Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.mft
File: XEBFShsXZ5XwIVdTR3lL2fBEJ6w.mft (raw, json)
Hash identifier: 9LSKOIZdavmrjhZ1WspAFyUBMnrggkuy2kEqKJ7AuoQ=
Subject key identifier: 90:01:DD:5F:78:D5:6D:12:5B:54:64:C1:78:C9:A7:7D:A1:8A:C8:32
Authority key identifier: 5C:40:45:4A:1B:17:67:95:F0:21:57:53:47:79:4B:D9:F0:44:27:AC
Certificate issuer: /CN=5c40454a1b176795f021575347794bd9f04427ac
Certificate serial: 019D2816822E5B29B9F815231416345E5CBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.mft
Manifest number: 06CA
Signing time: Thu 26 Mar 2026 03:00:56 +0000
Manifest this update: Thu 26 Mar 2026 03:00:56 +0000
Manifest next update: Fri 27 Mar 2026 03:00:56 +0000
Files and hashes: 1: 9NPHRkfYiZLbitvXWdqmvdRg9Bw.roa (hash: m+oR/0vItE/UTBoixTdgEHtMhVdXVl9biRTYld0wnz0=)
2: XEBFShsXZ5XwIVdTR3lL2fBEJ6w.crl (hash: XSwapfNABlYsieH1v45miWtT4snEbu5TXmy5p0M5Cek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:82:2e:5b:29:b9:f8:15:23:14:16:34:5e:5c:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c40454a1b176795f021575347794bd9f04427ac
Validity
Not Before: Mar 26 03:00:56 2026 GMT
Not After : Mar 27 03:00:56 2026 GMT
Subject: CN=9001dd5f78d56d125b5464c178c9a77da18ac832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:15:47:75:1f:9d:99:2a:01:0b:81:ae:7e:1e:
f2:07:e3:d6:48:5f:c3:51:80:58:d0:d2:c5:63:60:
12:00:f3:90:21:bd:6e:91:1a:9b:d6:36:33:e5:71:
53:23:72:25:95:19:e6:32:66:03:e7:3e:19:e7:70:
76:ed:c6:20:29:32:53:c7:3a:6d:b8:51:31:ac:a1:
2b:be:45:84:09:6e:21:a9:94:bc:03:d3:c1:26:e9:
f9:87:67:9d:9d:c1:b4:7f:3a:a7:c3:da:02:82:a9:
51:5e:8f:8c:91:8d:d1:01:87:40:d7:fe:41:f3:16:
35:16:c5:e0:12:7e:5b:54:67:f6:08:c6:52:40:7b:
8f:4f:91:04:6a:ef:26:b3:6f:2b:33:58:81:1b:03:
f8:06:89:18:0a:38:ed:bc:a0:51:5f:de:60:23:1b:
f8:82:7a:ca:ef:eb:09:4b:5a:5b:87:ae:41:46:00:
01:f9:09:96:41:21:0c:45:47:46:af:5f:2f:7b:78:
62:c0:02:62:23:06:2b:81:d6:72:cb:fc:e9:97:b8:
4e:44:4e:33:72:9a:10:60:eb:21:86:90:72:4d:48:
1c:50:2a:d0:d8:70:f4:5a:db:20:ff:1d:84:7c:8b:
3f:a1:e1:bf:09:4e:21:7b:7d:3d:e4:13:8f:aa:bc:
16:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:01:DD:5F:78:D5:6D:12:5B:54:64:C1:78:C9:A7:7D:A1:8A:C8:32
X509v3 Authority Key Identifier:
keyid:5C:40:45:4A:1B:17:67:95:F0:21:57:53:47:79:4B:D9:F0:44:27:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:49:ea:5c:fc:77:91:00:73:46:2b:10:b4:7d:77:a7:7a:d2:
e8:fa:f6:47:c2:da:09:18:71:94:b8:09:4c:4c:6b:0f:db:39:
cc:66:cb:19:45:d1:ed:9b:fc:10:e3:ac:d2:fd:cd:42:48:d2:
27:36:d7:8b:63:df:9a:0b:b3:2c:25:4a:ee:41:08:26:1d:24:
68:5a:bf:c3:dc:a8:ee:9b:81:8c:83:48:60:74:85:ab:0f:de:
5e:aa:a7:2b:87:5c:fd:07:8f:8d:4c:f4:cb:e8:6b:a5:cb:bd:
8e:37:65:73:d6:6b:ab:15:c0:cc:c3:2d:6a:9c:1e:4f:17:30:
50:30:34:36:c2:66:93:dd:9b:b9:08:11:be:a8:d0:37:3b:1a:
b5:94:17:4f:e6:81:6f:d8:07:21:15:26:40:db:07:e8:ee:80:
d9:46:98:f4:80:af:46:43:74:8a:90:7e:9f:d7:fb:bb:9f:b3:
20:42:a1:c4:db:8b:7d:da:34:4c:ae:09:8c:80:ac:e3:af:b1:
59:0e:ee:d2:cf:6e:e0:d6:a3:8c:4b:7a:59:59:04:ef:73:07:
71:3b:cb:22:c6:d9:e2:9d:de:6b:c0:62:75:6f:58:67:85:bc:
12:12:dd:78:b7:a9:28:97:04:96:17:d1:18:28:33:f4:9f:7f:
fe:ff:21:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:30:04 2026 by rpki-client