Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
File: XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft (raw, json)
Hash identifier: udNxPlVSCexZTAZsLQAeKZQSyzTF/74LpkWC5J4lH7Q=
Subject key identifier: DF:F3:EE:97:9F:D9:9D:A1:7B:9B:2D:65:06:49:D9:E7:07:37:E7:49
Authority key identifier: 5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
Certificate issuer: /CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
Certificate serial: 019D277295C7B3C72E37D14D1AA38C95681B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
Manifest number: 0B51
Signing time: Thu 26 Mar 2026 00:01:53 +0000
Manifest this update: Thu 26 Mar 2026 00:01:53 +0000
Manifest next update: Fri 27 Mar 2026 00:01:53 +0000
Files and hashes: 1: MXmi4elQgkZloOXKc5KxZJXFILw.roa (hash: 4eGKiA6fp/86boDwfJeXXyGqjfCWRwxGmH0ShZjDAuQ=)
2: XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl (hash: PXDTkpQD9/CV862fqB+TVALwIecz0oETp8FUrVIMK+g=)
3: taZbUsGibT55ZZu6Th_Go_ILjiU.roa (hash: d/WlzB5v4feaToE5n6krRnONbSIkTydQjlb9UBErHJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:95:c7:b3:c7:2e:37:d1:4d:1a:a3:8c:95:68:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
Validity
Not Before: Mar 26 00:01:53 2026 GMT
Not After : Mar 27 00:01:53 2026 GMT
Subject: CN=dff3ee979fd99da17b9b2d650649d9e70737e749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:16:82:05:26:ba:b7:ad:0b:b4:6c:46:97:77:
fe:ea:f0:52:c6:5b:9a:74:4f:be:72:85:01:8c:6e:
ad:8d:ce:7a:12:e2:0e:37:c0:87:c6:c5:1b:1f:90:
97:b9:a0:12:47:68:d7:90:1c:59:7f:1a:e2:0e:c7:
ea:08:ae:18:c5:1f:9d:08:53:26:f8:e6:58:96:cb:
c3:93:e2:a0:ac:0b:9a:13:2b:bc:e5:a0:df:36:4c:
57:05:b5:da:7d:5c:38:4e:bc:d1:96:3a:71:46:86:
b5:5b:2c:37:95:5b:9e:0d:8d:65:77:82:ab:94:61:
1e:06:e7:41:53:71:d4:0e:b7:87:ac:19:d0:26:3e:
9d:5b:ed:18:8a:df:40:d4:17:eb:fa:06:0f:16:0d:
d9:ca:51:30:f6:c2:6b:cd:9b:0e:82:41:f4:d6:43:
c0:8c:27:0a:80:47:9d:a8:d2:b7:56:58:96:13:ff:
ad:5b:d9:0c:3f:ca:dd:1d:d5:b6:90:4d:b8:98:64:
a7:04:2e:2b:1b:e4:95:b9:e8:99:a3:db:ae:77:22:
ce:5b:25:c1:2e:c4:03:a7:81:7c:72:4f:da:a7:b6:
9d:61:35:fc:21:60:a2:05:0c:bf:ae:a4:d3:e4:52:
18:43:f2:cf:df:5c:65:ed:2e:5f:c8:46:01:e3:5b:
d8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F3:EE:97:9F:D9:9D:A1:7B:9B:2D:65:06:49:D9:E7:07:37:E7:49
X509v3 Authority Key Identifier:
keyid:5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:e6:26:68:04:ec:cd:52:f8:4d:ad:e6:83:ef:b4:bb:e6:c4:
e7:c1:0a:0e:30:18:97:6e:13:75:17:1a:69:ed:d0:0d:2f:b1:
9a:25:e0:eb:c8:19:64:c5:7e:16:0e:34:27:cf:b4:49:d0:e7:
a0:d6:2f:e3:96:7b:d8:3a:52:79:8f:4a:c4:ad:4b:3e:2c:f1:
55:72:15:0a:21:ae:b2:44:29:00:80:b1:09:f0:39:b9:e7:7b:
20:e1:82:89:95:16:3c:9d:12:72:af:05:0d:49:30:88:13:f0:
d2:1d:4b:3e:2d:0b:1a:03:9c:0e:5f:34:25:4d:1a:21:1c:8b:
7b:87:e1:e9:2a:87:73:74:b0:41:9e:30:36:6e:56:15:a2:2b:
1f:d9:fe:44:90:3f:76:82:8e:8b:0c:6f:a1:f8:e1:4e:f7:20:
a3:fc:53:ee:9f:40:0b:a2:2f:3e:5c:dc:d2:f5:3d:32:4d:c4:
e1:4e:64:66:6b:8a:a1:1a:54:aa:c1:3c:33:1d:3d:55:fb:0d:
53:cf:96:45:2d:ab:00:bf:3e:9f:a0:45:27:79:54:0e:64:1d:
b2:3a:de:3a:ab:d4:e7:9e:d0:1f:c4:11:db:23:5c:0c:80:00:
0e:38:e8:f0:8c:df:73:06:c8:31:be:ba:bb:a3:90:48:a0:fd:
11:d5:a2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:42 2026 by rpki-client