Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
File: XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft (raw, json)
Hash identifier: YXDLzM+/tnkQ5Rtec8xtnIPmXA7UjeCN2qKi9P/FOxI=
Subject key identifier: 81:56:AF:C4:88:51:2D:B3:6C:4C:86:1C:C1:12:FB:E8:67:1A:98:D4
Authority key identifier: 5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96
Certificate issuer: /CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96
Certificate serial: 019CAD59370B8A98201681E2B36BB2A9DBC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
Manifest number: 137E
Signing time: Mon 02 Mar 2026 07:00:31 +0000
Manifest this update: Mon 02 Mar 2026 07:00:31 +0000
Manifest next update: Tue 03 Mar 2026 07:00:31 +0000
Files and hashes: 1: 1-rh3SVK_l4oC_Y7ih51PfkV69KE.roa (hash: NJ7OHlFB+x8OrDZE2G7eqZGbDxSKcSz5o8ZkkHAui3k=)
2: 5WVKFC0tIs3qECrATtHYfjSRy9U.roa (hash: 0laLmepgzK3PsoUCQzvdtjbDgKkvW1Qb5dCLcjPTJAs=)
3: DmAsoEh_ftaKPOhVRscVORbXGKo.roa (hash: K5t41X9Sj7F3OsASCaPLgv9lGQLlL9EDWZMrPiqu4D4=)
4: XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl (hash: Llc1xdR2zea7n2Gtgh5OJwN2eVmIoFyq1IE9ex7gqwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:37:0b:8a:98:20:16:81:e2:b3:6b:b2:a9:db:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96
Validity
Not Before: Mar 2 07:00:31 2026 GMT
Not After : Mar 3 07:00:31 2026 GMT
Subject: CN=8156afc488512db36c4c861cc112fbe8671a98d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:67:48:10:60:ef:c7:9d:19:95:4c:59:46:0b:
ab:98:6a:06:7b:07:d4:c3:7d:20:b2:3c:2e:2c:5c:
42:7e:73:0c:91:fd:c5:30:fb:f9:9f:73:08:e1:d7:
f0:f9:e5:c6:20:b3:48:3b:09:a8:26:26:8f:8a:f0:
ad:1f:27:2f:09:c5:e6:64:21:6c:3a:71:39:52:d7:
ca:ea:bc:e6:1d:ad:ef:08:e3:85:b1:fc:e6:4c:ad:
d5:a3:e3:2d:f5:fc:1a:61:7b:6a:97:2d:f3:e1:f0:
dd:0c:89:7b:c5:f3:fd:9b:dc:1c:ae:65:03:c6:b6:
a0:31:99:9c:32:c1:2f:90:2d:5a:c2:64:b3:dd:85:
e5:6b:dc:8d:27:d6:cb:78:05:45:f3:f7:36:13:cc:
c9:a3:70:8c:86:7e:ac:50:e0:18:2d:9f:0a:1c:e6:
da:ba:06:ae:f6:6a:93:98:4e:53:e8:10:69:f3:8b:
6d:a0:97:77:56:8d:ca:1c:6a:e3:49:e7:d6:23:f8:
dd:bf:02:65:1c:87:ab:e7:43:93:59:62:89:fc:c1:
9b:61:70:cb:53:cc:a7:b5:80:9e:88:fb:59:8e:bb:
e1:98:5f:69:d8:45:36:63:5a:ca:4a:9c:70:9a:bd:
06:af:f7:95:7f:7e:86:b2:aa:58:10:a9:0f:64:a4:
50:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:56:AF:C4:88:51:2D:B3:6C:4C:86:1C:C1:12:FB:E8:67:1A:98:D4
X509v3 Authority Key Identifier:
keyid:5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:1e:51:26:1c:c2:10:24:04:a6:f9:af:ec:b2:e1:03:f7:17:
58:4d:10:2f:c3:a4:2d:79:8c:9c:2e:9a:39:43:65:d6:93:8a:
d8:e5:13:4a:d1:eb:76:c4:28:30:9e:bb:c4:8c:d5:af:10:2f:
5a:e8:94:86:bb:f1:4a:7e:9e:6f:7f:31:0f:3e:aa:33:bd:0d:
bf:64:8e:88:b5:fe:57:c2:ba:1c:f4:79:a5:02:34:68:fc:9a:
72:9b:d5:a4:0e:e7:62:16:10:6a:2d:7d:b1:6d:ca:e8:08:79:
d7:bd:66:66:f9:73:1c:85:75:cc:ca:4a:fb:32:0b:93:14:3b:
8c:59:5e:70:63:e1:82:b0:15:b6:46:ed:42:eb:95:be:18:03:
31:37:ef:cf:6f:67:dc:c8:eb:a4:bf:de:1b:7c:72:f7:ea:47:
e5:3c:51:c4:58:ff:02:40:e3:43:d8:df:4f:56:8a:7f:8e:79:
39:73:d9:79:4b:81:9c:f2:fa:2b:3a:8d:63:1c:f9:32:2e:a5:
1f:33:07:bf:3f:5f:34:18:c2:2f:00:03:63:66:4d:bd:db:c4:
60:b5:f9:3f:40:da:fa:87:6d:cb:6a:c8:d0:a2:a5:2c:62:f1:
61:a9:1e:13:9b:e8:c9:33:bd:44:96:1b:e4:fa:e8:cc:d3:b8:
ba:fe:b1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:45:34 2026 by rpki-client