Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0c2320-ba95-4531-8c81-22295df12b27/1/XeYTaCVSAQKY86aUoA18WQYGC5U.mft
File: XeYTaCVSAQKY86aUoA18WQYGC5U.mft (raw, json)
Hash identifier: pAfi5lenOeDtVk2iGZWCVKVYaDqGqaCbiPlGkRdE/LA=
Subject key identifier: 1E:6A:A7:4A:74:B3:7B:BF:BF:22:3E:6B:B5:52:4A:39:93:2C:0E:6D
Authority key identifier: 5D:E6:13:68:25:52:01:02:98:F3:A6:94:A0:0D:7C:59:06:06:0B:95
Certificate issuer: /CN=5de613682552010298f3a694a00d7c5906060b95
Certificate serial: 019CAD22BC22300CC8B39211AF946B6D7E41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XeYTaCVSAQKY86aUoA18WQYGC5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0c2320-ba95-4531-8c81-22295df12b27/1/XeYTaCVSAQKY86aUoA18WQYGC5U.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 06:01:00 +0000
Manifest this update: Mon 02 Mar 2026 06:01:00 +0000
Manifest next update: Tue 03 Mar 2026 06:01:00 +0000
Files and hashes: 1: 8E85CKuNqBtAq_mQnEGUCCO3R10.roa (hash: CgmtiE0mp6q+6KobblRjrSYw7pd0zVbtE+o0y7MhUQQ=)
2: XeYTaCVSAQKY86aUoA18WQYGC5U.crl (hash: MzV8c5wZC+FHc9pCL85b77yf15gMq7BNxXE09+m1lDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0c2320-ba95-4531-8c81-22295df12b27/1/XeYTaCVSAQKY86aUoA18WQYGC5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0c2320-ba95-4531-8c81-22295df12b27/1/XeYTaCVSAQKY86aUoA18WQYGC5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/XeYTaCVSAQKY86aUoA18WQYGC5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:bc:22:30:0c:c8:b3:92:11:af:94:6b:6d:7e:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5de613682552010298f3a694a00d7c5906060b95
Validity
Not Before: Mar 2 06:01:00 2026 GMT
Not After : Mar 3 06:01:00 2026 GMT
Subject: CN=1e6aa74a74b37bbfbf223e6bb5524a39932c0e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:88:5b:e0:bd:c8:27:6e:37:95:54:ac:f6:98:
11:4c:ab:01:60:75:4b:92:c0:a6:98:7f:21:54:b7:
b6:94:db:a7:0c:15:30:77:af:8f:82:a5:bc:d4:1e:
08:35:c4:46:63:dc:31:00:12:59:1c:72:10:09:cc:
6b:50:80:01:00:ee:af:7f:31:a4:bf:0c:d4:f7:09:
32:0b:11:6a:da:ff:db:74:02:b6:84:5c:88:7f:c4:
eb:f2:ab:92:62:22:d3:40:82:af:0d:ab:e6:e9:b7:
09:81:15:ea:9d:be:87:bf:82:23:a8:2a:75:dc:db:
2e:35:f7:f6:5d:6e:bd:f3:19:1b:f9:c0:26:ad:7c:
71:28:f3:42:a3:62:33:f2:ed:92:4e:88:65:8e:44:
1d:07:8c:d4:4a:56:0c:14:89:86:b3:ec:6a:be:fc:
61:63:cd:2e:df:96:2d:d2:a9:de:2e:84:54:9a:84:
a8:f1:5c:cd:90:9f:cd:d9:1a:91:28:4b:32:dc:81:
49:93:6c:2f:07:c4:0c:fb:f4:de:10:f8:15:49:e8:
c8:ad:a9:ac:2f:9e:6c:7a:88:c0:b7:07:16:fc:c8:
a5:8f:31:40:58:e2:5f:d5:d8:76:18:46:26:0c:51:
a0:e8:0b:e7:7d:b4:48:96:97:ee:aa:f4:61:05:bd:
85:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:6A:A7:4A:74:B3:7B:BF:BF:22:3E:6B:B5:52:4A:39:93:2C:0E:6D
X509v3 Authority Key Identifier:
keyid:5D:E6:13:68:25:52:01:02:98:F3:A6:94:A0:0D:7C:59:06:06:0B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XeYTaCVSAQKY86aUoA18WQYGC5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c2320-ba95-4531-8c81-22295df12b27/1/XeYTaCVSAQKY86aUoA18WQYGC5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c2320-ba95-4531-8c81-22295df12b27/1/XeYTaCVSAQKY86aUoA18WQYGC5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:b5:34:7f:30:93:26:27:26:89:2f:15:b1:b8:a0:b6:6f:e9:
ec:fd:e5:3d:aa:07:92:33:fa:57:19:67:d7:e0:1d:e5:5c:d4:
68:b2:6c:e5:77:88:a1:c7:63:13:c1:7f:aa:1c:9d:29:81:3d:
0f:dc:a8:f7:79:75:55:d8:16:8a:7f:9a:ad:8f:14:64:5c:6f:
4b:54:4a:c3:64:fb:f9:f5:64:f9:48:02:4d:d7:97:9b:dc:e0:
34:36:6e:00:27:cd:bd:7a:d5:27:57:b9:ce:23:6e:f8:3f:2a:
72:d5:50:80:03:8d:b8:57:8d:9f:eb:34:72:bb:2c:9f:43:ab:
9d:23:f4:e0:f9:1c:a0:8b:d7:d6:43:49:62:1a:fa:3f:82:46:
4c:94:5e:a5:a5:63:76:0d:65:a2:92:5d:2d:df:3f:97:50:a6:
d6:73:60:62:31:f8:16:f5:06:82:d5:c2:1f:42:c5:df:3d:b5:
46:f2:82:ba:4f:42:eb:b2:f6:84:e7:e1:b7:37:5e:02:5f:54:
f1:3b:0b:c0:ae:04:a7:36:e6:08:c5:d3:6e:23:dc:e1:c2:27:
b0:a2:67:87:37:90:45:21:e5:72:49:d6:38:38:f3:0f:03:3b:
0e:69:6c:c4:3d:22:5a:2d:71:34:d0:4d:39:a4:64:bc:06:48:
a4:32:54:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:06:59 2026 by rpki-client