Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.mft
File: XuTrnvjdNYniMt-P6HbyXOlwehQ.mft (raw, json)
Hash identifier: eAnoPvAuWpTkuKOmWFKVfA+gnx1rIexilmmfk4VKKtk=
Subject key identifier: B0:E4:45:31:FA:71:02:B3:E6:A1:6E:0F:E9:7F:13:17:9C:5E:50:0E
Authority key identifier: 5E:E4:EB:9E:F8:DD:35:89:E2:32:DF:8F:E8:76:F2:5C:E9:70:7A:14
Certificate issuer: /CN=5ee4eb9ef8dd3589e232df8fe876f25ce9707a14
Certificate serial: 019CACB49A87B377D9DF08A018178D09EE35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuTrnvjdNYniMt-P6HbyXOlwehQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.mft
Manifest number: 1242
Signing time: Mon 02 Mar 2026 04:00:43 +0000
Manifest this update: Mon 02 Mar 2026 04:00:43 +0000
Manifest next update: Tue 03 Mar 2026 04:00:43 +0000
Files and hashes: 1: XuTrnvjdNYniMt-P6HbyXOlwehQ.crl (hash: YZU1NtXs/OeWGlDRM31qFT+TefBoSNjAJ78gu8ejJkE=)
2: eCfVBrUlWVO_wd2C6zG6HlsWFfw.roa (hash: LnqLUkXGJD0OiqsbSYEC0AppS9eAVHhK/gEl/tMcU6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuTrnvjdNYniMt-P6HbyXOlwehQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:9a:87:b3:77:d9:df:08:a0:18:17:8d:09:ee:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee4eb9ef8dd3589e232df8fe876f25ce9707a14
Validity
Not Before: Mar 2 04:00:43 2026 GMT
Not After : Mar 3 04:00:43 2026 GMT
Subject: CN=b0e44531fa7102b3e6a16e0fe97f13179c5e500e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:76:d1:c2:29:9f:ef:ba:0c:e0:48:65:9d:e7:
6b:30:d8:19:a1:5c:7e:2e:ad:3a:61:c0:6f:54:0f:
23:7a:e2:15:1b:74:b4:29:2d:32:e2:72:94:b4:a9:
26:36:d4:2b:36:6c:88:cd:ec:3a:79:fe:ae:f9:d2:
b1:84:a7:ff:de:45:b2:c8:01:ae:7d:38:7d:f2:54:
56:cf:e1:37:71:01:4e:3c:bf:f8:ac:9c:0e:31:ac:
89:08:61:11:a0:69:d1:95:6b:e7:aa:ad:52:c7:c3:
49:4a:c5:a6:77:7c:db:37:0e:ad:8c:c8:10:68:81:
59:6f:51:41:c4:9f:ea:70:60:ae:3e:a3:18:93:e5:
bb:9e:3c:8c:f5:36:71:1e:36:1a:05:b7:2e:ba:ec:
4a:93:15:51:89:80:7b:d5:be:c8:8d:8a:d5:b1:5b:
ed:16:bd:49:d3:a8:8e:09:7b:64:42:c7:14:3c:49:
00:4a:11:66:ab:57:a7:d4:03:3a:33:4a:55:f4:e7:
33:22:e8:36:46:bc:d2:e6:15:27:a1:31:e9:7e:9a:
3e:f5:1e:f8:fd:23:a1:62:90:57:25:16:af:27:66:
0c:b5:ab:38:69:1e:af:20:57:d9:2b:eb:ab:a8:7f:
5c:b8:44:73:45:61:91:9d:f7:22:06:42:a6:37:fa:
7e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E4:45:31:FA:71:02:B3:E6:A1:6E:0F:E9:7F:13:17:9C:5E:50:0E
X509v3 Authority Key Identifier:
keyid:5E:E4:EB:9E:F8:DD:35:89:E2:32:DF:8F:E8:76:F2:5C:E9:70:7A:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuTrnvjdNYniMt-P6HbyXOlwehQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:8e:01:8d:f4:c0:dc:a5:fd:30:24:43:54:20:ee:25:93:a3:
b6:db:a3:ee:d3:de:b6:f5:bb:8f:0f:59:47:92:f5:6d:58:43:
41:a2:05:a5:d3:fe:73:fc:b8:67:28:fc:d7:2e:88:ac:93:81:
3f:2d:fb:2e:1f:8d:d0:a9:20:68:d8:69:25:87:07:e8:f9:3a:
dc:67:40:55:1a:58:e7:41:7f:53:a3:85:26:1b:e3:8e:84:3e:
30:43:6a:c2:25:12:6a:6a:fa:13:3d:92:42:aa:9b:c6:0e:2b:
d0:a6:cf:51:04:b4:a3:9a:19:ae:96:39:bf:5d:32:53:4d:65:
52:84:b8:12:ba:cd:92:46:4e:0a:0f:f1:40:fb:47:e5:47:50:
1c:21:b8:2b:c6:72:75:9c:aa:93:e7:8b:6d:79:2b:40:c5:53:
9e:38:a6:fa:ba:61:c6:3a:91:90:87:82:0e:a1:a1:ae:3f:57:
79:0f:11:01:cb:7d:e7:b9:5c:3d:49:62:33:72:e9:43:4f:c2:
89:d3:85:b7:16:76:da:23:ac:f3:00:4c:e9:bc:20:1f:51:ba:
e1:c7:0a:83:7d:9b:c3:db:2f:1a:6f:39:65:19:04:7c:f2:73:
4e:90:55:ed:3a:48:c1:2f:52:5b:e9:13:98:cc:9a:95:f9:e0:
fb:c5:8d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:08:16 2026 by rpki-client