Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft
File: XEwop1rJaVHcOEAKgPnvOqryqss.mft (raw, json)
Hash identifier: w02zo3iEChKa6EoBRKwomLuEHOvWEeeLvjF0tumSULw=
Subject key identifier: 59:57:B8:77:75:6B:1F:99:1B:89:8A:71:7F:7F:C1:47:EA:08:48:5C
Authority key identifier: 5C:4C:28:A7:5A:C9:69:51:DC:38:40:0A:80:F9:EF:3A:AA:F2:AA:CB
Certificate issuer: /CN=5c4c28a75ac96951dc38400a80f9ef3aaaf2aacb
Certificate serial: 019D25F1381AE6DE657B3D9BB68E702F2541
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEwop1rJaVHcOEAKgPnvOqryqss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 17:00:58 +0000
Manifest this update: Wed 25 Mar 2026 17:00:58 +0000
Manifest next update: Thu 26 Mar 2026 17:00:58 +0000
Files and hashes: 1: 9hnY7Mi-DWWNXT8zxPWlDMpFkVY.roa (hash: KmgeWMyp8Cb4dRrZsFfQDYyQitlhpxsyGtinqL7w4YI=)
2: XEwop1rJaVHcOEAKgPnvOqryqss.crl (hash: 7EM38Z0T2p5Kjgg3QHy0e1pt9tgJwvlhQNDncAZBSA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEwop1rJaVHcOEAKgPnvOqryqss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:38:1a:e6:de:65:7b:3d:9b:b6:8e:70:2f:25:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c4c28a75ac96951dc38400a80f9ef3aaaf2aacb
Validity
Not Before: Mar 25 17:00:58 2026 GMT
Not After : Mar 26 17:00:58 2026 GMT
Subject: CN=5957b877756b1f991b898a717f7fc147ea08485c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b3:b7:80:a4:c1:53:bc:8e:50:46:cd:41:75:
93:6f:64:75:74:dc:98:bf:35:be:fc:b4:49:f3:a2:
52:23:cc:bc:de:b6:5b:b0:4c:40:ee:d7:22:0b:de:
c1:26:b8:d2:14:22:6d:70:40:da:0c:71:99:c3:70:
2c:ec:85:d3:65:93:a3:cf:5d:90:d3:e1:36:dd:1c:
02:55:c8:80:a8:b4:6e:7d:5f:de:d1:31:4c:0c:4e:
ed:5c:4b:f0:df:90:09:0f:c5:70:8d:47:66:ee:37:
91:89:e6:bf:c7:18:22:2a:b7:ec:3b:18:ed:28:36:
80:b1:ef:5e:60:35:f1:c6:28:ee:f5:fc:f4:09:6b:
2d:c6:26:0a:63:a0:40:e3:25:70:c9:86:16:c3:a9:
b6:ff:a4:2a:60:fa:05:35:94:01:f7:31:b3:d0:b6:
b9:7a:d8:6f:4e:6c:c2:bf:05:12:ae:d9:3d:44:32:
dc:ef:f5:62:86:a8:9f:91:14:23:ff:09:7a:3f:f2:
99:c6:e9:54:47:7c:35:d3:9d:d4:10:35:da:7a:cb:
2d:8f:31:28:9e:f5:00:28:8a:cc:e3:2a:6d:6d:7e:
28:4e:e0:98:81:be:a8:57:6e:3b:f8:34:11:96:6c:
df:4d:84:25:0e:05:aa:9c:fb:3f:72:85:c6:58:77:
20:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:57:B8:77:75:6B:1F:99:1B:89:8A:71:7F:7F:C1:47:EA:08:48:5C
X509v3 Authority Key Identifier:
keyid:5C:4C:28:A7:5A:C9:69:51:DC:38:40:0A:80:F9:EF:3A:AA:F2:AA:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEwop1rJaVHcOEAKgPnvOqryqss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ef:f9:2e:3a:53:e4:b7:13:df:65:24:38:19:b8:31:c9:c6:
c4:83:72:8c:85:f8:42:1c:3b:d5:50:7d:45:76:4d:fb:69:83:
1d:bf:a5:50:9e:04:0a:37:5b:47:34:3d:6f:e5:f0:3a:c3:40:
62:3f:37:90:fe:68:6c:0f:6d:ec:a8:75:1b:e0:6a:85:c4:ae:
0e:24:59:7d:56:0b:51:72:9e:80:1a:ea:17:b5:92:49:33:6c:
89:d7:81:a5:c5:99:48:2d:45:b3:ee:03:a0:f2:89:76:e5:13:
c0:80:76:84:7d:16:d6:7b:66:b2:19:eb:0d:c8:22:6f:32:89:
08:c8:e1:f8:f8:08:cc:50:1b:38:43:7d:34:fc:3b:39:c7:1a:
aa:cf:b1:af:b2:a3:e0:23:eb:53:f5:9b:68:db:3a:fe:1c:f3:
82:cd:54:71:75:18:41:22:35:7b:0c:a2:42:56:eb:00:9d:64:
af:04:98:19:a4:0d:37:f5:25:72:21:de:22:05:c7:e5:b4:b5:
7e:87:91:c6:1f:b5:f5:c4:cd:8a:be:49:d6:db:87:42:44:4d:
59:f1:39:16:32:a5:2f:e2:c5:68:64:65:98:8c:23:22:6c:66:
52:c0:c9:21:0a:f9:6e:12:07:d9:80:a8:92:54:a0:2f:39:f2:
39:b4:c5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:00 2026 by rpki-client