Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
File: XsF2nT_wQhJGmOMcRytju_G7ta0.mft (raw, json)
Hash identifier: tM0FhJSI1OHbDyt8JRJa/lfoAtvTVNETl+2TjiEjfBM=
Subject key identifier: 81:F2:B3:E7:70:79:C5:2A:AB:CC:3F:EE:C7:1C:68:2A:62:72:83:9F
Authority key identifier: 5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
Certificate issuer: /CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Certificate serial: 019CAC1013C5827D7BDEE8C94C193169FCCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
Manifest number: 063A
Signing time: Mon 02 Mar 2026 01:01:00 +0000
Manifest this update: Mon 02 Mar 2026 01:01:00 +0000
Manifest next update: Tue 03 Mar 2026 01:01:00 +0000
Files and hashes: 1: Gkzr8cmq5l-SJW535VAbg6PLMB0.roa (hash: Y4hmK6YPKNo9n40cQMscOcZSxtVZskzUJfJT11sn8vQ=)
2: XsF2nT_wQhJGmOMcRytju_G7ta0.crl (hash: MJ4CaaO5vOgIf3BOKY/QTKTyyjTyJA5pbM0ayJBY2yY=)
3: bo5WfapXlg-B8bHycWZVlbYa0_E.roa (hash: zgeOYcSCXR5A+F5TcrL2+OPIXguhUzoA2nj4CspJY/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:13:c5:82:7d:7b:de:e8:c9:4c:19:31:69:fc:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Validity
Not Before: Mar 2 01:01:00 2026 GMT
Not After : Mar 3 01:01:00 2026 GMT
Subject: CN=81f2b3e77079c52aabcc3feec71c682a6272839f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7e:49:8a:5e:90:ad:39:1f:b0:fc:59:ec:24:
de:31:0f:dc:5c:c8:6c:d3:4b:0e:dd:9f:0b:4e:c0:
e2:cc:7d:e6:23:15:30:99:07:47:1f:d1:28:7d:77:
40:75:58:d1:3c:cc:ed:a5:4f:b7:46:53:63:cd:ac:
c5:f4:bd:f0:ec:57:2c:89:ad:84:fa:de:d5:7e:90:
7a:2e:2e:10:0f:bd:9d:71:19:ec:3f:a5:f2:40:d5:
df:3f:64:7a:62:56:47:58:d5:67:2d:81:26:94:7a:
e3:6a:74:99:bd:35:3f:c2:79:2c:91:e7:a9:96:83:
6f:87:f2:b2:d9:38:8a:2b:0c:b8:05:35:43:1c:cb:
9d:f8:52:bc:1d:fc:04:75:70:b0:3b:49:86:6f:f4:
d8:00:15:5e:db:ca:b3:6e:eb:16:9e:fa:94:46:d8:
64:d0:ed:10:20:47:da:98:86:ac:60:cf:7e:3d:c6:
ef:5c:6f:db:c3:c1:9e:65:4b:51:27:9d:93:4a:fb:
8d:1a:38:9f:68:b0:a2:69:0e:da:01:dd:a9:4a:6c:
dd:e0:98:bc:1a:f7:c9:ce:fc:8e:04:de:d1:40:18:
96:21:3e:ec:48:b0:d6:f6:f8:16:87:de:e4:90:c0:
13:3e:dd:81:dc:01:d7:87:4f:43:7b:fb:42:33:e9:
f4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F2:B3:E7:70:79:C5:2A:AB:CC:3F:EE:C7:1C:68:2A:62:72:83:9F
X509v3 Authority Key Identifier:
keyid:5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:38:65:79:f6:f9:2b:b8:8e:56:b3:b7:14:fd:aa:bb:3b:ac:
87:7c:b3:60:fa:44:8c:19:24:9f:c0:46:1e:1d:da:ac:74:01:
e0:cf:e7:13:c7:d3:a4:39:d7:06:c6:d7:c2:e7:0a:a3:6f:92:
b9:49:86:f1:4c:6b:8f:bd:a9:63:0d:e5:43:e9:7d:0f:ae:dd:
15:db:d2:83:b7:cd:c7:31:71:58:10:b3:28:41:24:1d:c0:b6:
73:c8:1b:30:a3:e8:ec:85:a3:5c:0f:29:7b:51:c1:79:93:3e:
7c:50:7c:eb:a9:f3:05:e1:99:99:26:da:a8:cf:c3:94:35:20:
47:98:4a:96:ab:e0:c7:08:9d:66:fe:3a:23:a2:96:d5:70:3c:
8e:86:83:f9:66:08:4c:bf:a9:8a:73:c1:ca:12:0c:a9:93:68:
c3:38:0c:28:d9:42:35:bd:ba:7d:aa:5b:04:59:b7:c5:90:1f:
d4:21:10:02:92:81:67:60:82:3d:fc:b9:64:f8:43:d5:c6:e9:
d6:84:f2:bc:c3:62:59:78:23:3a:36:c8:23:05:69:85:44:57:
94:9a:29:73:3c:db:96:de:33:14:a3:1a:9c:c7:1a:4d:7a:63:
9d:a1:ac:c6:48:81:29:f7:24:ab:0e:7d:12:21:41:3b:f2:93:
ad:65:f8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:23:18 2026 by rpki-client