Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
File: XeFelYoRQmpVYoXiiuNA8KJdKgM.mft (raw, json)
Hash identifier: 1K/cC4cl/L5SrXU/WftGpCKdVBjTTrPnKYgi93un/HM=
Subject key identifier: C4:84:F3:7C:45:5A:BB:AF:2D:81:85:7A:F9:7E:5E:A5:42:EF:83:33
Authority key identifier: 5D:E1:5E:95:8A:11:42:6A:55:62:85:E2:8A:E3:40:F0:A2:5D:2A:03
Certificate issuer: /CN=5de15e958a11426a556285e28ae340f0a25d2a03
Certificate serial: 019D2816F9209BE17E5BBF6391BD7A709122
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
Manifest number: 0455
Signing time: Thu 26 Mar 2026 03:01:27 +0000
Manifest this update: Thu 26 Mar 2026 03:01:27 +0000
Manifest next update: Fri 27 Mar 2026 03:01:27 +0000
Files and hashes: 1: RKz3IJpK3tLGmxT3W9hM3i7PGMs.roa (hash: RoVqVK5DIJNCCPA2hRYkxQFyuiyebRh/F8G7DU407FU=)
2: XeFelYoRQmpVYoXiiuNA8KJdKgM.crl (hash: BrNY56R03wuYx/axqSKh26UIRNuG173KhhHuyeMIY+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:f9:20:9b:e1:7e:5b:bf:63:91:bd:7a:70:91:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5de15e958a11426a556285e28ae340f0a25d2a03
Validity
Not Before: Mar 26 03:01:27 2026 GMT
Not After : Mar 27 03:01:27 2026 GMT
Subject: CN=c484f37c455abbaf2d81857af97e5ea542ef8333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ee:d7:cf:12:07:35:13:37:77:a9:e9:c1:ac:
5e:03:a6:27:02:c7:45:8b:ca:6a:44:23:61:ef:e2:
14:3c:2d:96:d1:a1:7a:71:62:d4:ea:20:09:67:ed:
54:14:77:8d:ad:a8:9e:ba:d7:6b:cd:fd:c1:f0:86:
48:5e:46:1e:19:92:e5:ca:e8:a5:0b:c5:bb:55:df:
af:5d:d0:cd:d2:f3:d1:34:70:a2:5a:9b:b8:f3:b2:
30:8a:38:f7:df:96:80:53:bd:94:19:10:a3:9f:fe:
8e:d8:a3:47:9f:0f:cb:59:43:bd:95:36:51:42:ca:
70:4b:ea:b1:1c:59:ce:3e:02:e9:b0:36:57:bc:06:
61:6e:c3:5a:ef:14:b3:27:ee:66:17:26:82:9f:6b:
0b:1b:88:39:9e:d7:35:3f:ba:85:21:8b:5c:3a:db:
a2:e5:5d:7b:43:4d:e5:36:0c:7d:d5:37:a9:e3:f7:
ea:e9:35:2d:a7:0e:0c:2d:c3:9e:a2:67:11:37:a9:
55:3d:4a:65:91:91:f5:6a:c5:a2:81:36:47:e4:46:
57:e8:27:37:ab:4c:52:9b:74:76:57:46:59:5a:17:
7b:92:9b:fd:9b:3a:2f:34:40:a8:54:55:24:70:c5:
f4:82:cd:8c:f2:08:48:4b:a4:b7:7b:c9:c1:a0:db:
db:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:84:F3:7C:45:5A:BB:AF:2D:81:85:7A:F9:7E:5E:A5:42:EF:83:33
X509v3 Authority Key Identifier:
keyid:5D:E1:5E:95:8A:11:42:6A:55:62:85:E2:8A:E3:40:F0:A2:5D:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:58:54:54:b8:6f:75:ba:7d:05:50:fb:dd:c4:31:c1:19:a2:
50:4d:30:b2:d1:9b:7e:30:ee:b0:68:4c:4d:0d:d6:b6:5c:8a:
79:e6:a9:60:07:24:98:91:13:a4:2c:e7:bb:de:e1:9f:80:7f:
61:0d:f2:ee:df:2a:c3:2e:0a:bd:11:7b:f1:db:48:fc:f4:d6:
fa:bf:5e:01:d8:a1:df:3e:c8:6c:8a:cb:c9:8d:7d:04:2e:35:
0c:c9:b2:ab:32:28:c9:6d:1f:e0:17:8d:5f:b0:d5:56:12:f0:
c6:a4:8e:c6:3b:3b:34:e0:4e:97:1e:b3:2a:50:9a:41:f5:8c:
f1:7a:96:3b:83:1c:aa:93:ba:ca:68:18:b6:7b:9f:44:ad:42:
67:13:99:b4:c3:6f:ae:ba:57:82:2d:0f:4a:49:bf:c1:21:1a:
58:28:eb:6f:9a:5d:e8:b2:62:08:87:d4:2b:ad:f4:7b:fd:97:
6a:47:f5:10:69:6e:1f:fb:20:03:2d:32:3c:e5:09:4d:b6:9c:
8a:d6:e3:d1:3f:86:5d:7f:4b:b7:75:ed:5a:a0:1d:69:fa:3d:
1a:72:f4:be:45:53:1b:68:59:5e:1d:da:b6:8c:0d:c8:94:88:
2c:b1:2d:2d:f7:4c:0b:51:b5:d7:f0:ed:03:38:35:18:a5:06:
1d:54:0b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:59:54 2026 by rpki-client