Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
File: XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft (raw, json)
Hash identifier: KeFrDBaHsV1SMSUO18k+Q/6dsqoCZGIx6CqKuubUajQ=
Subject key identifier: 94:EE:7F:A0:C0:55:F1:A5:D9:F3:89:92:43:8B:E7:81:F4:56:9F:87
Authority key identifier: 5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03
Certificate issuer: /CN=5c61dcd3eb50c83d68060bcba4af152204193503
Certificate serial: 019D27E056F1D542E86C24355710382CD971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
Manifest number: 1044
Signing time: Thu 26 Mar 2026 02:01:46 +0000
Manifest this update: Thu 26 Mar 2026 02:01:46 +0000
Manifest next update: Fri 27 Mar 2026 02:01:46 +0000
Files and hashes: 1: 2LxanPXEt-Ah2tA9EYIfUY7a7ZY.roa (hash: Uywc9u8hm/WxjQy7SxAxxYIxsP7UM6R3hTnst6UR3yE=)
2: XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl (hash: JEEkKjXGhpCbk5hl9md0bJICqtrp9YWCbjG0RL5NmNE=)
3: XN_BGWEzxZjhg6iXlmQqSDhpeZU.roa (hash: nt1Dqzzch0xHlTVsHiqUIJZJJ7P5OL+fpAG1RALu8GE=)
4: cDTj5s606sVgmgpZ3n6Z3dU4zwA.roa (hash: Tz/Xa89Xe7rgKjUL5hIFqnaSfDilwgGaKsizO4oAEvI=)
5: pwg2Pcu7xQM-Nr6mzrIBgEt_XFI.roa (hash: lF7Ckm/bTHOWi8Xtom4+V7QF19TxeutNBXq6gqp0Yv8=)
6: te3FBz79GYifGb3qq-rDfAn5q7I.roa (hash: 8JJ8Rj+5NIqp3neVi3adeudGuIpzTz7arVf+MmH6wks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:56:f1:d5:42:e8:6c:24:35:57:10:38:2c:d9:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c61dcd3eb50c83d68060bcba4af152204193503
Validity
Not Before: Mar 26 02:01:46 2026 GMT
Not After : Mar 27 02:01:46 2026 GMT
Subject: CN=94ee7fa0c055f1a5d9f38992438be781f4569f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1d:ed:a8:1c:06:97:b6:a2:ec:c0:19:e0:e0:
ac:a6:c0:e5:88:e5:ee:9f:64:3a:ad:f8:55:43:50:
c8:b9:7f:5e:80:20:c0:36:39:ea:1e:d0:92:8c:fa:
49:04:23:9c:5d:db:5c:13:2e:c0:32:9f:64:b8:e5:
23:cc:44:9a:15:f7:63:e8:5a:97:b4:a7:69:ac:4d:
2d:be:7f:52:f5:74:6a:a4:5c:b9:10:18:63:fb:51:
19:3e:e0:9b:d4:ea:54:a7:e4:0d:31:e3:eb:a1:7a:
b4:2c:ac:83:c6:ef:b3:70:60:49:00:e8:a0:94:06:
86:0e:30:61:79:77:6e:2a:f2:86:1b:db:75:7d:52:
b4:c6:eb:27:6d:ff:be:a6:1a:54:81:49:0d:aa:fa:
ce:fd:71:c6:13:36:f7:23:67:d5:a3:9a:9c:bb:4d:
7b:5e:31:15:4a:82:06:77:8b:b9:75:ec:52:48:6f:
3b:19:ce:44:e5:79:6a:63:85:8b:ac:15:6c:dd:2f:
6c:f5:e8:72:82:4f:ce:43:84:da:49:a0:88:6b:a2:
bd:e6:d2:48:b8:40:e2:0a:29:9b:1a:7d:cc:ab:e9:
51:1b:d7:23:3b:b7:d7:8f:be:00:41:6e:f9:fc:20:
90:f2:a2:1c:7a:77:de:29:20:5e:4b:46:cd:0f:48:
8d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:EE:7F:A0:C0:55:F1:A5:D9:F3:89:92:43:8B:E7:81:F4:56:9F:87
X509v3 Authority Key Identifier:
keyid:5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:31:11:e7:62:69:09:c0:51:ae:ce:b8:9e:91:ff:7e:bc:7e:
6e:a5:26:38:d1:c3:aa:9d:cf:12:fb:57:55:1d:97:50:2c:89:
32:ad:45:0b:2e:37:7f:be:c0:08:4c:24:4b:e6:5c:68:f8:2c:
92:8a:28:a8:c5:03:73:18:58:60:e2:2a:2a:3a:19:5f:fe:ce:
76:f8:05:8e:83:fc:5a:cf:8e:51:51:35:32:7c:af:80:75:98:
43:73:ae:c3:47:8a:af:be:87:20:8a:ba:66:04:6d:9b:0d:2c:
c3:97:be:8e:72:35:2b:90:2f:3c:53:81:6a:53:2d:4f:4a:fa:
3c:78:0e:c3:3e:dd:b9:ea:19:da:b8:d1:ea:bc:26:52:c6:c4:
e8:87:33:d5:a4:71:c1:a6:6f:db:80:7e:5c:1f:4a:dc:ae:e8:
e0:e6:3a:d2:7b:1f:30:5f:a3:c6:d0:c9:64:4d:3e:f5:4d:24:
06:f6:7e:f5:78:b3:ee:30:7c:1f:4b:7d:08:9b:79:74:fa:de:
a2:6d:61:ec:a6:f1:6b:e3:b6:4a:11:39:8f:e9:5a:87:e9:05:
87:68:5f:f3:19:54:ff:25:44:96:ae:fb:d2:e4:05:10:87:23:
b2:93:a6:91:74:47:3e:d8:f4:10:6d:51:37:5f:27:6a:6d:7f:
c3:d5:e9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:58:50 2026 by rpki-client