Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
File: Xnx3NpRcKad7rNWxiw_1h1ERe60.mft (raw, json)
Hash identifier: RCU4Y1L2YCA1vXncUMf+cDRAjTJO06hQvxovcoja+qg=
Subject key identifier: D8:32:66:54:8C:DD:C6:F2:72:C3:CF:EB:DE:7D:EF:53:C0:45:3D:A5
Authority key identifier: 5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD
Certificate issuer: /CN=5e7c7736945c29a77bacd5b18b0ff58751117bad
Certificate serial: 019D24DF1B9D49F373700ECD542A4DEC3C82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
Manifest number: 1055
Signing time: Wed 25 Mar 2026 12:01:34 +0000
Manifest this update: Wed 25 Mar 2026 12:01:34 +0000
Manifest next update: Thu 26 Mar 2026 12:01:34 +0000
Files and hashes: 1: IRKwCUFzai38fr65-FRH_xYS0jI.roa (hash: oO+4buqTDLcCJZOc7fvRD7YLk4AQs3LNbZe5FzwGorY=)
2: Xnx3NpRcKad7rNWxiw_1h1ERe60.crl (hash: Li5alPE95ECrwfzGjCJX7HcK4Yn8dSu7HTkKbnFRl9A=)
3: egWOQdMCICFVY-fSqkSUyufqt9w.asa (hash: KLL7Z4S+Cwpn2TeUDxPx/ngJ0cRsd9rXvcGeQB6iLDk=)
4: vUk1yzbPE2A9Gnc0-jOrueIo8U8.roa (hash: wjQObjyuEr0IkcfHoRoWEyYlXC6f2flFY08zOUVyRWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 12:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:df:1b:9d:49:f3:73:70:0e:cd:54:2a:4d:ec:3c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7c7736945c29a77bacd5b18b0ff58751117bad
Validity
Not Before: Mar 25 12:01:34 2026 GMT
Not After : Mar 26 12:01:34 2026 GMT
Subject: CN=d83266548cddc6f272c3cfebde7def53c0453da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f6:85:fd:11:b4:a3:77:f2:9e:d8:c0:f2:d7:
da:e9:51:f2:a6:98:d5:04:ef:26:50:d6:bf:89:ba:
74:7a:fa:9c:99:35:23:3f:42:b8:81:1a:07:dd:a6:
00:3c:7c:56:c9:0e:dd:38:86:a3:99:47:7e:74:c9:
36:5d:bd:5e:d3:98:67:a7:ef:23:0c:56:bb:0d:e1:
42:be:fb:92:e9:7a:18:fb:d2:53:c8:49:ed:b4:50:
6a:2e:b1:3a:3d:1a:7b:2f:67:fa:29:15:e4:be:73:
40:1c:f4:83:f3:cf:f6:db:3a:77:4b:0d:f5:48:2f:
9a:52:35:0d:da:55:41:43:39:3e:f0:35:ec:4e:2e:
df:c4:48:2f:30:d6:f0:71:52:b6:bb:84:f0:04:02:
55:c0:05:80:70:2f:56:f1:f0:a7:25:e9:5b:91:80:
ad:ce:b8:ff:85:e3:82:8f:d3:39:6e:4e:a1:31:40:
49:2f:f1:d2:f8:a8:90:0c:4a:8c:28:69:28:bd:82:
a2:ba:82:8d:3a:58:a0:e0:dc:f3:fd:e5:fb:72:8b:
d7:cf:62:35:4f:43:c1:0b:b8:c3:94:06:a6:be:b4:
62:74:e8:f1:1b:82:ef:08:e8:4d:cb:04:bf:a6:f5:
c5:f6:74:65:4d:ca:cb:d5:25:98:8f:3c:68:42:25:
b7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:32:66:54:8C:DD:C6:F2:72:C3:CF:EB:DE:7D:EF:53:C0:45:3D:A5
X509v3 Authority Key Identifier:
keyid:5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:3d:cd:8a:5b:05:22:e0:24:62:95:53:db:27:d8:7c:b6:01:
94:af:63:6f:02:7e:f0:65:ae:f6:98:9f:e6:d4:86:1c:94:b0:
89:f7:84:0e:b1:bf:4a:66:55:11:99:b7:62:d2:2f:03:ec:84:
6f:71:fb:e9:e7:d3:b1:05:15:ea:2f:e2:b1:35:e4:87:39:cb:
7b:c3:4c:c7:9b:c1:e4:7e:fc:d9:9e:b7:df:a0:96:a1:ec:20:
7c:c5:1f:41:da:2b:aa:aa:da:a0:e4:0e:bd:45:c6:de:4e:cf:
4c:87:76:09:39:23:13:8e:ec:6e:f3:4f:86:fe:9c:a4:ad:39:
26:f7:84:8e:b7:6e:94:ce:ce:31:51:11:09:bf:03:e2:2f:e9:
29:94:e5:9e:3e:ca:69:08:7b:70:1e:d0:37:a0:35:ee:db:3e:
c7:5d:15:ee:56:12:c9:45:38:f5:c8:40:d1:10:29:0b:ab:a7:
7c:eb:c7:e3:71:ae:28:94:86:0b:a8:12:73:aa:22:20:f6:17:
77:a3:95:78:a0:f9:31:18:0e:bc:b6:c0:ac:62:c1:20:96:7f:
23:53:cc:45:e0:0b:2b:20:01:71:4a:8b:89:ae:bd:46:d9:e9:
95:22:1e:bd:91:82:ad:74:73:41:84:57:dc:ab:9f:68:65:0b:
fe:4f:e7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:25:40 2026 by rpki-client