Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.mft
File: XE_B5N78Rxyf23_a25iVVj2vmZw.mft (raw, json)
Hash identifier: ze+VGwh116hEClbe9lKF5n2suBN36pIlgrFSVXdNKRQ=
Subject key identifier: 1B:84:33:62:AE:0F:C4:0D:30:06:64:09:D7:E1:BF:C5:1E:22:10:1C
Authority key identifier: 5C:4F:C1:E4:DE:FC:47:1C:9F:DB:7F:DA:DB:98:95:56:3D:AF:99:9C
Certificate issuer: /CN=5c4fc1e4defc471c9fdb7fdadb9895563daf999c
Certificate serial: 019CAAC64E5DE89541BC8F7C9757C4F2C7E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XE_B5N78Rxyf23_a25iVVj2vmZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.mft
Manifest number: 1465
Signing time: Sun 01 Mar 2026 19:00:48 +0000
Manifest this update: Sun 01 Mar 2026 19:00:48 +0000
Manifest next update: Mon 02 Mar 2026 19:00:48 +0000
Files and hashes: 1: XE_B5N78Rxyf23_a25iVVj2vmZw.crl (hash: c1DawL+577P81smNKZKvchWxgwYzWrYuhUkY1unyUgU=)
2: z3YhbfGJKz0n1N9-q-WqwEE57pE.roa (hash: HPGr92xFtSHh/56bmu7RXnry6DCCpjl7s7L94VoQwsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XE_B5N78Rxyf23_a25iVVj2vmZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:4e:5d:e8:95:41:bc:8f:7c:97:57:c4:f2:c7:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c4fc1e4defc471c9fdb7fdadb9895563daf999c
Validity
Not Before: Mar 1 19:00:48 2026 GMT
Not After : Mar 2 19:00:48 2026 GMT
Subject: CN=1b843362ae0fc40d30066409d7e1bfc51e22101c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:97:36:8e:42:5c:b3:93:8c:a8:32:c6:6b:d2:
91:99:ff:7d:e1:b2:b8:14:67:bf:ac:92:3d:f2:8a:
49:60:ca:d7:9e:0b:52:42:6b:7c:df:92:16:97:f5:
43:6b:a0:06:d9:19:8f:44:49:9a:10:67:5f:47:b7:
53:e9:d5:e6:e1:c1:35:63:fe:b1:40:ca:39:19:96:
bc:a2:76:b8:ec:21:82:44:1f:19:69:df:54:2d:f2:
ed:37:18:72:f2:8c:de:18:6f:74:ed:f3:f7:8b:30:
73:6a:32:61:ba:dc:d5:a9:92:12:7a:46:da:64:b5:
0b:0e:45:8f:c7:54:ea:1c:66:35:5c:d8:2f:6d:2c:
a1:e3:0d:d8:d5:e4:6d:41:a5:9a:c4:95:cd:87:e3:
3b:9e:d1:ff:91:c7:cf:95:a2:29:cb:9f:71:a0:15:
3a:f6:20:3e:a9:4b:21:e5:97:fe:a5:12:b6:c0:6b:
3a:8f:a8:91:fe:e7:45:ce:1a:bf:6e:fb:18:33:41:
0e:cc:22:7a:57:0f:12:7f:98:77:30:96:6a:18:38:
5a:3a:ea:35:0f:fb:58:d2:7e:86:0f:b7:76:2a:92:
6c:e6:87:3c:b2:99:5a:27:69:cc:db:0e:b5:a6:96:
77:0d:62:22:a9:94:e5:56:75:1f:5f:2d:cb:f4:22:
a1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:84:33:62:AE:0F:C4:0D:30:06:64:09:D7:E1:BF:C5:1E:22:10:1C
X509v3 Authority Key Identifier:
keyid:5C:4F:C1:E4:DE:FC:47:1C:9F:DB:7F:DA:DB:98:95:56:3D:AF:99:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XE_B5N78Rxyf23_a25iVVj2vmZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:76:d5:cc:d4:66:80:60:6f:63:8a:81:26:c4:37:ca:9f:22:
ca:dd:48:92:9c:af:48:33:5a:5f:b4:b5:9e:70:6e:84:ef:0a:
a7:09:55:b5:7a:61:c7:c2:a7:9f:07:a2:4d:0e:76:15:1c:5f:
59:45:fa:9f:0c:71:3e:4c:32:83:c8:ad:4a:f4:6f:7b:56:82:
0f:f1:a6:d6:fe:62:d6:13:d1:2e:1c:a7:61:3f:74:04:8c:d2:
19:aa:88:7e:77:4a:af:af:f8:87:8a:45:e3:3f:99:55:bb:5d:
58:4c:41:a3:dc:a1:3b:bf:af:e3:ae:1b:0c:68:6c:58:79:ec:
9c:63:a4:d5:a3:b7:98:a3:7b:5f:db:4e:19:ea:90:95:07:31:
b2:74:15:4c:55:64:16:bd:64:d5:0d:7e:c9:c3:9b:39:94:f2:
c1:70:d5:32:41:ea:1a:42:49:38:f3:f9:06:99:ac:68:23:9c:
04:ea:22:57:02:b8:0f:01:e3:55:94:2b:e9:f0:59:72:5b:f4:
bd:74:c7:ee:ec:0b:d0:2c:ae:df:e2:0a:9f:8e:b5:8a:3c:ca:
57:3d:55:9d:87:a0:5e:bf:33:56:0b:1c:35:5d:1e:d4:cf:cf:
8b:f1:22:5f:ed:27:01:9f:53:d8:39:22:7a:14:14:f2:8a:fe:
5d:54:55:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:16:07 2026 by rpki-client