3d:cb:
22:f7:29:77:17:dd:78:80:ad:ea:a8:74:cc:f3:63:
72:4d:f4:5f:0a:e2:5f:90:d4:29:f2:77:c2:2f:c5:
86:93:05:37:b5:4b:e1:87:7e:df:65:e2:46:d9:2c:
d2:0f:cd:b6:fe:47:9d:74:a1:6b:86:12:fa:64:28:
63:49:a4:c0:8c:2c:f1:23:a2:a9:9f:77:17:52:75:
d4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:88:31:FC:BB:93:B4:DB:C4:F5:85:CD:CD:9E:F9:54:D4:7C:98:54
X509v3 Authority Key Identifier:
keyid:5E:26:48:F1:29:0D:44:71:BC:DB:50:B8:2B:E4:ED:93:20:03:09:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiZI8SkNRHG821C4K-TtkyADCU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ed:8a:7d:0c:62:4c:2d:fe:ae:ef:eb:32:ed:ec:de:c6:b5:
23:93:97:4d:a9:6a:4b:d4:65:1a:38:be:b6:20:f0:6d:01:76:
12:48:da:93:1e:84:f5:dd:a2:1d:4f:a7:09:37:a2:a8:54:0b:
d8:1d:14:26:60:23:91:78:9c:fa:1d:78:11:a1:86:e4:5a:56:
1f:51:ec:a9:99:1b:8c:74:48:19:ff:3f:97:1a:f5:7d:bb:9f:
e7:74:9a:54:4b:ed:d4:10:ab:3b:09:fd:e6:7d:52:c6:23:13:
3c:c4:01:00:31:c1:03:ff:53:8c:55:b8:6d:8b:79:24:92:84:
da:d2:77:a7:ac:02:ba:7e:81:b9:f8:5d:81:c8:12:33:3a:43:
96:69:17:91:08:0e:09:bd:4b:6d:f0:45:03:1b:a6:69:ed:97:
88:35:77:76:17:ca:70:1f:35:f6:da:5a:85:1c:12:e0:ec:f3:
9c:48:76:27:09:66:43:80:53:09:66:02:6b:df:a8:8b:d9:4d:
a6:01:88:b3:72:4a:c2:0b:87:bc:b8:73:11:5d:fd:5e:d7:12:
f6:a8:a7:0f:55:87:ad:43:f8:9e:02:41:0d:fb:3c:1f:52:82:
34:77:6d:96:d8:1b:b8:c5:95:71:00:55:fa:93:2d:fb:f7:6e:
1f:d0:77:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:46:11 2026 by rpki-client