Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft
File: Xjy32YLH-e28k9TLQrlPoCnDgt8.mft (raw, json)
Hash identifier: 2bYW7e1wbFvM6nRxvAYAzg8iPt6YsTCd9WsEtm/Jlv4=
Subject key identifier: E1:7C:44:F0:C3:61:F8:B9:05:64:2D:26:1E:34:DC:39:76:6D:3B:E4
Authority key identifier: 5E:3C:B7:D9:82:C7:F9:ED:BC:93:D4:CB:42:B9:4F:A0:29:C3:82:DF
Certificate issuer: /CN=5e3cb7d982c7f9edbc93d4cb42b94fa029c382df
Certificate serial: 019CAA58AAF57A28A6106DF23A15AF4CD26E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft
Manifest number: 0FA6
Signing time: Sun 01 Mar 2026 17:01:03 +0000
Manifest this update: Sun 01 Mar 2026 17:01:03 +0000
Manifest next update: Mon 02 Mar 2026 17:01:03 +0000
Files and hashes: 1: Xjy32YLH-e28k9TLQrlPoCnDgt8.crl (hash: JlYVYf4cfaHKHdPv+9GjJ4CxvHbpfmsNONn0MHWech4=)
2: yeEabSTnkLeywBVAwxOdpvb42Eo.roa (hash: PvqV+kMqmAte8XfLn6bjSK6JChkDgm/iDFgeeMv/yOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:aa:f5:7a:28:a6:10:6d:f2:3a:15:af:4c:d2:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3cb7d982c7f9edbc93d4cb42b94fa029c382df
Validity
Not Before: Mar 1 17:01:03 2026 GMT
Not After : Mar 2 17:01:03 2026 GMT
Subject: CN=e17c44f0c361f8b905642d261e34dc39766d3be4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9a:d5:90:c4:a0:06:b3:2e:50:ea:b6:fe:db:
b3:2b:39:08:05:0f:73:87:07:7b:af:57:7e:ab:9a:
29:a5:2e:7c:92:3c:9e:5c:90:c5:42:7c:a8:f3:5a:
ca:8c:9b:d2:2c:75:f6:62:5d:69:e2:36:a0:9c:f2:
55:52:cb:ef:72:a7:f8:26:72:b6:75:3a:80:ae:4d:
3d:f4:9d:0e:74:87:c6:89:55:99:8f:54:fb:22:35:
ab:29:09:be:7b:de:a5:46:b0:3a:28:81:2b:da:a9:
80:2e:c3:01:04:30:6d:ac:7e:77:d1:76:e5:63:14:
30:a0:01:2d:d1:33:45:96:7f:e3:fa:3d:08:36:2d:
8b:09:fd:e5:e5:a9:7e:18:c0:a3:05:69:99:61:19:
3f:4d:35:07:c5:84:36:38:1e:59:cf:1f:6a:a2:d1:
e6:f4:bc:88:79:3f:e0:2b:f9:7c:26:c1:51:08:08:
b9:58:e8:07:27:1b:40:4c:53:af:0d:1e:1e:4e:7d:
fe:a1:27:bb:73:02:3b:1e:58:95:64:70:cb:8d:8e:
7e:d8:4f:2e:ed:88:61:db:fd:09:7c:d5:f9:40:45:
12:bc:90:53:a1:7b:19:4a:ad:33:65:b5:c3:b9:f4:
3c:51:db:29:00:b0:29:b0:20:b0:4c:eb:f1:31:3c:
d7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:7C:44:F0:C3:61:F8:B9:05:64:2D:26:1E:34:DC:39:76:6D:3B:E4
X509v3 Authority Key Identifier:
keyid:5E:3C:B7:D9:82:C7:F9:ED:BC:93:D4:CB:42:B9:4F:A0:29:C3:82:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:3c:f2:85:64:06:e2:84:4a:98:8d:ec:22:b3:ae:ab:83:d8:
39:aa:0f:c5:7f:b3:63:68:84:c3:26:fd:b0:ba:9c:a2:23:47:
30:c2:46:cf:88:f9:f2:a1:ac:80:c6:7c:19:75:cd:70:dd:0b:
d4:4c:d0:dc:e3:03:ae:8e:01:95:38:c1:92:78:bb:ac:50:06:
22:a4:6a:3a:3f:39:5f:cd:3b:ed:ed:7c:e1:1c:9a:1a:66:d2:
69:51:76:7d:32:49:5b:c2:9e:7b:e0:0b:6f:3e:fa:08:e6:26:
ee:37:42:1e:14:00:19:56:38:15:cd:8c:00:5b:c4:30:19:3b:
1e:4c:b3:37:93:d7:75:e6:fd:b0:15:af:de:9b:47:03:f4:82:
dd:37:e2:ae:c9:2d:25:90:79:c8:85:93:9a:48:88:2e:ac:a1:
26:af:e5:33:56:a8:5c:0e:bd:5c:75:b3:46:2d:29:60:61:ae:
66:00:c8:13:8d:47:a1:10:64:77:eb:8a:82:a3:a2:06:9f:77:
e2:ad:d4:bd:4a:3e:85:10:f8:6c:00:88:30:b1:7c:88:1b:05:
dd:35:d0:3b:fb:c8:91:4f:a6:53:70:f4:3a:05:36:79:de:c0:
75:5a:82:24:be:ba:0c:b0:49:95:51:07:39:70:ce:5a:8c:e6:
0e:e4:44:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:01 2026 by rpki-client