Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft
File: X5n94NY7EbXC3YFsD5PC6lg1AzY.mft (raw, json)
Hash identifier: jryhtQstJFQM59qQWT194PcjpCwn920lMtqWoNOiuwY=
Subject key identifier: 89:7A:B5:2C:05:2E:A8:E3:8B:BD:5E:D2:A9:EB:08:09:62:E5:D8:B1
Authority key identifier: 5F:99:FD:E0:D6:3B:11:B5:C2:DD:81:6C:0F:93:C2:EA:58:35:03:36
Certificate issuer: /CN=5f99fde0d63b11b5c2dd816c0f93c2ea58350336
Certificate serial: 019D2A04B6B6916F961850E15D58A5CE29BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft
Manifest number: 188C
Signing time: Thu 26 Mar 2026 12:00:44 +0000
Manifest this update: Thu 26 Mar 2026 12:00:44 +0000
Manifest next update: Fri 27 Mar 2026 12:00:44 +0000
Files and hashes: 1: QF_399xI2SewrseLB4kyGBneu-M.roa (hash: r2/mY8nxqGv5gn+irkMLldX5c55sQ0uzw/xlOgX6u3c=)
2: X5n94NY7EbXC3YFsD5PC6lg1AzY.crl (hash: Z4EqxbZdnkDpXfXLtBW//jMenfh1LeH2mE2s3qS8ap8=)
3: XDqlN_taZIdM6DdjER8uW1UFODI.roa (hash: 6ngdrJA/sMfopr75z6wriVhW2HqdoLfI0EofWQVGvGQ=)
4: _oHgZvsJMwRyDYodMcc-dD-xpyQ.roa (hash: wQ28zoW+SYup4IFoFcCESAD8E7hPkqJGGi5NHlim+YI=)
5: k7FuEmL7ckZebEdYqLmWq8Y2lFM.roa (hash: OL4V0L7IkRGq+9Cwq5yFJDHvYEDPre5Pe6POd0XMkXE=)
6: lzvYQ0K9BEZg4pkQlfVFgknob7A.roa (hash: BcqBpfBCaIEZdSkKphmSBpiqpYSfxDwEADDAeo9W8JA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:b6:b6:91:6f:96:18:50:e1:5d:58:a5:ce:29:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f99fde0d63b11b5c2dd816c0f93c2ea58350336
Validity
Not Before: Mar 26 12:00:44 2026 GMT
Not After : Mar 27 12:00:44 2026 GMT
Subject: CN=897ab52c052ea8e38bbd5ed2a9eb080962e5d8b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:99:51:3a:c7:58:34:e8:bb:2c:d6:0f:7a:11:
ee:ec:15:49:b9:a1:d1:8d:d6:0b:38:a9:19:61:14:
67:2b:c8:b1:d1:27:26:4c:76:43:ce:d0:0a:4d:ad:
4b:0f:04:a9:81:8d:cc:eb:c5:af:a9:52:0b:8a:2e:
12:91:b9:67:cf:e2:d2:8f:90:a8:ec:60:4b:fd:76:
79:e3:db:b7:51:3f:a6:fe:d3:00:28:71:1b:86:78:
c5:ff:06:9c:e1:6a:1f:42:8f:e0:f6:9f:bc:8f:64:
ab:cf:86:d7:e2:52:c3:3d:50:a1:87:ff:90:75:d5:
d0:05:42:12:29:64:6d:e5:e7:8d:e7:63:96:af:d5:
3f:c7:dd:2d:a3:7c:6e:8b:03:f0:71:c1:a7:eb:6d:
fa:92:89:87:9a:bf:c2:5c:04:54:d5:4f:fa:e6:d5:
e7:46:c5:03:5a:15:c9:b5:ad:81:d1:e0:97:70:b1:
e3:b3:1d:e0:39:be:e3:24:be:4d:a4:f2:9d:c1:f4:
72:5a:4a:e6:8d:d6:72:db:58:f6:98:3b:b5:c1:c9:
bd:56:aa:ec:6e:8f:96:5b:f0:e7:31:40:7b:8c:33:
8d:50:1e:cf:31:41:08:6d:fb:fc:fd:b6:de:a8:67:
85:0a:2d:00:bc:e9:49:e8:62:8e:43:8e:4a:f9:8e:
96:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:7A:B5:2C:05:2E:A8:E3:8B:BD:5E:D2:A9:EB:08:09:62:E5:D8:B1
X509v3 Authority Key Identifier:
keyid:5F:99:FD:E0:D6:3B:11:B5:C2:DD:81:6C:0F:93:C2:EA:58:35:03:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:bc:37:ae:14:2e:d5:a0:9b:2f:47:a9:5f:a0:b6:e7:f1:c2:
82:f9:1c:f4:4e:7e:80:92:d3:64:23:a9:ec:77:42:fd:33:26:
f4:d0:f3:9a:08:f5:66:79:99:70:86:a4:aa:1e:47:0e:8f:c6:
da:8a:a2:9d:29:ec:c7:81:64:cd:23:0b:c2:80:0d:06:9a:f9:
6f:fb:3f:f4:3e:1c:e6:ea:a4:61:50:50:d2:71:25:ab:be:9f:
71:a8:48:c1:33:97:77:d4:49:26:3c:74:9a:12:88:ff:fc:15:
54:9c:e9:fd:d1:d0:71:04:04:e6:d0:f1:39:00:5f:9b:05:6a:
a3:42:59:cd:57:e1:8e:0e:9a:69:a9:35:ad:2a:e5:e8:a3:13:
97:61:15:66:99:0f:19:d4:50:ca:8b:ee:a0:ca:60:89:1a:65:
6a:b6:c6:73:46:76:e5:59:25:44:0c:19:f9:84:18:90:73:6f:
14:1c:3a:92:51:0b:a7:d1:cf:75:90:92:ee:91:d0:e6:bd:b3:
fb:ae:a0:65:90:4e:27:b1:72:21:cb:6c:32:7f:87:62:33:f8:
3b:5d:f6:72:4c:ee:e1:d5:1f:98:65:4b:7e:c1:fb:63:90:18:
a4:8a:bf:10:c5:40:a7:a9:9c:89:1c:5e:df:95:62:b7:b9:fb:
27:42:8a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:54:30 2026 by rpki-client