Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.mft
File: X4anFB9vt7TCi84xRGe2FU4Pk3c.mft (raw, json)
Hash identifier: ugpNjjqN7vv5xDr18ebtn5cLFhBpX7dRsOvR+I8CHnI=
Subject key identifier: 2D:10:B3:96:86:DD:EF:CE:2A:DB:BE:54:73:80:54:D2:57:A0:79:4D
Authority key identifier: 5F:86:A7:14:1F:6F:B7:B4:C2:8B:CE:31:44:67:B6:15:4E:0F:93:77
Certificate issuer: /CN=5f86a7141f6fb7b4c28bce314467b6154e0f9377
Certificate serial: 019D284DB7CB3813DE34BACE69837FA11963
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4anFB9vt7TCi84xRGe2FU4Pk3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.mft
Manifest number: 1021
Signing time: Thu 26 Mar 2026 04:01:14 +0000
Manifest this update: Thu 26 Mar 2026 04:01:14 +0000
Manifest next update: Fri 27 Mar 2026 04:01:14 +0000
Files and hashes: 1: X4anFB9vt7TCi84xRGe2FU4Pk3c.crl (hash: z8W5h9+KCW9hGpw48DZLMKAr0foUdAsrqo9XItnphes=)
2: o10KDQLCNX_eEti6B07ro4cJyK8.roa (hash: hy+4KJvTq+cRULOZkT8/acKHvswCR6Ar2bCCrvuaUxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/X4anFB9vt7TCi84xRGe2FU4Pk3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:b7:cb:38:13:de:34:ba:ce:69:83:7f:a1:19:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f86a7141f6fb7b4c28bce314467b6154e0f9377
Validity
Not Before: Mar 26 04:01:14 2026 GMT
Not After : Mar 27 04:01:14 2026 GMT
Subject: CN=2d10b39686ddefce2adbbe54738054d257a0794d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:df:00:23:0d:c6:3a:bd:1f:6f:a4:bc:89:ef:
20:55:02:6b:2d:3d:52:e8:eb:c7:db:7d:00:e2:57:
5e:f9:21:18:7a:51:ba:d8:f1:12:e0:e5:fd:0e:96:
b5:ea:0b:b0:01:35:4f:a7:67:67:9d:f9:af:69:7b:
e3:35:71:3a:b9:ca:07:b6:a7:48:99:18:49:d3:e2:
ca:ba:ff:94:b7:67:bf:3b:62:8f:39:8b:a4:88:98:
b1:b6:20:89:b0:ed:c9:b0:24:34:69:d1:02:11:7a:
28:7c:a1:6d:85:04:a6:7c:5c:bc:3a:3c:10:42:b3:
34:29:ec:66:82:08:e3:64:17:e2:38:46:0e:fb:90:
19:8b:d9:2f:6e:ef:70:a0:6a:61:57:5b:fe:52:e1:
6b:c1:ae:6c:0f:70:3d:d4:f4:56:11:08:a9:4f:0f:
e2:85:78:04:ae:ac:90:96:20:3c:7a:55:57:cb:81:
66:cc:65:58:c0:ae:17:03:af:ed:75:28:7b:f6:c6:
7f:a6:89:20:a2:5c:66:79:79:09:38:47:6b:81:d8:
d6:d1:e0:51:73:7c:65:72:32:4c:55:08:9c:b2:a5:
dd:c3:6f:02:e5:e5:a6:83:df:f3:5e:f1:b7:a5:12:
db:ca:71:71:3a:fd:ab:dc:c3:c3:01:be:f0:04:8f:
aa:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:10:B3:96:86:DD:EF:CE:2A:DB:BE:54:73:80:54:D2:57:A0:79:4D
X509v3 Authority Key Identifier:
keyid:5F:86:A7:14:1F:6F:B7:B4:C2:8B:CE:31:44:67:B6:15:4E:0F:93:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4anFB9vt7TCi84xRGe2FU4Pk3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:68:55:1d:0f:ee:2d:82:a7:8d:27:bd:a1:31:1d:5d:5d:58:
ce:45:de:67:f6:e5:70:f8:8f:18:41:3d:bb:8d:7a:a8:16:de:
cb:55:cf:52:70:28:d1:93:b9:37:5d:fb:46:d3:f4:78:36:04:
c6:31:3d:00:15:10:d4:7a:df:a1:56:83:91:84:31:0b:89:62:
8c:8a:8d:71:f5:e5:e1:05:82:d4:e3:24:e6:7e:94:b9:00:6d:
bc:e3:df:03:17:c2:15:8e:af:0f:cf:d8:5a:84:49:7a:e3:ba:
01:12:72:5f:84:2d:58:96:01:a4:26:64:58:af:eb:2c:9f:d8:
7b:a4:91:d4:be:07:e5:e7:8b:3c:bf:73:69:8d:f2:67:af:08:
10:cb:83:61:8a:2b:30:24:7f:58:0a:71:b4:f8:e6:67:2c:3d:
e1:13:1b:74:43:f5:3b:17:25:72:f3:ec:ad:8f:92:b6:61:60:
d5:16:9b:08:86:08:b3:99:ac:1f:02:8d:58:1e:b1:c0:9a:46:
f0:67:cc:cd:31:a1:35:d4:8d:d3:96:a5:36:9e:73:3e:97:5a:
c3:81:f2:76:ca:c4:09:4b:db:fb:f6:b4:1d:3b:fe:b5:50:f5:
77:2d:d3:0c:7f:f9:39:10:5b:0c:25:de:b7:90:e7:72:82:39:
15:72:6b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:09:25 2026 by rpki-client