Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
File: xr--8nm_ne1uNlHgYo05unkpT3g.mft (raw, json)
Hash identifier: HoCehPcXfpCAa1dMTF5j9Xji/qjDrfwvyYpmWNnzGiA=
Subject key identifier: 0F:FA:54:C2:A0:7D:56:21:18:B4:3B:31:C0:24:4E:8D:17:FB:84:D2
Authority key identifier: C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78
Certificate issuer: /CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78
Certificate serial: 019D28168EFA7E52290E416E16289FC55945
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 03:01:00 +0000
Manifest this update: Thu 26 Mar 2026 03:01:00 +0000
Manifest next update: Fri 27 Mar 2026 03:01:00 +0000
Files and hashes: 1: E8RgfAnRQ_MkPzEQzExnrRGS9bk.roa (hash: Uscjfda3vNy/cunwHUUok4ph0ZEvFOV3pV/NuXcyZJ4=)
2: jQxMjcdrhmgG348-FC6ZQ2XBhWA.roa (hash: zzN6qYWykA9k6vddc6gAA5bY2rFVt0NTvTAU0BcNrqQ=)
3: xr--8nm_ne1uNlHgYo05unkpT3g.crl (hash: oKu7lcBBrMmhYj3m6WCoe2Tp8VFSXEUqX8MihdkzdL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:8e:fa:7e:52:29:0e:41:6e:16:28:9f:c5:59:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78
Validity
Not Before: Mar 26 03:01:00 2026 GMT
Not After : Mar 27 03:01:00 2026 GMT
Subject: CN=0ffa54c2a07d562118b43b31c0244e8d17fb84d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:50:fd:f7:ee:0a:94:29:81:0e:d5:f1:ce:31:
be:1a:a1:f3:f2:29:09:83:00:82:02:fc:d1:59:de:
d1:93:f6:b2:12:c3:7f:95:65:54:0a:e5:87:c7:19:
5b:d2:e5:15:96:7f:3a:20:90:40:fc:4c:ac:50:94:
46:68:1a:9b:4d:7a:11:6b:e5:db:22:09:74:b3:48:
51:fd:7c:0a:33:89:13:e6:bf:90:04:e2:4a:07:24:
43:46:58:9b:a6:6f:92:71:b7:d5:9e:03:ec:40:b8:
4c:89:a4:af:79:9d:0f:0e:51:58:b0:9e:ec:8f:a5:
49:25:1f:d7:29:89:fa:ac:7c:92:d2:63:7d:d5:db:
9c:be:6d:65:fd:97:3c:67:2f:0c:f3:52:9e:b3:5b:
f3:4e:74:4b:bd:87:93:84:7b:f8:be:7b:29:6f:3e:
60:1f:12:d4:e4:c7:3c:d8:b6:d4:2a:42:0b:dc:6d:
81:a5:74:e5:68:81:be:dd:a7:e0:9b:d1:63:44:59:
99:22:b7:2e:89:cc:ba:08:58:1f:7f:4c:b5:52:82:
90:95:5a:7e:98:6c:d8:cb:31:47:87:35:55:9d:ec:
5b:da:bd:ac:4f:81:60:31:02:a9:c2:24:be:54:d1:
c2:b0:cd:e2:36:1e:cc:d6:00:f2:eb:14:7c:2c:e0:
67:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:FA:54:C2:A0:7D:56:21:18:B4:3B:31:C0:24:4E:8D:17:FB:84:D2
X509v3 Authority Key Identifier:
keyid:C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:c4:08:3d:72:c2:bd:4d:40:4f:90:49:32:bb:3e:0f:39:10:
27:2c:88:0a:52:d8:0b:1f:5e:4a:41:bd:0f:e1:69:76:fa:6a:
0e:c9:99:ed:98:50:c8:07:b7:b5:06:a3:d5:b3:2c:d3:a1:6a:
39:c7:64:77:b2:9f:ee:05:7a:a3:70:9b:16:15:38:b2:d6:b5:
d9:2d:f9:35:2c:04:48:b4:71:9c:17:cf:96:a7:12:b1:c5:10:
b0:fd:49:0f:75:5c:74:5c:f0:e2:d9:5c:b4:db:40:0f:97:75:
1f:09:b2:2f:36:6a:9b:6a:b5:f7:60:e1:7f:6c:7b:86:26:80:
9b:40:df:bc:0e:bc:c0:54:69:d4:6c:e8:3b:a8:bf:46:09:44:
a8:77:02:46:c7:83:f7:d4:71:07:bc:e6:c5:57:00:e9:fd:c5:
44:69:27:f4:47:23:cd:58:a3:53:38:9d:92:d4:b6:f3:96:3d:
79:2f:0d:3f:e9:0b:a4:55:a4:5e:c6:14:bb:77:5f:0e:a1:ad:
35:05:8d:79:96:9e:2d:34:ba:e5:20:cb:37:68:8d:05:95:f4:
92:42:50:df:d4:d8:c8:fa:c9:61:bb:4e:a4:9f:90:12:ed:7e:
04:67:6e:42:49:bc:53:1f:b5:b0:e4:4a:b3:0e:5d:e2:fd:30:
12:83:85:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:38 2026 by rpki-client