Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.mft
File: XtjeCCBk6z_rQCqHPli7aM9dSR4.mft (raw, json)
Hash identifier: M3yfzGHflgvwE0R/7jhjTZ7Qgr32jwg36tFISfdjnM0=
Subject key identifier: B4:D4:35:FE:87:88:97:66:8A:AC:21:B9:5B:A9:0C:8A:EC:71:E8:61
Authority key identifier: 5E:D8:DE:08:20:64:EB:3F:EB:40:2A:87:3E:58:BB:68:CF:5D:49:1E
Certificate issuer: /CN=5ed8de082064eb3feb402a873e58bb68cf5d491e
Certificate serial: 019D284DDDDAC1C36E9BBC44BDBC4959A801
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XtjeCCBk6z_rQCqHPli7aM9dSR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.mft
Manifest number: 0A44
Signing time: Thu 26 Mar 2026 04:01:24 +0000
Manifest this update: Thu 26 Mar 2026 04:01:24 +0000
Manifest next update: Fri 27 Mar 2026 04:01:24 +0000
Files and hashes: 1: V6ybFfc4rzpu3NrH9kaqGbFeKqk.roa (hash: CmcBK0JbdCkq9SyfG/xpgWBN+pvjaz0MINnXMk2x50o=)
2: XtjeCCBk6z_rQCqHPli7aM9dSR4.crl (hash: iUnqcatGBSh/st47WPVkWhAIeSzy2eUejukglpgUx8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XtjeCCBk6z_rQCqHPli7aM9dSR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:dd:da:c1:c3:6e:9b:bc:44:bd:bc:49:59:a8:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ed8de082064eb3feb402a873e58bb68cf5d491e
Validity
Not Before: Mar 26 04:01:24 2026 GMT
Not After : Mar 27 04:01:24 2026 GMT
Subject: CN=b4d435fe878897668aac21b95ba90c8aec71e861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:28:49:c7:04:35:f9:7e:c6:b7:96:ae:e6:6a:
40:83:4e:fa:1a:d3:7d:ce:ea:c4:ab:03:e2:c3:08:
ce:b0:82:70:79:82:24:31:dc:8c:70:e6:1d:10:32:
85:ef:ee:0d:84:46:6e:2b:9e:c6:e7:0d:11:59:c8:
bd:fd:c4:4c:a2:7d:ee:89:e8:12:a6:5a:1b:92:94:
88:84:23:ce:5c:26:16:1f:8e:68:ad:a7:ff:0d:04:
ed:d2:ec:12:31:02:98:77:2c:b7:ad:f7:ad:87:59:
79:35:d7:4d:31:6b:78:6d:59:a0:f7:62:b9:1f:b7:
f0:3c:8a:09:dd:bc:d0:f8:ea:96:e6:74:6e:6d:00:
ab:4b:f6:f3:4f:cb:c2:b4:48:ef:94:2b:34:cb:11:
3c:c5:c1:14:ab:0c:0e:15:75:ac:a3:df:c7:9f:1b:
3a:f7:a9:d8:67:16:ae:81:fc:bd:fe:65:44:01:d3:
63:39:b7:34:44:ec:e3:d4:6c:50:42:d5:3e:4b:0a:
11:ee:ab:43:19:d6:6e:bf:e9:a1:3e:a5:10:52:53:
47:f0:b2:7d:4d:79:20:bd:e2:ed:8a:10:3d:c0:3a:
31:d0:fc:9f:f1:d3:13:78:bc:3e:8a:e0:61:07:34:
93:93:e0:9f:f5:71:fc:86:75:b3:ec:3a:92:22:e6:
45:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D4:35:FE:87:88:97:66:8A:AC:21:B9:5B:A9:0C:8A:EC:71:E8:61
X509v3 Authority Key Identifier:
keyid:5E:D8:DE:08:20:64:EB:3F:EB:40:2A:87:3E:58:BB:68:CF:5D:49:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtjeCCBk6z_rQCqHPli7aM9dSR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:4c:a5:98:f7:d8:d7:7e:11:3f:61:35:ce:7e:1e:59:ce:10:
f0:51:4f:39:ab:4f:45:19:8f:07:d0:b6:98:99:3c:57:14:36:
fb:c1:b9:fc:e9:8e:e7:27:34:a1:8d:00:31:0e:50:fa:47:85:
a9:66:d7:8f:de:af:bb:a0:7e:84:28:3f:c7:d7:4f:0e:55:ef:
cb:b2:4b:94:97:34:1b:01:f6:cc:5c:cb:3c:c1:9c:f2:29:f4:
3a:25:1a:69:93:32:fe:f7:27:25:07:7b:e0:1d:aa:2f:b5:98:
3c:96:94:54:46:27:bf:0b:64:ae:f4:5e:69:c0:8d:94:48:06:
84:cc:85:44:ee:d5:e6:76:75:46:e2:49:46:4d:88:91:15:2b:
58:e2:0d:51:3d:8b:f7:cd:49:b1:e7:bc:0e:c1:da:2e:b7:dc:
1d:63:a3:db:b8:0e:75:36:13:a2:90:74:09:a6:db:cc:4c:79:
7c:89:8a:d4:f1:32:ec:6a:9f:0b:20:02:be:47:74:a0:17:16:
32:d2:dd:17:5f:74:c3:02:36:13:ad:4d:22:50:0d:28:2d:ae:
f1:e9:8f:43:cb:ad:ee:82:aa:06:f9:56:84:8e:82:b2:84:43:
e4:5f:17:e6:82:a8:da:46:14:d9:31:f2:6d:29:54:d9:22:69:
be:9a:5d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:14:58 2026 by rpki-client