Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft
File: XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft (raw, json)
Hash identifier: ud3np9QHH2KkWJ1N/qgu/lxBDiibxP8xRkOHazND7mo=
Subject key identifier: 70:C5:1A:94:74:A3:76:57:99:E3:D0:33:B4:1F:16:C1:4C:6E:A3:2E
Authority key identifier: 5F:2B:E6:2B:E7:53:BA:99:29:35:5B:4C:E9:88:BA:E1:2A:F7:27:2A
Certificate issuer: /CN=5f2be62be753ba9929355b4ce988bae12af7272a
Certificate serial: 019D27DF6CDD814DA0F821DF8EC95D311877
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft
Manifest number: 07DF
Signing time: Thu 26 Mar 2026 02:00:46 +0000
Manifest this update: Thu 26 Mar 2026 02:00:46 +0000
Manifest next update: Fri 27 Mar 2026 02:00:46 +0000
Files and hashes: 1: XyvmK-dTupkpNVtM6Yi64Sr3Jyo.crl (hash: aB7FucMe2wpaIMkgN8Pi1JRXm6cYPDJ8IvnljXbhi5M=)
2: j0mWI7cQWBCGiDlGDSGVoZj238E.roa (hash: F2Brv8OMMvqFx8gd1Dzz6j6nuO9gaZQJk6LSgnOkIcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:6c:dd:81:4d:a0:f8:21:df:8e:c9:5d:31:18:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f2be62be753ba9929355b4ce988bae12af7272a
Validity
Not Before: Mar 26 02:00:46 2026 GMT
Not After : Mar 27 02:00:46 2026 GMT
Subject: CN=70c51a9474a3765799e3d033b41f16c14c6ea32e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:03:61:97:6f:e7:81:36:c1:08:f9:50:28:69:
3a:b5:89:af:6e:4e:32:55:d9:fb:cf:34:f5:cf:b5:
2c:30:18:64:c7:ea:f4:e2:68:b0:7b:06:de:63:38:
fc:62:65:2a:5c:61:66:2f:0b:e5:c1:e5:c4:6b:db:
e7:a1:57:5e:e8:2d:ea:34:7a:b9:d1:7b:1b:d8:f9:
fc:87:c1:89:67:c3:6c:40:30:dd:b4:7b:bb:38:0b:
b0:e0:0a:43:3e:f4:90:34:2e:ef:99:75:1f:78:6d:
2c:e4:26:ae:16:99:4b:2a:c6:f7:da:cc:ee:bd:90:
3e:aa:a4:22:95:d5:45:03:73:3b:13:6f:56:1d:6d:
9f:84:df:5c:39:60:bf:b4:4f:51:02:45:9d:cf:e1:
69:6b:e7:46:57:26:68:b9:5b:ae:58:26:22:b4:af:
6f:39:c3:d8:c6:b6:f3:f3:f1:54:43:39:15:aa:31:
01:33:7a:f3:a8:cb:dc:c0:27:a4:a7:e1:f9:77:3d:
70:79:b5:03:a4:32:85:4e:19:d2:25:18:2c:5a:be:
4c:d4:78:cf:ad:2d:9b:9e:bf:97:9c:be:b5:0b:ce:
8f:12:e8:10:3b:b7:c4:b6:40:3c:62:12:e6:3d:47:
c9:7d:96:f9:9d:f7:82:76:be:38:0e:50:f0:82:30:
c3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C5:1A:94:74:A3:76:57:99:E3:D0:33:B4:1F:16:C1:4C:6E:A3:2E
X509v3 Authority Key Identifier:
keyid:5F:2B:E6:2B:E7:53:BA:99:29:35:5B:4C:E9:88:BA:E1:2A:F7:27:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:e3:e5:fa:a2:8e:2b:ea:16:57:2b:46:4b:4f:25:84:7b:18:
95:b1:e1:c3:59:05:ec:ca:32:be:81:ea:b6:43:8e:83:69:63:
57:69:f7:27:e4:90:19:9b:f2:7a:ed:1f:1a:a0:bb:86:80:0d:
56:b4:e2:11:17:a3:18:ae:98:ed:39:64:2d:cc:bd:35:17:6e:
41:6e:ca:23:f1:76:25:45:18:bb:5b:2d:5e:f4:3f:b8:7b:3d:
d6:f2:ff:45:74:0c:14:17:ec:b6:be:ff:4e:04:c7:3a:65:6f:
8a:3f:b0:46:79:85:fe:6f:51:cc:bd:03:9e:7f:e0:53:4c:56:
89:6a:69:b9:d5:42:b9:d2:0c:fc:db:49:9d:92:08:ee:97:1f:
e3:84:d2:35:a1:ad:73:f2:de:b5:48:64:66:06:96:90:4c:0d:
0d:dc:9a:bf:21:17:f8:cd:09:b5:20:77:b7:32:3f:93:88:8c:
0f:fe:32:17:a2:f2:23:bf:2e:37:03:42:cf:be:a7:f5:7e:68:
c2:04:86:0c:f5:04:ec:39:eb:ea:a1:58:88:0e:a2:1b:f5:c1:
0a:b7:fa:f4:03:de:c5:b6:6e:b7:f3:b1:5c:9d:39:50:d7:e7:
ae:3e:06:18:02:ea:41:57:22:58:8b:e2:d5:f3:ff:11:6a:8b:
44:23:d6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:37 2026 by rpki-client