Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
File: XBEKKwrrN_DJMqlr279-82whGXw.mft (raw, json)
Hash identifier: ykq/Pn9B6LKCTPtEDit0tkXVIsKwWPwuku+5qX22mhY=
Subject key identifier: 18:B9:F5:4B:8F:D9:58:32:37:7E:41:56:7D:CD:13:9F:F4:37:B8:34
Authority key identifier: 5C:11:0A:2B:0A:EB:37:F0:C9:32:A9:6B:DB:BF:7E:F3:6C:21:19:7C
Certificate issuer: /CN=5c110a2b0aeb37f0c932a96bdbbf7ef36c21197c
Certificate serial: 019CAA58B746A4E79045A9ECEE58CEA5B8EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XBEKKwrrN_DJMqlr279-82whGXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
Manifest number: 13B2
Signing time: Sun 01 Mar 2026 17:01:06 +0000
Manifest this update: Sun 01 Mar 2026 17:01:06 +0000
Manifest next update: Mon 02 Mar 2026 17:01:06 +0000
Files and hashes: 1: NrZRCuerFzj4EhFGKoh_NKbZNxM.roa (hash: 5QAUpIfqv2CVCHxJDOL189fybpsclOVK/PxPIJsB8Xs=)
2: XBEKKwrrN_DJMqlr279-82whGXw.crl (hash: FZtkLgWQef/7/HHWMqcKJMK7ANfho6r2XSY6JKVxJ6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XBEKKwrrN_DJMqlr279-82whGXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:b7:46:a4:e7:90:45:a9:ec:ee:58:ce:a5:b8:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c110a2b0aeb37f0c932a96bdbbf7ef36c21197c
Validity
Not Before: Mar 1 17:01:06 2026 GMT
Not After : Mar 2 17:01:06 2026 GMT
Subject: CN=18b9f54b8fd95832377e41567dcd139ff437b834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5d:d8:c3:5d:ca:cc:7a:26:ef:93:59:9f:40:
b0:c6:7a:aa:83:e7:2e:8e:02:5e:50:65:2f:de:ef:
df:2a:e2:5e:75:d6:03:ae:48:3e:b0:3f:ec:ac:83:
60:9a:bb:ae:87:31:a1:50:d3:52:8f:33:06:3b:61:
65:1f:7d:c0:e9:fd:66:7f:d7:29:51:38:d7:bb:67:
b6:9a:06:20:1b:96:af:4b:80:14:69:13:f8:1d:e1:
68:4b:d8:e8:f6:7f:e3:08:a0:53:13:33:8e:b6:b9:
bf:57:14:04:42:a0:fa:9c:38:43:76:79:e7:8d:94:
cc:bc:64:70:52:e7:8c:6f:dc:b5:8c:a0:57:bc:ea:
bf:65:33:de:94:ca:f7:b4:1a:75:e4:91:1e:c2:9c:
0c:20:98:78:c9:39:e8:5f:ba:98:af:f2:be:d0:d2:
13:5b:01:6b:6c:30:46:aa:ff:2d:ba:e3:92:31:2f:
a9:a7:eb:a6:53:55:ae:99:af:5c:67:69:8c:7f:db:
14:28:56:bc:77:23:9f:23:6f:cc:76:b2:eb:2b:43:
81:56:f1:e2:79:1b:16:2e:a7:49:16:89:92:49:97:
6f:76:95:fb:dc:70:bd:06:94:c6:c9:f9:60:ae:7b:
75:6b:2e:7b:ea:52:81:4d:67:8e:04:9a:ce:25:41:
ec:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B9:F5:4B:8F:D9:58:32:37:7E:41:56:7D:CD:13:9F:F4:37:B8:34
X509v3 Authority Key Identifier:
keyid:5C:11:0A:2B:0A:EB:37:F0:C9:32:A9:6B:DB:BF:7E:F3:6C:21:19:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XBEKKwrrN_DJMqlr279-82whGXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:16:22:7c:9b:e6:6e:58:fc:36:be:75:c4:b3:f8:96:73:0f:
9a:f4:04:0c:41:91:38:fd:19:5c:b7:5f:df:43:36:4b:d9:9b:
f9:fe:20:3b:72:e9:9f:7b:61:b2:8f:28:dc:b4:1e:dc:5c:4a:
5d:84:68:91:ec:30:46:4a:72:cb:4c:ae:da:bc:8c:32:9d:de:
54:d1:5f:54:16:7c:6c:48:4d:8a:c4:6b:46:4a:37:0e:7f:e9:
58:fb:11:30:84:ec:18:61:d0:32:f4:21:60:3d:33:27:65:40:
45:12:50:f8:4b:84:f0:28:dd:15:e2:fe:21:ba:95:4c:60:0b:
3c:12:a4:ac:8f:fc:00:e1:11:b1:01:42:a8:8b:4d:d1:8e:14:
3c:5b:04:26:90:64:6b:e0:5d:80:40:5f:44:62:25:78:82:f4:
87:ff:10:75:5f:e3:8a:32:e9:71:d6:8c:61:28:c4:92:73:fc:
7a:d2:f0:d0:b8:43:8c:d6:be:30:7c:51:9f:2f:ec:23:89:bd:
22:eb:59:51:a9:d8:73:35:d2:08:37:c4:ae:09:0a:74:07:17:
a1:ca:d3:08:7d:eb:29:8f:ea:d2:a5:c2:c8:91:cb:d3:bd:20:
a9:5f:56:62:a9:a0:5d:09:7c:b4:ba:ad:72:fe:49:a6:4e:8d:
5b:a6:8f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:49:22 2026 by rpki-client