Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
File: XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft (raw, json)
Hash identifier: 1GYpDRuXEJfsBeUynaSJw6ewds5O0sYeGgJVKFhKBh4=
Subject key identifier: AB:B4:00:65:CF:DC:2C:90:8E:EF:ED:A0:53:39:1E:8E:62:41:E2:48
Authority key identifier: 5E:67:66:0A:F7:52:3C:61:B7:F9:5D:08:48:8D:58:3E:9D:51:4F:6B
Certificate issuer: /CN=5e67660af7523c61b7f95d08488d583e9d514f6b
Certificate serial: 019D3308929C347B3C0C34D20A7696B77A2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
Manifest number: 08A9
Signing time: Sat 28 Mar 2026 06:01:32 +0000
Manifest this update: Sat 28 Mar 2026 06:01:32 +0000
Manifest next update: Sun 29 Mar 2026 06:01:32 +0000
Files and hashes: 1: XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl (hash: r0PZmFn6mh4QnIWscIzk67voOnjRm6lifPsAuJwAKV8=)
2: i5WP_AihTIXhPy_BVXYv71HxOto.roa (hash: VJGbYlBp9HGyGJZxGUnm0bEpFbqRPbJagnJqTdbqGUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:08:92:9c:34:7b:3c:0c:34:d2:0a:76:96:b7:7a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e67660af7523c61b7f95d08488d583e9d514f6b
Validity
Not Before: Mar 28 06:01:32 2026 GMT
Not After : Mar 29 06:01:32 2026 GMT
Subject: CN=abb40065cfdc2c908eefeda053391e8e6241e248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bf:0c:69:1a:d8:55:d7:ef:87:9f:bc:6d:73:
2f:bf:5b:59:b9:e3:a0:79:97:2e:be:37:e3:bf:d2:
cc:58:a3:0a:4d:d5:96:21:4a:cd:d3:ce:18:94:d2:
c0:b0:2c:12:40:b7:ef:32:65:93:63:bc:54:97:b3:
15:87:4f:75:f4:38:6e:3f:66:a7:a6:67:43:6e:12:
7d:15:34:cb:31:28:58:fb:55:fb:d5:23:b7:cf:9d:
4a:85:a4:6a:1d:25:05:82:72:e7:c5:5c:82:b9:75:
44:3c:dc:22:88:63:fc:40:15:9f:b3:b1:f7:1a:b8:
18:ec:1c:d5:6e:87:9f:2b:5a:e3:3b:64:9e:a0:85:
5c:83:08:7a:25:ce:a5:ff:bc:21:f2:43:f7:85:c0:
f6:eb:e2:d5:d3:f5:4c:f3:31:b2:7d:f6:30:1b:42:
09:da:55:33:0a:ce:31:25:ea:20:c7:e8:01:e5:15:
06:8f:d7:4e:8f:25:b2:c6:d1:5e:53:1e:f6:02:e5:
7f:dc:64:8f:57:d1:dd:54:aa:67:95:f7:f2:13:44:
a2:22:a8:7e:9f:a7:68:d6:d1:05:c7:32:b3:25:87:
51:86:8e:0c:d0:b1:b8:dd:5f:45:74:e0:d2:a3:34:
19:3e:52:42:a7:ca:8e:1d:6e:17:53:b1:ed:03:c4:
60:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B4:00:65:CF:DC:2C:90:8E:EF:ED:A0:53:39:1E:8E:62:41:E2:48
X509v3 Authority Key Identifier:
keyid:5E:67:66:0A:F7:52:3C:61:B7:F9:5D:08:48:8D:58:3E:9D:51:4F:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:39:25:4e:6a:30:7d:31:39:b4:19:50:59:b5:43:1c:c6:13:
b2:55:73:94:f1:7c:44:d6:8b:d5:61:93:63:39:0f:26:7d:77:
0d:50:16:94:67:4a:d4:4a:33:b1:33:52:c7:32:08:ea:cc:9c:
1b:b6:26:2a:f3:b0:d3:11:55:85:a7:42:87:78:71:af:70:f2:
99:27:2a:c0:fd:11:d2:da:d4:55:f6:85:dc:36:6a:59:5f:29:
03:51:16:12:0f:4d:bd:ba:f5:d0:e9:c2:b6:4e:0b:a0:1c:d0:
16:32:b3:7c:9f:c6:ab:ac:ac:f9:d8:22:7f:5e:0d:f0:00:9c:
58:e6:55:e5:e1:9c:38:bc:5a:ac:05:e2:d2:1f:34:37:1b:cc:
de:39:bc:5d:ef:6d:1e:a6:27:97:b5:c7:07:55:3d:5d:df:37:
e4:75:06:47:ee:82:7c:87:e0:4a:4b:ce:56:f1:9d:2e:6e:31:
b6:fa:0d:a9:cf:86:64:a3:d1:72:19:d9:ea:1d:22:15:61:04:
1e:59:14:d9:3c:1e:53:16:99:3f:30:fd:a6:4e:c6:7a:a4:1e:
92:8f:53:0e:d9:53:d0:43:a7:c1:d2:af:8b:16:c9:a7:33:f5:
9b:76:b4:41:0e:c3:bc:51:9a:77:b4:ab:19:bd:ff:af:f3:56:
98:a7:bf:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:34:59 2026 by rpki-client