Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
File: XYJmcuaPPaXbUO2ButuNM73M0ro.mft (raw, json)
Hash identifier: qwskI0oLMesXxnes8T4kkzTqVtRbMrV8C5TdVvFj3Fg=
Subject key identifier: 47:51:98:E7:DD:3E:0F:DC:2E:EB:37:96:38:A7:D2:75:17:20:C4:EF
Authority key identifier: 5D:82:66:72:E6:8F:3D:A5:DB:50:ED:81:BA:DB:8D:33:BD:CC:D2:BA
Certificate issuer: /CN=5d826672e68f3da5db50ed81badb8d33bdccd2ba
Certificate serial: 019CABD94E26048AC9F92E9729A64069D949
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYJmcuaPPaXbUO2ButuNM73M0ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
Manifest number: 1482
Signing time: Mon 02 Mar 2026 00:01:10 +0000
Manifest this update: Mon 02 Mar 2026 00:01:10 +0000
Manifest next update: Tue 03 Mar 2026 00:01:10 +0000
Files and hashes: 1: XYJmcuaPPaXbUO2ButuNM73M0ro.crl (hash: xNty+ehPbgvdnNRtHZ/OGpfbIprKAJcDSyRmJxVCWUs=)
2: fDzIkCC4HQZF8d8gvy277WuuRYM.roa (hash: TzMFdxwnyUIL4oJ9MUVrNEjKX81ekLEZoq92hFxo3V4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYJmcuaPPaXbUO2ButuNM73M0ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:4e:26:04:8a:c9:f9:2e:97:29:a6:40:69:d9:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d826672e68f3da5db50ed81badb8d33bdccd2ba
Validity
Not Before: Mar 2 00:01:10 2026 GMT
Not After : Mar 3 00:01:10 2026 GMT
Subject: CN=475198e7dd3e0fdc2eeb379638a7d2751720c4ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b9:f5:97:eb:0e:1d:c1:18:8d:44:a3:df:0c:
1c:1a:fc:58:f8:36:2c:79:d6:67:06:3d:ad:6b:d0:
f5:e3:ee:00:be:43:d0:65:00:a2:ec:61:da:09:a2:
28:65:15:a6:44:09:27:24:d6:59:7b:5f:bd:6f:90:
70:d9:89:f2:e0:b5:0d:5a:97:6b:40:04:14:23:00:
fa:36:7b:2b:bd:8f:8e:6f:d8:53:b3:86:af:b4:3a:
44:36:37:67:de:9e:62:a4:f7:88:ef:19:0c:93:d4:
65:c3:46:42:e1:30:20:5f:64:28:23:66:d5:a3:1d:
8c:17:ee:c8:d9:aa:35:de:1e:1c:12:02:c1:b7:fe:
4d:cd:f5:78:0e:eb:37:4f:48:2f:1b:ed:0b:5c:c1:
2c:3a:30:6d:89:5e:b5:82:2f:81:80:89:1d:c1:6e:
1b:45:02:de:51:03:b4:ac:eb:c0:dc:7d:20:17:38:
6f:d3:f9:16:7a:2a:19:f2:52:e6:b2:e2:82:1a:3b:
43:eb:60:ee:b7:25:de:64:2d:f9:0f:71:cf:44:44:
df:bb:e8:6f:37:49:d0:c4:69:b1:75:a3:d5:f8:c5:
3d:54:f4:d4:8b:41:95:1c:51:56:ee:a5:43:5c:eb:
d4:a6:03:20:c1:c9:c7:b8:6f:da:97:a3:4e:95:fa:
ce:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:51:98:E7:DD:3E:0F:DC:2E:EB:37:96:38:A7:D2:75:17:20:C4:EF
X509v3 Authority Key Identifier:
keyid:5D:82:66:72:E6:8F:3D:A5:DB:50:ED:81:BA:DB:8D:33:BD:CC:D2:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYJmcuaPPaXbUO2ButuNM73M0ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:7c:24:43:97:34:d8:64:a6:ad:5b:a7:b3:5f:2a:40:05:c6:
4a:df:50:6a:91:87:4c:22:21:f8:74:71:49:d8:8a:2b:ab:3c:
3b:b6:19:24:c1:e1:33:66:d3:8d:de:0f:fa:82:f6:5b:d5:71:
a9:f5:a2:9f:df:9c:e7:81:77:49:be:ad:71:dc:2f:2b:12:76:
ea:ba:e0:5d:0d:98:bc:da:51:26:42:9d:20:38:28:0a:70:27:
59:ca:69:7a:99:1b:f1:3e:8a:3f:52:ae:92:77:34:69:c0:b0:
25:ff:6d:23:09:51:9d:e1:3a:91:f4:42:6f:56:fb:8d:ee:12:
93:86:d3:0c:1e:af:d8:7b:6a:04:20:71:31:4b:fc:60:29:30:
7d:f5:33:63:53:68:39:f4:ad:61:01:79:1a:e2:db:55:36:9e:
ff:71:64:59:43:60:6c:23:c7:f1:cb:0d:c5:47:87:53:a8:4d:
7b:91:18:16:4c:e1:4b:70:c0:b5:bc:95:91:76:d0:fc:71:2c:
81:90:63:fe:f8:4d:dd:ce:83:81:a5:d7:c4:6b:f8:03:a9:95:
a6:e9:d2:e0:da:88:71:dc:48:89:ba:52:f6:83:0b:fd:e0:f6:
7f:c0:6e:49:ee:71:01:c6:1f:cc:78:3d:2e:12:8d:fa:fc:cd:
cb:6d:aa:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:49:18 2026 by rpki-client