Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
File: XJK5qSx-uRPD2lWAAsZz6CONscc.mft (raw, json)
Hash identifier: qWllql2K7ZWGlkNG9+ttWb+18Je5M3RpkNEEYGGldBk=
Subject key identifier: 29:CD:AC:75:1B:F7:3E:3F:9F:19:CB:73:C6:C9:65:E1:6D:19:E4:AE
Authority key identifier: 5C:92:B9:A9:2C:7E:B9:13:C3:DA:55:80:02:C6:73:E8:23:8D:B1:C7
Certificate issuer: /CN=5c92b9a92c7eb913c3da558002c673e8238db1c7
Certificate serial: 019D273B37B301BC58EEA4A9F9226CBFD738
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
Manifest number: 0FA5
Signing time: Wed 25 Mar 2026 23:01:25 +0000
Manifest this update: Wed 25 Mar 2026 23:01:25 +0000
Manifest next update: Thu 26 Mar 2026 23:01:25 +0000
Files and hashes: 1: XJK5qSx-uRPD2lWAAsZz6CONscc.crl (hash: H4NTQD7T/s/vIRKy/f7PkuHGHTdzGhkiTRQMSuUzBCk=)
2: nbiO0Qsuka11ZNMxAFy9dEINXys.roa (hash: NaboMvIQcJu7trkWGRw22aXFbkdnEJpMvSjIpYA2/ik=)
3: qTb1hfW2cZsJLmGnL2cnlmiyFfY.roa (hash: hklYadmGWp1kEGK+jtsPBwTIyJolTP2I0OScsQI8ZQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:37:b3:01:bc:58:ee:a4:a9:f9:22:6c:bf:d7:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c92b9a92c7eb913c3da558002c673e8238db1c7
Validity
Not Before: Mar 25 23:01:25 2026 GMT
Not After : Mar 26 23:01:25 2026 GMT
Subject: CN=29cdac751bf73e3f9f19cb73c6c965e16d19e4ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:cb:2e:67:f7:21:ff:72:c0:fb:71:da:af:15:
ec:b0:c3:99:34:19:04:91:0f:09:ed:84:cc:e6:f0:
98:05:7a:b4:3a:db:3e:4b:d8:d1:13:fd:6c:ee:10:
3a:ec:fb:28:74:f5:7b:06:c6:d3:6e:ec:6e:86:cf:
f7:cb:13:a4:f3:3f:d0:93:2d:2f:4d:49:39:85:d6:
a9:3b:b7:8a:27:a4:79:6f:c8:b0:92:4b:3b:8e:b2:
d9:63:30:6a:25:bf:39:a5:20:1c:8f:7f:ee:64:cf:
69:79:35:bc:3e:06:12:be:00:39:4a:d0:5e:15:71:
ff:db:66:ad:6e:34:10:95:e6:db:10:ee:d8:f6:2b:
bf:ea:56:7b:9d:14:0f:4d:4c:4d:22:cf:0b:51:fb:
89:0d:67:1b:b6:23:9a:03:2c:25:e3:46:58:62:5f:
92:cd:62:7d:5b:cb:b2:01:1e:30:93:ef:df:e7:3a:
d6:dc:80:75:37:6f:4a:56:cb:3f:f0:4d:1d:0e:ad:
36:14:af:d5:f5:76:ba:d6:07:23:8e:8b:3e:e9:b2:
bd:f2:25:e7:8a:22:e1:cb:12:53:cb:39:7e:42:40:
93:0b:ce:df:dd:55:8d:e3:b2:30:e6:2f:1d:c5:d3:
38:bc:3a:76:12:c1:f9:fc:f0:26:cc:63:a6:22:8f:
83:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:CD:AC:75:1B:F7:3E:3F:9F:19:CB:73:C6:C9:65:E1:6D:19:E4:AE
X509v3 Authority Key Identifier:
keyid:5C:92:B9:A9:2C:7E:B9:13:C3:DA:55:80:02:C6:73:E8:23:8D:B1:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:dd:98:0a:d7:d4:1f:cd:0f:62:b9:21:bc:80:41:1d:0b:15:
c7:5c:9a:e7:9c:a6:3d:52:57:15:5f:83:bd:06:4a:f0:db:d8:
ad:ea:ad:16:b4:82:a7:65:b9:ff:45:d1:33:a2:60:b7:8d:c4:
8b:48:e4:ac:3f:51:1f:01:5c:1b:5e:63:93:9a:dd:f8:f7:09:
53:e7:08:c8:c0:00:ee:16:2d:8e:7d:58:cf:b4:41:44:18:8c:
e9:e1:e4:2a:69:8a:08:aa:ef:62:b9:ea:7e:fe:5e:82:d1:f2:
79:69:a1:22:8d:21:63:b9:b3:00:c4:f2:78:77:97:d9:c3:50:
5d:c8:8f:4a:59:67:bc:a3:7a:44:41:ca:45:46:dd:8a:19:ce:
55:65:8e:11:de:12:bf:58:11:0d:5c:aa:a9:37:61:21:17:b2:
a7:9e:da:30:2b:d6:81:a5:62:7a:44:77:1b:ca:18:29:14:39:
e4:be:09:c5:3c:6c:a9:ba:7b:81:2a:29:a3:31:bb:92:15:03:
c2:9e:2c:4c:57:6b:8a:02:9e:d5:54:56:b0:51:b8:4f:73:4a:
6b:59:18:3d:12:6b:1c:76:99:e0:e5:d9:99:e0:75:3c:5b:20:
7c:4d:bc:a6:fa:a8:82:01:c1:27:c4:85:5a:d3:7d:00:97:2c:
02:19:90:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:34:53 2026 by rpki-client