Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft
File: XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft (raw, json)
Hash identifier: c1qtGTZ0qk3AJBWD1LhmPwrRi1WV6StYylbsBuGwun8=
Subject key identifier: 38:46:2E:C8:5A:82:B9:0A:0A:51:B3:5D:83:05:0F:A5:0F:CD:9A:14
Authority key identifier: 5E:B4:2A:B8:DE:98:BE:1C:77:1F:0A:98:68:58:2F:CF:95:DC:4A:C6
Certificate issuer: /CN=5eb42ab8de98be1c771f0a9868582fcf95dc4ac6
Certificate serial: 019CAD907C49FF80166AC1594A707B932A60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft
Manifest number: 1851
Signing time: Mon 02 Mar 2026 08:00:53 +0000
Manifest this update: Mon 02 Mar 2026 08:00:53 +0000
Manifest next update: Tue 03 Mar 2026 08:00:53 +0000
Files and hashes: 1: EgZw9prYM48BikMrmIquBFUeyCY.roa (hash: ctCXPXYhr5UMOKpyrvlkfwGqe62m7LyduahfprfYDD4=)
2: XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl (hash: ArxBDxXIDSScTaTeUUp4zoRCYPKOXJ8lcOvR6LtSZrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:7c:49:ff:80:16:6a:c1:59:4a:70:7b:93:2a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eb42ab8de98be1c771f0a9868582fcf95dc4ac6
Validity
Not Before: Mar 2 08:00:53 2026 GMT
Not After : Mar 3 08:00:53 2026 GMT
Subject: CN=38462ec85a82b90a0a51b35d83050fa50fcd9a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:44:77:95:c4:cc:ae:99:7b:a2:11:93:81:cd:
d6:a2:3b:3f:d7:82:f4:55:c0:24:92:b1:44:c4:3c:
ca:7b:4c:dd:22:4a:c1:cb:4f:b6:c3:8c:63:b2:dd:
91:0a:28:aa:55:2c:50:4a:29:b1:aa:e1:81:7f:ac:
98:58:5f:7a:c6:90:3c:73:c9:07:62:1a:a6:70:e5:
74:31:4d:8a:0b:9b:2f:1c:d4:11:0e:8b:5f:40:19:
c3:20:b8:f3:c7:30:e4:80:1a:38:b7:6a:68:33:67:
80:35:22:b6:60:51:93:39:d3:7e:55:65:78:ed:9a:
3f:2b:82:76:66:9c:db:71:6a:9c:13:79:ff:40:b9:
94:ea:ff:ea:19:e6:7d:16:08:3b:7a:03:2f:45:f3:
fe:b7:f4:1a:18:23:4c:dc:5c:46:1f:16:ce:c9:be:
bb:d3:3d:ee:c8:cd:c8:84:9c:19:e9:21:96:de:1e:
7a:23:2b:ae:cf:36:4b:ee:ad:47:52:d6:26:1e:e9:
6c:e8:34:9d:50:98:9a:14:f7:d0:68:a4:74:4c:27:
09:0a:7f:bc:80:b4:9f:c9:c1:30:79:a0:c3:1a:c2:
49:ac:72:4c:d9:d6:22:3a:e8:74:05:bc:cc:e0:19:
a2:1f:3e:a1:98:5a:1b:97:3b:42:51:63:5f:08:e6:
8c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:46:2E:C8:5A:82:B9:0A:0A:51:B3:5D:83:05:0F:A5:0F:CD:9A:14
X509v3 Authority Key Identifier:
keyid:5E:B4:2A:B8:DE:98:BE:1C:77:1F:0A:98:68:58:2F:CF:95:DC:4A:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:8a:a1:3d:b1:a3:3c:d4:b5:ac:77:6f:05:15:1d:8d:be:57:
69:9b:bb:63:c5:40:ab:cf:0e:46:b9:b4:64:6f:65:7c:03:39:
8c:8e:fc:f1:14:98:75:07:5a:99:17:c0:5f:11:a2:0b:43:29:
32:b5:d7:ac:79:16:ca:31:35:fa:75:1b:09:2b:16:6b:1f:c7:
5a:bb:68:e5:fa:fb:5d:81:aa:76:b5:3c:be:fd:35:0c:7a:a6:
44:6c:0e:b4:aa:92:ed:c3:eb:2b:ee:df:11:31:4b:af:fb:cf:
bf:08:a9:5c:0a:a9:83:e0:98:a6:cc:8b:f6:94:56:1e:c4:2d:
6b:e9:82:31:c5:53:58:16:a0:91:71:c7:bc:d1:cc:88:46:6b:
70:09:a3:75:48:4c:4c:c5:30:f1:f8:80:6a:e9:c5:9a:3a:a0:
f2:ba:98:f3:0c:ce:39:64:83:ff:60:7e:98:45:b8:a0:45:bb:
cc:6a:b8:01:75:54:0b:20:11:92:ff:88:db:a4:8e:92:ca:6d:
46:75:d2:24:69:c3:ef:a8:3b:ad:44:e7:e6:c8:30:56:27:3b:
21:be:59:78:94:16:ba:36:c7:73:cc:23:b8:be:66:f1:5a:99:
c3:bd:be:af:d5:87:4e:b5:c0:f1:09:a6:62:75:55:87:e3:36:
12:47:58:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:12:11 2026 by rpki-client