Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
File: XRKbBGDPnuBQDuiAos-hpSTk3wA.mft (raw, json)
Hash identifier: X5M86xarEbKQeXYNRZD1NJfyshnm3AYrXlME5qKWv/E=
Subject key identifier: CB:64:7E:34:BE:FD:39:AD:25:84:D8:96:BE:B7:7C:DB:5D:07:EF:00
Authority key identifier: 5D:12:9B:04:60:CF:9E:E0:50:0E:E8:80:A2:CF:A1:A5:24:E4:DF:00
Certificate issuer: /CN=5d129b0460cf9ee0500ee880a2cfa1a524e4df00
Certificate serial: 019CA9B386428BF25DFEE72E3CBE18556DCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
Manifest number: 184C
Signing time: Sun 01 Mar 2026 14:00:40 +0000
Manifest this update: Sun 01 Mar 2026 14:00:40 +0000
Manifest next update: Mon 02 Mar 2026 14:00:40 +0000
Files and hashes: 1: L40pPH6TicBG2s3pYm_kCH0QuH8.roa (hash: T9wzscjITMGr1trkfg1j7FXPyni8Fc+OiviUYZ5c/0E=)
2: XRKbBGDPnuBQDuiAos-hpSTk3wA.crl (hash: VoiauE1vPhFGXa5WSQn/rkeP8fBISD7OIdNVGMl2Fg4=)
3: mHUy1KocxToYW37_wT8MS55csmw.roa (hash: GK3vXe/kBgknY/Rv7K9y8jXyx4Ju3q8arsSKNLe+PPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:86:42:8b:f2:5d:fe:e7:2e:3c:be:18:55:6d:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d129b0460cf9ee0500ee880a2cfa1a524e4df00
Validity
Not Before: Mar 1 14:00:40 2026 GMT
Not After : Mar 2 14:00:40 2026 GMT
Subject: CN=cb647e34befd39ad2584d896beb77cdb5d07ef00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f3:2f:b1:2f:88:72:75:11:31:15:3a:6b:78:
83:84:c4:2f:64:5a:5c:a0:49:e5:c0:cb:79:28:76:
ec:a1:9e:77:10:e5:3a:16:27:f6:75:81:54:c8:35:
a3:15:41:a4:93:69:db:bc:b7:fc:83:26:0d:af:da:
ed:a8:7f:87:aa:6f:e3:25:ff:0a:73:40:4d:21:a9:
61:d7:d5:40:c9:68:fa:8b:55:b5:83:6a:14:09:c4:
61:9f:7f:71:88:f9:af:6e:0d:a6:6a:b4:d1:36:e5:
0c:98:83:20:64:a7:de:c6:c3:b8:eb:bb:8d:df:7c:
6e:ac:48:bf:e0:11:70:01:dc:2e:ea:4a:23:e2:9f:
ca:8a:db:21:06:5b:0d:a1:3a:3f:97:af:33:3f:9a:
64:f7:0a:ad:53:cf:7d:4f:b1:49:c5:2e:49:c9:d6:
0e:f0:f3:96:6e:99:5d:af:23:b1:45:1e:88:cd:29:
b4:ab:da:e5:c4:3b:96:0b:d2:cb:f7:66:c5:17:ee:
b0:ee:45:96:12:40:a9:96:e9:21:b2:4e:5f:48:0a:
3a:58:60:50:9a:28:2e:2e:61:d5:ab:d2:94:0b:db:
42:8e:42:13:bb:97:b2:5b:f7:25:cf:55:5b:5c:ea:
cd:19:c4:3e:f0:bd:1a:d2:f6:67:64:53:de:4a:10:
bb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:64:7E:34:BE:FD:39:AD:25:84:D8:96:BE:B7:7C:DB:5D:07:EF:00
X509v3 Authority Key Identifier:
keyid:5D:12:9B:04:60:CF:9E:E0:50:0E:E8:80:A2:CF:A1:A5:24:E4:DF:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:8d:b9:08:f2:a5:d6:87:10:34:68:0e:11:fa:e0:c1:70:c5:
1b:94:2c:12:aa:2a:dc:18:b3:18:41:99:5f:f5:1e:69:ca:8c:
9d:67:9d:49:37:d1:24:66:83:4b:49:13:19:03:a0:6d:5b:1c:
12:b1:8e:16:a3:b1:7f:74:ad:79:16:48:1d:ad:c0:06:d9:d1:
2a:63:36:34:32:58:e7:9f:3f:a6:63:c4:e5:eb:00:65:c5:89:
d2:a2:b7:dc:fe:86:b5:d1:65:3f:2e:5c:01:f5:d7:38:7b:ce:
2a:45:73:42:c7:54:cb:7a:8b:2f:51:d8:7c:1a:24:5c:59:16:
2c:30:c8:b2:cf:82:1b:b6:02:c3:ef:eb:4b:ce:1a:c7:4f:02:
9c:95:51:02:bb:c6:4f:64:e6:5b:48:4f:44:0b:ae:62:b9:66:
3a:a8:d2:2b:f1:17:e6:b0:11:6c:51:bf:7d:79:05:66:70:d8:
89:3a:f5:2c:61:66:03:ab:da:14:de:2c:ef:36:7a:e5:42:b5:
96:9d:d6:17:9e:02:90:03:d7:be:19:25:f0:8b:8e:85:29:52:
f8:ce:02:8d:54:23:8e:75:62:fe:a9:7e:7e:da:3e:c8:c9:4c:
2f:6a:0d:28:f7:d7:27:24:46:75:be:fd:b8:ff:28:c5:31:c0:
d1:95:6c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:50:50 2026 by rpki-client