Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
File: Xnx3NpRcKad7rNWxiw_1h1ERe60.mft (raw, json)
Hash identifier: 4vruGnAtOyhYiIsOnHu8DMfQYFJKu43buAJLa2pd5I8=
Subject key identifier: D8:8B:8F:B1:8A:43:41:D7:4F:35:1B:E9:9F:41:97:D2:CE:4A:D0:88
Authority key identifier: 5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD
Certificate issuer: /CN=5e7c7736945c29a77bacd5b18b0ff58751117bad
Certificate serial: 019CAA5916504D4252E8D37DA0A290194A60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
Manifest number: 1015
Signing time: Sun 01 Mar 2026 17:01:30 +0000
Manifest this update: Sun 01 Mar 2026 17:01:30 +0000
Manifest next update: Mon 02 Mar 2026 17:01:30 +0000
Files and hashes: 1: HI4zLiz2JEgEYJYh3gpRHlO_ytc.roa (hash: fPCntXcBOYIgiDxy4qh6SOq8g019ewai7waqUaCRy1Q=)
2: Xnx3NpRcKad7rNWxiw_1h1ERe60.crl (hash: hF8uVbTBzOIqlMTSHkgAalAexOeYZwmlYvxI4xLUvlA=)
3: egWOQdMCICFVY-fSqkSUyufqt9w.asa (hash: KLL7Z4S+Cwpn2TeUDxPx/ngJ0cRsd9rXvcGeQB6iLDk=)
4: vUk1yzbPE2A9Gnc0-jOrueIo8U8.roa (hash: wjQObjyuEr0IkcfHoRoWEyYlXC6f2flFY08zOUVyRWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:16:50:4d:42:52:e8:d3:7d:a0:a2:90:19:4a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7c7736945c29a77bacd5b18b0ff58751117bad
Validity
Not Before: Mar 1 17:01:30 2026 GMT
Not After : Mar 2 17:01:30 2026 GMT
Subject: CN=d88b8fb18a4341d74f351be99f4197d2ce4ad088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b7:bf:33:4f:b4:f1:3d:32:2c:93:c9:64:90:
a1:60:86:fd:f4:ec:dd:4b:93:89:f0:fc:89:45:84:
9b:9b:d5:b3:0b:1a:14:7d:91:9a:73:70:34:2c:b7:
5d:71:79:b8:15:7f:52:51:56:2e:d5:c4:bc:f1:f1:
47:3a:cc:6d:a5:07:b5:47:92:2b:d6:69:25:a3:7c:
7c:02:6f:e8:a2:5c:0c:53:bc:f6:13:a8:68:e1:f1:
24:0e:39:ab:8a:a0:e2:57:a2:3e:c0:60:97:09:6a:
6e:b1:3b:09:cd:4e:16:01:a7:66:8b:09:ea:81:de:
e9:24:f2:18:0e:96:b8:c2:32:13:ca:c2:53:6d:ba:
c4:4d:a6:e1:fe:3a:be:c5:e1:5f:33:89:08:a6:ae:
0f:c8:fc:c5:a4:cb:e3:fb:a9:b2:cf:82:40:34:0f:
bb:e6:50:77:37:de:9e:82:09:56:f3:18:ab:ee:87:
55:ed:e1:62:6b:87:c9:86:ca:95:d1:c0:f8:3d:0e:
8a:53:67:55:4f:96:11:c1:1a:07:a8:59:9b:d5:9b:
d1:61:66:5a:3d:0a:84:fa:6e:07:16:e5:c4:3b:21:
ed:e8:41:c6:aa:1b:c9:0f:2b:14:75:75:37:3d:0d:
f5:af:7b:48:18:5d:94:8c:e7:9c:fb:4c:ef:a4:0f:
6f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:8B:8F:B1:8A:43:41:D7:4F:35:1B:E9:9F:41:97:D2:CE:4A:D0:88
X509v3 Authority Key Identifier:
keyid:5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:1b:31:51:1e:8e:50:ce:f4:75:04:e7:72:f6:89:bf:fb:8a:
d1:6b:2c:6d:0c:eb:7e:03:cd:7b:03:5b:4b:55:c6:04:0f:aa:
bb:25:71:93:d5:9d:b8:e2:5b:e3:18:00:3c:b5:dc:66:1c:9c:
7d:9c:9c:ec:8c:b5:5b:f4:e7:9e:d1:a8:5f:fd:2a:aa:90:f1:
bd:f9:75:21:f6:5e:c4:17:53:83:a5:c4:8e:cb:6b:8b:c8:83:
82:48:e3:49:8d:88:74:9c:c9:f7:f1:b1:0e:84:7e:21:c0:7c:
8e:a2:61:84:81:84:fb:5c:57:75:3b:80:27:16:ab:f3:af:ed:
de:f8:99:b1:d6:0f:9a:b2:a9:0a:a8:80:51:04:66:c8:b0:a1:
3c:ed:f0:9a:28:18:d8:d3:a3:dc:2e:68:8a:5a:b8:59:5c:61:
1d:97:36:6c:19:68:8d:83:ea:e2:e1:de:b1:4d:62:d6:fb:06:
44:63:8f:70:ca:b1:d3:f0:06:1f:f3:63:61:b3:a8:c9:0b:fd:
ce:39:e0:59:5b:43:58:de:cd:1f:2d:f7:cc:c2:c4:28:98:27:
15:31:00:5e:b9:59:f5:fa:6e:0e:19:35:e3:51:7d:c9:d5:ea:
c0:fa:af:0d:5c:1d:b1:0c:86:4d:5d:80:5f:34:a6:2c:9a:1a:
40:84:80:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:43:01 2026 by rpki-client