Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
File: XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft (raw, json)
Hash identifier: Fdw+8A+TKqYpqE6q5yn0vZGc6sZOrn5VLfc/9FACC2Y=
Subject key identifier: 02:DA:EF:FE:D5:5F:44:89:0D:E7:48:39:78:B1:AE:92:10:C8:12:5E
Authority key identifier: 5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03
Certificate issuer: /CN=5c61dcd3eb50c83d68060bcba4af152204193503
Certificate serial: 019CAA590982ED807D63D167BD067AF211A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
Manifest number: 1003
Signing time: Sun 01 Mar 2026 17:01:27 +0000
Manifest this update: Sun 01 Mar 2026 17:01:27 +0000
Manifest next update: Mon 02 Mar 2026 17:01:27 +0000
Files and hashes: 1: 2LxanPXEt-Ah2tA9EYIfUY7a7ZY.roa (hash: Uywc9u8hm/WxjQy7SxAxxYIxsP7UM6R3hTnst6UR3yE=)
2: XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl (hash: 0/wAZg+SjauLR2XCxhn5f+T1/28YwbGPkfAdN3eIBdU=)
3: XN_BGWEzxZjhg6iXlmQqSDhpeZU.roa (hash: nt1Dqzzch0xHlTVsHiqUIJZJJ7P5OL+fpAG1RALu8GE=)
4: cDTj5s606sVgmgpZ3n6Z3dU4zwA.roa (hash: Tz/Xa89Xe7rgKjUL5hIFqnaSfDilwgGaKsizO4oAEvI=)
5: pwg2Pcu7xQM-Nr6mzrIBgEt_XFI.roa (hash: lF7Ckm/bTHOWi8Xtom4+V7QF19TxeutNBXq6gqp0Yv8=)
6: te3FBz79GYifGb3qq-rDfAn5q7I.roa (hash: 8JJ8Rj+5NIqp3neVi3adeudGuIpzTz7arVf+MmH6wks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:09:82:ed:80:7d:63:d1:67:bd:06:7a:f2:11:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c61dcd3eb50c83d68060bcba4af152204193503
Validity
Not Before: Mar 1 17:01:27 2026 GMT
Not After : Mar 2 17:01:27 2026 GMT
Subject: CN=02daeffed55f44890de7483978b1ae9210c8125e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:80:ab:1f:92:f7:9d:ba:f3:55:29:4d:ea:33:
cd:00:b9:e1:d1:12:f3:85:12:28:f7:66:03:4d:14:
d0:8f:47:04:1f:a2:0d:92:13:28:2c:cd:a8:55:fb:
e6:de:bb:8e:be:31:87:24:aa:e3:9d:6f:30:7b:72:
07:bb:d9:fc:ce:26:5e:f7:c3:9b:6c:87:25:3a:c0:
0c:e8:44:94:42:23:24:29:ef:86:a4:ae:42:99:a1:
b1:6b:ee:06:02:03:50:71:83:18:a7:9e:49:1a:f3:
3d:a2:4b:d5:70:ec:1d:04:81:22:20:51:94:23:c3:
30:c7:48:6a:90:cf:a2:75:37:d1:76:fd:ef:a6:06:
25:c9:39:13:70:ca:85:16:b4:dd:d1:6f:85:0d:8e:
69:c0:f5:02:15:29:37:6e:c8:e8:86:2c:cb:35:79:
cd:74:95:d8:1d:eb:28:d4:76:b7:a9:27:2d:a9:e1:
a0:f4:96:19:c7:02:d6:c9:e4:ff:a7:b4:36:41:c1:
92:a5:49:1d:03:ec:d4:0c:f6:a0:79:69:5c:03:ae:
d0:e9:b2:14:66:28:69:55:94:64:52:76:a6:1c:c9:
fd:55:dc:01:de:aa:9d:c2:3b:1e:79:72:79:f5:ce:
a9:82:b2:92:6d:96:f6:23:38:07:a1:af:4b:18:1b:
66:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:DA:EF:FE:D5:5F:44:89:0D:E7:48:39:78:B1:AE:92:10:C8:12:5E
X509v3 Authority Key Identifier:
keyid:5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:59:44:14:1b:9d:b7:0c:84:e0:0b:5f:d7:81:cb:41:e4:e5:
c7:d9:0d:fb:bf:e4:78:cf:13:c6:80:e4:a1:46:29:6e:1d:1b:
59:e4:46:9b:44:84:9d:8d:61:07:1a:c0:31:e3:c9:88:74:fb:
dc:6e:bd:c5:e1:53:d9:90:ae:34:1e:89:10:3d:ed:d0:8d:b7:
d1:5e:f2:eb:7c:fa:bd:4a:88:04:d6:66:49:f7:67:f4:60:7a:
1f:36:70:fe:5e:80:b1:87:5b:f8:c5:69:fc:0f:12:56:f8:0d:
97:ab:75:a7:a9:57:10:3a:ad:68:41:ba:74:5c:e6:dc:dd:17:
b3:a8:2d:e9:a2:73:a3:c8:d0:7b:24:3b:77:ce:eb:d7:f4:f5:
93:8f:9c:16:65:32:8f:66:dd:ed:f8:1d:8e:84:87:b1:22:70:
67:f2:4c:83:8a:04:ea:14:db:70:eb:22:b8:07:a9:93:46:10:
ec:49:93:c5:b2:a8:71:19:66:c7:d6:80:89:85:20:00:68:ba:
90:96:dd:30:35:89:56:0c:15:e0:4c:dc:24:54:dd:eb:56:b2:
93:c0:ee:37:a4:86:73:c9:2b:f5:bc:32:70:22:c2:67:ce:95:
9a:00:fa:68:6c:a9:11:1e:41:09:fa:1c:7b:f8:80:a2:78:83:
68:52:da:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:30:23 2026 by rpki-client