Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft
File: XBxjojad99_s88hQhZM0HNNpsjc.mft (raw, json)
Hash identifier: 87n3dcOL0LfpMXc2xfzrMQrnptX2oJCKfbrF8mvwsVI=
Subject key identifier: EB:B5:AF:AE:EA:3B:CA:B3:50:0E:F9:2B:7D:49:C3:77:0F:A8:F2:6B
Authority key identifier: 5C:1C:63:A2:36:9D:F7:DF:EC:F3:C8:50:85:93:34:1C:D3:69:B2:37
Certificate issuer: /CN=5c1c63a2369df7dfecf3c8508593341cd369b237
Certificate serial: 019CAE6C7B4FFECA48CB68836619DA166F2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XBxjojad99_s88hQhZM0HNNpsjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft
Manifest number: 07A7
Signing time: Mon 02 Mar 2026 12:01:10 +0000
Manifest this update: Mon 02 Mar 2026 12:01:10 +0000
Manifest next update: Tue 03 Mar 2026 12:01:10 +0000
Files and hashes: 1: XBxjojad99_s88hQhZM0HNNpsjc.crl (hash: cVDqenaqnaEBy+ztDzaIF7k/j1BiWUbvOBzkHRnHgFA=)
2: f0h0BRc01GJbNEhbsgMRjt_Mi4w.roa (hash: kvtuOpQL+PzUZw9RNcnmJmxQ64DQiEtwmabASxtpCEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XBxjojad99_s88hQhZM0HNNpsjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:7b:4f:fe:ca:48:cb:68:83:66:19:da:16:6f:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c1c63a2369df7dfecf3c8508593341cd369b237
Validity
Not Before: Mar 2 12:01:10 2026 GMT
Not After : Mar 3 12:01:10 2026 GMT
Subject: CN=ebb5afaeea3bcab3500ef92b7d49c3770fa8f26b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:59:8b:8e:fd:a6:93:e5:8c:ab:f6:1e:6d:6b:
09:3e:2f:e9:9c:ab:07:ec:67:2c:54:61:78:aa:c8:
2a:72:46:2a:29:6f:ad:46:ed:eb:9a:00:08:5c:ba:
c6:94:11:94:97:2a:f0:b0:3a:ca:6a:60:20:29:62:
47:a0:9b:38:51:fb:e1:2d:65:69:78:9c:61:b3:14:
0d:54:63:27:58:61:50:a0:9b:d6:0e:1a:8c:8f:f2:
b0:01:10:17:2f:d5:3d:f9:5f:11:0c:38:97:f0:ed:
56:28:6b:61:33:be:8a:be:b0:50:45:88:af:ba:07:
8a:00:3d:9d:d6:dc:11:09:4a:cd:68:16:ab:dd:1a:
a1:b1:9d:aa:bb:e1:16:c2:b9:a6:26:cc:6e:27:f3:
ae:7d:bd:e5:b2:b4:0f:e9:11:f8:e0:9c:a0:04:10:
f7:1a:cb:bd:b3:f7:c7:7d:31:2c:4e:6f:48:c8:31:
fe:56:c5:91:df:b2:7d:49:14:5d:d5:c7:01:fa:39:
48:a9:6e:59:5f:8e:e5:2e:4a:3b:d2:79:7e:6a:e1:
71:bb:9e:aa:ef:80:6f:f9:80:fc:63:67:71:a8:c2:
85:23:df:98:bb:38:99:7e:db:61:89:17:4d:8a:22:
14:9d:b5:fa:9a:06:a2:04:56:3d:74:86:c7:5e:e0:
67:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B5:AF:AE:EA:3B:CA:B3:50:0E:F9:2B:7D:49:C3:77:0F:A8:F2:6B
X509v3 Authority Key Identifier:
keyid:5C:1C:63:A2:36:9D:F7:DF:EC:F3:C8:50:85:93:34:1C:D3:69:B2:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XBxjojad99_s88hQhZM0HNNpsjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:72:52:87:01:12:eb:3b:72:2d:c7:4c:d1:4d:ac:35:89:28:
66:65:27:ad:fc:68:44:22:64:5b:72:be:a0:9f:ab:77:6f:0b:
e9:08:b6:87:2b:e0:23:fc:ff:8d:0f:10:6f:51:bf:28:e5:07:
5d:06:84:bd:23:cd:1b:76:e1:78:89:6a:9b:c4:e1:0d:7d:6f:
39:db:fb:d3:e8:d5:15:a6:f4:f3:f0:5e:63:2b:d5:71:d8:af:
66:8a:a5:7d:e9:0b:c8:7c:81:c6:93:97:6d:f7:d8:06:26:91:
5a:a8:97:ef:a3:30:87:a3:73:9d:fa:2e:4c:65:85:5d:b5:56:
17:27:d4:16:31:29:ac:d2:6c:67:ee:d3:ff:65:10:fa:e8:36:
6e:82:31:60:10:c1:d8:87:1d:c4:b5:ca:4f:e3:38:01:af:c2:
54:5a:07:2b:af:d1:74:36:30:c7:e6:b0:07:ec:7b:f4:3e:06:
dd:1c:6c:84:59:5c:fb:e3:e8:a5:06:72:2a:4f:3f:04:0b:97:
3d:9b:e7:77:0f:a3:83:9e:09:f1:23:55:cc:02:1f:c1:97:59:
45:aa:48:72:2b:56:95:b1:60:74:9c:fa:63:84:65:43:e6:37:
66:b8:8f:9e:8f:4e:f5:5f:11:c2:84:0e:ed:0a:4f:c9:06:13:
68:a0:8b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:08:47 2026 by rpki-client