Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
File: XBEKKwrrN_DJMqlr279-82whGXw.mft (raw, json)
Hash identifier: 4gZTextZ9aHCmnaygEfhEUy+IbddZctl7PvO2smMrzg=
Subject key identifier: 00:A5:7B:AE:91:BB:AD:D8:92:0D:0F:BD:E4:15:D7:4A:32:39:EC:2C
Authority key identifier: 5C:11:0A:2B:0A:EB:37:F0:C9:32:A9:6B:DB:BF:7E:F3:6C:21:19:7C
Certificate issuer: /CN=5c110a2b0aeb37f0c932a96bdbbf7ef36c21197c
Certificate serial: 019D27E02FFCAFB43C62B3CD499A02792D14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XBEKKwrrN_DJMqlr279-82whGXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
Manifest number: 13F3
Signing time: Thu 26 Mar 2026 02:01:36 +0000
Manifest this update: Thu 26 Mar 2026 02:01:36 +0000
Manifest next update: Fri 27 Mar 2026 02:01:36 +0000
Files and hashes: 1: NrZRCuerFzj4EhFGKoh_NKbZNxM.roa (hash: 5QAUpIfqv2CVCHxJDOL189fybpsclOVK/PxPIJsB8Xs=)
2: XBEKKwrrN_DJMqlr279-82whGXw.crl (hash: PPFeoI9Qo0r2n1IsZ1p6OkFX8tWqnHrgQTr7tf90WbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XBEKKwrrN_DJMqlr279-82whGXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:2f:fc:af:b4:3c:62:b3:cd:49:9a:02:79:2d:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c110a2b0aeb37f0c932a96bdbbf7ef36c21197c
Validity
Not Before: Mar 26 02:01:36 2026 GMT
Not After : Mar 27 02:01:36 2026 GMT
Subject: CN=00a57bae91bbadd8920d0fbde415d74a3239ec2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e7:72:3b:32:b6:f6:06:d9:f7:1a:51:9e:93:
a8:0c:84:23:bb:cc:ea:ce:d9:86:ce:12:4a:b6:e4:
2e:c2:46:69:dc:6f:e1:78:d7:d5:92:0f:9f:4c:9a:
b0:ab:02:c9:f4:cc:30:b4:73:b5:d3:1d:85:cb:2f:
07:c2:0d:a0:5b:73:41:7b:fd:b2:6e:14:09:88:3b:
3c:e4:54:fc:0f:7f:d3:18:b2:0a:54:0f:d1:64:f9:
2f:24:44:a7:a0:e7:03:98:38:ae:d3:af:c2:2f:c3:
f8:74:01:64:44:9f:32:2b:55:b5:ad:bf:4e:13:f9:
fa:70:d1:8d:2e:e5:12:39:c8:44:0f:b1:36:8d:cb:
d3:96:5c:ce:47:25:14:61:ac:b2:69:a7:c2:60:45:
7c:69:91:3a:f1:ce:2e:b4:2c:db:5c:bf:22:70:f0:
a1:87:ef:4e:63:d5:c8:d8:93:e0:85:86:ee:cb:c0:
06:9d:c7:b9:a2:2f:72:3c:fa:df:be:61:95:48:58:
36:2e:2a:9e:66:ae:b0:6f:fe:02:89:98:7e:2b:fa:
df:ba:bd:48:53:fb:ba:fe:76:e7:e9:fd:a7:e7:ff:
79:18:cb:75:b3:3c:ed:80:ef:ea:f6:13:01:37:70:
2f:06:ef:6e:f0:c1:10:cb:61:5c:06:06:01:fa:15:
8a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A5:7B:AE:91:BB:AD:D8:92:0D:0F:BD:E4:15:D7:4A:32:39:EC:2C
X509v3 Authority Key Identifier:
keyid:5C:11:0A:2B:0A:EB:37:F0:C9:32:A9:6B:DB:BF:7E:F3:6C:21:19:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XBEKKwrrN_DJMqlr279-82whGXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:6a:8a:67:1b:72:40:b9:2e:50:9f:85:a7:a1:50:8a:40:58:
f9:40:06:10:ad:8a:18:81:89:f4:66:64:21:48:d2:3c:a1:c5:
65:c3:fb:87:46:e1:28:28:34:b8:8d:be:8f:9c:a6:6a:bb:0e:
20:c3:6b:14:ea:fd:7b:e9:b3:e4:1a:7c:72:3e:5c:5b:79:79:
aa:3a:a6:56:34:0f:b7:cf:42:dd:3b:9f:b5:51:2f:2f:64:01:
20:ab:bb:89:68:4e:f9:ad:66:2c:e8:9d:fe:5a:a2:13:40:e0:
1d:29:e5:8a:e9:5c:21:38:14:7c:de:29:f7:13:d0:df:7d:aa:
08:cd:57:2d:97:f4:0b:e1:30:b6:52:43:59:4c:78:52:23:28:
78:c6:e3:f3:0d:4e:c0:ec:1b:34:cf:0f:eb:56:6b:e2:46:ed:
ea:77:f6:2d:74:12:ca:45:e5:1f:d7:20:1b:d2:61:13:a8:b0:
25:36:a5:bc:f1:db:2b:d3:2d:ac:2a:01:22:76:18:e8:65:1e:
52:57:b8:da:e5:bc:34:e0:26:20:4f:6f:10:0e:a8:2f:36:06:
9e:02:cd:0b:cc:f9:8e:23:76:7a:40:45:e2:38:39:53:2b:c3:
a5:c8:d9:14:ef:f1:24:ae:b4:66:89:8a:86:8c:e2:41:f2:27:
71:63:56:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:08:19 2026 by rpki-client