Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.mft
File: XGpfUrAC9ihsHV6yV7tehTNCooQ.mft (raw, json)
Hash identifier: YwNcQeqR0NvaJsGAWMckmajF740QlNmCoc6M3ql5NSM=
Subject key identifier: D4:23:83:17:41:34:DC:54:F5:95:75:D6:B4:A5:47:F2:AB:AC:A0:ED
Authority key identifier: 5C:6A:5F:52:B0:02:F6:28:6C:1D:5E:B2:57:BB:5E:85:33:42:A2:84
Certificate issuer: /CN=5c6a5f52b002f6286c1d5eb257bb5e853342a284
Certificate serial: 019CAAFD73D05F2E6AAE9968D708363CA910
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGpfUrAC9ihsHV6yV7tehTNCooQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.mft
Manifest number: 14F9
Signing time: Sun 01 Mar 2026 20:01:02 +0000
Manifest this update: Sun 01 Mar 2026 20:01:02 +0000
Manifest next update: Mon 02 Mar 2026 20:01:02 +0000
Files and hashes: 1: D4mNPYe_InC3dADZ__TafnXmCbA.roa (hash: 6g1alEqsAaujZY20/+cKTFN3EVqBFkIkRy8k+84+qhk=)
2: XGpfUrAC9ihsHV6yV7tehTNCooQ.crl (hash: DUBH0p2Eq2aL8UOQ8XZbtHegwYn8K3A84urqnNdNnoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGpfUrAC9ihsHV6yV7tehTNCooQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:73:d0:5f:2e:6a:ae:99:68:d7:08:36:3c:a9:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6a5f52b002f6286c1d5eb257bb5e853342a284
Validity
Not Before: Mar 1 20:01:02 2026 GMT
Not After : Mar 2 20:01:02 2026 GMT
Subject: CN=d42383174134dc54f59575d6b4a547f2abaca0ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c2:e2:47:5c:01:e6:5c:fc:61:61:32:dc:4a:
d7:56:23:9a:89:a5:35:07:37:49:e2:96:5b:98:d1:
48:60:34:6e:87:a4:8a:15:67:66:e0:b4:33:f3:1e:
6b:cf:d8:84:86:bb:8a:82:be:b4:f0:a1:aa:00:e7:
5a:d7:1a:3c:4f:8d:93:a3:26:53:68:55:33:22:02:
ef:58:78:c1:91:7d:5f:f6:cd:2b:66:05:58:d0:ba:
bf:5d:08:4e:39:9b:77:83:37:9b:20:9b:69:5d:a3:
f8:c4:6c:a3:19:16:89:e3:37:12:3f:69:41:2d:ab:
65:23:19:70:f3:5f:e1:fd:41:89:67:2f:4e:80:e6:
06:f7:8f:c7:ee:19:98:8e:eb:8b:a8:a2:a7:d1:ce:
8d:7a:65:a1:3b:44:cd:06:74:c0:0e:66:fe:c5:5f:
b2:83:ae:63:a9:12:ae:7b:28:13:a7:5d:4a:3a:34:
68:a8:2a:e2:0f:74:08:ab:0c:19:f9:4d:5c:ab:10:
3b:1f:de:0e:df:b1:c9:1b:8e:e9:9b:47:a6:3d:da:
b4:10:2c:81:97:6f:9d:a0:4d:6b:ce:8a:44:f6:1d:
e3:94:fc:53:9a:56:17:d9:ce:c9:61:51:07:33:87:
ec:cf:5e:93:b4:6f:1a:71:8a:79:df:70:5d:85:b1:
3a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:23:83:17:41:34:DC:54:F5:95:75:D6:B4:A5:47:F2:AB:AC:A0:ED
X509v3 Authority Key Identifier:
keyid:5C:6A:5F:52:B0:02:F6:28:6C:1D:5E:B2:57:BB:5E:85:33:42:A2:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGpfUrAC9ihsHV6yV7tehTNCooQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:70:6f:57:aa:43:a1:4f:15:09:6a:4d:97:20:5e:8c:92:91:
0c:76:da:b4:e0:a7:90:50:5a:bc:a4:e6:16:3b:d1:28:5f:94:
23:6b:47:1d:95:b3:d5:fb:ce:68:65:ba:66:ec:23:57:bc:79:
fc:39:17:d2:62:03:a8:41:30:fe:20:3d:c3:5f:37:f5:a4:9a:
ca:24:fa:74:e0:b8:5b:a6:52:36:fa:c6:68:0f:82:57:e5:36:
4a:59:b8:44:c3:66:f4:aa:fa:46:f1:a3:36:98:03:b5:f3:89:
23:18:24:0d:9a:f0:76:a2:6b:c4:27:70:47:33:9c:72:31:0b:
5b:8e:fa:7b:8d:c8:62:ef:29:df:59:1b:6a:b8:c6:e1:40:a1:
bd:36:ab:df:9b:1b:b3:e5:87:01:f6:02:03:ed:5a:2f:27:63:
b0:b8:b4:1c:73:fc:8f:ce:f2:b6:e8:6f:a5:14:5d:31:4b:a3:
d4:63:6b:7c:f3:48:7a:ca:fe:2a:ea:49:56:c4:f3:15:0c:b4:
f3:99:4f:53:47:60:4b:41:1a:b1:d5:7b:ba:59:60:25:a1:38:
f9:ba:c2:e6:01:57:7d:2c:4e:22:94:89:7f:89:e0:39:a5:4a:
a3:11:18:c9:d8:9d:24:ab:4f:12:6c:f9:24:c5:9e:b1:5c:a9:
2f:62:cc:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:50:38 2026 by rpki-client