Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.mft
File: XbWMRb7iUfx1daY-W0kN7GEU5so.mft (raw, json)
Hash identifier: YTUAvhoYmKjErDp3lEcjMwxLBh+AOmBe1PZ0cGX/x0s=
Subject key identifier: 92:02:E2:E3:C4:7D:3D:F6:E5:49:5C:42:79:96:7D:5B:E8:B3:F1:C2
Authority key identifier: 5D:B5:8C:45:BE:E2:51:FC:75:75:A6:3E:5B:49:0D:EC:61:14:E6:CA
Certificate issuer: /CN=5db58c45bee251fc7575a63e5b490dec6114e6ca
Certificate serial: 019CADC8149D3AFEBDA69514E5844C356469
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XbWMRb7iUfx1daY-W0kN7GEU5so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.mft
Manifest number: 15F3
Signing time: Mon 02 Mar 2026 09:01:36 +0000
Manifest this update: Mon 02 Mar 2026 09:01:36 +0000
Manifest next update: Tue 03 Mar 2026 09:01:36 +0000
Files and hashes: 1: XbWMRb7iUfx1daY-W0kN7GEU5so.crl (hash: NsCPp7tHMKPBWHQXYq8R81k7+UtwDBBOUH+ZCBHiaig=)
2: vHsqeUq6iGnyRjByp03wnHq8Se0.roa (hash: VNscZtJ6p8ltvLlYgNm9TQqlID5TSbcVcko5K60GbLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.mft
rsync://rpki.ripe.net/repository/DEFAULT/XbWMRb7iUfx1daY-W0kN7GEU5so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:14:9d:3a:fe:bd:a6:95:14:e5:84:4c:35:64:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5db58c45bee251fc7575a63e5b490dec6114e6ca
Validity
Not Before: Mar 2 09:01:36 2026 GMT
Not After : Mar 3 09:01:36 2026 GMT
Subject: CN=9202e2e3c47d3df6e5495c4279967d5be8b3f1c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:25:ab:52:bf:6f:82:69:f7:7d:55:6d:bf:f9:
07:9d:41:a9:5b:bf:74:44:e2:ed:15:2f:51:01:41:
0b:ea:fb:05:ce:e2:96:7e:9e:a5:07:30:aa:c4:d2:
3c:6b:b0:26:14:3b:b8:1c:f9:d4:af:c6:d8:d1:a6:
29:0f:11:ba:71:ca:af:f0:e4:52:f3:bc:b4:ba:e1:
c3:1f:05:17:a1:ad:08:9f:e8:27:98:6f:e6:f8:32:
09:30:cc:83:4f:8b:0a:e4:26:be:e0:c7:b4:35:79:
99:f3:8c:8f:1e:d1:b4:f5:72:07:d4:bf:6f:32:16:
54:b3:7e:5e:84:a1:5e:db:e2:f3:fc:66:dc:47:2f:
8b:ef:a0:dc:51:4f:d3:da:9d:69:a1:f9:3b:4d:16:
06:e5:09:bb:79:fb:ee:86:9c:46:96:90:94:c6:bb:
15:a1:55:07:3a:44:72:90:d9:66:3b:d4:14:e0:9e:
e8:dd:e9:6d:16:ba:dc:11:b0:9a:60:3a:45:84:59:
51:6d:38:2c:24:43:fb:88:8f:0c:e1:31:f0:fa:4a:
f7:58:b4:c9:ca:1d:49:a3:8f:eb:bc:6f:2a:07:8d:
f9:a1:d6:d8:ad:91:d0:dc:f1:d7:c4:8d:1e:01:03:
27:9c:8b:50:79:a8:f7:9f:12:75:4f:60:9b:56:4f:
8a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:02:E2:E3:C4:7D:3D:F6:E5:49:5C:42:79:96:7D:5B:E8:B3:F1:C2
X509v3 Authority Key Identifier:
keyid:5D:B5:8C:45:BE:E2:51:FC:75:75:A6:3E:5B:49:0D:EC:61:14:E6:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XbWMRb7iUfx1daY-W0kN7GEU5so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:5a:c5:c7:43:24:db:e4:73:55:5e:51:6e:24:20:48:a6:d2:
f8:53:a4:e9:21:32:8d:b3:17:36:08:5b:43:61:ed:16:53:72:
0c:b4:b1:54:32:26:b4:12:38:34:53:61:a9:d9:81:e6:04:6c:
2c:d2:1d:40:c8:2e:cc:d7:30:7f:e8:cd:5d:9f:d0:c5:a2:63:
8d:2c:8e:a2:94:e3:67:25:22:01:91:4f:fd:3a:7a:80:c8:87:
e0:ec:a7:6a:be:fd:52:f4:f1:43:f6:95:91:15:34:76:f7:f9:
06:05:83:eb:7d:17:68:dc:0d:1a:56:46:19:3f:5f:4b:44:28:
7b:b1:bd:a4:45:f2:7c:ba:fc:67:b1:2c:c7:06:2c:72:fd:bd:
14:1f:fc:28:21:f2:e4:30:04:ae:e9:53:bd:2d:5f:18:d8:4b:
92:70:22:b6:c4:7c:8d:00:b8:a8:79:28:fa:7b:ee:69:47:c6:
ee:13:9f:de:86:33:78:c6:50:9d:82:4a:94:fd:5a:91:78:83:
35:f6:e6:1d:95:58:a0:16:04:7c:14:6d:36:b9:42:34:cc:5e:
67:56:5f:01:94:f9:98:2a:33:00:9f:ea:c7:94:a4:bc:13:22:
79:9e:d3:a0:ed:01:b2:a7:d6:ba:1e:e3:e6:91:dd:ad:12:0c:
81:d6:7b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:57:03 2026 by rpki-client