Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.mft
File: XcZ8a-Nnq56UHRQn0FBElEe4hlw.mft (raw, json)
Hash identifier: IOE1asr7ut1zvH2p4ql3e9SuQ3VuzdIINxe2cXugC+Y=
Subject key identifier: 6B:25:33:45:F5:24:8F:00:EE:A5:A4:A4:31:DC:83:0C:D0:7C:C1:DA
Authority key identifier: 5D:C6:7C:6B:E3:67:AB:9E:94:1D:14:27:D0:50:44:94:47:B8:86:5C
Certificate issuer: /CN=5dc67c6be367ab9e941d1427d050449447b8865c
Certificate serial: 019CAD596083D56FA6809C603750B6631A4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.mft
Manifest number: 184E
Signing time: Mon 02 Mar 2026 07:00:41 +0000
Manifest this update: Mon 02 Mar 2026 07:00:41 +0000
Manifest next update: Tue 03 Mar 2026 07:00:41 +0000
Files and hashes: 1: XcZ8a-Nnq56UHRQn0FBElEe4hlw.crl (hash: agSBLh5UVzX6tLlckru2+lMbcONRBpNjmDGI65LKtwo=)
2: uSf8YpQ-0ch8yPbVC8hW_1UaI7E.roa (hash: TdBQBjgQL2vkXRlnvGccZPDz+o0AOBvhUDV7Uw/d7z0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:60:83:d5:6f:a6:80:9c:60:37:50:b6:63:1a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc67c6be367ab9e941d1427d050449447b8865c
Validity
Not Before: Mar 2 07:00:41 2026 GMT
Not After : Mar 3 07:00:41 2026 GMT
Subject: CN=6b253345f5248f00eea5a4a431dc830cd07cc1da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f2:40:39:ce:fd:f9:88:21:39:f8:54:de:e7:
c4:d8:0d:2f:e1:60:65:e8:05:ac:ec:af:e8:55:a9:
b8:f6:00:be:c6:6d:d6:f7:c2:bf:9f:f3:bb:d6:8c:
0f:43:89:74:3c:33:44:c8:63:45:6b:d7:f7:32:35:
3b:57:bb:a6:a6:34:91:0d:1c:ec:5a:f1:92:71:75:
8e:01:9d:8c:25:98:71:50:35:77:ab:df:57:16:a2:
b3:54:51:15:4a:90:f1:52:6c:b9:e7:e2:f5:be:44:
e7:8d:dd:8a:69:d3:7a:89:62:14:ee:ec:e3:dc:f4:
09:a9:b1:bf:38:73:24:32:29:cd:2d:14:9e:5e:e5:
65:5f:43:d6:c6:6c:37:98:6b:a9:ac:9e:e0:45:9e:
72:50:72:0c:7a:e0:88:c9:cb:fc:5d:b0:c7:8a:b9:
42:c4:1a:1c:03:ff:cf:d3:37:48:a6:55:6e:6b:13:
52:58:28:9e:34:7d:72:d1:39:07:15:86:2b:c8:fe:
e0:32:10:f6:78:1a:16:90:3b:6b:e7:fb:6e:71:ee:
25:94:53:01:ac:08:70:16:10:22:58:73:f5:14:38:
41:a0:71:a0:8d:d0:93:1c:46:6d:7b:d0:1e:c1:f6:
d1:63:f3:01:f3:e9:eb:c4:98:da:84:9d:99:50:34:
15:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:25:33:45:F5:24:8F:00:EE:A5:A4:A4:31:DC:83:0C:D0:7C:C1:DA
X509v3 Authority Key Identifier:
keyid:5D:C6:7C:6B:E3:67:AB:9E:94:1D:14:27:D0:50:44:94:47:B8:86:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:12:35:11:f7:de:6e:41:95:67:ae:1b:e8:ef:4d:84:d6:61:
09:7b:87:1e:08:7a:ac:44:08:35:aa:ad:99:35:16:69:58:d0:
01:17:90:43:d5:59:51:aa:13:27:17:bc:0a:62:0e:80:0a:66:
60:4f:61:06:11:c2:7a:c2:ca:cf:2e:ca:f7:06:a5:be:6d:2b:
9f:c1:dd:e2:06:7f:b3:48:2b:30:34:64:a8:d0:72:72:22:4c:
74:04:40:b9:6f:6d:c8:6a:61:c0:1a:61:54:1c:93:b1:b1:42:
b5:29:f2:53:13:15:55:c6:43:4c:d6:81:2e:9a:65:84:30:f1:
42:19:6d:bb:70:30:0b:78:ce:00:a7:99:6b:4b:33:a8:e3:e2:
0d:21:c2:85:11:79:4d:d7:cf:e4:19:df:d2:1e:aa:9b:16:f2:
73:f6:6d:ae:eb:36:69:7e:7e:25:14:f9:76:bc:01:04:8f:0c:
9a:7d:e1:82:f0:5c:65:b0:fa:10:86:ea:32:77:01:0c:7f:2c:
3f:d4:d3:de:c6:17:6e:b0:48:2f:ef:7e:5e:55:a4:40:9c:5c:
f0:ea:1d:58:c2:9a:cf:70:c7:f6:ef:91:39:29:9a:59:d4:26:
c3:18:7d:4e:18:6a:27:2c:ec:18:80:6e:83:13:e5:30:92:49:
a9:c7:3a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:15:45 2026 by rpki-client