Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft
File: XEwop1rJaVHcOEAKgPnvOqryqss.mft (raw, json)
Hash identifier: OPegUIhHSEDULmU5Q5wriDg+oGl21EGsLAPKqT0TXJI=
Subject key identifier: 86:75:66:39:35:D0:5F:D6:03:55:03:0D:99:14:17:D0:4D:27:1B:7C
Authority key identifier: 5C:4C:28:A7:5A:C9:69:51:DC:38:40:0A:80:F9:EF:3A:AA:F2:AA:CB
Certificate issuer: /CN=5c4c28a75ac96951dc38400a80f9ef3aaaf2aacb
Certificate serial: 019CAE3555B121A441436EDCC0DA37B094CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEwop1rJaVHcOEAKgPnvOqryqss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 11:00:56 +0000
Manifest this update: Mon 02 Mar 2026 11:00:56 +0000
Manifest next update: Tue 03 Mar 2026 11:00:56 +0000
Files and hashes: 1: 9hnY7Mi-DWWNXT8zxPWlDMpFkVY.roa (hash: KmgeWMyp8Cb4dRrZsFfQDYyQitlhpxsyGtinqL7w4YI=)
2: XEwop1rJaVHcOEAKgPnvOqryqss.crl (hash: ec8KelaldXya3d9TJ3hfONw/vjMGeNjVfZ5Pq2JcgUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEwop1rJaVHcOEAKgPnvOqryqss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:55:b1:21:a4:41:43:6e:dc:c0:da:37:b0:94:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c4c28a75ac96951dc38400a80f9ef3aaaf2aacb
Validity
Not Before: Mar 2 11:00:56 2026 GMT
Not After : Mar 3 11:00:56 2026 GMT
Subject: CN=8675663935d05fd60355030d991417d04d271b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e5:72:f6:b2:2a:2d:77:6a:8c:ef:93:c1:e7:
a4:d6:42:0e:d9:4e:2f:ce:70:f9:d6:12:9e:6e:d0:
c3:94:0f:52:28:b6:eb:26:dc:88:9a:e8:7f:01:a3:
52:61:d7:4d:ac:4a:c5:42:7e:5a:59:9a:02:5d:d2:
c3:66:ee:e1:84:07:c7:7d:0a:4d:02:c2:42:cc:78:
fe:aa:ca:88:99:28:31:15:d5:9e:96:5d:15:a4:cf:
6e:52:ec:60:92:18:a9:fc:e4:d0:ad:db:a4:db:a8:
b9:5f:1f:d7:9a:53:c3:bf:13:08:cc:e0:ee:31:6f:
c5:81:17:e1:3a:05:dd:0a:e1:52:40:ea:0b:6d:fa:
23:54:1e:c8:6b:37:1d:bd:ca:46:22:13:9e:05:a2:
b9:f4:cb:16:32:14:7e:f2:0e:38:9e:7f:49:ef:58:
fe:dc:a7:ab:7a:05:ea:66:91:cd:37:ea:8a:9b:64:
5b:14:12:58:e2:d7:01:6a:28:85:7f:4e:01:ef:2c:
88:3d:ae:7d:a6:9b:ed:31:35:65:6f:69:7b:c0:1e:
3c:86:27:d6:37:44:1d:9a:08:b1:eb:82:6d:87:d8:
dd:ab:0d:4b:74:95:22:55:ec:54:58:3e:9c:36:92:
eb:b3:fa:67:60:15:6a:5c:c7:ca:99:2e:de:9e:93:
24:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:75:66:39:35:D0:5F:D6:03:55:03:0D:99:14:17:D0:4D:27:1B:7C
X509v3 Authority Key Identifier:
keyid:5C:4C:28:A7:5A:C9:69:51:DC:38:40:0A:80:F9:EF:3A:AA:F2:AA:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEwop1rJaVHcOEAKgPnvOqryqss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:69:23:10:a8:8a:d0:24:e0:b7:33:98:79:2c:23:85:c9:e6:
91:0b:20:e5:54:8a:d5:37:a4:f6:c6:ce:7f:d9:bd:93:4f:45:
3d:80:57:52:52:31:94:3e:ba:ee:b2:5a:3b:1f:d5:95:7f:49:
57:a1:4c:6e:3c:a3:1d:50:2a:fa:0b:e5:c1:57:6f:86:85:6f:
2b:ab:bc:12:bc:2b:42:e5:e3:e9:ec:d6:e6:02:14:c1:a1:7c:
e9:67:65:ec:e1:d2:88:28:df:c8:cd:a7:5d:cf:91:7d:ed:d1:
a4:9b:16:71:56:30:a4:e7:5c:e4:74:fd:0d:15:e7:c0:7d:04:
62:21:c6:9c:56:11:b5:0e:48:df:38:59:13:99:06:ed:9b:3f:
43:cf:d8:a6:ba:78:79:f5:3e:2d:16:66:2e:8c:2b:2f:1e:92:
93:02:80:18:66:5c:5b:a7:5a:c7:40:dd:e0:80:93:cf:96:ae:
f2:56:41:f8:5d:a0:26:2e:10:c2:84:07:06:a6:4b:12:c6:f7:
2e:52:eb:69:a1:c6:8d:b0:2d:8d:3a:ee:f7:9c:f9:1f:df:1c:
69:17:ce:a5:d3:b3:ae:2f:9b:9a:d8:72:02:94:ea:c5:88:d9:
e3:4f:18:60:4c:bf:7a:54:99:93:09:06:61:a1:aa:9e:79:82:
bc:04:9f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:28:34 2026 by rpki-client