Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
File: XNaRDPHi4rHKNHPEt9CSAg57fGE.mft (raw, json)
Hash identifier: m5N382p9VR9STYh9cb9GN0kqk2bw6a/tT0IX9VpQUrg=
Subject key identifier: D4:B9:68:5C:AA:74:4A:B2:B3:3D:55:FD:4B:E6:75:F5:20:01:77:80
Authority key identifier: 5C:D6:91:0C:F1:E2:E2:B1:CA:34:73:C4:B7:D0:92:02:0E:7B:7C:61
Certificate issuer: /CN=5cd6910cf1e2e2b1ca3473c4b7d092020e7b7c61
Certificate serial: 019CAB344C9C3D9B50BE2D97A82878133E30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
Manifest number: 17D7
Signing time: Sun 01 Mar 2026 21:00:57 +0000
Manifest this update: Sun 01 Mar 2026 21:00:57 +0000
Manifest next update: Mon 02 Mar 2026 21:00:57 +0000
Files and hashes: 1: 1-JQqdOgGI5A2jgfNA9GBznLZL4o.roa (hash: 8aD9D5dY520w/e92POgprpQwJQRjt7y1yNeMs6zlp6Y=)
2: XNaRDPHi4rHKNHPEt9CSAg57fGE.crl (hash: gHTRn2gk4xU6KYuubXUAkkyBiSqRV1BqcPyTKzpch8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:4c:9c:3d:9b:50:be:2d:97:a8:28:78:13:3e:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd6910cf1e2e2b1ca3473c4b7d092020e7b7c61
Validity
Not Before: Mar 1 21:00:57 2026 GMT
Not After : Mar 2 21:00:57 2026 GMT
Subject: CN=d4b9685caa744ab2b33d55fd4be675f520017780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c5:51:0f:78:a0:de:53:b4:2c:99:87:65:a1:
b1:80:69:8c:4c:a2:fe:7a:18:28:28:65:9e:77:d1:
a6:08:73:07:d1:8a:4c:c0:f8:8c:3a:ff:00:8f:73:
08:a8:fd:68:20:2b:7c:82:f9:8c:db:69:8b:4c:08:
cc:d4:f2:39:3b:c7:65:88:6b:15:73:f0:60:40:83:
f7:1e:22:47:35:eb:30:09:1f:f9:66:13:ca:67:5b:
e2:77:2a:a8:3b:b6:22:92:63:27:2c:69:d5:30:96:
5e:36:d6:bb:9d:fe:19:93:74:8b:09:95:5f:22:23:
2f:09:9c:85:0d:8e:43:d3:8f:cf:d8:ec:e3:70:d0:
10:dc:fc:30:18:15:7c:83:ce:55:dd:8b:33:da:25:
9b:db:cb:88:68:00:a9:27:ad:a9:3b:23:de:bc:bd:
4a:ed:bf:a2:64:c2:2e:e2:9d:5b:6d:b3:32:27:16:
76:4b:d6:46:29:a3:42:14:8b:26:0b:40:43:fc:e4:
c1:38:40:23:44:f3:51:5a:65:53:59:25:79:50:7a:
83:00:b2:33:73:83:e1:6a:7d:53:88:d6:25:dc:5b:
71:c3:2f:9c:94:45:d6:29:13:48:46:4f:ce:b5:bc:
24:96:3e:c2:c2:bc:f2:f4:f5:92:8a:58:6e:40:19:
88:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B9:68:5C:AA:74:4A:B2:B3:3D:55:FD:4B:E6:75:F5:20:01:77:80
X509v3 Authority Key Identifier:
keyid:5C:D6:91:0C:F1:E2:E2:B1:CA:34:73:C4:B7:D0:92:02:0E:7B:7C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ef:73:e3:93:0b:23:ed:2f:e3:f8:8f:ac:26:e0:4c:c1:0f:af:
d0:7e:b7:2b:1e:86:30:b3:49:d8:49:60:6b:bc:a6:69:69:e9:
41:18:90:f2:74:c0:34:27:b4:93:e4:f0:86:e2:ad:19:a3:47:
b3:e7:86:47:28:be:4b:f9:5d:54:19:a6:b1:f9:41:fb:db:60:
92:8e:fd:b2:65:ae:f5:58:0e:eb:9f:df:28:8c:75:d8:5c:e8:
cb:57:2f:34:d4:ae:1e:ca:ee:06:ca:f2:b0:b8:8a:9d:b7:fa:
e7:05:a3:d1:cb:e1:45:87:72:28:82:e7:67:fa:4e:b4:bc:d1:
e0:d5:d7:12:e4:7a:56:34:8f:8f:b9:b6:af:e1:1c:f2:86:e0:
c6:80:34:46:62:7b:65:8a:e6:d4:d0:8d:fd:97:0d:32:0b:9e:
dd:23:49:fa:dd:58:77:92:15:4d:a5:b5:c1:f9:3d:fb:38:9c:
ad:52:3e:8a:51:05:d0:51:56:58:a4:15:5a:bf:84:e3:fd:33:
9d:4b:cc:c0:30:fa:76:e4:34:a5:e6:80:7c:1a:98:46:30:46:
a0:17:e3:3f:65:31:95:86:7f:cf:74:06:66:87:6e:b5:b7:37:
e2:4f:b8:63:b9:99:ab:a6:44:4d:ba:35:46:64:87:6b:c2:e7:
a0:70:f9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:38 2026 by rpki-client