Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft
File: xTtM8KdHHwAPilagSbFjlnzDvZk.mft (raw, json)
Hash identifier: l2fjaSZ/s6hsZDL0gD3YjApzShA6JnLkk8E9icYhILM=
Subject key identifier: 32:17:5F:A3:5D:D9:3B:68:56:4D:E3:AD:00:96:A3:DA:38:7C:18:A9
Authority key identifier: C5:3B:4C:F0:A7:47:1F:00:0F:8A:56:A0:49:B1:63:96:7C:C3:BD:99
Certificate issuer: /CN=c53b4cf0a7471f000f8a56a049b163967cc3bd99
Certificate serial: 019D27E082242E489B7CD35D871269208318
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTtM8KdHHwAPilagSbFjlnzDvZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft
Manifest number: 17A5
Signing time: Thu 26 Mar 2026 02:01:57 +0000
Manifest this update: Thu 26 Mar 2026 02:01:57 +0000
Manifest next update: Fri 27 Mar 2026 02:01:57 +0000
Files and hashes: 1: 4O_QOhMXcJ0t8sIeKd1mrxtJgYw.roa (hash: TciVqBMkJDUC0ydXbkijfxJoweOnHoMs5V4ucXCEH+g=)
2: xTtM8KdHHwAPilagSbFjlnzDvZk.crl (hash: EGG9mtKRLjeZdULdt1NrTQ5uwR+4NGI3OhsddvzPoFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTtM8KdHHwAPilagSbFjlnzDvZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:82:24:2e:48:9b:7c:d3:5d:87:12:69:20:83:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53b4cf0a7471f000f8a56a049b163967cc3bd99
Validity
Not Before: Mar 26 02:01:57 2026 GMT
Not After : Mar 27 02:01:57 2026 GMT
Subject: CN=32175fa35dd93b68564de3ad0096a3da387c18a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e1:ca:36:5a:83:1d:69:8a:d9:4c:4e:c4:80:
1e:4f:47:69:6b:f5:77:90:ba:57:dd:fd:62:e8:e5:
f1:7c:6b:bc:d6:5e:f9:fd:07:5c:04:8d:5f:bb:4d:
4b:07:34:aa:4c:47:ca:7c:32:59:c9:cb:61:de:44:
fb:9d:81:0c:2a:60:b1:f0:db:7f:3c:d1:f7:7b:b2:
19:75:74:0f:93:dc:31:fe:de:c4:01:5c:fc:80:cb:
c2:57:d3:d0:b5:14:38:c7:3c:c2:34:ce:25:6c:e6:
32:98:c5:35:17:1a:46:4b:9a:ec:51:15:df:90:f2:
cf:70:05:f6:6c:67:a0:a9:c2:a0:11:78:59:16:44:
5b:df:97:2d:b1:c1:22:3a:d5:9a:c7:19:db:17:57:
dc:7b:39:ab:87:2a:0f:ef:30:b9:c2:10:89:a3:37:
92:de:8d:c6:29:c6:67:01:f1:92:83:d9:46:9a:f0:
10:0f:8e:ba:9b:b7:0f:85:12:9d:5d:1f:87:d1:78:
79:3e:1e:01:54:b4:0c:6f:3c:a6:a0:d6:3a:a9:7a:
46:c5:9f:ca:d0:c4:86:f3:ed:82:30:df:50:ca:b4:
a7:99:ab:b8:23:4e:fb:44:60:86:9d:d5:cb:15:f8:
bb:dd:a7:ba:44:17:52:5c:8d:7d:73:ac:85:95:2a:
66:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:17:5F:A3:5D:D9:3B:68:56:4D:E3:AD:00:96:A3:DA:38:7C:18:A9
X509v3 Authority Key Identifier:
keyid:C5:3B:4C:F0:A7:47:1F:00:0F:8A:56:A0:49:B1:63:96:7C:C3:BD:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTtM8KdHHwAPilagSbFjlnzDvZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:20:96:4b:af:15:b6:fc:e7:98:50:71:3c:42:00:d0:e9:c7:
02:33:e7:fb:5f:99:82:1e:cb:2f:99:93:2e:c3:f6:f0:6a:72:
0f:57:b0:48:5d:df:33:8e:14:87:6c:79:3c:de:c7:a7:ef:13:
c3:d4:10:56:fc:de:4e:8f:14:f7:18:8e:7d:fe:81:42:dd:73:
aa:b1:c9:2c:05:8f:9e:ab:15:65:bd:17:c5:30:8e:68:7c:d3:
68:93:85:b1:c2:84:a1:ef:89:30:3f:73:08:be:65:b9:81:13:
b8:d6:b2:dc:f8:01:7a:9a:16:f1:79:f9:51:ac:bc:e3:e9:06:
5e:0a:85:a6:03:df:12:bd:84:60:5d:49:f6:0f:13:7c:63:b6:
d7:94:3f:cb:5f:49:a2:6c:47:d4:96:14:ac:83:0c:02:48:6a:
16:2c:5a:99:41:45:d4:91:73:ed:99:d1:96:db:fd:0f:75:a7:
12:05:eb:0e:9d:3b:b4:e6:d3:36:ac:b2:3b:57:71:2f:f9:04:
d6:3d:fe:1f:c6:5a:ab:a1:84:c1:db:aa:fb:44:d3:f0:4e:a1:
f0:b2:86:bc:8c:ae:4b:40:0e:79:67:f6:61:d5:6a:89:47:2a:
ed:b0:5e:9e:8b:0e:b3:60:e1:c3:25:49:2f:7b:e4:d3:9a:53:
dd:71:07:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:08:35 2026 by rpki-client