Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
File: XK56oVlNiZKbERo3Hw_ybyAvWOI.mft (raw, json)
Hash identifier: C5BK9dqUrrDFVCvOpeb876vffcbqmRiAEI1O4m+2GKo=
Subject key identifier: 2A:57:11:C9:D7:B7:85:5B:EC:8B:D2:FC:7B:84:4B:5F:8D:D3:8F:78
Authority key identifier: 5C:AE:7A:A1:59:4D:89:92:9B:11:1A:37:1F:0F:F2:6F:20:2F:58:E2
Certificate issuer: /CN=5cae7aa1594d89929b111a371f0ff26f202f58e2
Certificate serial: 019CAD22A3F9D8F731417C4B53CA26B34CB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XK56oVlNiZKbERo3Hw_ybyAvWOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
Manifest number: 1738
Signing time: Mon 02 Mar 2026 06:00:54 +0000
Manifest this update: Mon 02 Mar 2026 06:00:54 +0000
Manifest next update: Tue 03 Mar 2026 06:00:54 +0000
Files and hashes: 1: Oanj9HZBO6pjmAia4pctaEcwILk.roa (hash: XGqLRhTKxqFHvcnOJ1VVsX5xFgoIImSw0HHatVrIKYA=)
2: XK56oVlNiZKbERo3Hw_ybyAvWOI.crl (hash: Jf8KjcX8ZfUlxsY8gjWacurkGTvXvqs/wPlEZVU7NIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XK56oVlNiZKbERo3Hw_ybyAvWOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:a3:f9:d8:f7:31:41:7c:4b:53:ca:26:b3:4c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cae7aa1594d89929b111a371f0ff26f202f58e2
Validity
Not Before: Mar 2 06:00:54 2026 GMT
Not After : Mar 3 06:00:54 2026 GMT
Subject: CN=2a5711c9d7b7855bec8bd2fc7b844b5f8dd38f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:af:ea:c0:2a:f1:95:6d:6b:60:d3:ec:34:ae:
6c:de:a3:2e:58:6a:6b:27:80:82:08:c6:a8:d6:49:
de:1a:91:42:8d:6c:d3:c1:2e:1f:0a:e0:de:c5:b0:
66:76:4c:9c:ed:44:00:94:00:59:07:e8:17:91:54:
10:5c:8f:5e:64:b3:eb:57:bc:dc:60:bb:ad:15:05:
54:59:22:cc:95:d6:d3:5b:81:cf:4d:bf:fa:46:73:
67:39:f6:4d:e1:4f:c1:b4:f6:7b:e5:65:a1:68:13:
5b:0b:8c:f7:23:0b:29:2a:c9:66:f4:a0:96:f9:bd:
56:d1:e9:9b:cc:93:79:78:68:77:7c:58:7a:02:37:
0b:61:86:6b:e8:3a:a6:0f:7f:7f:c6:b4:e7:9e:37:
5e:55:7b:18:f7:e4:e2:71:a9:5c:04:0d:82:0c:06:
77:6a:5d:37:40:b8:8c:11:89:33:31:e5:76:90:30:
92:9b:77:b7:15:dd:48:a9:37:d8:78:79:62:b8:ea:
60:76:ef:42:ea:14:97:14:f1:2b:76:b4:bb:01:50:
82:a0:90:ed:ad:7a:25:0d:ba:36:b1:c3:09:c0:25:
0d:9e:0e:a8:05:bd:c4:fb:7e:c3:bc:cb:d5:c3:c5:
fd:da:91:45:58:61:a7:f8:25:6c:e9:e4:6a:f7:09:
53:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:57:11:C9:D7:B7:85:5B:EC:8B:D2:FC:7B:84:4B:5F:8D:D3:8F:78
X509v3 Authority Key Identifier:
keyid:5C:AE:7A:A1:59:4D:89:92:9B:11:1A:37:1F:0F:F2:6F:20:2F:58:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XK56oVlNiZKbERo3Hw_ybyAvWOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:d8:ed:46:4f:48:8a:69:b1:c6:b3:a0:de:4c:eb:6c:0a:b3:
2f:05:1f:55:3b:45:d6:ac:76:86:65:b7:2d:5f:2e:23:4c:20:
7d:73:66:95:65:5a:b7:f7:c0:09:25:50:14:e9:1a:19:68:67:
1f:df:e9:8e:6e:fa:da:b8:ff:ca:32:b8:49:75:c2:6b:61:72:
40:35:93:43:73:ce:d2:70:ff:7c:93:57:a1:f5:55:dd:5b:41:
4a:70:ba:50:34:ca:e4:e9:dd:ac:c1:56:b3:3f:a5:90:94:71:
3f:67:9e:06:24:73:90:c7:9c:33:03:62:53:e2:c5:8f:be:e9:
a9:d6:eb:23:e8:13:c4:59:e4:ea:1e:96:9a:40:15:7a:63:c3:
02:b6:00:bb:63:13:91:98:61:11:47:65:ea:2b:d9:f6:50:3c:
f4:94:4c:6f:4c:02:bd:b2:bb:6a:5e:ca:be:7f:c2:2d:57:79:
0a:8f:a9:39:2a:ab:45:a0:09:0d:d2:41:22:ff:d2:fd:94:fd:
b6:70:8d:0a:77:18:b2:82:ab:87:31:7a:a8:c2:71:c2:bb:02:
35:24:87:e7:d2:08:19:51:38:37:89:63:2c:6b:53:7b:fd:9d:
ee:54:14:67:89:23:d4:33:e4:cc:73:25:08:94:63:cc:6d:44:
8a:13:71:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:31:28 2026 by rpki-client