Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.mft
File: XPiK3BnqrRPWhbgew5k1vUssaa0.mft (raw, json)
Hash identifier: yMuLihmbdPUJGjnDbdUTAMjr/xczgV5UUiB8/xmLMUs=
Subject key identifier: A0:8C:DF:3F:05:59:B2:D9:05:A1:3B:2C:D0:0B:3B:53:DE:C7:9C:45
Authority key identifier: 5C:F8:8A:DC:19:EA:AD:13:D6:85:B8:1E:C3:99:35:BD:4B:2C:69:AD
Certificate issuer: /CN=5cf88adc19eaad13d685b81ec39935bd4b2c69ad
Certificate serial: 019D34889B2536E6967AF1EB7BF9CFCF2C96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPiK3BnqrRPWhbgew5k1vUssaa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.mft
Manifest number: 1793
Signing time: Sat 28 Mar 2026 13:01:00 +0000
Manifest this update: Sat 28 Mar 2026 13:01:00 +0000
Manifest next update: Sun 29 Mar 2026 13:01:00 +0000
Files and hashes: 1: 8uZYa8d3_ISXNAeXmSBhUlA4Cto.roa (hash: xoIdvMZvBj9GwlnZPTsCqxvamz7iLWgOhpxAumR136Q=)
2: XPiK3BnqrRPWhbgew5k1vUssaa0.crl (hash: l5ahZejmZD2o6VKGcs93gFTUn+vWFRa3ruys+jcrhPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPiK3BnqrRPWhbgew5k1vUssaa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:88:9b:25:36:e6:96:7a:f1:eb:7b:f9:cf:cf:2c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf88adc19eaad13d685b81ec39935bd4b2c69ad
Validity
Not Before: Mar 28 13:01:00 2026 GMT
Not After : Mar 29 13:01:00 2026 GMT
Subject: CN=a08cdf3f0559b2d905a13b2cd00b3b53dec79c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:51:8d:b5:bf:bf:4b:2f:5f:28:65:80:90:81:
e0:96:0f:fa:ec:e4:4b:96:dc:fd:8f:90:39:22:c3:
f5:59:a8:a3:63:e0:17:9f:f6:61:57:fd:bb:61:74:
b6:aa:14:c8:4c:ea:f4:28:03:b4:a6:c1:8b:46:d6:
eb:40:76:23:04:dd:7a:e7:95:e0:cd:77:bc:a5:33:
57:61:eb:94:49:cb:fd:b7:c4:e7:ed:85:85:43:ec:
08:6c:0b:96:ef:c4:58:34:25:2a:4b:6c:c3:50:2f:
d5:cb:6f:a3:04:39:dc:52:7f:a1:f5:69:dd:bb:80:
56:e0:d6:1b:e6:ac:39:ec:0b:8c:72:d5:d5:63:31:
d5:59:a5:71:ac:ce:e7:16:5a:73:7c:41:5e:bb:90:
10:ac:aa:4e:46:a6:2e:43:d5:fb:35:76:06:a3:72:
90:98:7b:2c:96:9e:62:c8:31:59:f8:7f:33:85:4f:
bf:01:6d:24:3f:22:c2:63:1a:0c:41:9f:f0:00:73:
8d:33:25:aa:fa:5b:ba:6a:bc:b6:17:54:6d:62:64:
a3:53:e4:79:c6:5b:f4:c7:87:dc:1d:e2:76:e7:be:
b2:a1:05:14:fa:a8:54:ca:f3:1e:7a:bc:8f:f4:25:
fc:54:61:2a:80:f3:47:05:5c:17:68:39:86:bc:d2:
22:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:8C:DF:3F:05:59:B2:D9:05:A1:3B:2C:D0:0B:3B:53:DE:C7:9C:45
X509v3 Authority Key Identifier:
keyid:5C:F8:8A:DC:19:EA:AD:13:D6:85:B8:1E:C3:99:35:BD:4B:2C:69:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPiK3BnqrRPWhbgew5k1vUssaa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:ed:62:c2:04:30:82:fd:f1:e4:75:d6:ed:ff:a7:c4:8a:40:
97:11:73:cc:ad:cf:9a:bd:51:24:6d:9c:a9:4e:24:18:61:b0:
2a:1e:84:80:5b:ff:5a:6e:0f:02:3f:06:80:7a:9b:8c:cd:7a:
7a:6a:a4:75:6e:9a:e7:21:b6:09:a7:44:de:6e:10:56:27:17:
47:de:e9:03:fc:21:60:58:83:15:d9:cd:1d:7f:43:86:65:50:
da:a3:8d:33:be:5f:fb:a5:37:ac:cb:a3:66:08:71:7f:fe:97:
b1:3a:96:e5:fc:19:b3:b5:59:9d:be:2f:ad:43:9a:be:8d:70:
be:c1:f8:5c:a0:36:0d:fe:cf:9a:37:5d:76:79:9e:09:31:57:
c5:6f:2d:2f:65:6f:99:30:36:c1:85:5a:d1:10:cb:99:2d:af:
43:82:8b:bb:5b:b4:00:4b:13:d2:99:c0:08:3c:52:2e:ea:8a:
58:26:3e:a8:34:0b:8e:90:24:8b:66:e2:66:e1:fd:f8:65:c4:
f2:c5:f0:04:1e:61:a9:da:f7:67:d7:31:1d:5b:57:69:ff:78:
e8:a6:b5:01:87:cd:c0:1f:e7:63:bf:73:ef:2d:1a:9a:9b:5f:
09:a3:8e:70:b1:9c:d4:50:25:d7:77:a4:5f:4c:5b:a5:b5:76:
f5:1a:f7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 17:35:02 2026 by rpki-client