Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.mft
File: XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.mft (raw, json)
Hash identifier: uToM3GS4yaWJ3nYt9DhCDm9aqk9R4uPsOhOKd2gsiY0=
Subject key identifier: DF:68:7E:E7:F5:54:A5:40:B8:69:C2:20:FF:33:91:34:07:6A:BE:37
Authority key identifier: 5E:BA:57:E1:70:7E:43:B2:FA:97:FC:EB:07:8A:5D:46:0E:56:C1:BF
Certificate issuer: /CN=5eba57e1707e43b2fa97fceb078a5d460e56c1bf
Certificate serial: 019D25835A50E736D541C5892B5467430182
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.mft
Manifest number: 174F
Signing time: Wed 25 Mar 2026 15:00:58 +0000
Manifest this update: Wed 25 Mar 2026 15:00:58 +0000
Manifest next update: Thu 26 Mar 2026 15:00:58 +0000
Files and hashes: 1: FmbJHLicsAmHpEbjvujEn2HOV3Y.roa (hash: mljbMsuIaVUTs05lmzHAA0bs6fKmFG4cLrVWq0mgVgs=)
2: XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.crl (hash: PNi9ipJW91QomWIgHRd+uUHrRfqLSBTq2Qgev/yX2Lk=)
3: hmMpNTF4bbjoXMXom-wvfeJBPlA.roa (hash: J0hNGS9K9upyGPJ9j4AP0vH+buJiepp7d1wgo6erTZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:5a:50:e7:36:d5:41:c5:89:2b:54:67:43:01:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eba57e1707e43b2fa97fceb078a5d460e56c1bf
Validity
Not Before: Mar 25 15:00:58 2026 GMT
Not After : Mar 26 15:00:58 2026 GMT
Subject: CN=df687ee7f554a540b869c220ff339134076abe37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:77:49:b4:74:7b:59:61:51:0d:8a:b2:cf:ec:
6c:7e:16:7c:b7:32:f3:5d:02:bc:9c:1a:54:6f:9b:
50:12:7c:2a:8c:68:b6:fa:10:a2:81:8d:cf:97:5f:
fc:be:2e:7d:00:e0:d0:97:49:a2:e6:dc:cd:77:b6:
7e:e6:23:f1:ce:f5:73:ec:56:c8:08:55:f1:b0:3c:
ad:2a:61:d7:cc:ee:a7:83:d9:e3:bc:c3:02:ce:d0:
b3:db:bd:74:7c:b1:39:90:b8:1c:b0:25:4f:e3:e2:
c6:91:ac:27:99:14:bd:d0:ab:43:ea:06:b8:67:4d:
25:30:55:c0:eb:56:fa:b3:5b:eb:a9:6e:b3:0b:8d:
ab:a5:56:57:5c:81:f5:62:de:f4:40:b9:86:20:c6:
8c:7e:0f:23:da:f1:bc:5d:98:68:94:d4:55:32:e2:
3a:fe:e8:5f:8f:b5:83:44:99:55:b0:b0:80:f8:1c:
1d:49:a5:30:20:29:83:c6:2a:09:22:2c:38:0f:d4:
e7:e0:24:76:41:e4:75:a7:d4:bf:75:7a:05:82:a1:
13:74:42:92:ca:c9:6d:69:70:41:b0:93:a7:5b:d4:
5a:bf:2b:63:73:3c:00:48:59:e9:f2:2f:e8:a4:9f:
e3:b3:5e:62:30:d5:fc:50:d1:95:57:07:85:b0:6a:
21:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:68:7E:E7:F5:54:A5:40:B8:69:C2:20:FF:33:91:34:07:6A:BE:37
X509v3 Authority Key Identifier:
keyid:5E:BA:57:E1:70:7E:43:B2:FA:97:FC:EB:07:8A:5D:46:0E:56:C1:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:64:52:0f:05:2d:78:07:13:0d:13:69:f7:a2:b9:db:e3:aa:
c6:ae:f3:09:57:0f:ae:9b:7d:20:f4:da:a7:e6:30:b4:f9:3a:
5e:d7:ab:42:f7:72:41:70:33:66:a2:bf:5b:ca:d3:34:c5:38:
58:8a:e9:d4:b7:5f:66:a6:99:cc:d1:51:41:59:a3:04:72:fc:
08:f0:6e:7d:be:f0:0e:8e:81:dc:9c:41:66:9e:b8:9c:fd:3a:
88:9f:de:d8:02:28:ff:12:04:83:cb:ec:68:8b:b9:8d:af:c7:
28:2c:77:b4:eb:c3:69:c4:5e:0e:e1:bf:d0:c9:26:c4:b3:dc:
21:86:96:df:6e:c7:57:1f:5d:86:4a:6c:ca:4a:a5:ed:f9:33:
d2:ee:f9:b3:48:61:d5:b1:71:30:2b:c7:c3:26:c5:38:55:a5:
b6:6a:72:8a:67:46:93:8f:0f:c3:56:93:44:7d:6a:3a:f1:69:
c9:24:ca:bc:bb:75:00:d3:6e:ec:2e:0c:47:07:90:36:8e:b7:
ce:27:4c:13:97:6d:59:fe:db:f5:c4:e9:8f:92:e2:91:89:45:
e8:8e:83:0c:a0:6b:e0:87:aa:1e:d0:b2:3a:37:0e:05:28:2b:
9f:5c:73:7e:a7:f9:3c:a8:cc:1a:85:98:6a:97:37:bb:33:67:
3c:4a:f7:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:13:49 2026 by rpki-client