Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/XHGW3F9A-W0t5nmdx3G6o7U9zYI.mft
File: XHGW3F9A-W0t5nmdx3G6o7U9zYI.mft (raw, json)
Hash identifier: 7rbFjpKBfuiONfHF1Qq6WkD8vRAxaHRAHOxTJ4vF12s=
Subject key identifier: 48:42:5E:6A:91:7A:D4:C4:5B:5A:3A:02:32:3D:FC:59:DA:21:5F:18
Authority key identifier: 5C:71:96:DC:5F:40:F9:6D:2D:E6:79:9D:C7:71:BA:A3:B5:3D:CD:82
Certificate issuer: /CN=5c7196dc5f40f96d2de6799dc771baa3b53dcd82
Certificate serial: 019D2704B07D9BDB2D6B7AA6B463BA8D554B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHGW3F9A-W0t5nmdx3G6o7U9zYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/XHGW3F9A-W0t5nmdx3G6o7U9zYI.mft
Manifest number: 0359
Signing time: Wed 25 Mar 2026 22:01:51 +0000
Manifest this update: Wed 25 Mar 2026 22:01:51 +0000
Manifest next update: Thu 26 Mar 2026 22:01:51 +0000
Files and hashes: 1: B0AwT1AxvZConXxpfYlz8S5oSuI.roa (hash: /ba96dMiwiLgM5bGs3qQwa8ZJcQUvwrwpVlv05ryZOI=)
2: XHGW3F9A-W0t5nmdx3G6o7U9zYI.crl (hash: iNlSRRWK6halj1Eh7LtawzsQmCw0Cu0iMlgaOpS9D0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/XHGW3F9A-W0t5nmdx3G6o7U9zYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/XHGW3F9A-W0t5nmdx3G6o7U9zYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHGW3F9A-W0t5nmdx3G6o7U9zYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:b0:7d:9b:db:2d:6b:7a:a6:b4:63:ba:8d:55:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c7196dc5f40f96d2de6799dc771baa3b53dcd82
Validity
Not Before: Mar 25 22:01:51 2026 GMT
Not After : Mar 26 22:01:51 2026 GMT
Subject: CN=48425e6a917ad4c45b5a3a02323dfc59da215f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:de:ff:ab:5d:53:21:06:d0:55:e0:34:36:ff:
a8:21:37:2e:e8:d3:2e:ec:cb:84:5b:9e:58:ce:94:
56:fa:02:f8:74:6b:49:a6:0c:2d:e0:79:7c:38:a3:
9e:97:63:63:b8:77:99:3d:13:d9:7e:62:ad:60:74:
df:56:1d:c8:bc:bd:c4:c4:b5:91:f1:c3:b2:3a:e9:
a2:7b:74:67:50:dd:a9:dc:ba:3f:5b:1b:46:28:b4:
00:dd:44:a3:04:b5:ea:35:6b:30:a4:88:75:2b:ee:
48:75:af:74:f0:b5:3a:09:89:2d:e8:d4:ab:cd:66:
40:a1:fa:df:b4:78:48:03:ab:64:a5:b2:9d:c5:12:
37:36:fe:55:e0:8a:66:bf:c3:59:cc:b1:e5:ad:b2:
a3:24:92:f5:84:15:f0:39:a7:f8:57:6d:68:4c:74:
4e:9b:0f:d5:55:14:c9:e8:c3:97:8a:2d:30:cc:25:
cb:1b:23:12:18:81:e5:18:ef:b9:a0:c2:e8:1e:f3:
63:88:33:b9:7f:5c:4b:32:dd:fa:38:08:a1:47:90:
a0:3f:c7:2a:1b:b2:6b:ff:13:76:d1:ae:09:d8:63:
7f:58:93:85:f2:97:e7:70:bf:c1:68:47:36:e2:f0:
31:6a:75:f2:2d:e9:53:b9:96:ce:26:ee:24:e5:28:
7a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:42:5E:6A:91:7A:D4:C4:5B:5A:3A:02:32:3D:FC:59:DA:21:5F:18
X509v3 Authority Key Identifier:
keyid:5C:71:96:DC:5F:40:F9:6D:2D:E6:79:9D:C7:71:BA:A3:B5:3D:CD:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHGW3F9A-W0t5nmdx3G6o7U9zYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/XHGW3F9A-W0t5nmdx3G6o7U9zYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/XHGW3F9A-W0t5nmdx3G6o7U9zYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:03:b4:19:c1:39:79:af:fc:8c:64:e7:af:b7:43:6a:55:75:
be:b4:98:a6:13:ba:45:10:e7:be:6f:7f:aa:a9:24:e4:77:67:
3b:ad:a2:c1:40:10:fc:76:e3:7e:4e:43:f4:6d:f7:76:cb:12:
b7:ef:a3:39:69:b8:27:65:50:32:db:fc:ea:88:06:e7:76:8d:
1b:3d:fe:fb:7a:39:fe:0b:b3:5d:52:5f:23:55:76:1b:9c:d2:
92:80:6f:c3:ba:a5:5b:7d:8e:25:f3:bf:67:57:27:40:95:4a:
9f:e2:40:90:55:2d:7e:f9:6e:96:ab:de:65:70:08:70:78:78:
bf:8c:a2:04:03:ad:b9:9a:68:eb:e9:6f:1b:ec:77:06:48:a2:
c7:30:78:bf:20:26:d2:a8:b6:78:a1:67:3c:52:f7:81:9d:a6:
e1:e4:6d:2b:67:26:d4:7b:d4:3f:80:84:bf:59:a7:99:a8:36:
bb:7c:c8:5f:cf:21:a9:cf:67:27:bc:13:0d:45:bd:81:0a:ce:
77:4f:3c:5b:da:e3:08:24:e0:37:d8:f3:a6:cf:df:6f:92:ff:
d1:b3:02:e9:e5:da:66:55:08:b4:69:db:9f:d6:dc:85:2c:a2:
23:ee:b6:ad:b2:92:0b:3c:1a:18:7d:db:9a:ae:d9:33:05:5d:
e0:65:64:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:57:50 2026 by rpki-client