Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft
File: XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft (raw, json)
Hash identifier: toWtlNOTqraVA8qYnrNzUNrliK+vN4buuUgRneMKl4I=
Subject key identifier: 7C:41:40:00:77:78:FF:EC:FB:26:6D:71:C8:48:A3:F4:11:91:1A:49
Authority key identifier: 5C:DE:8E:81:39:F2:C8:F6:2F:84:82:D0:1B:0A:DB:86:B2:A1:D1:95
Certificate issuer: /CN=5cde8e8139f2c8f62f8482d01b0adb86b2a1d195
Certificate serial: 019D33E33593B42F76985E64545F6E722EEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XN6OgTnyyPYvhILQGwrbhrKh0ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft
Manifest number: 091C
Signing time: Sat 28 Mar 2026 10:00:21 +0000
Manifest this update: Sat 28 Mar 2026 10:00:21 +0000
Manifest next update: Sun 29 Mar 2026 10:00:21 +0000
Files and hashes: 1: XN6OgTnyyPYvhILQGwrbhrKh0ZU.crl (hash: GR7KEEVUu3y8coe79vevnTLHN2hHmY0h0IlD2wg5y+Q=)
2: b757MQvXDSUkc0atEwpcyuKC6YI.roa (hash: RFAcdsiEO0xgN3cYS1sxIjrVlqcw5hgZfBN09N0DhJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XN6OgTnyyPYvhILQGwrbhrKh0ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:e3:35:93:b4:2f:76:98:5e:64:54:5f:6e:72:2e:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cde8e8139f2c8f62f8482d01b0adb86b2a1d195
Validity
Not Before: Mar 28 10:00:21 2026 GMT
Not After : Mar 29 10:00:21 2026 GMT
Subject: CN=7c4140007778ffecfb266d71c848a3f411911a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6f:98:55:13:e2:1b:e8:38:34:e2:e3:c1:ea:
19:b2:a7:0b:be:f9:a2:df:b2:30:84:d5:63:7f:ed:
f7:47:76:8d:dd:a4:68:32:72:df:0d:d6:70:96:bf:
73:99:9b:b3:8a:0f:f1:04:7d:86:79:87:4b:2f:25:
0e:65:8c:18:30:8e:d1:3a:bb:6e:56:7a:90:4c:14:
55:6c:f3:62:21:0f:d7:1d:d6:84:15:68:eb:89:a5:
98:0d:d5:28:c0:34:13:1f:2a:9d:5e:41:aa:f3:3a:
e1:6c:06:aa:62:d4:97:c7:dd:f3:2b:ef:c9:8e:8b:
02:6c:b3:fd:95:4b:54:8a:e7:57:f0:ac:fd:1b:18:
c2:3b:54:9b:0a:ca:5f:2f:19:c5:c0:0a:09:ec:ab:
d4:4a:38:ff:6a:f3:e8:7d:95:38:98:dd:2d:cb:67:
b6:5e:67:3d:0a:09:bc:11:2a:1d:0d:2c:05:2e:4d:
28:8f:92:b3:5e:60:51:14:cf:20:59:7d:92:73:8a:
87:c3:eb:89:bb:a9:fe:5f:4e:26:dd:77:00:3c:8f:
dc:a5:64:5e:54:73:79:0a:1e:6c:9f:ee:c3:94:14:
80:bd:aa:1f:42:e3:97:47:73:f4:53:3d:a0:8d:b8:
cd:38:3b:67:c0:82:a7:7f:ca:8d:c1:50:6a:e0:a5:
d5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:41:40:00:77:78:FF:EC:FB:26:6D:71:C8:48:A3:F4:11:91:1A:49
X509v3 Authority Key Identifier:
keyid:5C:DE:8E:81:39:F2:C8:F6:2F:84:82:D0:1B:0A:DB:86:B2:A1:D1:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XN6OgTnyyPYvhILQGwrbhrKh0ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:98:bb:19:14:6f:4d:ba:e3:f0:b2:54:7b:1f:6a:e2:bf:c8:
2e:9f:43:fe:00:9f:08:cc:ce:94:43:ed:83:fa:dc:a6:12:ee:
73:73:f0:aa:24:c3:70:ab:25:a5:ee:0d:e2:ad:58:c9:03:ec:
97:9a:04:02:8d:7a:95:56:2f:7f:4e:e3:d2:24:2f:73:0e:28:
7a:9c:45:e6:5e:c9:b5:f4:60:e8:7a:bf:66:54:3f:5f:c4:31:
a3:57:ff:42:f5:c0:48:a9:2a:df:6d:79:bb:4c:18:03:ca:a8:
2b:87:bd:1c:1c:f1:1a:78:f0:85:72:e3:34:ff:94:ce:b5:1b:
f3:30:3f:60:ce:f7:c7:a0:09:fd:78:6e:cc:ce:f7:53:48:b2:
8b:64:f1:bb:41:50:d3:25:45:b4:60:d0:63:0c:dd:fe:a6:b8:
36:a9:b1:e1:7c:7d:f6:7b:1d:50:19:c3:0d:0b:1d:cb:22:a1:
2e:4b:ba:f5:a2:7e:8f:3a:2c:b6:01:5f:b4:34:c1:9e:e3:cc:
f5:a3:36:df:ee:50:0d:7a:9e:c9:7b:6f:ff:40:c0:b5:50:a3:
34:75:38:65:43:18:ef:8c:64:e7:0c:8a:e0:02:cd:07:b6:21:
9b:41:22:9b:46:0a:8c:ce:c9:40:0e:d4:10:1c:7d:03:84:63:
5d:50:fc:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:21 2026 by rpki-client