Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.mft
File: XaWsO7omBTjDM-bIYPI2ASyYZ10.mft (raw, json)
Hash identifier: Z3I2aiLS9xI+nJLEcli9TeXVaJq7Fhetx2jEIGrSYMM=
Subject key identifier: 2B:70:6F:3C:BB:14:43:D6:A7:F0:31:80:09:4D:FD:75:A9:12:35:77
Authority key identifier: 5D:A5:AC:3B:BA:26:05:38:C3:33:E6:C8:60:F2:36:01:2C:98:67:5D
Certificate issuer: /CN=5da5ac3bba260538c333e6c860f236012c98675d
Certificate serial: 019D273AB31194C70A49C41D2EEAADC7D55D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaWsO7omBTjDM-bIYPI2ASyYZ10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.mft
Manifest number: 12E1
Signing time: Wed 25 Mar 2026 23:00:51 +0000
Manifest this update: Wed 25 Mar 2026 23:00:51 +0000
Manifest next update: Thu 26 Mar 2026 23:00:51 +0000
Files and hashes: 1: GqfcLrP9OkUTy-GX1d-k-vfcOX8.roa (hash: XFhkOuqDVaUrmegmAPvZHJBMmOe4H8O6VpNvMvQVK4k=)
2: XaWsO7omBTjDM-bIYPI2ASyYZ10.crl (hash: bAyazfNbKjua4vW62Xf8FezgQCI/JLn9SvHMl1h6UUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.mft
rsync://rpki.ripe.net/repository/DEFAULT/XaWsO7omBTjDM-bIYPI2ASyYZ10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:b3:11:94:c7:0a:49:c4:1d:2e:ea:ad:c7:d5:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da5ac3bba260538c333e6c860f236012c98675d
Validity
Not Before: Mar 25 23:00:51 2026 GMT
Not After : Mar 26 23:00:51 2026 GMT
Subject: CN=2b706f3cbb1443d6a7f03180094dfd75a9123577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d6:3e:bb:6d:f7:ff:cc:90:c9:5f:04:a5:47:
3f:cf:f4:e2:30:58:7b:d6:52:a7:92:81:16:d9:f6:
bc:1f:1f:da:13:fc:46:82:0d:27:5e:ca:ca:6b:da:
71:db:09:86:16:a9:9b:fe:3a:b7:0b:86:01:18:70:
81:c3:19:b3:26:da:db:41:e1:d1:30:34:a2:7b:0a:
ea:4c:7c:92:2b:4d:aa:a3:63:c0:21:d8:06:9f:91:
e1:1a:1c:6e:0e:00:be:aa:4e:fa:02:30:75:02:05:
68:20:7b:74:07:3b:d8:5a:66:80:ae:f6:c1:76:35:
b2:73:4b:f6:92:bf:0e:3a:8f:6c:4f:81:b4:20:1a:
4e:68:71:b2:17:f4:79:df:0c:c1:3c:1c:da:43:6a:
5e:53:ae:3a:bb:1f:34:42:b4:0c:10:6d:c8:1e:01:
2d:cb:7c:81:0d:41:dc:f7:a9:ea:db:58:e4:e6:9d:
3e:4d:b2:ae:8a:0a:06:32:1e:25:c2:b8:11:79:fa:
2f:92:fa:6f:d3:e6:0a:8a:48:60:04:56:2c:17:79:
77:06:8c:f0:30:7c:19:39:d7:ae:04:d7:6b:c2:9c:
b2:5b:65:0d:26:87:4e:d2:36:df:b0:c3:ff:76:db:
87:cf:2b:31:bf:30:7e:e5:4a:e8:45:76:84:84:9c:
56:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:70:6F:3C:BB:14:43:D6:A7:F0:31:80:09:4D:FD:75:A9:12:35:77
X509v3 Authority Key Identifier:
keyid:5D:A5:AC:3B:BA:26:05:38:C3:33:E6:C8:60:F2:36:01:2C:98:67:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaWsO7omBTjDM-bIYPI2ASyYZ10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:24:a6:1e:c3:9c:83:6e:04:10:cb:59:0e:0e:44:49:c0:40:
77:41:fa:17:89:2f:45:70:d6:9a:e5:c6:9a:47:35:aa:3d:58:
ba:8a:43:61:48:79:e3:b9:bf:83:62:df:b4:73:61:72:6f:62:
c6:52:58:ae:39:4b:5a:fe:cc:e9:71:b4:86:ee:da:89:4b:d2:
6a:ba:95:0e:d6:ce:1c:83:5e:5f:76:e8:0c:cc:62:b2:68:90:
1e:f0:98:ed:ff:51:65:be:c3:a5:d5:c0:5a:84:3e:01:95:37:
eb:e5:df:2c:92:4e:61:6d:70:4a:49:d4:9b:45:4a:36:a8:3f:
be:82:c8:22:08:aa:c5:54:48:b8:47:72:9c:f2:f8:e3:00:8d:
92:36:61:41:08:db:ae:eb:c0:c3:53:81:16:e6:3b:ad:d8:d2:
3c:75:6f:d8:ec:7b:86:97:cd:01:75:1e:db:a3:3b:04:bd:3c:
94:67:4f:9f:76:ee:5b:52:59:b0:96:3b:37:bd:e3:00:1a:ed:
49:70:a2:d0:a4:04:4a:97:c4:f2:c3:b3:b2:b9:39:04:c1:48:
4d:f4:e7:7c:8d:12:1a:a1:bf:8b:79:ae:ed:c7:74:af:95:b8:
72:cc:d1:81:d8:11:5c:09:5d:ac:8d:34:d3:d6:af:06:0a:40:
e4:32:4c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:29:54 2026 by rpki-client