Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.mft
File: X7qw05-2l5_k09JIOgG908k77O8.mft (raw, json)
Hash identifier: A/JX6F8lMvxRpSZCpBqloaJfvNWiQWaM6SKMl9o7+5U=
Subject key identifier: 1C:A7:93:C7:CE:57:EF:3E:99:4E:85:10:D8:4C:54:F7:A5:17:6D:C7
Authority key identifier: 5F:BA:B0:D3:9F:B6:97:9F:E4:D3:D2:48:3A:01:BD:D3:C9:3B:EC:EF
Certificate issuer: /CN=5fbab0d39fb6979fe4d3d2483a01bdd3c93becef
Certificate serial: 019CAB347099F18AF83A13D743E0925D6612
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7qw05-2l5_k09JIOgG908k77O8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.mft
Manifest number: 0D56
Signing time: Sun 01 Mar 2026 21:01:06 +0000
Manifest this update: Sun 01 Mar 2026 21:01:06 +0000
Manifest next update: Mon 02 Mar 2026 21:01:06 +0000
Files and hashes: 1: Fnr8UBCRPeUQhRVFOAHVctCKPfo.roa (hash: PgOyYUmMG9zgljOcOgtP5byxd2cN3HfKRRt85MDBTwk=)
2: X7qw05-2l5_k09JIOgG908k77O8.crl (hash: +HQFm5xlfBNlAvq7LmvEdlJAEPcO22Jv2tcXBT4g9OE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.mft
rsync://rpki.ripe.net/repository/DEFAULT/X7qw05-2l5_k09JIOgG908k77O8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:70:99:f1:8a:f8:3a:13:d7:43:e0:92:5d:66:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fbab0d39fb6979fe4d3d2483a01bdd3c93becef
Validity
Not Before: Mar 1 21:01:06 2026 GMT
Not After : Mar 2 21:01:06 2026 GMT
Subject: CN=1ca793c7ce57ef3e994e8510d84c54f7a5176dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9e:28:37:47:21:8e:85:7e:ec:f9:f8:88:87:
65:2d:10:5c:11:af:27:8b:97:61:b3:f5:70:2e:d0:
2d:c5:55:14:97:e3:de:2a:a2:23:0a:1a:81:54:d1:
27:44:18:45:61:27:81:75:fd:30:12:cc:55:d4:2b:
66:3e:32:02:27:48:b3:4a:ca:97:41:8c:5e:fe:b1:
4b:6f:3c:5d:fa:23:0a:dd:95:f7:46:1a:d4:81:b0:
a0:9d:a7:0a:66:69:ce:40:97:b7:7f:ca:d8:64:fa:
ea:97:7f:f3:6b:d8:ed:60:3a:19:19:03:8e:4f:80:
ca:c9:2f:6d:24:a7:9c:1d:b2:9e:7c:db:34:0c:43:
1d:a3:7c:d4:ba:31:a2:98:1a:c7:11:02:89:f7:32:
13:b1:b9:46:b2:a6:02:8d:a3:65:b2:d2:9c:16:b2:
3e:bb:f1:42:84:0c:48:26:63:03:e8:99:49:c5:5a:
33:aa:59:e1:2c:93:c2:b9:02:20:e3:fc:eb:b1:8f:
48:49:78:07:32:6d:63:8c:9b:7d:98:7e:a3:fb:3d:
be:de:0a:68:30:da:c5:4a:11:24:df:78:c4:7d:12:
d5:00:35:ee:9b:3b:2e:02:38:fa:28:88:c1:4f:fb:
4e:78:58:00:40:84:21:e7:87:33:cc:1b:12:2b:b5:
7f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A7:93:C7:CE:57:EF:3E:99:4E:85:10:D8:4C:54:F7:A5:17:6D:C7
X509v3 Authority Key Identifier:
keyid:5F:BA:B0:D3:9F:B6:97:9F:E4:D3:D2:48:3A:01:BD:D3:C9:3B:EC:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7qw05-2l5_k09JIOgG908k77O8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:f6:d5:40:30:87:9c:69:c4:df:30:db:f0:c9:85:11:0f:56:
2d:15:bc:87:9e:eb:51:d3:6d:66:30:80:cd:82:34:d5:28:3b:
a3:9b:59:0b:36:02:81:0b:22:80:93:8c:ad:b5:c8:26:5d:24:
9e:31:ab:9d:28:e7:65:0d:db:98:76:7d:55:c4:95:e3:63:5d:
2a:5c:4a:8e:a0:66:82:72:44:2d:25:a7:75:3c:e8:e0:e2:5e:
d6:8d:37:9f:d7:9f:de:82:3a:ac:8c:1e:24:fb:84:98:62:04:
27:ca:d9:c4:e4:b2:4f:fe:0f:16:18:84:de:a7:c4:6b:02:dc:
cf:e1:af:19:1d:30:dd:d3:9a:f5:7c:7b:9e:2a:41:e5:d2:23:
34:ec:59:05:ab:37:fd:d5:3d:ba:f4:11:f0:f4:f9:d0:eb:f8:
89:b8:db:43:7f:2b:1a:08:43:81:53:03:b4:0d:0e:c5:5a:a8:
07:56:81:e2:a3:63:a9:3d:5e:ea:9b:a8:3d:24:50:9b:11:3d:
f6:a8:39:f2:54:6e:22:bd:4e:dc:61:44:81:e9:12:e7:a8:b8:
96:b5:0f:2e:5c:4d:6f:c1:20:59:aa:ef:d0:95:90:a7:22:d5:
d0:68:e3:fb:a8:cc:df:d1:24:22:ff:b2:ef:cd:e0:89:b4:3e:
7b:0d:7e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:55:20 2026 by rpki-client