Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft
File: XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft (raw, json)
Hash identifier: KggTqynoID9ZVIe9t30h1C349UX5si1dfXPc89N+HUs=
Subject key identifier: 76:98:08:87:5A:F9:BC:97:DB:85:3D:B7:4C:F8:8C:C7:F5:06:0B:46
Authority key identifier: 5E:FC:CD:7D:7E:30:8F:81:80:70:51:F8:D4:87:E9:D8:29:C2:48:68
Certificate issuer: /CN=5efccd7d7e308f81807051f8d487e9d829c24868
Certificate serial: 019CAD5A33F12DBD579D31E3F5D33C102315
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XvzNfX4wj4GAcFH41Ifp2CnCSGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 07:01:35 +0000
Manifest this update: Mon 02 Mar 2026 07:01:35 +0000
Manifest next update: Tue 03 Mar 2026 07:01:35 +0000
Files and hashes: 1: H7bzuNwWAw0WqWgCEkaaWLBrXww.roa (hash: qJ814Ut9PCA48je680EM2s8Vg9S3+E4bblZcpYFDxgI=)
2: XvzNfX4wj4GAcFH41Ifp2CnCSGg.crl (hash: oofgMk6HwO3MFFfHi60lY4Tm7J2Mm8OMzJwJEFBPj7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/XvzNfX4wj4GAcFH41Ifp2CnCSGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:33:f1:2d:bd:57:9d:31:e3:f5:d3:3c:10:23:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5efccd7d7e308f81807051f8d487e9d829c24868
Validity
Not Before: Mar 2 07:01:35 2026 GMT
Not After : Mar 3 07:01:35 2026 GMT
Subject: CN=769808875af9bc97db853db74cf88cc7f5060b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3a:07:02:20:b0:cb:35:cb:de:24:5e:3c:bb:
7e:bf:9a:00:ef:49:1a:63:43:06:03:68:6e:04:73:
c8:51:b1:db:3b:07:ff:e9:69:01:1b:d8:54:b5:5d:
a9:04:05:ab:90:10:7b:87:a2:77:47:c7:e9:7e:b6:
1d:0f:ee:ff:81:8c:0b:55:15:0f:b1:3e:8c:28:5b:
ad:80:5a:ba:2a:f0:28:7b:dd:8c:72:ca:51:ff:56:
f4:ab:ef:71:10:30:1c:9a:2d:86:dd:5d:7f:6b:f1:
26:05:f7:1b:6b:f9:ea:cf:c2:6a:03:ca:5f:d9:31:
dd:75:f5:d6:8d:22:a3:db:d9:4d:92:ab:a2:ba:41:
ab:08:82:68:c1:60:b4:5d:50:b6:ab:77:4a:47:88:
14:da:80:a4:58:8d:73:e4:6e:53:86:24:bf:0e:06:
02:93:23:5d:a5:ee:23:b8:c3:20:f9:68:87:ad:ef:
cb:59:7b:a5:49:6b:43:6d:2d:64:fe:2d:c7:6f:51:
22:1c:a8:8e:1c:b2:49:81:04:12:27:8a:4b:c6:65:
71:4a:a5:1e:87:0f:2c:1b:be:55:23:78:78:ee:fc:
42:4c:84:0b:4d:9f:d0:78:01:d4:72:8e:25:9b:50:
fa:8e:a2:24:98:d2:6a:b4:72:5f:d9:ce:3b:43:6c:
18:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:98:08:87:5A:F9:BC:97:DB:85:3D:B7:4C:F8:8C:C7:F5:06:0B:46
X509v3 Authority Key Identifier:
keyid:5E:FC:CD:7D:7E:30:8F:81:80:70:51:F8:D4:87:E9:D8:29:C2:48:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XvzNfX4wj4GAcFH41Ifp2CnCSGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:8b:e2:cc:4a:df:16:cd:34:36:5c:04:09:df:5f:e8:02:1f:
8c:3c:66:be:e4:cc:34:8b:43:79:72:3d:26:87:b6:f8:ec:5d:
5c:76:ba:f0:34:b9:1f:34:cc:3d:b1:b9:a0:02:9b:37:93:9f:
5c:77:1d:00:70:d1:a4:c4:8f:46:f5:18:78:21:0f:4e:20:ec:
c4:76:d9:9e:cb:de:10:ec:c9:22:fb:70:0b:09:d2:4c:2c:6e:
18:c1:58:50:18:d8:3f:9f:52:08:d4:d3:d4:f2:4f:98:0c:11:
71:74:03:2e:de:cc:4f:21:c9:c9:13:08:a3:32:ed:38:a2:74:
3f:8e:e8:58:be:7b:0c:37:71:a1:82:96:06:fd:16:cd:d6:07:
a7:3a:55:d5:1e:a7:68:ff:a2:ea:a1:1a:16:38:e6:00:d2:c3:
9b:df:c8:2a:74:9a:24:0c:6f:43:46:b9:e4:49:7e:f4:15:ba:
52:f0:fd:c1:66:1c:a6:af:6c:8c:62:5c:66:53:7a:bc:8b:39:
02:0b:13:0e:09:8e:4e:fa:97:57:d0:ab:ed:fb:46:d6:29:01:
80:09:ad:1c:71:97:06:97:d6:d0:a4:e0:6f:8e:2b:22:4a:b9:
73:e3:61:4e:36:49:f2:97:e9:09:7b:6f:4e:4e:55:f4:f3:fd:
2c:a3:69:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:25:31 2026 by rpki-client