Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
File: XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft (raw, json)
Hash identifier: wCSrEca2DUSfY3vRAodxEKrYtTV26+Nui5DecGVEOgY=
Subject key identifier: 49:43:A3:DA:DF:14:A8:11:FE:22:39:04:BD:7E:7E:F3:25:70:0E:83
Authority key identifier: 5E:06:6D:E9:82:9B:76:1E:DC:E1:71:E8:EA:3C:59:35:E4:4F:4E:9A
Certificate issuer: /CN=5e066de9829b761edce171e8ea3c5935e44f4e9a
Certificate serial: 019D2771D41CCD7F77FF3CFF7523D5169196
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
Manifest number: 07BC
Signing time: Thu 26 Mar 2026 00:01:04 +0000
Manifest this update: Thu 26 Mar 2026 00:01:04 +0000
Manifest next update: Fri 27 Mar 2026 00:01:04 +0000
Files and hashes: 1: O9do_tpuJS2IYg238tFeLgPwuLo.roa (hash: inPkQd2M/OOC4cE+kZAGV36qocuoxkiJ2VIdZgql1s8=)
2: OQMR_FkQfBmNWWsOByMgzVQchtc.roa (hash: E+VXuwQXys0IVzb1O36G+Zcgxr0/sBSG/vjRsxKVhO0=)
3: XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl (hash: vWTc2KSKuH6jLT6Dl4vMUmB+JFX1pR467L9msy8FWzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:d4:1c:cd:7f:77:ff:3c:ff:75:23:d5:16:91:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e066de9829b761edce171e8ea3c5935e44f4e9a
Validity
Not Before: Mar 26 00:01:04 2026 GMT
Not After : Mar 27 00:01:04 2026 GMT
Subject: CN=4943a3dadf14a811fe223904bd7e7ef325700e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:19:8d:98:29:63:63:a7:a7:4b:84:9a:27:ca:
c8:79:19:01:45:93:a3:18:5a:0a:e6:f0:2c:3d:9b:
d8:53:d9:62:ea:87:4d:a3:8f:b6:66:ab:ff:3f:8c:
34:5c:cc:50:e9:97:55:4e:19:ba:82:b5:2e:55:d7:
95:42:7a:33:8b:99:18:6c:75:c8:61:64:de:d6:76:
e5:77:f3:05:1e:f4:e2:fa:41:4b:60:2b:c6:fe:5b:
3f:8f:3c:b9:db:45:3d:23:62:f7:e0:d4:68:b8:7f:
26:2c:36:dd:c5:ce:b6:e3:8a:0b:31:f9:3a:ba:63:
30:3a:9e:51:31:98:d9:48:96:2c:8b:fb:ea:3b:21:
7b:a4:77:50:79:a0:5e:96:98:e0:14:cf:86:07:de:
40:ea:96:02:e7:d8:69:ee:1d:41:01:9b:d1:4a:d0:
6c:99:59:7b:30:e5:4a:ba:d1:3e:35:4f:b3:ce:f9:
03:77:75:44:67:8f:82:28:ab:ba:2a:db:80:54:1e:
38:9f:19:6d:4f:48:64:22:d9:7c:c8:ea:0b:87:d9:
89:e6:cf:fe:28:3c:d9:36:47:d6:5e:38:e4:dd:27:
e5:19:94:62:ee:2e:97:96:a8:17:b3:ff:21:97:ae:
14:73:15:8d:6c:8d:59:74:4f:f3:a6:5a:5c:3f:db:
36:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:43:A3:DA:DF:14:A8:11:FE:22:39:04:BD:7E:7E:F3:25:70:0E:83
X509v3 Authority Key Identifier:
keyid:5E:06:6D:E9:82:9B:76:1E:DC:E1:71:E8:EA:3C:59:35:E4:4F:4E:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:a0:3d:bf:8a:89:04:89:7a:1e:a6:8f:1d:6e:8a:05:05:48:
10:1a:74:74:54:88:ba:be:da:e5:1e:88:c1:91:04:86:fa:7f:
77:51:e5:31:78:a7:e5:bf:50:96:dc:2d:ce:af:c1:44:ab:ce:
90:33:df:6a:0e:d5:a0:4b:47:e6:5e:e3:be:5c:e5:b6:a3:24:
e8:49:d6:dc:ba:c5:78:85:db:47:ff:9c:87:76:14:01:18:85:
4e:42:f8:a7:24:8c:3e:e2:f8:4e:7f:16:76:45:62:82:42:a1:
e9:b0:73:25:40:c8:ae:e4:a7:31:48:9a:23:cb:14:0a:b4:a0:
e1:74:84:85:49:a9:16:1d:83:1b:f2:89:b9:89:44:8d:34:96:
22:f1:b2:8b:c1:83:03:0e:f0:61:10:dc:93:83:18:74:35:9c:
82:83:5a:70:55:4b:e4:1a:6e:35:a0:02:3e:6a:66:b7:51:74:
08:5e:f5:4c:c9:28:60:02:37:f9:1c:fb:0f:22:c2:f5:90:b5:
33:54:01:7e:45:50:72:92:ec:36:bf:c4:69:18:b3:c0:59:ba:
62:2e:c8:80:64:56:d5:14:26:51:7d:ea:e1:8c:8b:37:45:92:
6d:53:4f:57:c4:23:8c:ec:5b:40:9b:fa:9e:17:e3:e3:95:e1:
24:0f:f3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:42:08 2026 by rpki-client