Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.mft
File: XuTrnvjdNYniMt-P6HbyXOlwehQ.mft (raw, json)
Hash identifier: 0Omz+n9rPYyauZxB9PcAT4wNixnyevyEZz0rx9/jEic=
Subject key identifier: 58:22:93:71:B1:C5:28:70:5F:6F:7C:09:FF:18:67:94:F0:77:D7:B2
Authority key identifier: 5E:E4:EB:9E:F8:DD:35:89:E2:32:DF:8F:E8:76:F2:5C:E9:70:7A:14
Certificate issuer: /CN=5ee4eb9ef8dd3589e232df8fe876f25ce9707a14
Certificate serial: 019D265FD1EE4D8B1E68737DE98DBBB8FCCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuTrnvjdNYniMt-P6HbyXOlwehQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.mft
Manifest number: 1281
Signing time: Wed 25 Mar 2026 19:01:47 +0000
Manifest this update: Wed 25 Mar 2026 19:01:47 +0000
Manifest next update: Thu 26 Mar 2026 19:01:47 +0000
Files and hashes: 1: XuTrnvjdNYniMt-P6HbyXOlwehQ.crl (hash: 1lQDD1TVP1vAqkPhJ4sv38/c/0wtKoPA3IsIArzjrE4=)
2: eCfVBrUlWVO_wd2C6zG6HlsWFfw.roa (hash: LnqLUkXGJD0OiqsbSYEC0AppS9eAVHhK/gEl/tMcU6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuTrnvjdNYniMt-P6HbyXOlwehQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:d1:ee:4d:8b:1e:68:73:7d:e9:8d:bb:b8:fc:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee4eb9ef8dd3589e232df8fe876f25ce9707a14
Validity
Not Before: Mar 25 19:01:47 2026 GMT
Not After : Mar 26 19:01:47 2026 GMT
Subject: CN=58229371b1c528705f6f7c09ff186794f077d7b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b7:9c:81:31:7b:7c:e4:c8:f8:86:99:89:83:
3d:03:03:f4:e2:1e:16:9a:64:12:b9:0d:dd:60:c6:
cb:9e:55:8a:e6:f5:62:10:da:df:19:33:46:ed:f7:
c4:8b:01:28:5a:f7:29:6d:4a:0b:19:79:94:78:04:
e2:7f:6f:b4:7a:8c:f1:c5:43:68:c5:c6:4b:66:2c:
97:cf:87:91:6a:e1:d2:c3:61:dd:0c:4f:fa:ee:57:
f6:4c:74:a8:87:5c:8c:78:dd:ce:c9:26:c8:c1:59:
6d:90:1b:57:57:6f:bf:8d:bb:6f:94:6c:f7:ed:6f:
29:6b:7b:e0:07:0d:b1:ec:6e:a6:0d:04:88:bd:66:
a6:e6:6b:bd:c6:dd:bb:6c:da:5a:d3:e6:35:49:4c:
db:c7:73:45:8e:04:bc:57:a3:7e:91:c6:42:76:62:
e7:59:c9:f3:01:a6:7f:0d:27:a1:c9:6a:65:ab:27:
35:11:39:e9:da:b2:16:51:b5:38:a2:7d:b2:a7:46:
9e:96:fd:5d:25:1e:2d:cb:83:46:24:76:3b:1c:62:
e4:ca:37:9a:58:19:a4:83:e8:80:62:a9:35:e4:3d:
3d:4d:b4:9d:95:72:7b:7b:c0:7a:bf:3a:db:f8:49:
91:a5:82:f0:20:a8:a6:69:86:df:95:17:c4:44:fa:
f6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:22:93:71:B1:C5:28:70:5F:6F:7C:09:FF:18:67:94:F0:77:D7:B2
X509v3 Authority Key Identifier:
keyid:5E:E4:EB:9E:F8:DD:35:89:E2:32:DF:8F:E8:76:F2:5C:E9:70:7A:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuTrnvjdNYniMt-P6HbyXOlwehQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:2c:18:e4:d0:ad:cc:52:45:31:95:50:1d:fb:49:f7:17:6d:
2f:bb:a4:51:1c:b7:85:9c:b8:93:23:5e:af:89:a7:72:e1:5d:
2b:2a:0e:cf:6b:e4:69:1a:a8:9e:38:03:02:d7:d0:72:de:41:
36:85:a8:56:7b:43:ee:b5:df:8f:e9:e1:96:25:27:58:64:3c:
7b:40:da:3b:ec:d1:de:bb:61:02:4d:9a:78:f4:e1:d0:cf:94:
f6:1d:9a:a2:25:1e:c3:49:28:5a:a5:54:7c:e6:ca:3f:d9:82:
93:a4:5c:5a:6b:03:56:06:0e:90:e1:2d:eb:de:6d:af:00:24:
f5:38:db:77:5d:f9:6b:3e:b5:45:c2:66:6b:9e:53:dc:0b:b2:
34:19:21:48:39:37:47:1b:84:c9:eb:af:c0:a7:27:95:a8:7b:
90:22:e5:fd:4b:45:13:bb:8d:07:65:6a:56:e1:9b:70:c1:04:
7a:4c:56:06:84:09:b9:ba:85:a2:b4:0f:dd:a6:14:f3:7f:75:
c3:e9:b4:65:9f:18:2a:8b:a9:40:fa:a7:c9:4b:ec:c8:d7:83:
84:77:76:26:98:06:46:73:41:d4:c0:ae:a6:2d:4e:90:3d:20:
0c:20:eb:70:55:f5:6b:4e:76:7b:45:f1:bb:3a:9c:82:41:8e:
26:9e:22:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:35:27 2026 by rpki-client