Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft
File: XL6eQwJOzGksM1OYuy2WcRaqwtk.mft (raw, json)
Hash identifier: YiFxioRSdQ+6w3gS37FtPF4yw0WZgOedkLKh4BXjXpE=
Subject key identifier: D4:8D:DD:52:B9:CB:D2:80:0A:E9:61:75:ED:ED:93:65:1D:30:ED:52
Authority key identifier: 5C:BE:9E:43:02:4E:CC:69:2C:33:53:98:BB:2D:96:71:16:AA:C2:D9
Certificate issuer: /CN=5cbe9e43024ecc692c335398bb2d967116aac2d9
Certificate serial: 019CAA581F849C9A567C96B2280074B1E34A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XL6eQwJOzGksM1OYuy2WcRaqwtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft
Manifest number: 0DF8
Signing time: Sun 01 Mar 2026 17:00:27 +0000
Manifest this update: Sun 01 Mar 2026 17:00:27 +0000
Manifest next update: Mon 02 Mar 2026 17:00:27 +0000
Files and hashes: 1: XL6eQwJOzGksM1OYuy2WcRaqwtk.crl (hash: 2IDA+UtJVE221/yNAMysmRnoL/mLZm49wVBpUpbBnYM=)
2: cdVP4VMQTXg2CT86yVWAypk62nQ.roa (hash: LC40P/qPiuezV8f6FpcmDk2skf+yITxCG3dFo+ERAAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XL6eQwJOzGksM1OYuy2WcRaqwtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:1f:84:9c:9a:56:7c:96:b2:28:00:74:b1:e3:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cbe9e43024ecc692c335398bb2d967116aac2d9
Validity
Not Before: Mar 1 17:00:27 2026 GMT
Not After : Mar 2 17:00:27 2026 GMT
Subject: CN=d48ddd52b9cbd2800ae96175eded93651d30ed52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:15:38:0d:85:89:98:85:4c:db:21:be:f9:8a:
63:82:6a:c5:07:28:d8:5c:22:6a:9e:94:82:1d:4a:
42:cd:3f:2f:bc:fb:05:70:46:4f:64:df:90:bb:1a:
31:03:c4:9b:a2:59:6d:b7:03:4d:67:25:7c:af:e1:
a9:a5:27:ea:07:56:26:2b:d5:7e:a8:9c:b2:04:32:
da:7f:81:27:88:4f:b1:2f:f8:bc:82:b8:e8:20:f5:
f5:21:00:a1:5b:1f:c6:21:c8:d0:8a:e1:82:1a:0f:
f4:aa:cd:18:75:c8:2e:6a:f3:6c:db:d9:71:7c:57:
5c:2d:43:55:5d:3a:93:a6:bd:6e:bc:0b:db:4f:7f:
96:43:73:c5:4e:d9:03:cf:89:1f:aa:0e:a1:ea:22:
4b:10:c7:b1:1b:37:ab:27:9a:8f:7c:2e:87:d9:40:
35:11:df:5c:8b:b1:eb:c5:08:30:48:96:83:68:0c:
ac:c5:db:05:de:76:61:37:ec:49:96:fa:3a:b1:09:
da:96:0f:0d:00:96:47:8a:ce:33:36:9e:75:44:25:
e3:79:12:d6:81:47:cb:22:d0:03:1b:5c:f9:88:1d:
8e:f6:14:92:39:76:47:b5:86:90:99:d3:35:71:34:
f3:77:aa:59:f3:d1:51:12:cf:4b:f3:52:cc:b0:2c:
50:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:8D:DD:52:B9:CB:D2:80:0A:E9:61:75:ED:ED:93:65:1D:30:ED:52
X509v3 Authority Key Identifier:
keyid:5C:BE:9E:43:02:4E:CC:69:2C:33:53:98:BB:2D:96:71:16:AA:C2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XL6eQwJOzGksM1OYuy2WcRaqwtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:c5:0d:4e:30:8c:ba:31:09:0a:9a:f3:ce:39:29:0e:e8:e2:
58:6f:4c:ee:fa:69:91:03:ce:55:bc:0b:31:03:58:62:8f:85:
70:b8:07:c0:9a:93:32:37:f3:2e:05:22:eb:93:60:bf:14:f7:
4f:82:72:ef:40:9c:8d:0b:bb:cb:9f:f5:6e:58:fd:5b:88:44:
29:b3:1a:49:35:62:7c:05:26:6f:ec:c0:2e:f3:26:52:f1:44:
db:b7:3b:48:74:ea:25:c0:72:f6:a4:6a:50:ae:d9:e8:5b:5d:
b3:99:6f:71:20:be:46:9d:99:66:3f:33:24:b5:00:70:4c:e2:
19:e4:09:45:e0:e4:68:83:4e:64:48:47:41:1f:ad:ff:b6:cd:
f1:d7:88:9d:1b:4a:35:45:98:47:fd:1d:ee:4e:ee:43:d7:b5:
41:a9:8c:29:0b:b0:1a:8c:a1:a9:9c:70:2d:a5:f2:76:66:e5:
81:89:11:0b:f5:2b:17:59:b0:c8:c4:b5:c4:d3:f1:f7:79:4e:
e2:26:7d:5e:f5:de:25:0d:7b:8c:14:a3:6f:77:80:0b:d5:7f:
83:03:45:0a:9c:6b:ef:f4:c6:6d:79:c9:47:42:9b:9e:a1:13:
2b:3f:5d:49:9d:23:76:f5:ba:25:c3:c8:a8:d6:29:bf:29:b7:
e4:d8:0e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:25:44 2026 by rpki-client