Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft
File: XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft (raw, json)
Hash identifier: OVBsy3bjVhF6ZhEDH5+7OeIJYHQNtDedeC32Q0Eyxrk=
Subject key identifier: 2F:DC:FD:59:E5:1C:43:0C:5F:3E:73:5B:46:87:E5:C7:01:C1:2C:8E
Authority key identifier: 5C:DE:8E:81:39:F2:C8:F6:2F:84:82:D0:1B:0A:DB:86:B2:A1:D1:95
Certificate issuer: /CN=5cde8e8139f2c8f62f8482d01b0adb86b2a1d195
Certificate serial: 019CACB5635243F19CE45D9A450BC15AAFF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XN6OgTnyyPYvhILQGwrbhrKh0ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft
Manifest number: 08D6
Signing time: Mon 02 Mar 2026 04:01:34 +0000
Manifest this update: Mon 02 Mar 2026 04:01:34 +0000
Manifest next update: Tue 03 Mar 2026 04:01:34 +0000
Files and hashes: 1: XN6OgTnyyPYvhILQGwrbhrKh0ZU.crl (hash: Y0qE0OVPaUhzj7pBdh8s1bH1Qy9FBEUWFzMEopkrGYo=)
2: b757MQvXDSUkc0atEwpcyuKC6YI.roa (hash: RFAcdsiEO0xgN3cYS1sxIjrVlqcw5hgZfBN09N0DhJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XN6OgTnyyPYvhILQGwrbhrKh0ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:63:52:43:f1:9c:e4:5d:9a:45:0b:c1:5a:af:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cde8e8139f2c8f62f8482d01b0adb86b2a1d195
Validity
Not Before: Mar 2 04:01:34 2026 GMT
Not After : Mar 3 04:01:34 2026 GMT
Subject: CN=2fdcfd59e51c430c5f3e735b4687e5c701c12c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c5:a1:fb:8f:bd:c9:9a:31:c5:ff:44:ac:ae:
ee:4c:72:68:39:99:8f:bd:32:64:de:6e:bb:92:06:
2d:a0:c5:8e:ab:ad:18:68:6a:b5:b0:29:c6:ea:6c:
cb:bd:d1:ad:a7:74:8d:cc:bb:46:b7:2c:34:0a:e3:
d6:6e:72:60:5e:d6:dc:ab:04:74:a7:90:c5:88:8d:
f3:bc:c8:b0:fb:55:5f:fb:d5:bc:0a:bb:3f:6a:48:
68:12:37:34:92:fa:51:de:8a:57:36:30:7b:ca:79:
29:46:b4:6c:d7:27:c6:92:20:28:3c:42:84:2a:de:
07:9f:cc:57:de:74:20:a3:7f:cc:38:e9:68:ae:32:
ae:13:8c:7e:41:3f:01:8b:3c:90:f4:70:2b:f8:7e:
f1:b0:1e:a0:29:83:c9:87:8a:b2:6d:bf:33:b3:b4:
d5:a9:d1:30:3b:4a:fa:cd:c4:0d:65:02:a6:3a:ad:
a0:ff:ad:09:2a:07:2e:3a:0c:3d:f2:04:98:24:df:
df:dd:40:a5:a0:ff:b0:c5:c8:8f:ea:9a:ef:d2:ff:
09:aa:48:44:bc:d5:21:60:10:12:79:e0:48:5b:2b:
3a:90:0e:0f:9c:68:56:58:7f:2a:b2:80:36:35:50:
9d:fc:24:fa:c6:64:f9:42:1d:b1:7e:e4:2e:ba:39:
68:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DC:FD:59:E5:1C:43:0C:5F:3E:73:5B:46:87:E5:C7:01:C1:2C:8E
X509v3 Authority Key Identifier:
keyid:5C:DE:8E:81:39:F2:C8:F6:2F:84:82:D0:1B:0A:DB:86:B2:A1:D1:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XN6OgTnyyPYvhILQGwrbhrKh0ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:e6:cb:f8:85:9e:06:e9:3e:9f:16:fe:a8:88:ae:8d:1b:79:
66:87:4f:e7:7b:74:ca:cf:4a:f2:83:97:28:d2:c3:aa:2d:19:
8b:32:0a:c6:e2:5b:88:38:54:d1:f9:76:5a:08:42:cc:bb:2c:
27:b6:30:8b:df:38:f4:7d:3b:28:c5:09:b5:a4:ea:e6:43:0a:
cb:fd:d3:1f:31:a1:d7:4e:59:fe:51:00:e4:a7:03:dd:aa:a1:
b8:b7:c5:3b:6d:55:06:68:f4:a2:77:61:c7:66:a8:67:89:5a:
54:c8:c6:46:54:1c:a5:31:a6:97:55:c3:33:7b:b5:7a:c8:95:
0b:72:ef:46:6f:30:c8:fd:b1:bf:d5:7a:89:d6:e2:fc:cf:59:
af:b9:c9:bc:c5:9d:45:47:a8:88:02:ce:db:e9:7e:b0:9d:6c:
00:d2:4e:77:0d:f4:02:d2:ae:59:3b:6b:72:19:69:8b:ed:1a:
dc:18:b6:86:6b:72:3d:ef:a4:33:5b:ab:6d:c0:d2:59:4f:27:
10:b7:1a:12:f5:1c:b2:66:d9:76:86:1b:35:fd:e5:d2:4a:33:
ca:19:d6:c2:62:94:d2:f0:2d:54:1d:bd:ef:7a:c2:a5:49:47:
3c:5d:17:fe:b7:4c:36:18:ef:62:e8:1d:46:53:3b:4a:b6:c5:
68:78:ef:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:13:45 2026 by rpki-client