Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
File: Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft (raw, json)
Hash identifier: pz+9EWLUIoIJwXMEpChTscIvY9HNZrwUuYfoKHoYE9Y=
Subject key identifier: 03:3C:70:BC:5F:FB:D5:E3:5D:72:31:4A:49:FC:00:0B:AA:27:6C:3E
Authority key identifier: 5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
Certificate issuer: /CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Certificate serial: 019CAEA3B0F987DFFA660BF2B3A58A85F8EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
Manifest number: 088D
Signing time: Mon 02 Mar 2026 13:01:29 +0000
Manifest this update: Mon 02 Mar 2026 13:01:29 +0000
Manifest next update: Tue 03 Mar 2026 13:01:29 +0000
Files and hashes: 1: 4XbLzLhs_R3HbGvs8J0B6vWDjoM.roa (hash: EeIgIRoHfCv+YD1yHKMrdcDTtdbyna/9WTb4LBDcCiA=)
2: 6mSyjcaB-p4qDC460iYHCXPRE5w.roa (hash: l4WjQ6VVIZ7R6ms3j8GqNVZcOrTIa+7w3Fpzj4XR/cU=)
3: Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl (hash: bIPvu12T9nz0FY7H9u2n4uOoyRO7ZzEN9Dm71fTAPr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:b0:f9:87:df:fa:66:0b:f2:b3:a5:8a:85:f8:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Validity
Not Before: Mar 2 13:01:29 2026 GMT
Not After : Mar 3 13:01:29 2026 GMT
Subject: CN=033c70bc5ffbd5e35d72314a49fc000baa276c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a3:b9:a7:4c:2e:73:03:1c:71:7d:35:7e:83:
7a:30:57:93:9b:90:b4:b9:1d:21:cc:af:4a:20:c5:
32:73:42:71:9b:80:0d:fe:4b:3e:54:73:3d:0b:70:
30:74:a6:7c:e0:dd:f9:88:6d:68:45:c2:6e:fd:00:
ec:88:04:8f:09:1e:53:30:9d:c8:7b:75:43:22:e2:
68:5e:98:55:9a:2b:1b:32:df:42:78:d4:b4:7e:a9:
f3:15:0e:9d:3d:30:cb:e5:bf:6b:da:d7:84:df:c2:
77:f5:2d:e8:d8:14:94:9a:03:59:24:17:06:d4:04:
95:05:70:d9:af:8a:ff:9c:03:2c:9f:b2:7b:e0:03:
07:45:55:65:b3:fe:16:e8:a5:5d:45:58:5f:09:36:
c6:1d:6d:0d:55:07:78:48:f7:c1:45:50:2a:f7:f1:
6e:b6:e0:d5:3d:34:ac:16:e6:36:74:de:d3:8a:76:
54:d9:03:b5:51:28:60:dd:cf:b5:a5:9b:4a:24:2b:
90:ac:e8:2c:22:3a:b3:9f:d7:1d:4f:c1:66:c5:21:
f0:d8:c6:41:94:69:6c:5c:4b:57:77:a4:ff:11:f7:
73:9b:25:d6:7f:3d:b3:ae:4b:76:47:1d:bf:e9:3e:
f3:63:28:e1:15:96:2c:34:54:dc:52:3c:8e:1e:1b:
ec:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:3C:70:BC:5F:FB:D5:E3:5D:72:31:4A:49:FC:00:0B:AA:27:6C:3E
X509v3 Authority Key Identifier:
keyid:5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:10:2d:9f:10:12:87:a1:1a:54:5e:38:26:0d:30:e8:dd:7b:
33:c2:34:a3:84:d1:d2:1b:da:17:ac:2c:eb:03:12:8e:e8:38:
7f:d3:d8:7d:d2:6a:d6:5c:97:7d:4c:27:8f:38:4f:c3:32:77:
87:3c:25:3d:0a:b8:70:3c:9e:b7:e5:77:07:87:3b:78:07:b8:
4f:81:cf:38:46:36:b6:e0:b3:54:40:cc:03:52:42:00:75:a4:
d8:50:c9:6b:6d:40:12:0a:bf:96:a4:43:cb:b2:db:10:51:e2:
b2:7a:82:56:7d:f0:5a:0b:bc:fd:d8:34:84:ba:fc:01:11:03:
3c:78:0a:4a:c6:92:8b:49:0a:4d:cb:6e:b2:12:4e:ef:62:19:
57:72:52:0f:a1:89:f8:ed:04:3a:07:9f:86:96:23:b9:04:5a:
6c:49:a1:75:2f:a7:d4:c5:59:ff:42:f6:9f:d6:be:c7:2a:7d:
f2:1f:36:70:d1:df:71:f2:9c:c4:c9:58:15:f7:d3:b2:ed:06:
be:c9:5f:06:78:cd:85:1e:eb:9a:77:50:58:9c:37:c6:f4:08:
d3:e1:5a:95:b2:1d:63:f0:72:4d:4f:b3:72:34:1d:4e:53:61:
b7:e9:ae:73:68:1d:bd:29:3c:8d:58:34:f8:6d:a9:54:87:29:
21:26:1f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:58:42 2026 by rpki-client