Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.mft
File: XlFUwaEL4eJaptT4rvpGrTH5uW4.mft (raw, json)
Hash identifier: qqAEPyF+M87DJwzxypj5f5p9368JMFv+6H3VIOjztrE=
Subject key identifier: D2:C1:54:29:B5:30:D3:AF:27:09:63:7F:A1:6B:24:FE:DD:EB:2C:DA
Authority key identifier: 5E:51:54:C1:A1:0B:E1:E2:5A:A6:D4:F8:AE:FA:46:AD:31:F9:B9:6E
Certificate issuer: /CN=5e5154c1a10be1e25aa6d4f8aefa46ad31f9b96e
Certificate serial: 019D25160C406F1BD25501C3C5ACB32F3E37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlFUwaEL4eJaptT4rvpGrTH5uW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.mft
Manifest number: 56
Signing time: Wed 25 Mar 2026 13:01:35 +0000
Manifest this update: Wed 25 Mar 2026 13:01:35 +0000
Manifest next update: Thu 26 Mar 2026 13:01:35 +0000
Files and hashes: 1: XlFUwaEL4eJaptT4rvpGrTH5uW4.crl (hash: mNGrYvlWBo8OZlfVOc0OW6xRdtT1wHJtqw+wd50R24s=)
2: y9CLGthskm4bnZl6iRpadOOvcw0.asa (hash: 4oKFMMI1txxJcbOTwatF9YPUQxB0wLl2gg3DiiRkr5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlFUwaEL4eJaptT4rvpGrTH5uW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 13:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:16:0c:40:6f:1b:d2:55:01:c3:c5:ac:b3:2f:3e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e5154c1a10be1e25aa6d4f8aefa46ad31f9b96e
Validity
Not Before: Mar 25 13:01:35 2026 GMT
Not After : Mar 26 13:01:35 2026 GMT
Subject: CN=d2c15429b530d3af2709637fa16b24feddeb2cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:11:1b:33:0a:c0:d7:07:7e:b3:5e:6e:90:d4:
6a:b2:08:37:14:a8:ef:ee:b7:66:0f:cf:a9:29:e4:
3e:88:a3:9e:9d:1b:c1:46:df:16:d1:19:ee:ce:91:
2c:e6:5b:d0:47:e9:17:71:c6:e9:5b:04:cd:ad:fb:
a0:bf:d6:91:89:35:26:fb:a1:5c:ba:87:eb:cc:71:
e6:3a:53:08:b3:95:a3:24:01:a7:2b:b4:32:ac:3d:
cf:2f:91:54:b5:f5:ff:18:25:cc:19:bb:b7:92:ff:
e8:cb:d4:c7:22:3a:20:46:a6:93:b0:ca:10:a2:17:
5d:97:57:5f:c5:2b:ef:40:3a:2a:cf:f9:f3:69:fa:
bf:65:ef:f1:38:30:e1:a8:53:84:4e:d8:51:34:4a:
f8:0a:82:af:24:c1:35:fa:8e:e2:1c:ee:3d:6d:a9:
7b:8a:b9:4f:3b:a6:16:17:1f:5d:3d:05:4f:c7:94:
6d:9e:52:61:58:11:e1:4d:c3:95:c1:6b:bb:cf:3b:
92:b4:c3:28:60:6b:13:0f:e6:78:71:7a:2f:1a:71:
dd:5c:6c:1d:79:81:06:d8:37:69:70:1b:f6:b4:71:
1a:54:7d:aa:59:af:c0:84:9a:b0:d6:52:62:c1:c6:
a7:fc:ef:29:c3:ed:01:28:fb:fb:90:45:97:93:6e:
cc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C1:54:29:B5:30:D3:AF:27:09:63:7F:A1:6B:24:FE:DD:EB:2C:DA
X509v3 Authority Key Identifier:
keyid:5E:51:54:C1:A1:0B:E1:E2:5A:A6:D4:F8:AE:FA:46:AD:31:F9:B9:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlFUwaEL4eJaptT4rvpGrTH5uW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:8b:02:f7:1b:34:0c:e2:c0:d5:95:a6:03:f5:88:f7:0c:79:
e0:03:44:dd:4f:45:06:60:6b:53:5f:44:92:76:77:63:db:b1:
72:f0:06:7e:2b:02:e8:3f:85:f4:46:95:d9:85:fd:e9:73:f6:
81:c9:88:1b:36:9b:46:af:b4:a9:05:8e:9b:17:32:32:49:d2:
0e:a7:3a:ee:60:8f:43:20:2d:a7:27:2b:5b:c5:95:c5:28:10:
e0:02:da:dc:c9:e5:48:aa:00:75:50:ca:39:8a:cb:7f:a8:a2:
b6:59:db:46:e6:83:7a:7e:ea:ee:eb:7a:44:bc:47:35:74:33:
d2:13:f7:99:4d:7e:cc:bb:9f:34:88:ee:d2:6b:ee:5f:ea:10:
cd:9d:40:4f:7e:9b:46:93:72:ae:15:64:a1:5f:ef:dc:22:0d:
06:8d:2f:8e:42:6f:a7:c5:e0:d9:6b:84:e8:c0:b9:bc:93:a1:
70:ef:d9:61:8d:ef:d8:38:44:19:71:75:95:89:26:ac:e9:bb:
12:a0:e8:28:17:14:6d:97:22:2e:38:ea:6f:43:55:34:9e:0c:
26:88:3b:27:85:2c:56:f8:be:e8:2a:f3:c6:ed:51:9f:26:19:
3b:ac:e3:57:1f:14:f0:51:da:81:93:2f:27:68:76:00:53:65:
ba:26:89:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:23:05 2026 by rpki-client