Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
File: XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft (raw, json)
Hash identifier: lvW67fxmr8BO5cc6F8Jo5oZT2cfVq2xbnYU/2r9l/rA=
Subject key identifier: 57:D7:B6:53:B6:41:AF:1A:26:BD:A8:39:5C:08:E2:93:1B:38:24:2B
Authority key identifier: 5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
Certificate issuer: /CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Certificate serial: 019D27A905DCA87D303C0F5507D8A8884141
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
Manifest number: 0C1D
Signing time: Thu 26 Mar 2026 01:01:21 +0000
Manifest this update: Thu 26 Mar 2026 01:01:21 +0000
Manifest next update: Fri 27 Mar 2026 01:01:21 +0000
Files and hashes: 1: EmJaWy9ErTq18djeUNfT6TYwXlA.roa (hash: 4n7tztgrwrUxD6WI3OMeFvCbZPJYYWR7ZCZusKoAv2Y=)
2: I-K9nqaL8isdaQPATdz15jV472A.roa (hash: IzWVmalHZuVa9srOGb7K8LfnsGA4gkEh+RLBEqMh0oM=)
3: RcwVn60BAjXaSKd54kN8HvE9mEI.roa (hash: HMzOnWY8MpFn7ebVHAu3c09I2xVaAKGb1gijWHIVX6I=)
4: VMEOZBTbdat5Ej2FDGSSyvWxON4.roa (hash: il5PH5NsJiNfZtmLceTZARbKmqNBVyPmTfnq15PGTB8=)
5: XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl (hash: fZpw13HkfsepZH3ZLFEIhkiI+1W+TculG/XNXtPNY2g=)
6: lIxTSYsNmmcqNIHLrqXgnkuovB4.roa (hash: KyCy7f0RC+Gah0kPcXWSGeJFDqftrveXwrbOBQUq7gE=)
7: n6hUs8ScD2JiUwNfl89-e_tCc6w.roa (hash: /7fv2sWCDJbqb4l7iyEbmK73ArodpdBZ+jyH4nyo2WE=)
8: roenOOlAGA0_OFjwrFwDRIQ0Y_Y.roa (hash: HW4LBYiaQzfwjk4eYDYDeite6KGRHXlfiOHLKtkmNeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:05:dc:a8:7d:30:3c:0f:55:07:d8:a8:88:41:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Validity
Not Before: Mar 26 01:01:21 2026 GMT
Not After : Mar 27 01:01:21 2026 GMT
Subject: CN=57d7b653b641af1a26bda8395c08e2931b38242b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5c:ff:8e:6a:3f:3a:ff:87:b7:94:a0:d3:09:
e4:59:f7:39:2a:da:aa:30:75:ae:36:4e:6f:4a:dd:
8a:6a:c8:c5:3a:4a:f2:a9:2f:17:1e:fd:bc:d0:45:
d1:4e:1b:75:51:f1:fa:02:db:0c:19:82:70:21:9c:
58:6f:0e:e2:95:1f:07:47:d9:a5:b2:60:78:7c:bf:
d1:22:07:5c:e9:d4:59:2e:75:e6:63:1d:41:8f:e4:
37:58:c0:55:09:8c:4f:5c:06:de:e8:ae:c9:70:82:
e5:21:aa:c4:e5:cb:be:dc:46:28:4b:9a:c7:bd:03:
50:d2:4b:bb:20:fe:ff:1d:29:56:34:e8:33:8d:32:
c2:59:d8:1e:55:fa:7c:1a:fd:be:4c:4d:ab:03:3e:
9a:04:ef:bb:95:a2:2d:73:8b:df:d4:1d:f9:61:8e:
4f:3d:69:07:9a:90:68:04:05:ec:34:04:a9:b9:be:
31:45:36:04:77:bc:4b:8f:b6:c2:3f:99:f6:7e:9a:
ef:a6:d8:07:0a:36:a6:2b:2b:18:0c:64:68:77:e4:
25:ab:c0:61:d2:c9:de:78:3d:52:e5:f7:44:d5:ca:
40:9e:3e:b7:6e:b2:14:12:74:b4:c2:39:a1:c0:b2:
20:5c:77:e6:55:7d:ff:98:8f:34:8f:2b:0a:a3:81:
25:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D7:B6:53:B6:41:AF:1A:26:BD:A8:39:5C:08:E2:93:1B:38:24:2B
X509v3 Authority Key Identifier:
keyid:5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:59:34:d2:32:40:01:42:e3:f1:b9:ed:48:4a:3c:11:fe:72:
0f:d9:41:c9:46:04:5e:c5:89:db:0b:73:a2:0f:ea:9d:c6:e8:
5d:ec:76:04:2a:49:35:96:5f:42:0a:5f:61:9b:76:e1:08:44:
90:68:66:e5:cc:61:a8:bf:dd:0f:e7:af:65:21:f9:e8:62:9d:
ae:d8:c2:ec:9a:fe:1e:c3:2b:bd:2f:0b:bb:ab:96:53:ee:37:
80:1e:e3:25:8e:2c:0c:92:67:7c:c0:a9:65:de:46:9e:f5:da:
4b:cd:24:b3:ba:92:50:d7:27:e4:72:a4:ab:73:51:d2:d9:96:
21:7a:f1:f5:9b:74:ba:6b:4e:f6:12:59:de:53:29:a9:12:4d:
7b:7c:c1:2f:8f:35:d4:7f:a5:c4:29:43:d3:e1:b2:53:df:5f:
4d:83:ed:62:d5:07:12:b0:a8:fc:b7:69:ad:76:22:f0:27:f5:
e7:8a:29:4e:b4:dc:bd:3c:ff:49:4e:64:26:ce:e9:27:18:0f:
a4:ed:67:fb:5e:a6:86:82:0b:e9:ae:dd:eb:3d:80:38:c2:8f:
19:d5:61:b5:1f:2d:12:d2:90:4a:47:ee:c4:80:5f:eb:e9:b4:
53:ee:dd:10:f4:19:0f:3c:42:e0:2d:9e:d2:ee:65:0e:99:54:
3f:f4:0e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:50:31 2026 by rpki-client