Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/XzHZebcQ7eIGiCOIGqYRrROvVFk.mft
File: XzHZebcQ7eIGiCOIGqYRrROvVFk.mft (raw, json)
Hash identifier: BjLUIZvE2xVhn7ZCkOCwvCqUCQ/a+jzY8X8bdcq7Bbk=
Subject key identifier: 6B:E3:AB:EB:2B:45:D6:BC:19:D7:C7:8C:91:A7:97:28:00:F7:30:E6
Authority key identifier: 5F:31:D9:79:B7:10:ED:E2:06:88:23:88:1A:A6:11:AD:13:AF:54:59
Certificate issuer: /CN=5f31d979b710ede2068823881aa611ad13af5459
Certificate serial: 019D2695C766CF561C2F11C3E29C5050B361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XzHZebcQ7eIGiCOIGqYRrROvVFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/XzHZebcQ7eIGiCOIGqYRrROvVFk.mft
Manifest number: 0E3B
Signing time: Wed 25 Mar 2026 20:00:43 +0000
Manifest this update: Wed 25 Mar 2026 20:00:43 +0000
Manifest next update: Thu 26 Mar 2026 20:00:43 +0000
Files and hashes: 1: XzHZebcQ7eIGiCOIGqYRrROvVFk.crl (hash: XJ0xRGF/y5TqByIyoNb3fcPPyXKyC05juCTFAIu9Q1M=)
2: sNtqJVBgNOZKvOOoSizpNY6uXfc.roa (hash: qlkBknwlplBkW99VaChbeT/pRtq/ip6OEf221SQRDX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/XzHZebcQ7eIGiCOIGqYRrROvVFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/XzHZebcQ7eIGiCOIGqYRrROvVFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XzHZebcQ7eIGiCOIGqYRrROvVFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:c7:66:cf:56:1c:2f:11:c3:e2:9c:50:50:b3:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f31d979b710ede2068823881aa611ad13af5459
Validity
Not Before: Mar 25 20:00:43 2026 GMT
Not After : Mar 26 20:00:43 2026 GMT
Subject: CN=6be3abeb2b45d6bc19d7c78c91a7972800f730e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:81:b4:fb:40:48:fd:07:ff:a0:78:f8:0f:6f:
2c:75:a3:49:0b:f5:25:82:d6:f2:b3:09:2b:33:d9:
2b:f1:bf:a6:30:44:f8:3d:4d:0f:f6:5b:ed:68:f7:
65:37:65:9e:de:ff:78:a9:9c:f7:30:20:2a:ba:cb:
92:b8:12:dc:d7:5c:ed:f0:ea:84:d2:47:e5:e5:7f:
dc:a8:ba:f8:d2:dc:87:01:1d:bf:47:5e:ff:ea:86:
25:80:b9:3c:c1:00:d7:e2:2e:ba:17:cf:2a:f7:60:
58:1c:59:2a:16:15:e2:1b:b6:65:79:51:8a:e2:5b:
5c:15:e7:3e:22:8c:a5:d8:8c:f6:db:0f:c7:d1:15:
95:91:bd:df:42:59:b2:fd:e1:d8:6d:e9:f5:88:0b:
fa:c5:b4:35:43:8d:48:d7:b0:8e:10:0c:1e:29:a0:
81:cc:79:96:dd:85:26:ef:27:49:79:f6:8d:56:3c:
22:9c:5a:15:5b:3a:87:ad:03:91:84:a2:14:90:35:
9e:e0:9c:7a:db:b5:bf:af:69:76:f1:b1:0b:30:bc:
05:47:34:99:40:cd:5a:b6:79:e0:79:c6:84:3e:d7:
20:41:90:ff:34:89:5f:53:ea:6c:44:d3:59:e2:15:
1b:cf:ec:8d:3b:b4:f3:b1:0f:47:79:fa:27:69:ed:
37:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E3:AB:EB:2B:45:D6:BC:19:D7:C7:8C:91:A7:97:28:00:F7:30:E6
X509v3 Authority Key Identifier:
keyid:5F:31:D9:79:B7:10:ED:E2:06:88:23:88:1A:A6:11:AD:13:AF:54:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XzHZebcQ7eIGiCOIGqYRrROvVFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/XzHZebcQ7eIGiCOIGqYRrROvVFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/XzHZebcQ7eIGiCOIGqYRrROvVFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:f9:2e:e1:24:7a:5d:4b:4e:68:c5:31:77:34:00:88:97:bb:
f3:b3:2e:0d:a6:81:8c:34:21:28:f2:41:e7:9b:71:9c:b0:3b:
b6:b2:be:96:12:2e:b2:e1:f8:62:99:39:2c:5d:a9:e8:af:93:
0c:dc:b4:ea:9e:b8:5d:90:e4:ff:57:27:3c:6e:1e:6f:d6:be:
7e:0c:4e:20:17:a8:15:47:a8:ee:3b:d2:1c:54:7b:a3:e1:f2:
95:e0:41:38:0e:f3:46:09:d9:c0:22:7e:df:c2:00:72:31:1c:
32:66:5f:73:3b:c0:e5:9e:4a:c6:d4:9a:9a:70:fc:f6:22:c4:
a3:40:68:05:76:1b:10:18:52:b0:4e:00:2a:7a:a1:43:09:5f:
27:8d:e4:cf:3a:79:18:d3:58:e9:3f:46:5b:9f:29:01:4d:f7:
c2:7d:39:c4:9a:27:4a:a0:c0:eb:c7:cc:60:28:1e:f1:57:e3:
a4:c1:7c:f1:6d:af:12:2b:3d:0e:6e:13:43:30:43:7f:b2:7c:
56:b2:6d:0b:c6:0c:f4:d7:44:93:99:4a:71:06:39:dd:1d:05:
9f:87:31:34:c2:18:05:53:45:42:b9:0c:db:1b:da:4a:da:1a:
f2:b3:76:ff:46:55:3b:1a:9d:53:2b:ca:c4:95:f7:0a:de:7b:
1d:44:1c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:31 2026 by rpki-client