Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/52740e-5cb0-4814-a21a-a0967a435a6a/1/XbeSdWWd2WHHQr8h2NyhhKRDDYU.mft
File: XbeSdWWd2WHHQr8h2NyhhKRDDYU.mft (raw, json)
Hash identifier: 3LoKw15ksHmu+zCjNk98jfDXYEGBrTBkfQ0ho3b/+Ns=
Subject key identifier: D7:E0:88:ED:25:C5:A3:F7:E4:BC:1D:99:24:14:0A:3E:7E:D3:B3:24
Authority key identifier: 5D:B7:92:75:65:9D:D9:61:C7:42:BF:21:D8:DC:A1:84:A4:43:0D:85
Certificate issuer: /CN=5db79275659dd961c742bf21d8dca184a4430d85
Certificate serial: 019CAD5A0FD802323BA6E7B1264B7D349FF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XbeSdWWd2WHHQr8h2NyhhKRDDYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/52740e-5cb0-4814-a21a-a0967a435a6a/1/XbeSdWWd2WHHQr8h2NyhhKRDDYU.mft
Manifest number: 0EC3
Signing time: Mon 02 Mar 2026 07:01:26 +0000
Manifest this update: Mon 02 Mar 2026 07:01:26 +0000
Manifest next update: Tue 03 Mar 2026 07:01:26 +0000
Files and hashes: 1: XbeSdWWd2WHHQr8h2NyhhKRDDYU.crl (hash: ktBQvf5fgXqVwGgwMeANMwzAcjwmC/0rAlAI09m8aso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/52740e-5cb0-4814-a21a-a0967a435a6a/1/XbeSdWWd2WHHQr8h2NyhhKRDDYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/52740e-5cb0-4814-a21a-a0967a435a6a/1/XbeSdWWd2WHHQr8h2NyhhKRDDYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XbeSdWWd2WHHQr8h2NyhhKRDDYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:0f:d8:02:32:3b:a6:e7:b1:26:4b:7d:34:9f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5db79275659dd961c742bf21d8dca184a4430d85
Validity
Not Before: Mar 2 07:01:26 2026 GMT
Not After : Mar 3 07:01:26 2026 GMT
Subject: CN=d7e088ed25c5a3f7e4bc1d9924140a3e7ed3b324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c6:36:e3:7c:35:0d:5a:10:f2:83:c4:b5:06:
0b:89:d5:31:02:8b:ca:63:b5:ff:73:12:86:61:10:
62:51:27:32:c3:61:b5:7d:f9:b9:ff:48:58:b1:92:
9a:4c:5a:78:e3:3a:51:91:f8:5c:d8:2b:0e:5a:bd:
66:04:e8:6d:57:3b:3f:d3:1b:6f:33:92:83:09:3c:
88:0b:0b:07:ac:94:d1:f1:5b:dd:03:c1:1b:80:73:
a9:ab:ab:c1:2d:bc:1e:34:c3:5c:e4:5d:bb:df:69:
f7:6c:72:6c:b7:ee:e9:96:4d:15:93:b5:17:8d:b5:
b0:38:18:8b:cc:9d:f5:c8:97:c1:03:10:bd:9a:8e:
f8:b4:a9:a3:17:ac:63:2d:35:62:95:d4:12:4c:c0:
fe:80:66:68:dc:f5:f0:ea:5c:19:7d:78:fd:07:fb:
f0:55:87:31:d5:46:90:60:1d:55:05:5d:7d:e3:99:
12:23:3b:49:a8:f7:20:76:58:69:0d:d8:6b:29:3a:
e8:ea:81:44:af:74:87:39:9e:91:8a:67:12:ba:ea:
a4:6e:21:9f:ce:ba:98:69:e2:36:e2:e8:b0:a8:5f:
ff:87:e5:51:da:8c:af:4e:e2:d5:1b:a2:6e:3c:a6:
14:1e:37:63:c4:10:34:01:33:ae:c2:fd:2d:d8:49:
23:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E0:88:ED:25:C5:A3:F7:E4:BC:1D:99:24:14:0A:3E:7E:D3:B3:24
X509v3 Authority Key Identifier:
keyid:5D:B7:92:75:65:9D:D9:61:C7:42:BF:21:D8:DC:A1:84:A4:43:0D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XbeSdWWd2WHHQr8h2NyhhKRDDYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/52740e-5cb0-4814-a21a-a0967a435a6a/1/XbeSdWWd2WHHQr8h2NyhhKRDDYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/52740e-5cb0-4814-a21a-a0967a435a6a/1/XbeSdWWd2WHHQr8h2NyhhKRDDYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:64:a9:a8:21:b3:40:64:a3:62:d9:b9:6f:13:b9:5c:1e:6e:
f6:54:08:59:90:c8:ea:f0:10:66:62:ea:af:71:25:f4:9d:5f:
f9:10:05:21:7e:ab:1e:0e:cf:dd:68:e2:b1:d1:87:1c:69:48:
bb:c5:cd:60:17:93:ae:b2:d0:ad:20:6a:81:34:a3:1e:b2:c9:
de:b2:dc:8e:c2:e8:08:68:3c:43:de:9b:81:de:72:b5:2d:de:
2b:12:f8:b2:d1:b5:f6:2c:0b:27:d5:fa:b3:89:c5:a5:1d:e0:
00:6d:b8:d8:fc:45:24:0d:22:97:76:2c:ff:a7:65:95:c5:68:
af:ef:23:29:8e:16:58:aa:40:cc:9c:6f:0d:27:ad:12:b9:c0:
0c:59:b2:4a:82:02:f6:5a:6f:dd:fe:6d:05:a0:4a:bf:ad:ff:
fd:2c:4c:3c:2d:21:de:79:89:2c:fb:14:6f:60:24:96:82:aa:
fa:22:6a:bd:d3:a8:68:6d:4d:24:f5:90:dd:89:48:c1:88:80:
f9:74:03:f4:33:3e:60:43:95:d2:d1:ce:1c:d2:2c:d1:0e:da:
22:2b:90:9f:7a:62:4e:fc:12:5e:b4:44:97:a7:0d:36:7a:b3:
4a:95:f8:2b:40:80:5e:89:d3:95:08:a2:8b:4e:54:e9:4b:5a:
57:75:b9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:19:41 2026 by rpki-client