Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
File: XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft (raw, json)
Hash identifier: XVE9C3NsiAJzo7pUcl1uIwbMPUDd6D8yqJA4lt498cY=
Subject key identifier: 05:7C:B2:C2:EE:08:63:A3:F3:85:BC:2A:E6:82:AA:79:C4:48:09:70
Authority key identifier: 5E:67:66:0A:F7:52:3C:61:B7:F9:5D:08:48:8D:58:3E:9D:51:4F:6B
Certificate issuer: /CN=5e67660af7523c61b7f95d08488d583e9d514f6b
Certificate serial: 019CABD99476219724925B2356B7259CBED1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
Manifest number: 0863
Signing time: Mon 02 Mar 2026 00:01:29 +0000
Manifest this update: Mon 02 Mar 2026 00:01:29 +0000
Manifest next update: Tue 03 Mar 2026 00:01:29 +0000
Files and hashes: 1: XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl (hash: QXTj7QMQCCY4kGj7giOC6Ps/1JJReD41Ru+N8Stm984=)
2: i5WP_AihTIXhPy_BVXYv71HxOto.roa (hash: VJGbYlBp9HGyGJZxGUnm0bEpFbqRPbJagnJqTdbqGUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:94:76:21:97:24:92:5b:23:56:b7:25:9c:be:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e67660af7523c61b7f95d08488d583e9d514f6b
Validity
Not Before: Mar 2 00:01:29 2026 GMT
Not After : Mar 3 00:01:29 2026 GMT
Subject: CN=057cb2c2ee0863a3f385bc2ae682aa79c4480970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3f:7e:44:91:9f:75:b6:32:47:97:9d:fb:d4:
c1:1b:d2:64:91:9c:21:9e:5b:a2:1a:a4:04:f3:17:
63:05:65:50:4a:05:09:c2:86:d4:8b:6f:fb:1e:02:
98:8e:2d:0a:bf:23:60:ca:c4:66:4d:1a:f4:11:e4:
52:84:b4:07:68:c8:82:fa:af:12:3d:94:2d:49:d8:
95:91:19:4a:8a:e9:57:c9:6d:ac:20:69:f6:ad:bb:
e8:09:d3:b5:41:89:c1:7b:7c:4f:55:1f:00:b4:8e:
45:5e:5a:57:bd:af:a7:29:c6:b4:eb:46:90:d3:e4:
c4:93:43:1c:8b:e5:e7:a6:e5:11:47:c7:e2:2d:7a:
22:8f:a5:a8:c7:48:14:d3:4c:a1:84:1b:14:6a:79:
fd:3d:d0:96:98:30:f0:bd:0d:ad:6c:e4:0f:bf:38:
27:96:39:73:bd:cd:0a:2f:01:4a:92:37:a8:30:b2:
2b:e6:e4:41:c2:8e:58:ef:04:b8:7d:fe:5f:ba:be:
26:06:88:18:82:93:12:a0:ea:3f:89:6e:33:d5:4d:
93:c1:a8:99:f7:c4:6d:ed:4a:95:ef:c0:f3:60:2b:
e7:44:05:eb:2c:08:ec:76:7f:67:79:90:39:8e:2d:
63:d7:7b:ac:89:d9:65:c0:06:14:b4:db:71:ab:7a:
1a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:7C:B2:C2:EE:08:63:A3:F3:85:BC:2A:E6:82:AA:79:C4:48:09:70
X509v3 Authority Key Identifier:
keyid:5E:67:66:0A:F7:52:3C:61:B7:F9:5D:08:48:8D:58:3E:9D:51:4F:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:bd:ba:ea:58:7f:b8:3a:ac:c7:8c:99:a8:b5:d3:28:8f:c3:
6a:fe:f8:0b:68:69:a8:62:07:12:86:d0:4d:6e:37:30:bf:b2:
6d:32:a7:a6:5d:e8:db:a1:6a:d6:f1:e1:df:34:69:5c:2b:62:
bf:ac:77:ec:b2:eb:03:22:46:3c:cc:49:64:e5:0b:d5:dc:f4:
f2:1d:5e:50:82:b8:aa:55:fb:8d:7a:71:5f:1e:f4:a6:aa:73:
87:5c:15:6d:88:f5:78:72:3a:7a:93:92:6a:f3:54:d9:0f:15:
be:b0:78:5c:d0:06:51:16:ec:99:3a:e5:b4:07:47:2a:78:8d:
d8:60:d5:7e:6f:e9:93:a1:8b:57:84:19:00:6a:c3:ab:45:2a:
e3:d7:e2:78:24:d5:89:d9:f5:30:07:13:91:26:18:d4:53:3a:
6f:79:c3:cd:83:85:e5:0e:94:c6:8d:e5:31:d3:dc:ff:cc:84:
1d:44:b7:13:59:14:7e:9b:a9:03:c3:24:46:15:d3:4b:d0:6f:
34:bf:81:4e:38:02:93:6f:9e:f6:09:4e:cd:a2:2f:ae:3d:f6:
61:ee:63:1b:91:b5:89:54:b8:1f:14:22:fb:59:cc:47:17:1c:
37:62:23:25:4a:21:fb:af:4c:25:65:3c:c4:ef:52:14:20:d8:
cb:1e:50:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:11:23 2026 by rpki-client