Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.mft
File: XOMWuo-zBWfOy8cnBR02QA4lH8c.mft (raw, json)
Hash identifier: 52Z9DayEGB//7NOFZW+CZ4W8js2jxjjM4mei2GMAxhw=
Subject key identifier: 54:EB:40:D7:ED:CE:35:B6:A2:CE:D5:A9:91:7D:1A:60:55:2E:C8:60
Authority key identifier: 5C:E3:16:BA:8F:B3:05:67:CE:CB:C7:27:05:1D:36:40:0E:25:1F:C7
Certificate issuer: /CN=5ce316ba8fb30567cecbc727051d36400e251fc7
Certificate serial: 019D2997A77C6C07FF81F3350C75901884CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XOMWuo-zBWfOy8cnBR02QA4lH8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.mft
Manifest number: 065F
Signing time: Thu 26 Mar 2026 10:01:37 +0000
Manifest this update: Thu 26 Mar 2026 10:01:37 +0000
Manifest next update: Fri 27 Mar 2026 10:01:37 +0000
Files and hashes: 1: XOMWuo-zBWfOy8cnBR02QA4lH8c.crl (hash: KGetgJ4WBav8JTC3hnK1/T4fMLZGs6RuGEavCDKlWhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/XOMWuo-zBWfOy8cnBR02QA4lH8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:a7:7c:6c:07:ff:81:f3:35:0c:75:90:18:84:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ce316ba8fb30567cecbc727051d36400e251fc7
Validity
Not Before: Mar 26 10:01:37 2026 GMT
Not After : Mar 27 10:01:37 2026 GMT
Subject: CN=54eb40d7edce35b6a2ced5a9917d1a60552ec860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:7e:6f:b4:25:0b:7b:25:fb:89:9c:0b:1a:b1:
da:e3:52:50:44:57:20:f0:bc:59:2a:ab:56:7d:8f:
95:8f:6e:5e:27:b6:5d:3a:b8:eb:43:57:be:76:01:
ac:5c:00:46:24:67:39:fa:58:68:cd:30:ff:45:b1:
5f:36:21:0e:48:a6:37:58:f4:46:6c:67:70:bd:d4:
93:1c:bd:40:e5:4b:17:1b:30:f0:56:0c:c3:2d:eb:
74:a8:c3:9c:2d:27:94:49:91:d7:dd:e7:bd:83:93:
5f:f0:bc:3f:65:6f:ea:9c:df:0f:b2:8e:4c:9c:b3:
19:1c:7c:6c:88:e7:6b:92:d6:8d:04:8d:48:39:bd:
f2:64:c0:1f:7a:bd:01:73:b8:46:aa:29:9f:15:c3:
4a:80:d3:06:18:6f:27:dc:ae:0f:5f:c3:86:13:91:
e1:33:fd:df:00:0c:fd:07:e2:d6:7e:c3:93:61:ea:
d9:91:f6:ac:a8:60:98:17:d2:6b:47:76:33:a4:34:
d3:99:5f:6c:35:b1:ed:d8:2d:9f:8e:dc:23:7b:70:
95:22:65:b5:00:aa:68:8f:34:cd:e1:72:1f:1b:99:
e9:81:4f:1d:7d:58:13:6f:d1:38:8d:08:4e:45:b3:
74:d5:f1:b3:0e:26:d9:be:27:a6:ad:90:2c:14:1f:
9d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:EB:40:D7:ED:CE:35:B6:A2:CE:D5:A9:91:7D:1A:60:55:2E:C8:60
X509v3 Authority Key Identifier:
keyid:5C:E3:16:BA:8F:B3:05:67:CE:CB:C7:27:05:1D:36:40:0E:25:1F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XOMWuo-zBWfOy8cnBR02QA4lH8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:de:6a:41:25:ee:e2:8d:eb:08:f3:15:b6:38:d8:2a:40:c6:
6b:6a:39:56:31:99:58:54:db:f0:70:ad:cb:70:31:96:46:e7:
d0:42:71:28:08:e1:5f:cd:bb:9f:a3:58:bb:dc:d1:ed:1c:1a:
0d:d2:38:76:31:44:d8:a1:49:70:45:54:2e:09:57:9f:85:ed:
14:0f:fb:2c:32:32:47:04:fb:3c:40:23:f2:46:86:aa:f2:b1:
35:94:07:63:be:12:d8:a0:42:49:3f:9b:8d:91:27:47:bd:08:
91:5e:12:d7:db:88:5e:d4:7b:a4:47:b5:fe:eb:9f:6b:b7:44:
66:94:39:16:25:97:06:6d:1a:32:a4:7e:a1:5d:ab:12:94:aa:
93:98:54:e2:ca:18:9d:3d:af:ba:01:f6:55:3b:d1:d1:ef:14:
65:0e:1e:3d:5e:8f:a9:b7:4d:a0:5e:20:d4:39:f1:b5:01:31:
04:dd:24:0b:89:12:15:b0:32:a7:b5:3e:84:26:0d:16:1f:96:
18:e4:1b:5e:1a:bd:38:a9:56:8e:1c:76:c3:98:8f:d2:54:b7:
bd:af:0a:2d:cf:fc:cf:25:84:00:50:08:a1:8f:2a:ef:33:49:
99:77:9f:34:8a:06:54:6a:7d:2f:3b:46:ad:33:b7:0e:a4:1d:
43:87:c6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:42:23 2026 by rpki-client