Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.mft
File: XEO9wLtU-4ae6Dor2L2Hc5iTpCw.mft (raw, json)
Hash identifier: AXoxh5tbZYmAE6ETbgk0yvTl5KNtOzHTBHUceyvts2M=
Subject key identifier: 71:14:E7:B2:A6:21:B8:E0:B1:9B:9F:76:57:27:4B:5B:EF:6F:36:B1
Authority key identifier: 5C:43:BD:C0:BB:54:FB:86:9E:E8:3A:2B:D8:BD:87:73:98:93:A4:2C
Certificate issuer: /CN=5c43bdc0bb54fb869ee83a2bd8bd87739893a42c
Certificate serial: 019CA7FC616BFD7F2986FDD59AC36214BE79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.mft
Manifest number: C5
Signing time: Sun 01 Mar 2026 06:01:00 +0000
Manifest this update: Sun 01 Mar 2026 06:01:00 +0000
Manifest next update: Mon 02 Mar 2026 06:01:00 +0000
Files and hashes: 1: XEO9wLtU-4ae6Dor2L2Hc5iTpCw.crl (hash: eHKdcln8Yw0M63nuy0kq9zsD3cvKm4TKjx9KFC7esvs=)
2: pPahSaeBPta7w6VOnQkraRmUcA0.asa (hash: FCTya6t/QqQMoFaMDmatYCTAuidSm61Lv7qwKelhC5E=)
3: rXJCBpwtYShFouVpouU47HymwWo.roa (hash: z0tPKD9etDZny3IDTZR0T2qHlWP90XZw84nhExsH4jI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a7:fc:61:6b:fd:7f:29:86:fd:d5:9a:c3:62:14:be:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c43bdc0bb54fb869ee83a2bd8bd87739893a42c
Validity
Not Before: Mar 1 06:01:00 2026 GMT
Not After : Mar 2 06:01:00 2026 GMT
Subject: CN=7114e7b2a621b8e0b19b9f7657274b5bef6f36b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e0:28:c7:12:57:da:bb:a4:ec:b9:7e:6d:dc:
ee:97:3d:3c:0f:ac:22:82:73:6e:4e:f5:c0:ca:06:
60:f3:d1:b6:1f:94:fa:54:7e:9e:48:8d:b6:af:35:
77:a3:c7:a6:10:9d:a7:3a:46:89:8b:f3:4f:66:36:
9a:b3:f1:f1:09:3f:49:9d:c4:a8:b8:da:01:fa:e7:
b7:c7:21:b5:09:8f:1c:b0:82:93:97:50:91:07:3a:
e5:63:46:a6:15:c3:a9:33:10:e6:52:59:27:37:b5:
50:06:2a:d6:05:fd:5c:48:05:02:1d:c1:e1:b5:8f:
0c:66:10:c5:47:61:02:1c:da:dc:fb:c7:a9:6a:1b:
11:bc:b4:d5:25:60:57:bd:f3:1e:cd:f5:60:f9:e9:
da:76:f6:16:bc:0a:31:d7:3e:81:9d:42:74:7f:43:
50:7d:2d:52:d6:a2:0d:99:be:bf:9f:cc:b8:da:b2:
d6:75:be:9a:c8:e5:30:0c:dc:d3:eb:47:d0:af:f9:
67:41:3a:d2:12:71:19:30:e5:4a:09:1b:e4:99:56:
7d:78:ca:7a:da:16:cb:c9:77:b4:83:4e:96:c4:aa:
9d:44:f4:71:c2:45:63:98:99:d1:86:b4:7d:57:5b:
a4:28:17:19:dc:77:63:13:b6:a8:ac:0a:2d:7b:45:
92:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:14:E7:B2:A6:21:B8:E0:B1:9B:9F:76:57:27:4B:5B:EF:6F:36:B1
X509v3 Authority Key Identifier:
keyid:5C:43:BD:C0:BB:54:FB:86:9E:E8:3A:2B:D8:BD:87:73:98:93:A4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:fe:61:23:e1:e9:1c:2a:38:33:28:0c:ef:3c:fd:64:5d:aa:
9f:b4:5d:ac:47:e3:30:2d:b7:fe:84:07:30:1d:0c:2a:20:77:
47:93:70:1e:11:88:78:0b:6f:da:c5:dd:62:e3:26:bc:9b:fa:
d5:43:21:26:d0:63:9c:79:9a:eb:40:d7:f8:e9:6f:87:65:11:
ba:53:92:20:7f:36:7b:ea:49:fe:4d:94:50:b1:22:9e:cb:55:
e0:e4:59:90:3e:2e:28:98:6d:92:bc:db:bb:48:d5:68:4e:8d:
2b:66:01:20:11:18:cb:50:1b:5f:4f:dd:b7:96:d2:3e:94:1e:
4a:bc:2c:bb:b8:ad:f7:a9:82:a6:85:6c:39:36:a8:46:42:22:
e9:b5:7c:72:1a:00:f1:8e:4f:72:19:67:ad:2d:2f:a7:de:67:
78:32:a7:b0:59:8f:d7:a5:3f:eb:90:f2:4c:96:ea:40:90:c8:
2d:95:51:81:ef:31:24:fe:d2:99:ca:5a:7a:c6:27:d3:7c:e6:
57:92:19:ce:61:19:e8:90:92:35:51:f3:80:76:19:f0:1f:93:
31:14:77:da:f8:41:6d:2c:0a:84:a0:24:5a:cb:67:4f:2e:63:
1a:67:7e:56:2f:85:ef:91:ab:9c:86:a1:00:ec:6c:16:8a:8d:
da:9f:55:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:46:40 2026 by rpki-client