Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft
File: XnzrnJMcsXleInriyGR1UTrkkVw.mft (raw, json)
Hash identifier: Sqx7wP/MrtJP7PGUwuQOqAxHJToJ/OimwFHh1xI/2To=
Subject key identifier: 66:81:E1:45:BB:8A:16:FD:5B:5B:FD:05:CF:D2:AD:90:4D:18:E6:9A
Authority key identifier: 5E:7C:EB:9C:93:1C:B1:79:5E:22:7A:E2:C8:64:75:51:3A:E4:91:5C
Certificate issuer: /CN=5e7ceb9c931cb1795e227ae2c86475513ae4915c
Certificate serial: 019D284DBAB3C21CDE5724370D0099C61769
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnzrnJMcsXleInriyGR1UTrkkVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 04:01:15 +0000
Manifest this update: Thu 26 Mar 2026 04:01:15 +0000
Manifest next update: Fri 27 Mar 2026 04:01:15 +0000
Files and hashes: 1: XnzrnJMcsXleInriyGR1UTrkkVw.crl (hash: MnTjykKALj96eFXDBssROYHSTm4HJAgmkHP/Msrqa4A=)
2: b2Q2Eat3_cux0yjgVGOzDFtgpic.roa (hash: jMq1XWA6LmE8jKy6nS6lDU5q1VTY7iuwpA5ReXp7Ws0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XnzrnJMcsXleInriyGR1UTrkkVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:ba:b3:c2:1c:de:57:24:37:0d:00:99:c6:17:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7ceb9c931cb1795e227ae2c86475513ae4915c
Validity
Not Before: Mar 26 04:01:15 2026 GMT
Not After : Mar 27 04:01:15 2026 GMT
Subject: CN=6681e145bb8a16fd5b5bfd05cfd2ad904d18e69a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:aa:41:49:ad:37:9b:73:91:81:ef:95:91:03:
19:f8:59:45:28:b2:0b:10:28:68:54:7a:b4:0e:05:
90:f5:13:29:7c:cc:e4:1e:83:25:3c:0c:87:4e:86:
d5:54:ea:3a:9d:65:23:28:c9:3b:57:b4:8a:b3:16:
96:a1:9d:76:d7:32:e9:05:4c:d2:0a:11:75:e4:0a:
83:de:b6:24:50:e7:ea:fb:42:16:f9:27:83:4e:f0:
87:25:b1:d6:8f:2a:d0:e4:37:a1:95:da:33:37:72:
e0:fa:db:55:b2:75:7d:b0:79:b0:02:76:92:41:db:
d7:35:7c:cf:43:7f:1e:a9:c7:8a:b1:99:55:13:84:
27:29:df:4d:c3:cc:82:e6:c3:15:b4:09:ee:15:dc:
b0:57:ff:30:0d:20:79:37:66:70:b6:50:68:7f:90:
4d:52:cf:ef:bb:9e:2b:ea:d5:c5:11:24:6b:64:7e:
4b:24:68:23:61:bb:a4:9e:a7:af:e8:67:4c:8b:6b:
1e:61:19:56:07:d7:a7:d9:52:fc:a1:26:7f:4f:22:
b0:24:4e:f7:a1:b4:13:d7:52:df:b5:8f:da:f8:4c:
77:60:db:e3:81:9a:37:ae:9c:fb:57:0a:8a:33:c3:
9d:aa:d4:cc:fa:07:9a:23:06:25:d8:a0:3c:e7:86:
b4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:81:E1:45:BB:8A:16:FD:5B:5B:FD:05:CF:D2:AD:90:4D:18:E6:9A
X509v3 Authority Key Identifier:
keyid:5E:7C:EB:9C:93:1C:B1:79:5E:22:7A:E2:C8:64:75:51:3A:E4:91:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnzrnJMcsXleInriyGR1UTrkkVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:9e:31:4c:30:e6:20:fd:35:d1:76:ba:84:28:db:44:11:74:
88:b0:f3:83:0b:39:53:c9:e5:2b:26:b0:53:79:66:ae:57:87:
6f:36:aa:1c:e1:94:f4:ae:7a:43:61:6b:12:01:e5:0c:ce:5c:
f4:51:8f:9d:b6:85:42:e6:b3:c1:7b:c6:18:f5:08:a0:c0:c4:
12:1c:46:5b:7c:06:47:29:7e:db:dc:39:30:6b:9f:be:d6:2e:
01:29:80:95:57:94:1a:ae:35:51:95:f7:1a:3e:a1:ec:f5:90:
9d:20:22:89:8a:99:55:28:55:10:f4:9e:8d:6c:4b:ae:f2:94:
28:9a:fd:6f:78:66:fd:fb:f1:25:35:60:96:db:c0:f0:1f:4e:
f4:a3:35:ef:55:75:9b:0e:3b:6b:9b:4b:75:7f:42:74:f2:5b:
38:04:4c:2d:cb:41:90:c8:46:5f:45:fc:d7:0e:63:b7:15:e4:
15:c6:af:9e:e6:0f:0f:0c:f8:3a:84:56:e5:1c:85:ee:36:32:
bb:48:10:3c:7c:6a:f7:fa:cc:86:20:01:63:5e:52:60:03:e9:
e8:4d:ab:3e:ec:76:ce:77:26:ff:68:2e:c4:cf:06:95:6c:c1:
3a:0e:19:52:04:56:b8:d1:1f:60:16:d1:29:c2:ce:86:12:af:
90:63:39:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:39:27 2026 by rpki-client