Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft
File: XB3W7EouHzdshVxYMSGVoAXNuFA.mft (raw, json)
Hash identifier: hH9wcKKN74/hOB8U/qMWuuRh2QFw3TZYd+v0mV1qIVk=
Subject key identifier: 31:85:2E:E5:9E:29:38:70:D8:0D:3E:0C:ED:99:BD:DE:EB:A3:9B:C5
Authority key identifier: 5C:1D:D6:EC:4A:2E:1F:37:6C:85:5C:58:31:21:95:A0:05:CD:B8:50
Certificate issuer: /CN=5c1dd6ec4a2e1f376c855c58312195a005cdb850
Certificate serial: 019CAC46A13F148A7999EE32E776F3E8969A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XB3W7EouHzdshVxYMSGVoAXNuFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft
Manifest number: 0E53
Signing time: Mon 02 Mar 2026 02:00:35 +0000
Manifest this update: Mon 02 Mar 2026 02:00:35 +0000
Manifest next update: Tue 03 Mar 2026 02:00:35 +0000
Files and hashes: 1: KpNNrs7-74JuAx07tH3Ntml_vj8.roa (hash: iDfnHxKAzmOYLOtglm6RsnOhV84NnDbI1O2L4oOFWp8=)
2: XB3W7EouHzdshVxYMSGVoAXNuFA.crl (hash: Nhe5yNKCXLQCclqZk4KAvIeqpFvHkT8yxFtlCMjdltw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XB3W7EouHzdshVxYMSGVoAXNuFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:a1:3f:14:8a:79:99:ee:32:e7:76:f3:e8:96:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c1dd6ec4a2e1f376c855c58312195a005cdb850
Validity
Not Before: Mar 2 02:00:35 2026 GMT
Not After : Mar 3 02:00:35 2026 GMT
Subject: CN=31852ee59e293870d80d3e0ced99bddeeba39bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2e:e3:94:f2:2a:43:3a:0c:9c:3d:3d:e9:31:
59:8d:2f:81:1b:5d:85:54:94:73:39:14:d1:36:74:
e6:ca:d9:48:d4:f5:ea:90:c3:45:05:08:59:67:f1:
90:80:61:fb:82:f2:19:65:f2:38:05:d0:34:7e:e9:
ff:f0:ac:45:76:f5:55:a7:de:83:d4:6e:b2:2e:8d:
45:58:b7:4f:a7:38:b2:53:62:78:20:5a:d7:4a:b3:
5e:76:04:e0:85:25:d9:6b:32:26:07:d5:10:29:ca:
cf:09:f4:51:4e:e7:b6:58:77:cd:64:ad:ab:38:21:
02:9c:3d:91:1a:8e:f5:81:36:5d:0b:97:0f:b2:c6:
73:12:7c:ec:17:05:81:da:65:39:92:bd:84:53:1f:
37:69:9e:c4:8c:e9:ad:d2:f6:9a:da:36:7c:6b:8d:
8f:44:85:43:48:c6:d5:54:a8:2c:88:1e:13:b3:cd:
d1:46:65:b1:89:02:7d:01:d2:de:fd:6f:e2:fa:7f:
97:1e:62:82:3a:f1:76:f0:e5:6e:e0:2a:bc:4a:f5:
46:e9:64:03:ed:27:ca:ae:ba:35:fc:65:e0:e4:15:
0c:3b:84:74:78:d4:cd:2a:1b:56:a6:84:e3:c5:ae:
5b:75:52:ac:14:f9:99:42:6f:3b:1b:1b:0b:b0:39:
bd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:85:2E:E5:9E:29:38:70:D8:0D:3E:0C:ED:99:BD:DE:EB:A3:9B:C5
X509v3 Authority Key Identifier:
keyid:5C:1D:D6:EC:4A:2E:1F:37:6C:85:5C:58:31:21:95:A0:05:CD:B8:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XB3W7EouHzdshVxYMSGVoAXNuFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:e9:b3:25:34:de:c8:89:99:09:e9:cd:54:b9:04:b1:81:50:
d0:0f:9e:d5:b6:ab:04:f1:b1:e1:36:94:6e:9c:6f:f3:49:f8:
4c:7c:66:86:16:b6:a8:c3:80:21:95:4e:64:78:3e:44:be:ab:
32:96:33:1b:ff:22:e2:ed:23:b1:01:2e:59:63:30:70:07:6b:
42:5c:de:46:84:19:14:05:80:53:4e:9d:5c:71:bb:85:2c:d6:
34:e8:b1:ff:db:d1:90:a1:0c:14:e6:ed:18:35:5b:e2:e6:da:
d9:06:0f:e2:ad:77:73:30:90:02:45:41:a2:ac:87:27:c4:46:
a0:1e:c8:c7:78:52:2e:13:05:01:6e:10:13:b5:ec:91:90:d6:
5a:0f:3b:df:d5:7b:2e:11:3e:80:9b:ca:77:7d:92:61:87:f2:
58:5d:19:38:ad:70:29:7b:e3:ff:98:62:a5:da:e0:dc:7b:1f:
62:19:91:77:3f:21:bd:32:0e:0e:60:b1:2b:2f:58:c4:cc:75:
a5:7d:07:80:99:1b:2d:59:6d:63:bd:f9:a9:a6:eb:8d:de:c6:
ac:4b:70:7a:1c:f8:75:e7:4b:2d:db:54:81:81:b4:c5:2b:5a:
19:a4:a6:19:0a:a4:e9:9b:04:5f:2c:d1:33:4e:79:95:a8:22:
27:f9:c6:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:41:55 2026 by rpki-client