Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft
File: XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft (raw, json)
Hash identifier: Ss9odp9xRMviU8PNvUm3uFvZ4MCbcfNYAbkGZNidUTM=
Subject key identifier: 37:1C:20:48:9C:88:1D:E0:3F:7A:34:1C:58:4B:C6:AD:D1:FC:9F:0C
Authority key identifier: 5C:B8:13:E0:9C:99:55:E0:BD:A7:04:1F:83:73:A8:FC:5D:AE:6B:9D
Certificate issuer: /CN=5cb813e09c9955e0bda7041f8373a8fc5dae6b9d
Certificate serial: 019CAE354CC3A29729837229E5FE20A5D2D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLgT4JyZVeC9pwQfg3Oo_F2ua50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft
Manifest number: 0E73
Signing time: Mon 02 Mar 2026 11:00:54 +0000
Manifest this update: Mon 02 Mar 2026 11:00:54 +0000
Manifest next update: Tue 03 Mar 2026 11:00:54 +0000
Files and hashes: 1: XLgT4JyZVeC9pwQfg3Oo_F2ua50.crl (hash: k+JODTf4133PpnfIZrT3TVw2Ospzp5iGBSUjT70IOJk=)
2: z7DQCTMfSpxYNEqc8NdY7ztXAQY.roa (hash: 0f3C1JOESj8A6E71R4wmJYEbq8aExFFVXotwYdP1hio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft
rsync://rpki.ripe.net/repository/DEFAULT/XLgT4JyZVeC9pwQfg3Oo_F2ua50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:4c:c3:a2:97:29:83:72:29:e5:fe:20:a5:d2:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cb813e09c9955e0bda7041f8373a8fc5dae6b9d
Validity
Not Before: Mar 2 11:00:54 2026 GMT
Not After : Mar 3 11:00:54 2026 GMT
Subject: CN=371c20489c881de03f7a341c584bc6add1fc9f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7c:89:e0:6d:f5:02:1a:86:ae:99:13:08:c6:
2c:21:70:d9:e7:df:e0:91:3e:46:d9:96:ae:09:d1:
87:df:43:f3:4a:6d:41:85:8e:2d:b1:1e:21:cb:76:
c0:be:95:ff:0e:d2:f9:8a:df:ec:36:c0:0d:d9:d9:
3b:da:e3:5d:99:59:06:7d:26:83:d3:7a:a9:f5:b8:
a2:cd:a1:69:a4:61:81:da:3d:21:77:42:ac:9a:30:
c0:97:b1:6a:c0:3d:67:60:d5:6f:80:7b:cb:20:66:
89:66:85:46:91:f0:2a:d0:4d:c0:52:3d:0f:e5:41:
bf:fa:16:ca:7c:79:ba:0c:bc:48:b8:62:f1:8d:67:
20:01:e3:81:e1:ee:bd:fe:eb:3d:8d:e6:59:ea:7e:
34:6b:54:cf:23:5f:6b:67:54:9b:01:c5:1c:1a:2e:
cf:96:17:7a:fc:13:f6:bb:c6:0d:ed:80:e9:95:57:
cd:15:26:25:fd:04:2a:b3:cb:38:ce:6c:dd:cf:93:
8f:48:3c:83:5e:a0:0a:2d:d4:43:2e:8a:73:d5:85:
8b:f0:9c:9d:bb:ab:02:30:7c:32:98:ac:5a:66:c9:
ec:e4:6a:6c:60:40:56:2f:2a:83:76:18:cd:25:c2:
cf:90:eb:73:38:99:82:27:e3:f5:31:c4:86:96:35:
33:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:1C:20:48:9C:88:1D:E0:3F:7A:34:1C:58:4B:C6:AD:D1:FC:9F:0C
X509v3 Authority Key Identifier:
keyid:5C:B8:13:E0:9C:99:55:E0:BD:A7:04:1F:83:73:A8:FC:5D:AE:6B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLgT4JyZVeC9pwQfg3Oo_F2ua50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:9f:d7:5c:be:70:43:8f:e9:88:7d:85:55:86:29:40:53:ec:
66:23:e7:94:1b:a7:e1:fe:fc:bd:e7:95:26:96:91:cf:c0:5c:
b0:e8:56:49:83:1e:74:47:e0:0d:e6:15:31:67:f9:2e:66:c3:
84:b7:43:b6:29:88:12:3d:46:a8:71:fb:08:42:7e:35:c6:af:
35:48:9a:31:99:31:13:e4:f0:93:e8:30:1f:30:f5:4e:06:c2:
ba:95:25:80:97:fd:31:de:89:9d:4c:f4:23:22:2f:80:99:9b:
94:15:42:86:ba:ee:9c:20:ea:56:87:ae:c2:98:3b:62:92:1a:
fe:b6:06:86:43:76:db:08:f6:c6:95:e1:6d:fd:dd:74:62:a9:
7b:85:10:d0:9a:b4:00:38:bb:d0:09:06:74:94:ef:26:05:8d:
54:c0:32:e3:10:2e:fb:d9:2d:8e:a4:e7:e2:05:9f:c7:68:5f:
70:72:99:1f:42:60:ea:32:18:04:97:75:34:4b:62:0a:67:d3:
a1:4b:90:16:d2:4e:67:1f:80:51:ad:a5:af:18:2e:6c:5c:86:
b0:f9:f5:d4:6d:25:35:72:71:58:03:79:70:78:a6:55:23:93:
18:6a:10:bb:2f:b4:bd:fa:c4:95:d4:27:c7:ac:c2:0a:4e:d5:
bd:45:45:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:28:27 2026 by rpki-client