Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft
File: XDDZUEYzG9zjAYt__g8T2_n8cY0.mft (raw, json)
Hash identifier: CsnRtJz5p6KsHJtn0nBizkJ+GMdtV5BWkeA7+yg9/U4=
Subject key identifier: 10:78:DC:8F:A4:39:4A:97:9B:BD:7C:D1:66:EB:A5:A6:BB:4F:53:C5
Authority key identifier: 5C:30:D9:50:46:33:1B:DC:E3:01:8B:7F:FE:0F:13:DB:F9:FC:71:8D
Certificate issuer: /CN=5c30d95046331bdce3018b7ffe0f13dbf9fc718d
Certificate serial: 019D28F33C231939569A8E0DBCDD26B52942
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDDZUEYzG9zjAYt__g8T2_n8cY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 07:02:02 +0000
Manifest this update: Thu 26 Mar 2026 07:02:02 +0000
Manifest next update: Fri 27 Mar 2026 07:02:02 +0000
Files and hashes: 1: XDDZUEYzG9zjAYt__g8T2_n8cY0.crl (hash: g6egKJfDZl2zCwVjGl9mxsoqUjPvkbe1hF5/qDnxTxI=)
2: i7ahmmzCoN5G9N5UQomOHHe69RA.roa (hash: GGCZiPMQLo6nn63tOlWXS7/n5qwIMxP1oeej8rFYFvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDDZUEYzG9zjAYt__g8T2_n8cY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:3c:23:19:39:56:9a:8e:0d:bc:dd:26:b5:29:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c30d95046331bdce3018b7ffe0f13dbf9fc718d
Validity
Not Before: Mar 26 07:02:02 2026 GMT
Not After : Mar 27 07:02:02 2026 GMT
Subject: CN=1078dc8fa4394a979bbd7cd166eba5a6bb4f53c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5c:19:1b:32:da:38:94:f8:86:f5:f1:b7:07:
d4:30:f8:cc:25:e1:0d:ad:f9:66:e4:fd:1b:24:89:
46:24:5b:48:ca:c9:b1:f9:cb:bf:2f:d4:39:28:39:
6c:6e:43:ab:90:de:0a:25:63:19:86:2d:73:b9:bf:
59:68:7a:e7:fd:aa:42:06:57:9b:5e:b8:e0:fa:7a:
c2:14:1e:16:72:2f:26:85:75:98:6c:fd:07:32:da:
f6:29:c4:56:a9:5f:55:aa:c0:36:95:fe:f5:42:f3:
ec:64:dd:88:b6:b6:ed:07:ee:0e:00:86:f3:a4:68:
74:76:8e:25:84:32:62:2b:55:f8:9c:5e:bd:eb:a2:
6d:4b:82:c7:c6:54:80:be:2a:63:e3:fd:d0:e6:f5:
02:85:cf:0e:54:8b:a9:8a:b6:dc:8c:1b:9c:0f:c2:
05:e4:e4:80:7b:10:60:be:a3:a8:b5:86:b9:86:a6:
de:a9:a7:52:2a:a4:7c:66:e7:fc:35:20:cd:81:03:
0d:7b:78:5b:3f:aa:b9:4e:c9:b1:57:b1:95:5e:90:
4f:38:ce:e8:5f:b6:c7:bb:7d:d8:e7:f9:dd:f1:16:
79:a6:8c:0b:31:ba:50:b5:dd:1b:c2:3e:3b:db:1c:
8f:72:ed:c8:c9:f2:f9:51:c2:98:95:2c:9f:97:de:
bf:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:78:DC:8F:A4:39:4A:97:9B:BD:7C:D1:66:EB:A5:A6:BB:4F:53:C5
X509v3 Authority Key Identifier:
keyid:5C:30:D9:50:46:33:1B:DC:E3:01:8B:7F:FE:0F:13:DB:F9:FC:71:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDDZUEYzG9zjAYt__g8T2_n8cY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:df:43:ac:08:68:c5:6f:0a:3c:0d:81:18:63:a4:26:15:92:
fc:a2:66:f8:52:42:02:e5:3a:a9:f4:1c:38:eb:81:6f:54:ef:
fa:5b:15:7a:ae:62:78:ad:f4:87:0d:1e:87:2a:a4:92:f1:e9:
c2:0c:03:dd:c6:e3:fc:48:91:18:25:96:f5:f8:11:17:ec:3f:
25:34:92:70:92:9c:4d:de:1e:99:0a:68:ff:34:f5:5c:e3:ac:
53:dc:4a:bf:c4:8b:af:69:11:2c:6b:f5:ca:69:7e:07:93:7c:
be:49:eb:b9:c5:41:36:7f:57:97:f5:be:55:77:26:87:45:23:
59:71:3d:26:24:09:4d:e8:28:a2:ff:a8:56:41:32:5f:0e:7a:
b6:19:5f:4a:58:4b:35:15:4b:24:37:4a:f5:72:a5:13:0e:ef:
22:f2:89:65:2a:14:90:ce:9d:69:92:65:4a:a7:e2:e5:27:38:
eb:5f:d5:b0:96:9c:40:67:a6:4d:a4:e2:33:86:5b:55:0b:dd:
97:90:61:c6:3d:31:1e:be:ff:56:8d:60:6c:8d:ea:05:da:64:
a8:1e:f4:e7:01:bd:0d:db:f5:3f:18:54:fa:26:20:dc:da:4b:
cb:45:0d:0a:a9:e7:a4:28:de:4b:c6:e5:8f:47:f3:f6:36:94:
2c:b6:90:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:43:05 2026 by rpki-client