Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
File: XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft (raw, json)
Hash identifier: HCsq5gAqztwKH+vfhFfZ2TUmh9EudYp8+NYTT/i+0zQ=
Subject key identifier: A1:16:2C:82:13:6E:02:AA:0B:B6:CD:52:D5:8C:46:60:9B:E0:BC:B5
Authority key identifier: 5F:09:9F:49:97:8B:96:0F:A3:1F:81:AC:F5:46:71:27:3D:C7:FF:61
Certificate issuer: /CN=5f099f49978b960fa31f81acf54671273dc7ff61
Certificate serial: 019D281704C37432B6D806536F5B74773FD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 03:01:30 +0000
Manifest this update: Thu 26 Mar 2026 03:01:30 +0000
Manifest next update: Fri 27 Mar 2026 03:01:30 +0000
Files and hashes: 1: 0ZEt5hO5jk8I5B1ric3lV5QOPjY.roa (hash: 2SzUB4ARPZ7+BuiAiToaYolTUFVyZHL4/odctgbUciE=)
2: PX4jRvV2Is0w59EuWq6-Cko1_qM.roa (hash: o5zSrmvOazS6EGtXXnfbpDTf59xV6PS54zdbjnXbBvw=)
3: XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl (hash: uI/GMuIuqh4U0CBkjKQ+KLEV6rTE/+IVI9JWq/VrJas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:17:04:c3:74:32:b6:d8:06:53:6f:5b:74:77:3f:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f099f49978b960fa31f81acf54671273dc7ff61
Validity
Not Before: Mar 26 03:01:30 2026 GMT
Not After : Mar 27 03:01:30 2026 GMT
Subject: CN=a1162c82136e02aa0bb6cd52d58c46609be0bcb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e1:30:6b:82:3a:25:df:17:29:c9:67:0b:66:
08:f5:b0:7f:67:1d:e8:56:5f:ba:46:83:0f:9d:f6:
0b:90:88:8d:e1:42:28:43:dc:d2:c2:63:92:99:ca:
11:52:a3:2d:de:55:56:4a:4c:b6:52:01:39:01:f1:
80:12:cf:2a:35:13:8d:29:13:39:23:c4:2e:cc:99:
e1:94:46:1d:d1:60:ae:6b:d9:73:a2:93:15:41:68:
46:ac:db:1a:85:78:88:e7:a2:1c:74:9b:49:b5:6a:
0f:0e:24:a4:e4:9b:d9:af:e7:06:6a:84:7d:b3:05:
a3:1a:ab:dc:b7:24:9f:9c:f6:d5:d4:b8:88:da:ec:
10:8e:bb:54:9a:ee:be:b1:dd:c7:38:9d:f9:63:81:
49:a4:09:be:85:8f:c7:c1:0c:40:d7:20:f8:06:a1:
ca:59:6d:47:22:84:30:8c:b1:cc:23:b3:8e:2f:95:
fe:ed:68:00:98:03:17:bd:0e:39:c6:e7:71:86:ff:
e8:fb:9c:08:07:6a:d3:f4:67:79:6c:f1:46:ad:df:
2a:5f:90:b2:20:dc:c5:74:b9:f8:ea:fc:6e:fa:eb:
b4:d1:cf:d3:f0:24:13:4e:8e:64:01:e8:3d:e4:3e:
d9:dd:8a:21:43:41:fd:48:c6:24:ce:15:72:90:ec:
ff:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:16:2C:82:13:6E:02:AA:0B:B6:CD:52:D5:8C:46:60:9B:E0:BC:B5
X509v3 Authority Key Identifier:
keyid:5F:09:9F:49:97:8B:96:0F:A3:1F:81:AC:F5:46:71:27:3D:C7:FF:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:2a:56:e8:30:9e:06:b8:c0:28:77:ef:96:c7:d1:e5:51:0e:
19:5e:58:dc:c4:11:d5:fe:b0:b6:b4:70:78:c0:4b:c3:a5:0d:
59:dc:f6:80:2e:cb:99:01:10:6d:f8:10:86:c7:ca:43:ca:60:
7d:61:24:9f:e0:1f:94:97:da:9b:a6:a9:58:7f:89:eb:79:d5:
2a:df:7f:28:7c:9e:f0:13:02:96:03:d6:34:0d:04:c3:c6:a4:
1b:22:4c:90:2d:b1:c0:c0:41:b7:a0:fa:ed:20:54:55:a6:ce:
18:d5:21:42:ad:02:d0:f7:22:64:83:9d:f0:ae:88:e2:b3:50:
cd:b5:e5:ac:6b:57:a1:f5:f1:c9:0b:f9:22:40:84:96:ff:3c:
1f:48:c8:3f:05:db:39:49:e9:e1:ae:67:ed:48:87:b8:82:18:
65:76:5f:94:6f:c4:94:5d:f1:d3:04:2e:1e:4b:41:8e:90:2b:
c9:b1:76:5c:39:47:b6:e7:b4:7d:f7:e4:58:0d:5f:bf:e1:f2:
63:6d:09:3d:35:9d:3f:32:75:49:53:10:94:72:f4:54:18:70:
79:9d:5b:5d:3e:95:9d:3a:9e:8d:c1:5c:ae:d5:dd:45:d9:33:
8d:c6:aa:fc:1c:39:04:8d:8c:1a:e0:56:c0:cc:b2:32:f1:58:
3c:2e:b2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:10:50 2026 by rpki-client