Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft
File: Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft (raw, json)
Hash identifier: O17hIXQHEiTJtffnOl1EMvA+SlMhTohCBuhuycivPjI=
Subject key identifier: 56:82:04:93:55:28:C4:52:5A:F1:9C:8F:DA:40:9D:B8:26:6B:63:C3
Authority key identifier: 5E:7F:D9:58:6F:9C:CB:0F:B4:48:7B:20:8C:DF:46:75:E5:BB:F3:30
Certificate issuer: /CN=5e7fd9586f9ccb0fb4487b208cdf4675e5bbf330
Certificate serial: 019D2C60ABFAFC449908EE8E92F2A9E0CBA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft
Manifest number: 153E
Signing time: Thu 26 Mar 2026 23:00:26 +0000
Manifest this update: Thu 26 Mar 2026 23:00:26 +0000
Manifest next update: Fri 27 Mar 2026 23:00:26 +0000
Files and hashes: 1: 7iD4K1gccNErcwUL56fdA_X6dFo.roa (hash: im8taFI4fIVJ8hCEmSfog0Wq6myLmqj/L7AJRggXUII=)
2: Xn_ZWG-cyw-0SHsgjN9GdeW78zA.crl (hash: VHXXmGeGjJ5c1+juk28H02/TupjwWtaFRcGC7y3uAX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:60:ab:fa:fc:44:99:08:ee:8e:92:f2:a9:e0:cb:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7fd9586f9ccb0fb4487b208cdf4675e5bbf330
Validity
Not Before: Mar 26 23:00:26 2026 GMT
Not After : Mar 27 23:00:26 2026 GMT
Subject: CN=568204935528c4525af19c8fda409db8266b63c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:45:05:46:5a:d9:fe:3e:56:e8:7f:63:da:f3:
82:e8:b4:e5:48:66:30:21:f6:70:ec:2a:b8:77:2f:
83:07:78:61:a2:1f:09:e9:ee:00:16:c3:40:72:42:
cf:6a:d0:7a:f4:51:79:15:92:2f:c5:8a:43:6f:41:
7e:b2:e9:8d:49:02:2c:00:bd:a0:c5:54:5e:ea:5b:
07:80:0e:08:3f:bb:c8:20:8d:3c:d5:8f:e9:eb:35:
b8:3d:29:0e:33:50:c1:7a:9a:76:d3:d3:93:d6:a9:
d7:f5:87:ca:e0:9b:3c:ae:b7:1d:0f:14:15:5c:bd:
9c:10:6a:fb:c9:aa:4d:12:97:7e:c9:bb:9e:8f:e1:
c3:90:b6:73:5a:65:19:60:81:5f:44:6a:0f:51:24:
37:43:10:68:36:93:95:fb:5a:5c:11:90:e0:0b:6c:
ce:c8:e7:f6:1e:bc:22:84:26:6b:c6:96:6b:83:33:
f3:10:31:f4:f0:6c:65:e0:cb:69:79:9d:77:7e:88:
11:f8:fc:19:7a:af:e1:48:e9:d4:e9:76:41:c9:ce:
d4:69:44:2a:24:f4:b1:3c:ef:df:2a:d0:1c:e1:dc:
8a:96:c8:f4:75:7e:98:86:5f:db:0e:35:f4:3e:e0:
22:41:6e:e0:09:a4:39:eb:7f:2d:5e:19:11:29:a0:
07:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:82:04:93:55:28:C4:52:5A:F1:9C:8F:DA:40:9D:B8:26:6B:63:C3
X509v3 Authority Key Identifier:
keyid:5E:7F:D9:58:6F:9C:CB:0F:B4:48:7B:20:8C:DF:46:75:E5:BB:F3:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:d4:63:e3:51:c5:5f:86:f6:86:8d:68:9b:c7:0a:a4:a0:5b:
f6:4d:b9:6d:45:ff:39:4d:46:2d:e6:62:2c:87:32:69:63:59:
66:33:7c:7d:4a:76:34:26:82:21:fb:9d:09:e4:f3:a8:ce:a9:
9d:01:85:30:12:3f:8c:48:d1:80:39:ec:83:fb:cb:1d:65:74:
5e:60:da:42:78:fa:10:12:42:e6:cf:e5:06:e2:71:85:dd:df:
83:e1:9a:e2:0e:40:c8:6d:41:cf:c4:ed:a7:26:52:61:bc:6f:
79:14:d0:10:e2:88:30:12:53:e9:08:5a:24:eb:8d:72:b4:65:
90:66:3c:7e:78:07:ba:0e:78:90:b7:f1:59:f5:96:bb:ba:9e:
61:c9:0c:fe:e0:82:d9:51:d0:e9:82:57:34:a8:c0:31:47:63:
0a:a9:0a:c6:a8:f5:e8:61:1d:4e:ab:24:b9:93:d5:9b:fe:66:
15:c3:55:49:97:ad:7a:6e:a9:82:30:d7:a0:c2:b1:1e:33:7e:
c9:db:34:be:35:7e:69:bc:4c:18:25:fd:ff:2d:ce:65:0e:3a:
d2:56:6e:b1:5f:98:b0:d0:aa:de:60:f5:c9:9b:79:aa:bc:39:
92:aa:a8:6c:3c:92:22:16:8c:1d:ea:bf:97:a4:b4:9b:d9:59:
fa:67:b2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:58:19 2026 by rpki-client