Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.mft
File: XZrYiZ1byFSe7dPlny0NYhNczxQ.mft (raw, json)
Hash identifier: 2qx93t067QEox8qqnayw7n6PAWaQ3Uq3cCHfKbZeaH4=
Subject key identifier: ED:C1:53:C1:A9:86:E9:D8:06:EB:F2:AE:4F:95:77:95:B6:64:26:03
Authority key identifier: 5D:9A:D8:89:9D:5B:C8:54:9E:ED:D3:E5:9F:2D:0D:62:13:5C:CF:14
Certificate issuer: /CN=5d9ad8899d5bc8549eedd3e59f2d0d62135ccf14
Certificate serial: 019D29612837F1534A706771ABE0DA8B6775
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZrYiZ1byFSe7dPlny0NYhNczxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.mft
Manifest number: 03F8
Signing time: Thu 26 Mar 2026 09:02:06 +0000
Manifest this update: Thu 26 Mar 2026 09:02:06 +0000
Manifest next update: Fri 27 Mar 2026 09:02:06 +0000
Files and hashes: 1: SMN2TicHTITFE7SoU6JvilZobIM.roa (hash: Jgb+gxe0VdXUottoUDRHcVAZQNKtB28hNd2imzpc8AQ=)
2: XZrYiZ1byFSe7dPlny0NYhNczxQ.crl (hash: uanA9u9H5sECgzMYeyETC3SHGfe6lUnBJ0xKtbQCSRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XZrYiZ1byFSe7dPlny0NYhNczxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:28:37:f1:53:4a:70:67:71:ab:e0:da:8b:67:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9ad8899d5bc8549eedd3e59f2d0d62135ccf14
Validity
Not Before: Mar 26 09:02:06 2026 GMT
Not After : Mar 27 09:02:06 2026 GMT
Subject: CN=edc153c1a986e9d806ebf2ae4f957795b6642603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:0b:26:87:2a:24:61:10:1a:fc:8a:71:52:d5:
81:22:44:ef:eb:1f:a1:f8:d9:4b:8d:68:f7:40:10:
e1:76:4f:6f:35:19:da:cb:25:2b:52:ff:71:d2:08:
68:d1:ab:4a:d0:30:73:b4:e3:6f:1f:72:35:e3:96:
bb:1e:55:8b:5a:54:1c:cc:a0:53:c7:51:d3:bd:85:
a4:10:34:32:70:07:e8:80:3d:33:d6:52:89:cd:3d:
f4:7b:89:ed:e5:40:7a:fa:98:bb:5e:29:12:94:87:
e0:ae:a3:b5:7f:6f:b2:e1:1b:f7:2f:7c:a5:e5:17:
45:b5:0a:24:2c:3c:ec:5f:07:e8:68:9f:9c:70:55:
57:29:4d:0c:93:bf:d2:45:da:17:ef:ee:30:42:82:
fd:c8:4d:80:75:3c:a3:7f:66:66:2c:f4:ac:3f:93:
02:2a:8e:6a:52:c0:02:c7:7d:b9:1b:0f:7d:cd:2c:
54:a7:1c:a5:af:83:28:65:b6:f6:91:81:64:fb:28:
24:29:07:08:6b:96:8d:63:75:99:2a:0a:ea:ff:cf:
da:de:9d:56:fe:e5:87:8d:10:85:66:99:bb:58:54:
2e:25:82:c5:ef:51:d6:66:0b:e4:97:e8:a3:0d:2f:
a0:f4:e1:f2:d7:2d:aa:16:09:be:c0:d4:20:23:c2:
22:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C1:53:C1:A9:86:E9:D8:06:EB:F2:AE:4F:95:77:95:B6:64:26:03
X509v3 Authority Key Identifier:
keyid:5D:9A:D8:89:9D:5B:C8:54:9E:ED:D3:E5:9F:2D:0D:62:13:5C:CF:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZrYiZ1byFSe7dPlny0NYhNczxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:0b:57:44:b4:cb:42:8f:ab:8e:20:1c:e2:93:55:0b:68:4f:
0b:ba:56:aa:82:20:08:57:b1:2c:d8:e3:63:79:5d:46:34:b1:
73:25:3a:d9:d3:c9:0b:d5:fe:ef:61:20:2d:4c:e7:4d:23:f8:
ff:06:34:5e:8c:8f:94:2c:a8:d8:75:87:29:9b:a8:1a:58:f7:
00:8d:8b:d9:d9:71:7e:c7:a6:f1:da:07:5a:8a:27:70:2e:0e:
64:6d:09:87:84:9e:58:1d:79:5b:bc:31:59:a5:36:6c:0f:7b:
ba:59:38:7a:86:32:18:bb:d9:66:24:77:d3:91:a1:a3:0a:c2:
f0:ab:66:81:b5:09:7c:bf:07:29:70:cf:89:8a:00:ce:a4:fc:
62:b6:11:62:7c:01:b2:38:b1:d2:69:66:60:78:a6:d4:ea:0d:
ed:f5:b2:cf:04:30:36:3e:d3:89:04:8d:be:4c:d9:1f:76:a9:
6b:54:79:92:e2:46:cc:00:66:fb:2d:b6:28:9b:a7:61:17:4d:
82:1e:4d:dc:a6:f2:43:80:73:ec:31:1a:7e:95:e8:c1:6e:7b:
c9:a8:67:cb:f8:d9:5f:63:e6:ef:d2:90:2c:19:91:62:c9:ef:
8b:f8:4f:45:6e:5d:de:9f:5f:f2:01:3e:33:d8:10:da:25:9e:
15:f2:9c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:06:15 2026 by rpki-client