Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.mft
File: XvExXDySOejh9KoMWwdDw9pdd-M.mft (raw, json)
Hash identifier: kQmySVvjjPsX1aug2TYijT5L+hwxPEJk9Mjcwq4NGH4=
Subject key identifier: 47:9C:BA:8A:56:A2:66:48:8A:1E:BD:6C:77:E8:05:4F:E0:E7:CB:A9
Authority key identifier: 5E:F1:31:5C:3C:92:39:E8:E1:F4:AA:0C:5B:07:43:C3:DA:5D:77:E3
Certificate issuer: /CN=5ef1315c3c9239e8e1f4aa0c5b0743c3da5d77e3
Certificate serial: 019D27724C483F8B3B7E4F0810C8A1D53295
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XvExXDySOejh9KoMWwdDw9pdd-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.mft
Manifest number: 0705
Signing time: Thu 26 Mar 2026 00:01:35 +0000
Manifest this update: Thu 26 Mar 2026 00:01:35 +0000
Manifest next update: Fri 27 Mar 2026 00:01:35 +0000
Files and hashes: 1: XvExXDySOejh9KoMWwdDw9pdd-M.crl (hash: NsWijJC+myqYIGUBMlGlbXTUqo/cpvSBS7zVZ3dJCxc=)
2: uhPXDNK9DwvaVzBP6prWtUmbJDw.roa (hash: DW1tiuzv/wvBgNUqtlXS5C2dFHnxlOJB3QKVHksHsN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/XvExXDySOejh9KoMWwdDw9pdd-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:4c:48:3f:8b:3b:7e:4f:08:10:c8:a1:d5:32:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ef1315c3c9239e8e1f4aa0c5b0743c3da5d77e3
Validity
Not Before: Mar 26 00:01:35 2026 GMT
Not After : Mar 27 00:01:35 2026 GMT
Subject: CN=479cba8a56a266488a1ebd6c77e8054fe0e7cba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f5:bc:dc:e4:af:50:41:d2:60:60:ed:e9:21:
d1:1e:81:d8:fc:1a:9e:ed:05:e0:45:5d:93:8a:c1:
e8:2f:a3:44:39:31:32:82:3a:02:a9:32:a0:c0:cb:
46:83:30:38:65:e3:6e:b5:37:ea:01:cf:37:ad:e6:
01:96:da:34:06:70:02:c5:a6:e1:1c:de:bf:22:72:
af:ae:81:1a:21:07:da:1b:67:4f:f1:e9:14:a0:3d:
40:51:f4:76:5d:42:3d:d8:94:4a:d6:bc:43:65:e9:
08:01:a8:e1:b7:b7:43:1f:27:45:34:bf:8e:e6:d1:
1f:13:13:1d:77:3b:a3:e7:90:77:75:b6:72:9d:16:
46:54:bf:da:96:6d:52:12:41:97:19:36:29:4f:73:
f2:01:91:85:5e:8b:5b:ef:7e:1c:8c:d5:71:a6:da:
73:59:2b:23:66:31:02:66:fe:d7:ae:9d:be:7c:f3:
8c:68:27:a6:a2:8f:2a:28:df:5a:e1:de:aa:56:61:
41:0e:6c:49:9a:25:08:6a:bf:5f:ea:51:18:bd:5c:
e3:20:4a:f3:2c:98:53:cc:27:89:fa:28:4a:28:94:
33:09:8f:b4:44:c6:5b:85:9e:c5:7d:b2:7b:d6:56:
ff:6a:03:84:d1:c6:85:6f:53:8c:4d:59:94:60:d1:
24:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:9C:BA:8A:56:A2:66:48:8A:1E:BD:6C:77:E8:05:4F:E0:E7:CB:A9
X509v3 Authority Key Identifier:
keyid:5E:F1:31:5C:3C:92:39:E8:E1:F4:AA:0C:5B:07:43:C3:DA:5D:77:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XvExXDySOejh9KoMWwdDw9pdd-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:b8:eb:8f:3f:5d:c2:a7:a7:47:48:58:6f:89:4c:bb:a0:75:
68:ee:2a:01:1c:b8:88:c1:75:28:34:ac:70:28:b0:7a:62:22:
f9:e2:8e:39:7e:97:06:b6:19:e6:75:c2:13:26:83:b6:97:1b:
ad:82:a1:25:31:81:89:69:42:ba:81:c9:28:11:13:2e:fa:8b:
97:89:f4:ac:9a:ea:fe:5f:92:f4:dc:07:6b:2a:3c:30:7d:f3:
ab:4b:27:b6:0d:94:b9:b2:78:cb:df:20:a9:1b:00:bd:df:6e:
c8:c0:74:33:ab:fc:01:cc:ae:13:1d:21:d6:ec:77:90:ab:b0:
3e:58:c0:23:5b:94:3d:b1:f4:55:b4:a5:cc:03:9a:05:49:a6:
62:12:5a:25:f2:d0:7a:76:fa:04:62:cb:c5:9e:34:5a:32:2c:
f2:c5:e1:cc:ab:4d:6d:9b:2c:34:92:9e:87:ca:f7:26:f3:ff:
d2:c0:9d:b9:b3:ba:8c:ff:cc:31:f3:70:63:42:7c:83:7b:55:
5d:14:76:58:b4:f3:d0:90:09:64:53:f8:96:cc:50:0c:6c:d6:
03:4f:ef:f4:17:3e:a8:9e:af:2a:59:55:d3:e5:4f:ff:e2:27:
a5:d5:da:29:9e:9f:ce:3e:03:d6:fe:89:9d:7a:66:5d:a4:b2:
56:b9:82:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:09:40 2026 by rpki-client