Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft
File: XX9jQBQHwcx5excDToE9IlT5dz4.mft (raw, json)
Hash identifier: a7nEwOdAEfnwO9v+CxrB/v4iGTRPUkCR/nyO8elNtz4=
Subject key identifier: AD:D7:59:A6:D3:37:F5:00:44:4E:D2:19:FB:D0:B8:FF:BD:D7:47:AD
Authority key identifier: 5D:7F:63:40:14:07:C1:CC:79:7B:17:03:4E:81:3D:22:54:F9:77:3E
Certificate issuer: /CN=5d7f63401407c1cc797b17034e813d2254f9773e
Certificate serial: 019CAC7DFB86284CBAA0C5C5C427B69A6546
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XX9jQBQHwcx5excDToE9IlT5dz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft
Manifest number: 0EDE
Signing time: Mon 02 Mar 2026 03:01:03 +0000
Manifest this update: Mon 02 Mar 2026 03:01:03 +0000
Manifest next update: Tue 03 Mar 2026 03:01:03 +0000
Files and hashes: 1: IJctrhezjfWjiA84ZaayWYeZh1k.roa (hash: VetyKsjNSyH6fNCp1k97xHgv6Vja8yJIQbMcO2qIjkU=)
2: XX9jQBQHwcx5excDToE9IlT5dz4.crl (hash: l7VpT5TFj0Onk9mfukYEAOsPH9YCH22n+Y+vo8Mm8Ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XX9jQBQHwcx5excDToE9IlT5dz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:fb:86:28:4c:ba:a0:c5:c5:c4:27:b6:9a:65:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d7f63401407c1cc797b17034e813d2254f9773e
Validity
Not Before: Mar 2 03:01:03 2026 GMT
Not After : Mar 3 03:01:03 2026 GMT
Subject: CN=add759a6d337f500444ed219fbd0b8ffbdd747ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:43:26:b2:d6:5a:ba:64:1b:5f:da:12:30:a8:
5f:25:d3:dd:e3:25:de:37:d1:70:89:df:7c:89:00:
51:94:a6:fb:0b:e9:00:5a:50:88:da:d5:14:31:ca:
57:6c:36:e4:7c:30:2b:56:92:dd:51:fa:85:c2:07:
6d:c2:ff:04:72:cc:61:ad:82:53:fd:89:65:a7:d9:
bf:1c:00:d2:ba:13:b3:18:a6:77:1b:2b:a0:7a:e0:
1f:5c:bc:fa:4e:3a:77:df:d1:cd:bf:fe:f7:95:c8:
20:24:13:c0:4f:c0:7e:13:f0:f4:d6:01:c6:fa:df:
82:fe:c8:7d:f4:d0:82:ed:3e:4d:6c:1b:0d:fc:62:
66:84:a2:f6:58:70:aa:84:e3:d1:b9:d1:b8:24:a4:
3f:8d:9b:fd:ba:44:a3:1b:d2:0b:38:9f:87:15:4e:
1f:26:29:66:3b:7c:41:c3:54:e1:49:de:a4:0d:e9:
cc:e3:af:f6:d1:22:79:9f:55:db:6a:21:86:f3:0f:
c9:9c:e4:fe:15:3a:21:f1:1e:2f:74:da:da:93:83:
cc:c2:09:30:52:3c:37:b9:e4:49:eb:73:02:d9:88:
2d:84:af:73:07:e8:c1:8b:46:da:20:e8:8e:6b:56:
0a:d1:96:31:db:c5:0b:19:2b:d4:04:2b:06:83:03:
e2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D7:59:A6:D3:37:F5:00:44:4E:D2:19:FB:D0:B8:FF:BD:D7:47:AD
X509v3 Authority Key Identifier:
keyid:5D:7F:63:40:14:07:C1:CC:79:7B:17:03:4E:81:3D:22:54:F9:77:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XX9jQBQHwcx5excDToE9IlT5dz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:16:fb:cb:8d:aa:18:ac:57:5a:9b:83:e7:16:f7:86:e2:26:
51:5d:35:06:7e:08:dc:f0:fa:7c:cb:fb:dc:07:75:63:e2:c0:
5f:f0:46:f2:67:25:0f:12:74:9b:0b:ff:18:12:3a:24:e8:2b:
65:59:3b:49:1e:46:e7:c6:de:e0:ae:27:81:60:a1:ba:50:d8:
82:88:51:06:30:43:9f:e4:e8:90:aa:bf:f0:23:12:bf:23:d3:
74:cc:3e:82:05:04:3d:bd:d1:ed:ef:99:7c:5f:fe:e3:d6:dc:
95:c4:bd:a3:99:62:0f:6b:15:23:7f:ca:c7:08:d6:05:98:4a:
d7:b5:f1:04:d7:d9:47:51:cc:06:e4:03:ea:0a:54:0e:5b:62:
68:6b:ee:37:0b:d5:0c:4c:96:d0:1c:4d:f9:0c:bf:34:f0:5c:
1c:d0:8f:96:12:8d:53:7a:77:1b:5c:18:38:cd:06:de:45:07:
87:2b:2a:47:0a:bc:5f:ae:95:0b:3b:82:48:9c:d7:82:f6:5f:
ca:ec:3e:9e:f8:9d:42:f6:f0:75:d4:fd:64:8c:f0:6c:fb:eb:
85:f8:f1:b6:ac:aa:45:79:74:17:5e:af:47:32:17:2f:93:10:
61:d3:78:03:9e:31:bf:77:db:f0:63:4a:b6:9e:65:53:14:92:
6a:62:3f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:50:31 2026 by rpki-client