Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.mft
File: XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.mft (raw, json)
Hash identifier: NzUA2cmJG7rY5JE99Mp+R78lY/BcWw7/Q8mqp46yBOI=
Subject key identifier: 84:5D:BA:7F:C5:B4:E7:51:68:AD:C1:83:5F:74:B4:E7:CE:DB:13:B0
Authority key identifier: 5D:16:DC:CF:B2:E2:C8:8C:F0:9F:48:7C:42:1F:C8:AF:7B:BD:35:74
Certificate issuer: /CN=5d16dccfb2e2c88cf09f487c421fc8af7bbd3574
Certificate serial: 019D258358F5A866279DED8A49DC8C9042DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.mft
Manifest number: 1883
Signing time: Wed 25 Mar 2026 15:00:58 +0000
Manifest this update: Wed 25 Mar 2026 15:00:58 +0000
Manifest next update: Thu 26 Mar 2026 15:00:58 +0000
Files and hashes: 1: XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.crl (hash: fNvEsf1qJVI9TeXkDgc+rdHja/zTplU9S5jcZ2dXvWM=)
2: kzJmJeIzYK-uABy4gPDlGybg7UM.roa (hash: 1fLld3TaRC0xWtpNDMUlOBBVpSlt5nimLcyX9NO1jT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:58:f5:a8:66:27:9d:ed:8a:49:dc:8c:90:42:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d16dccfb2e2c88cf09f487c421fc8af7bbd3574
Validity
Not Before: Mar 25 15:00:58 2026 GMT
Not After : Mar 26 15:00:58 2026 GMT
Subject: CN=845dba7fc5b4e75168adc1835f74b4e7cedb13b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1a:78:84:eb:81:5d:d3:34:5c:26:7f:09:31:
9d:59:f4:aa:b7:5d:5b:f6:fe:65:82:fe:5d:b6:19:
d8:df:01:3f:db:9e:ac:94:30:5c:25:c8:e6:47:18:
20:18:52:a3:97:a7:76:8a:25:6d:43:27:71:41:ef:
ee:bc:38:c0:d9:f6:49:df:92:89:20:52:83:ed:fa:
e0:ef:66:f8:8a:ca:12:b2:b9:76:6a:48:b1:19:16:
82:d0:e2:e4:7c:52:69:2d:33:b1:c7:41:6b:d4:94:
e9:8e:53:f8:41:38:61:31:c1:46:2f:11:c5:8e:c2:
fd:ee:26:fa:f0:41:8f:c2:ea:bb:b1:e3:4b:0e:cf:
85:14:1b:63:36:1f:ff:7e:ca:33:73:35:f7:cb:29:
e5:9c:b5:c1:52:32:a8:9a:c2:d4:a6:50:a7:6c:fc:
cc:0b:66:15:ac:41:ca:f4:b1:aa:57:6b:8d:7d:a8:
ef:fa:c5:0b:e8:73:3d:72:cc:ce:bb:9f:85:ac:c1:
09:ae:14:3e:55:f6:9f:50:42:66:10:12:71:fd:7b:
80:99:41:62:78:f6:57:76:4e:7d:ed:88:bf:a2:87:
07:76:bf:f7:e8:7d:e9:04:6d:1b:28:7f:ea:01:5c:
fb:4e:2e:c2:8c:17:62:07:a3:9d:39:af:6a:11:93:
84:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:5D:BA:7F:C5:B4:E7:51:68:AD:C1:83:5F:74:B4:E7:CE:DB:13:B0
X509v3 Authority Key Identifier:
keyid:5D:16:DC:CF:B2:E2:C8:8C:F0:9F:48:7C:42:1F:C8:AF:7B:BD:35:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:74:34:33:8b:25:53:62:bf:e8:c0:d5:48:ad:b5:e1:d5:3b:
7d:70:d6:df:52:ec:3d:5f:03:90:ec:07:cb:f1:c4:47:5b:74:
61:48:62:29:74:2b:e2:93:04:52:8f:41:f5:39:9b:f4:07:cb:
95:27:b5:97:9c:bb:f5:db:7d:92:ab:89:7d:ec:14:eb:6a:ff:
ec:ec:cb:5e:c9:20:32:4a:ee:34:06:3e:44:f1:ae:13:e6:79:
28:71:95:5a:4d:bd:89:0a:7d:c7:1b:c3:ec:6c:16:4d:d7:09:
2b:16:15:d7:ab:10:c3:d4:2e:8a:36:f1:35:b6:da:99:12:53:
a8:cf:eb:68:00:46:2b:f4:cf:c0:7b:62:6c:a4:1e:41:50:6f:
60:bc:14:7f:0f:ce:8f:92:da:c9:06:03:1a:1b:46:05:6e:dd:
4f:c4:d0:88:a9:06:ae:8a:b9:ac:8d:9d:ac:fc:14:53:8d:8c:
ae:85:04:3f:45:a6:e6:d6:d5:22:25:7b:ff:df:cf:01:20:1d:
15:c6:a8:3f:e5:27:08:4e:b0:6c:6b:3d:b8:9e:63:92:3e:0d:
ad:e7:8d:52:73:b1:59:1f:75:f7:9b:db:7f:d9:00:a9:36:9c:
f2:3d:f0:47:46:6c:28:4d:21:19:e9:10:1e:6a:91:09:8e:06:
10:f4:25:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:49 2026 by rpki-client