Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.mft
File: X4anFB9vt7TCi84xRGe2FU4Pk3c.mft (raw, json)
Hash identifier: jp/lw5o0EjxL3baxllyIh8saUms8dWKmoLX0sfszpz4=
Subject key identifier: 71:D0:0C:E8:C3:CD:B8:21:ED:8D:E2:0B:ED:6B:43:15:06:21:BC:21
Authority key identifier: 5F:86:A7:14:1F:6F:B7:B4:C2:8B:CE:31:44:67:B6:15:4E:0F:93:77
Certificate issuer: /CN=5f86a7141f6fb7b4c28bce314467b6154e0f9377
Certificate serial: 019CAAC61610AE17CAF0D2AC39E7BCD3E854
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4anFB9vt7TCi84xRGe2FU4Pk3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.mft
Manifest number: 0FE0
Signing time: Sun 01 Mar 2026 19:00:34 +0000
Manifest this update: Sun 01 Mar 2026 19:00:34 +0000
Manifest next update: Mon 02 Mar 2026 19:00:34 +0000
Files and hashes: 1: X4anFB9vt7TCi84xRGe2FU4Pk3c.crl (hash: pMD6jfKY2KX5rp/oZaLrs5AhMdBMqggudflQ3A+uEpk=)
2: o10KDQLCNX_eEti6B07ro4cJyK8.roa (hash: hy+4KJvTq+cRULOZkT8/acKHvswCR6Ar2bCCrvuaUxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/X4anFB9vt7TCi84xRGe2FU4Pk3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:16:10:ae:17:ca:f0:d2:ac:39:e7:bc:d3:e8:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f86a7141f6fb7b4c28bce314467b6154e0f9377
Validity
Not Before: Mar 1 19:00:34 2026 GMT
Not After : Mar 2 19:00:34 2026 GMT
Subject: CN=71d00ce8c3cdb821ed8de20bed6b43150621bc21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a6:7e:54:19:8c:c5:e3:cf:e7:44:c9:70:1d:
05:12:2a:3c:b3:34:10:64:d4:24:c9:62:f8:e4:9b:
3c:b2:89:7d:6d:f0:0b:ba:0a:d7:f7:bf:62:ec:dd:
14:6c:d8:c9:bf:4d:88:04:42:4f:5e:8f:d1:36:ec:
a5:7a:5b:c8:eb:2d:cd:92:04:d7:70:10:8c:28:81:
ce:b5:80:c0:c0:4f:14:1a:36:1e:38:76:89:e4:bb:
a5:61:c5:f9:a4:45:40:1c:cd:aa:10:44:02:55:d7:
94:a0:00:34:c4:7d:e5:af:32:6e:7b:03:5c:ab:0f:
8c:48:a2:c2:6d:8f:b8:97:7c:40:05:a8:83:e8:3a:
0b:e0:99:37:83:76:ae:75:1c:4b:16:36:a3:44:76:
9f:20:a2:85:32:c1:86:2c:6e:d5:fa:45:00:f0:aa:
8b:97:58:c2:1c:c0:ee:68:a1:aa:91:dc:95:6e:14:
5b:63:ae:75:11:2d:fa:61:01:34:ae:09:6a:48:66:
cb:4f:d8:14:38:d8:f8:41:0b:d3:ae:c5:e0:a3:60:
2c:77:a7:27:c9:0e:34:fc:fc:5e:6a:c4:d8:dc:8d:
22:f6:ce:0d:3a:fc:4e:84:cf:2e:5f:43:a1:39:26:
7f:e2:f2:20:bb:14:84:c9:bf:5f:80:15:ed:80:58:
a9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D0:0C:E8:C3:CD:B8:21:ED:8D:E2:0B:ED:6B:43:15:06:21:BC:21
X509v3 Authority Key Identifier:
keyid:5F:86:A7:14:1F:6F:B7:B4:C2:8B:CE:31:44:67:B6:15:4E:0F:93:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4anFB9vt7TCi84xRGe2FU4Pk3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:34:fb:26:cd:96:df:4f:dd:78:bf:70:9e:be:5b:bb:e5:f2:
3e:49:ac:8a:7e:6c:d2:bb:89:5e:af:69:ad:b5:88:c4:2a:fb:
f1:bb:97:df:7d:e0:9a:c0:8b:f4:50:c6:dd:1c:d3:e2:56:68:
d6:10:cf:83:bd:d2:d8:52:a0:c1:87:0e:fe:51:f4:b4:9a:c7:
5b:52:2a:61:03:31:ae:e7:ea:62:e2:9a:27:2f:a8:87:92:b6:
4b:12:12:60:2e:3b:34:09:62:3c:07:78:ad:fb:68:52:f5:06:
a1:6c:e4:83:df:97:48:2a:21:b6:b2:a5:89:1d:62:ab:cd:6c:
5e:c2:29:4a:3c:6e:1b:fa:b3:69:4b:76:7d:d6:52:e9:cd:65:
88:97:81:f8:a7:d7:61:dc:11:86:39:bd:25:a0:f9:26:67:de:
7b:0f:cf:be:f8:fd:fc:0e:93:45:10:1c:7e:e5:1d:13:29:ab:
6a:02:cf:ef:53:59:5b:06:77:3d:77:c9:b9:16:c7:13:07:c9:
3b:36:87:5e:9f:07:b0:ea:c4:27:b9:0e:0e:19:83:3c:76:76:
01:f6:36:6f:ef:6a:de:d2:25:23:45:61:f2:a7:49:14:89:d2:
7d:7b:1c:48:b2:35:dc:e8:09:cb:23:a8:46:49:9a:3f:cd:31:
39:d2:c9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:12 2026 by rpki-client