Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/dbe773-befc-4a77-b513-5e23672673d2/1/XUcovR9dE212i_F1NGHFPaRXRss.mft
File: XUcovR9dE212i_F1NGHFPaRXRss.mft (raw, json)
Hash identifier: DyXSSdg5gsfqThWT0wtGKeCsknwTfC6ZeGTZYuO8d/o=
Subject key identifier: CD:11:4A:F8:3D:B3:B1:BB:1F:1B:7E:7C:4A:8E:9D:CA:62:37:C0:7E
Authority key identifier: 5D:47:28:BD:1F:5D:13:6D:76:8B:F1:75:34:61:C5:3D:A4:57:46:CB
Certificate issuer: /CN=5d4728bd1f5d136d768bf1753461c53da45746cb
Certificate serial: 019CAA8F7AF1E2594092EDBFF3135B035B6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XUcovR9dE212i_F1NGHFPaRXRss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/dbe773-befc-4a77-b513-5e23672673d2/1/XUcovR9dE212i_F1NGHFPaRXRss.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 18:00:55 +0000
Manifest this update: Sun 01 Mar 2026 18:00:55 +0000
Manifest next update: Mon 02 Mar 2026 18:00:55 +0000
Files and hashes: 1: XUcovR9dE212i_F1NGHFPaRXRss.crl (hash: uhgsBiOEOUsv5BBZgdTk1q9AhLEy3zUwoBsVQsGfOLE=)
2: oGFy_UJ1FYJcnSkbjOpzsDeEAhQ.roa (hash: sqZQ4ODNviSrmC5Scgdot54s+8lbk1XnzbtP1SaI9m8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/dbe773-befc-4a77-b513-5e23672673d2/1/XUcovR9dE212i_F1NGHFPaRXRss.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/dbe773-befc-4a77-b513-5e23672673d2/1/XUcovR9dE212i_F1NGHFPaRXRss.mft
rsync://rpki.ripe.net/repository/DEFAULT/XUcovR9dE212i_F1NGHFPaRXRss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:7a:f1:e2:59:40:92:ed:bf:f3:13:5b:03:5b:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d4728bd1f5d136d768bf1753461c53da45746cb
Validity
Not Before: Mar 1 18:00:55 2026 GMT
Not After : Mar 2 18:00:55 2026 GMT
Subject: CN=cd114af83db3b1bb1f1b7e7c4a8e9dca6237c07e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:8a:6c:f6:f8:f2:b5:c7:08:6f:9b:10:59:d4:
e7:b5:46:6c:9d:59:a8:d2:7a:a7:73:a1:61:e7:7a:
92:02:58:c7:5e:05:2e:92:04:33:5e:fd:a5:ae:5d:
15:78:68:60:aa:ed:21:c7:ce:3f:ed:42:6c:be:32:
e8:6e:bf:bf:aa:16:1d:a3:95:57:54:01:f4:d5:5c:
b5:7d:fd:a1:01:14:bf:6c:f0:32:d9:84:d2:a2:5a:
48:60:ea:65:69:5f:e9:1d:c1:1b:1d:4a:b0:93:c0:
af:6e:dd:8c:e7:0f:6f:ed:17:ea:b3:76:d5:a9:c9:
17:08:b1:15:ef:e5:d4:02:5f:85:c9:08:e5:ad:df:
06:ce:d6:fd:35:87:c0:20:70:c1:b8:ec:11:28:be:
8a:c5:2a:ae:e8:58:8a:dd:2b:87:f7:a6:1f:ba:18:
03:42:90:74:d3:74:10:75:1c:29:e1:89:3a:3d:5a:
14:bc:a1:4a:af:89:27:ff:77:c3:0f:c8:58:43:03:
4b:cf:a4:02:36:fd:bb:ea:38:96:1d:af:58:d1:5b:
32:5e:d2:fc:cd:bb:64:31:e3:6c:91:4e:82:04:5d:
ce:d9:19:0e:48:a2:d5:81:76:11:c5:58:5a:0a:e6:
39:ae:bf:c6:4b:a7:bf:ba:4f:0e:7b:3b:57:16:cd:
90:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:11:4A:F8:3D:B3:B1:BB:1F:1B:7E:7C:4A:8E:9D:CA:62:37:C0:7E
X509v3 Authority Key Identifier:
keyid:5D:47:28:BD:1F:5D:13:6D:76:8B:F1:75:34:61:C5:3D:A4:57:46:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XUcovR9dE212i_F1NGHFPaRXRss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/dbe773-befc-4a77-b513-5e23672673d2/1/XUcovR9dE212i_F1NGHFPaRXRss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/dbe773-befc-4a77-b513-5e23672673d2/1/XUcovR9dE212i_F1NGHFPaRXRss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:3c:f2:24:af:cc:b0:80:6d:fa:b5:43:45:a0:ec:89:2c:20:
31:ea:5b:51:b4:ac:5b:7e:0a:a6:69:86:0a:d7:6e:06:16:2d:
44:54:05:c1:0d:58:56:4c:17:24:8a:9e:0d:2c:3e:04:e7:ad:
a9:82:15:a9:5f:f0:8a:88:2a:b9:ae:17:53:0d:ee:a1:97:f8:
8c:cb:72:8c:72:1e:bd:07:26:51:aa:04:16:90:49:e7:03:28:
93:bb:45:82:e5:90:4f:ae:6f:77:6d:b8:4b:37:63:8b:40:77:
39:5c:87:17:02:fc:0b:c9:a5:7e:40:28:1a:b9:aa:a2:d3:57:
fa:18:92:c1:88:74:5d:45:e2:82:c0:b4:00:dd:65:56:17:5a:
99:33:6d:2d:b2:81:01:96:cc:25:25:16:67:8b:2d:27:be:b7:
67:84:19:09:1d:23:d5:1c:f9:bc:33:b5:da:45:f0:14:0b:74:
a1:da:9a:47:f8:6d:37:8d:7a:90:a3:e4:73:13:12:05:db:7e:
de:39:58:a0:ef:6f:09:ce:69:b6:5d:39:62:fa:16:79:cc:b9:
73:1b:45:c5:c1:9d:51:78:7c:aa:37:c8:3e:58:b9:e0:87:9d:
e1:40:50:97:97:c4:cd:79:de:79:e1:2e:a5:43:46:d5:6e:55:
af:e9:c6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:34 2026 by rpki-client