Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
File: XigJUGU6fsWMUzhdALOB77tGWCQ.mft (raw, json)
Hash identifier: KXQAl7VuIGNvWcIFz4QqL2Y0ZDUZcHKmm+08Ur+GsTM=
Subject key identifier: 91:14:D7:C5:17:DD:07:48:18:6C:0A:62:C5:76:59:1D:9D:52:9C:D3
Authority key identifier: 5E:28:09:50:65:3A:7E:C5:8C:53:38:5D:00:B3:81:EF:BB:46:58:24
Certificate issuer: /CN=5e280950653a7ec58c53385d00b381efbb465824
Certificate serial: 019CABD96ACF5DFCC72FC94877184D7318F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
Manifest number: 0807
Signing time: Mon 02 Mar 2026 00:01:18 +0000
Manifest this update: Mon 02 Mar 2026 00:01:18 +0000
Manifest next update: Tue 03 Mar 2026 00:01:18 +0000
Files and hashes: 1: 1-N-Z3cPVFu_Om0GHK2AgOkgXdoM.roa (hash: fr16WHaKP/dmz7kwPH4GVwwXFVV/SyIEEVY49/wQV+U=)
2: 1aw8Nv97xOelgCP3-YnwnaxEm5Y.roa (hash: jy29WIgwdNl8op/0r93ONPzqQSdB42DU8p3Gs7efZY0=)
3: 2PxDuTNSWd2nVBQOyZp7w-a3G48.roa (hash: nuRMk74zjQwmTzVhehj6QjrkhW4+qo+fGCHLFEBJBC0=)
4: XigJUGU6fsWMUzhdALOB77tGWCQ.crl (hash: oeMReCjUG4nLE7XDrb+92u4GdaxDd8b/nda+yPP/phY=)
5: c9R4pyYEgXuth8LibhVlQrijaqw.roa (hash: GjJoF2AKi6roB+eJMggN2owFvnp/FEnfdBtdPLGnDgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:6a:cf:5d:fc:c7:2f:c9:48:77:18:4d:73:18:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e280950653a7ec58c53385d00b381efbb465824
Validity
Not Before: Mar 2 00:01:18 2026 GMT
Not After : Mar 3 00:01:18 2026 GMT
Subject: CN=9114d7c517dd0748186c0a62c576591d9d529cd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fd:e0:d7:59:09:ba:91:88:c1:3d:89:9a:ce:
f5:6d:26:cd:7c:78:f8:68:38:1d:b8:6b:4a:43:1c:
02:80:5b:28:36:c9:c7:11:f2:06:a2:a1:97:2d:e0:
ca:79:1d:02:7e:d8:bc:81:7b:be:4e:fc:e9:e2:67:
eb:7d:70:75:78:11:de:6d:3a:83:04:a1:17:ed:3b:
ea:73:9e:94:c6:84:f3:b8:93:a5:69:63:01:5e:3c:
5f:b2:10:6a:ca:34:5b:39:25:c1:2e:df:64:d3:40:
5f:32:ce:56:8f:02:83:c9:20:f4:6b:a9:ee:c3:91:
44:75:d2:b3:42:57:76:98:ed:96:22:9e:dc:00:20:
6c:7c:6c:3d:51:4d:87:27:ab:b7:aa:13:9f:2e:45:
93:7d:20:c4:f9:d7:9c:2c:b8:b3:99:33:cc:e8:4a:
8d:62:40:39:00:f7:ea:98:bc:77:87:90:00:6b:ef:
cf:f1:30:08:03:a1:03:f6:32:f1:5f:18:bc:d2:0b:
c1:c6:96:73:a8:fe:70:0f:95:88:44:30:db:7a:13:
b4:88:48:2c:e0:cd:ee:50:b8:d5:f5:5e:f1:f0:ee:
cc:cf:7a:d1:29:69:db:a1:00:da:f2:03:1a:b1:77:
d0:8b:b8:fb:38:48:26:f3:7e:0d:60:99:67:c1:ac:
cf:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:14:D7:C5:17:DD:07:48:18:6C:0A:62:C5:76:59:1D:9D:52:9C:D3
X509v3 Authority Key Identifier:
keyid:5E:28:09:50:65:3A:7E:C5:8C:53:38:5D:00:B3:81:EF:BB:46:58:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:1f:2a:f4:c7:77:4f:c8:dc:ec:bd:73:46:f4:5c:70:e2:a5:
4a:e2:55:14:dd:50:b3:08:5d:27:ee:34:46:19:60:6f:f9:bf:
0e:08:78:fa:30:6c:32:e1:c3:7e:0f:c0:db:6c:d4:0f:90:1b:
93:07:89:20:43:2b:7d:b4:17:31:45:85:d3:07:75:dc:69:42:
f4:d1:10:64:18:7a:75:aa:aa:bc:84:f9:06:2e:8e:21:d3:fe:
e9:49:c5:3d:a0:43:77:04:2f:30:8d:05:24:28:b7:63:ca:ac:
1c:eb:08:66:eb:0f:9f:16:f2:db:a3:4e:be:1e:db:14:95:d2:
73:76:86:14:7d:e7:55:8a:c7:30:31:2c:cc:18:1a:04:f9:25:
39:e6:02:3d:c6:29:f2:b0:10:9b:31:ca:16:ee:b0:38:09:70:
e5:9a:cb:ef:47:fb:80:9d:5f:0c:7f:62:eb:54:63:85:14:da:
5b:3c:4d:4a:bc:cc:4f:e7:cf:82:64:b1:9b:42:7d:9d:ee:df:
3e:09:b2:61:6e:61:89:33:e6:d2:7b:77:f9:1b:b3:10:64:0e:
dd:5a:0e:28:f7:33:4c:2c:61:91:62:68:16:d6:35:04:75:b9:
a3:4f:10:4e:a0:ef:51:fc:46:94:84:3d:33:ef:f3:25:bd:8f:
05:45:55:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:11:39 2026 by rpki-client