Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft
File: XebyWkVRz4ssLvOVlGiNrwqbJWs.mft (raw, json)
Hash identifier: d8bk33vwMO/GS657tB/9rjpgDSF2unz0UsZeFe/708A=
Subject key identifier: BC:08:DC:71:07:58:0A:16:CE:81:DA:CB:D1:4D:81:78:AA:84:97:E2
Authority key identifier: 5D:E6:F2:5A:45:51:CF:8B:2C:2E:F3:95:94:68:8D:AF:0A:9B:25:6B
Certificate issuer: /CN=5de6f25a4551cf8b2c2ef39594688daf0a9b256b
Certificate serial: 019CACB4D7659F3B7B1E45B476C8A6D09F6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XebyWkVRz4ssLvOVlGiNrwqbJWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft
Manifest number: 1736
Signing time: Mon 02 Mar 2026 04:00:58 +0000
Manifest this update: Mon 02 Mar 2026 04:00:58 +0000
Manifest next update: Tue 03 Mar 2026 04:00:58 +0000
Files and hashes: 1: XebyWkVRz4ssLvOVlGiNrwqbJWs.crl (hash: 4k99n8ZRgtOjtXvTMtoyIBIoduvz3lYWnIwny6PpCuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/XebyWkVRz4ssLvOVlGiNrwqbJWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:d7:65:9f:3b:7b:1e:45:b4:76:c8:a6:d0:9f:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5de6f25a4551cf8b2c2ef39594688daf0a9b256b
Validity
Not Before: Mar 2 04:00:58 2026 GMT
Not After : Mar 3 04:00:58 2026 GMT
Subject: CN=bc08dc7107580a16ce81dacbd14d8178aa8497e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ef:7b:2f:5f:7b:a6:ec:2c:36:31:ad:4d:9c:
98:53:c2:75:bb:83:e1:ef:c8:87:12:79:34:2b:f1:
ea:be:29:af:de:54:bc:ef:8a:d9:2d:94:aa:01:5a:
e9:44:e0:a2:49:08:23:a2:32:23:fe:17:6d:fd:18:
ea:5f:3e:55:5c:5b:99:f5:58:7a:61:b4:57:3d:9d:
15:76:68:c5:99:f8:75:87:76:bd:de:b1:aa:d1:89:
5d:10:83:49:4a:c7:19:c9:e2:51:ff:09:92:c8:2e:
37:74:1a:81:43:20:45:60:3c:a4:ee:dc:b3:37:69:
b3:dc:66:50:f7:22:46:df:b0:13:c3:a1:25:1a:a8:
4c:a2:9d:3e:c6:29:8b:9e:28:44:e7:55:18:2b:c1:
0c:dc:d8:cb:34:ff:fb:a1:4e:69:e5:68:ac:44:f3:
cd:7b:21:35:ac:8b:fe:a8:07:6c:81:cb:af:3a:62:
00:da:4d:28:c2:d5:d9:99:c8:f8:97:44:1f:95:b3:
70:cf:f1:8e:bb:c9:76:42:12:5b:32:ed:4f:3d:b6:
09:74:32:87:4a:ed:95:7e:d3:82:08:92:b6:fa:02:
46:ac:04:9c:30:e7:ae:f8:ee:23:7b:c0:4b:27:27:
46:91:41:3c:56:80:e7:5c:d0:20:20:be:be:98:3a:
6a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:08:DC:71:07:58:0A:16:CE:81:DA:CB:D1:4D:81:78:AA:84:97:E2
X509v3 Authority Key Identifier:
keyid:5D:E6:F2:5A:45:51:CF:8B:2C:2E:F3:95:94:68:8D:AF:0A:9B:25:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XebyWkVRz4ssLvOVlGiNrwqbJWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:a1:fb:56:bf:64:ce:0a:82:5c:62:ce:8e:03:a8:97:88:bc:
eb:7e:8d:b4:4a:b0:c1:b5:ae:cd:29:72:b2:4d:b7:92:1d:01:
64:12:76:0a:0d:4b:88:89:8f:b7:f0:5f:dc:55:2d:0a:bc:0d:
68:5f:73:e5:9d:ba:7e:ee:fd:e4:e9:b1:20:c8:c9:15:30:5b:
6c:3d:72:d7:2a:56:4f:db:7e:ba:ca:9a:8d:29:ce:7c:97:0c:
1a:bb:21:79:4b:41:61:0b:85:ba:3a:a6:84:04:13:e2:f5:70:
a1:66:cf:61:c7:b1:b0:cd:1f:4a:dc:af:ab:5a:9b:27:80:d8:
00:3e:1a:a5:79:c6:41:45:64:d9:1f:f8:7e:ca:a1:9f:4c:ce:
25:86:5a:89:be:d9:0c:b9:46:84:62:3d:a5:f4:2c:66:a7:0d:
f1:50:84:b4:ed:6a:d0:c6:75:50:1d:a3:12:2f:9b:00:99:bf:
8d:05:89:31:50:ce:a3:d2:d4:0b:38:dc:de:e6:07:b9:26:39:
39:80:7a:67:5d:3e:31:3e:6e:4f:99:05:d2:2a:b7:09:74:0a:
1b:1e:94:d1:35:a9:61:b9:80:29:f4:64:92:c7:b7:b5:13:12:
68:8c:58:95:07:cb:09:47:87:42:28:81:4f:69:24:11:a3:4f:
c1:cd:88:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:05:22 2026 by rpki-client