Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.mft
File: XGGrSm35u5XP3orwdmaKWVs0HeE.mft (raw, json)
Hash identifier: BV9i+aNKt20tGDjGrge5QLqPpKMIsh+VVtY/6fA9ya4=
Subject key identifier: 08:72:60:E0:2F:ED:F6:5A:3C:DF:6D:BF:40:5A:42:4C:53:3F:C8:39
Authority key identifier: 5C:61:AB:4A:6D:F9:BB:95:CF:DE:8A:F0:76:66:8A:59:5B:34:1D:E1
Certificate issuer: /CN=5c61ab4a6df9bb95cfde8af076668a595b341de1
Certificate serial: 019CAC101DA6368B83A63C95F8F9B01C280C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGGrSm35u5XP3orwdmaKWVs0HeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.mft
Manifest number: 052E
Signing time: Mon 02 Mar 2026 01:01:03 +0000
Manifest this update: Mon 02 Mar 2026 01:01:03 +0000
Manifest next update: Tue 03 Mar 2026 01:01:03 +0000
Files and hashes: 1: XGGrSm35u5XP3orwdmaKWVs0HeE.crl (hash: kjet8tYPRMKs9MyoCcO8w0c90wTAvRXUU0/8DNZ0k0Q=)
2: d9ad6eSfGOCAtJCyfx5T80LXc84.roa (hash: l8TnxH7nYsbi9OkxC5kgX4fiX1lQ108inFjyeEj/BH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGGrSm35u5XP3orwdmaKWVs0HeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:1d:a6:36:8b:83:a6:3c:95:f8:f9:b0:1c:28:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c61ab4a6df9bb95cfde8af076668a595b341de1
Validity
Not Before: Mar 2 01:01:03 2026 GMT
Not After : Mar 3 01:01:03 2026 GMT
Subject: CN=087260e02fedf65a3cdf6dbf405a424c533fc839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b7:2c:a0:57:f7:0c:0a:d7:62:15:b1:79:78:
17:39:44:17:ef:31:19:50:1d:9f:6a:41:b3:58:de:
77:e0:36:aa:dd:62:55:30:c2:de:24:cf:cb:6f:f8:
22:66:fe:db:95:6e:cd:12:7f:fb:81:9d:fa:00:f2:
14:07:18:84:76:c1:4e:46:a5:21:bd:65:4c:32:fb:
e7:80:7a:a3:1d:2a:38:3b:c2:9a:81:e9:3a:c7:47:
5c:79:24:ec:ef:ab:c4:4b:2d:4e:3d:3e:28:19:13:
fe:e8:6c:db:e0:2d:35:3c:aa:2f:37:47:39:a8:1d:
50:2e:88:ff:a5:20:5c:21:9d:50:4d:a9:32:95:29:
13:d7:06:34:26:98:8d:8c:51:56:45:fe:2d:6a:77:
30:88:ec:5e:52:a7:5c:ff:c3:b4:39:62:69:34:ae:
7c:c2:4d:ba:38:3e:e8:4e:c6:13:4b:0e:ca:35:ac:
3b:da:3b:b9:a5:77:03:47:8a:7e:de:e0:5b:18:86:
0d:ec:2b:03:0f:c9:28:14:b3:8a:cf:08:a2:9a:92:
10:89:c3:bf:3d:43:f8:f0:a6:4f:f9:5b:1f:75:69:
95:a7:b8:6a:f7:45:59:9e:28:67:0a:45:af:bd:fa:
08:ec:26:e8:a1:a3:fa:f1:20:25:2c:f2:97:25:25:
15:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:72:60:E0:2F:ED:F6:5A:3C:DF:6D:BF:40:5A:42:4C:53:3F:C8:39
X509v3 Authority Key Identifier:
keyid:5C:61:AB:4A:6D:F9:BB:95:CF:DE:8A:F0:76:66:8A:59:5B:34:1D:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGGrSm35u5XP3orwdmaKWVs0HeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:c9:ce:e1:6c:05:ea:b1:e2:14:9d:87:f9:a1:04:42:70:35:
62:68:3b:cd:2b:9c:f9:dc:75:c4:30:ce:bf:a9:1a:22:ac:ff:
12:c7:de:dd:3b:a0:a3:cd:5d:35:6b:02:02:16:c6:0c:bc:27:
1b:06:9b:79:cc:b9:59:e5:12:bd:36:86:79:4b:db:6b:fa:6f:
2f:ff:99:22:1c:c9:60:00:78:ef:10:fc:bd:f3:66:9a:33:6b:
34:bf:5f:7a:2c:23:9c:d0:40:92:f3:ca:e8:cf:6c:00:3d:42:
a4:03:73:c8:b0:3d:7d:f0:d0:00:f2:1f:b0:4c:3e:66:97:d3:
f7:52:41:f2:be:e3:7b:2f:9b:d4:74:37:38:d1:7d:49:10:62:
cc:d4:49:ed:92:e1:17:47:3f:87:6a:61:6f:c5:7a:af:8b:75:
37:83:a5:4d:fe:06:c7:dc:38:3b:de:0c:eb:5b:c0:91:38:eb:
51:50:96:16:7e:3d:2f:6a:66:bd:51:9e:cc:44:3c:7f:31:fa:
88:24:2a:bd:bc:98:c8:14:64:92:d3:dd:2e:de:f9:03:3e:60:
c7:72:a7:b2:be:36:af:c5:79:61:c0:24:9e:c8:51:50:fb:f0:
b5:9e:8d:f8:76:25:9d:d2:7a:f8:ed:a4:56:a6:56:7d:6a:2b:
3d:72:93:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:02:43 2026 by rpki-client