Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft
File: xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft (raw, json)
Hash identifier: qZCAwtaQ/UQnvTHUq3ZJWKzu2E3SWlMrUEB9SxOXtF8=
Subject key identifier: AD:B7:B5:6E:D3:F0:3D:D6:44:56:27:86:2A:BD:02:2C:3E:7C:AD:1B
Authority key identifier: C5:B1:18:2D:31:79:6F:A6:3E:C3:C1:D9:B9:7C:B6:AA:AC:34:FD:D9
Certificate issuer: /CN=c5b1182d31796fa63ec3c1d9b97cb6aaac34fdd9
Certificate serial: 019CAB34130A6748D61A94F596529BD5FEA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft
Manifest number: 1241
Signing time: Sun 01 Mar 2026 21:00:42 +0000
Manifest this update: Sun 01 Mar 2026 21:00:42 +0000
Manifest next update: Mon 02 Mar 2026 21:00:42 +0000
Files and hashes: 1: xbEYLTF5b6Y-w8HZuXy2qqw0_dk.crl (hash: eATx2/LhFwtfSq0YpohZiyLnXvNA51mZDWejHsyb4k0=)
2: y5TDm0AbnF5uW1VYqN6HJrhTGH0.roa (hash: lqxFRYQnP+n1wormol/wg9R3mZ0oBovnPQrrpsaBhek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:13:0a:67:48:d6:1a:94:f5:96:52:9b:d5:fe:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5b1182d31796fa63ec3c1d9b97cb6aaac34fdd9
Validity
Not Before: Mar 1 21:00:42 2026 GMT
Not After : Mar 2 21:00:42 2026 GMT
Subject: CN=adb7b56ed3f03dd6445627862abd022c3e7cad1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:ec:c3:b3:15:50:14:28:a3:ad:84:c5:ad:d4:
48:19:4d:67:72:f5:2c:a4:5d:ac:4e:23:2b:7e:ee:
a2:11:a2:56:b2:0c:61:86:ff:86:63:81:18:13:39:
41:a8:96:40:b1:93:13:4a:b1:11:6f:49:04:51:cf:
26:e4:5c:74:88:b8:15:fc:93:bb:7a:29:dd:79:84:
57:8c:9b:0a:54:03:ca:61:f7:23:55:41:a9:b8:2f:
d3:a9:4e:63:e9:29:6b:df:43:e5:45:66:d0:c2:7f:
eb:a9:13:56:f5:cf:23:0c:80:dc:dd:79:3a:4e:21:
94:5c:e8:07:e5:18:e0:b7:93:d2:c2:66:62:5d:10:
97:28:97:8c:99:82:de:c2:6c:21:30:9c:30:65:2f:
a4:b0:18:60:ab:0d:30:5b:c0:5e:b6:24:71:dd:20:
79:ae:9e:f8:7b:8c:32:ca:b0:54:f5:28:aa:32:b3:
8c:d2:48:99:1c:1a:c5:24:e9:09:6d:ab:f7:85:12:
5e:f3:c8:b6:73:4c:ad:09:e0:77:39:7d:f5:e7:85:
ab:b2:f3:1d:5c:d9:07:85:83:64:38:5e:e5:26:27:
f2:64:3d:31:b8:5b:dc:4a:53:76:b0:62:3a:0e:b0:
62:f5:f7:e0:ea:01:b8:6a:3a:38:7f:d4:31:d9:5a:
54:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B7:B5:6E:D3:F0:3D:D6:44:56:27:86:2A:BD:02:2C:3E:7C:AD:1B
X509v3 Authority Key Identifier:
keyid:C5:B1:18:2D:31:79:6F:A6:3E:C3:C1:D9:B9:7C:B6:AA:AC:34:FD:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:d5:11:3a:86:17:46:57:d2:0f:35:af:a3:22:13:84:9e:0f:
2d:96:f8:5d:c8:f1:ca:15:da:ef:21:64:33:a7:83:14:1f:46:
c6:1f:10:1b:2a:57:b2:b1:70:78:92:3c:8e:8d:87:d6:36:cf:
cb:4d:08:f1:6f:fc:fd:57:c3:7a:85:c6:e2:01:1d:db:8f:3e:
6b:2c:f1:d6:31:86:eb:db:9e:cf:de:53:8d:7e:53:54:c9:b1:
6b:20:60:29:57:87:e6:86:62:8c:42:5c:6d:61:10:ad:c4:53:
79:61:e4:74:7a:1c:44:85:47:94:fe:63:b3:25:eb:65:dd:d2:
df:35:4f:71:e1:74:15:3b:ab:82:e8:e3:af:12:aa:6a:2f:4c:
ca:24:b7:70:3e:01:6f:2b:d3:ce:cd:c1:d5:0a:9f:d0:36:b0:
9d:15:dd:bc:21:86:12:60:b7:9f:a4:42:fc:b8:e5:6b:85:97:
6b:f6:67:cf:98:de:41:96:32:5f:cb:15:1a:7d:82:9c:d2:b0:
4f:57:9b:c3:c8:f6:e8:10:b9:f6:4a:0c:8f:8e:74:27:88:4e:
93:fb:9d:cc:b2:81:5e:01:9e:d0:d4:13:04:fd:59:eb:2d:8f:
70:b0:75:8e:2e:f6:f0:d5:82:cf:60:af:f7:61:ab:81:0f:d3:
d8:87:df:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:03:10 2026 by rpki-client