Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
File: X_S8YTfFQKibkXPMLeMusEyebq4.mft (raw, json)
Hash identifier: Y/EpgLFKdODYVo2D18jXD8Loi/prQvxGQHRr63rUXqI=
Subject key identifier: 7D:FF:B4:31:3B:82:8D:38:0A:9E:17:30:98:97:4F:19:25:39:20:B7
Authority key identifier: 5F:F4:BC:61:37:C5:40:A8:9B:91:73:CC:2D:E3:2E:B0:4C:9E:6E:AE
Certificate issuer: /CN=5ff4bc6137c540a89b9173cc2de32eb04c9e6eae
Certificate serial: 019D273ACBAE8106A56D145C2CB3ED2B765C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_S8YTfFQKibkXPMLeMusEyebq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 23:00:57 +0000
Manifest this update: Wed 25 Mar 2026 23:00:57 +0000
Manifest next update: Thu 26 Mar 2026 23:00:57 +0000
Files and hashes: 1: 7t-QMh_AB92nrya7tNjufAiIaNU.roa (hash: LTbV2PdrQop6XvBMoLsBRV4fZwR2wk3jFKlBOeHWh48=)
2: X_S8YTfFQKibkXPMLeMusEyebq4.crl (hash: AjtL8RUBKoX8JX1YkpUbpfZ6zcMeStDbTkUtpRNN0no=)
3: tyhGCGUUUxBeIkOEmn5CIWeCMz0.roa (hash: Mn4RuAcnVGGM8GO1ajZF2VYJS7eHnyi2wQ/w4qHvAaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/X_S8YTfFQKibkXPMLeMusEyebq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:cb:ae:81:06:a5:6d:14:5c:2c:b3:ed:2b:76:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff4bc6137c540a89b9173cc2de32eb04c9e6eae
Validity
Not Before: Mar 25 23:00:57 2026 GMT
Not After : Mar 26 23:00:57 2026 GMT
Subject: CN=7dffb4313b828d380a9e173098974f19253920b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ea:b2:33:cb:15:a2:88:c0:7e:a5:6c:be:05:
4c:dd:06:bd:8d:af:a5:11:5b:28:e9:ff:67:e7:9a:
50:72:05:ae:07:27:73:27:38:7e:b7:89:40:6a:3b:
69:7a:dd:82:de:6e:57:72:c9:ea:4e:32:f9:31:f0:
6e:32:94:5e:d9:20:08:0b:56:f5:3a:e2:8d:c8:67:
85:02:fb:12:84:d4:d7:22:51:91:34:97:2d:5e:a5:
99:68:0e:fe:49:1e:2c:9f:89:0d:55:37:0c:69:81:
62:70:88:9c:54:eb:f1:1f:7b:a6:c9:f3:1e:48:db:
39:22:bd:64:52:d4:2e:2b:12:f1:c0:6c:83:b3:84:
a3:62:1e:67:d3:fc:3e:32:10:a9:bf:2e:a0:e9:2c:
04:98:45:eb:1c:8a:49:f1:18:60:6a:67:21:50:87:
6f:55:c1:63:d2:2f:75:34:52:d3:7e:22:32:d5:cd:
63:6d:6f:a0:b8:5e:85:e7:73:f9:3a:8e:81:56:11:
99:00:19:22:82:f1:f2:ca:e7:ff:73:e5:ae:c2:ec:
eb:73:65:5f:b7:2c:f6:10:8e:22:8a:c3:de:9e:e0:
cf:88:98:69:37:53:e1:f5:86:60:b2:d0:7f:e4:55:
50:6c:5d:b3:9f:78:8c:c3:60:28:2a:3e:b7:16:d3:
40:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:FF:B4:31:3B:82:8D:38:0A:9E:17:30:98:97:4F:19:25:39:20:B7
X509v3 Authority Key Identifier:
keyid:5F:F4:BC:61:37:C5:40:A8:9B:91:73:CC:2D:E3:2E:B0:4C:9E:6E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_S8YTfFQKibkXPMLeMusEyebq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:7a:4e:8e:63:27:ba:04:3f:64:0f:3c:97:1e:66:12:5d:44:
ef:27:b7:f4:63:06:31:0d:3a:e4:0d:5d:ef:ff:2f:c6:c0:6a:
6b:11:1e:e3:4b:4d:42:45:c6:ca:4f:92:c4:35:4b:23:0c:93:
b2:91:ab:4f:17:78:ff:e1:9c:35:53:9c:01:e6:7f:9f:6b:27:
9b:60:97:35:bc:82:7c:c9:92:e9:ea:5c:a2:8f:26:63:a2:99:
3e:18:2e:f5:a2:40:f4:0c:79:ea:4a:fe:f4:8d:bf:c9:05:4c:
3b:82:67:e4:46:00:f1:13:87:a4:f9:fc:3d:38:19:f3:99:83:
82:f8:6f:9e:0f:e0:20:b1:e5:4e:3f:6c:3d:47:05:e8:1c:b1:
0f:47:4f:08:af:ca:f8:ee:e1:0b:3d:56:c0:db:88:6c:9a:4e:
93:7c:bb:14:9b:c6:84:ad:35:24:ac:17:cc:02:75:c3:e7:25:
a6:f6:7b:98:85:65:d4:ac:01:09:cc:b8:ec:94:f9:ba:90:42:
b1:f7:1e:d8:8b:c0:1a:ee:e4:d9:f7:a2:bf:36:dd:c0:f0:6c:
06:46:d6:11:3a:84:15:f2:9d:4b:02:28:36:36:09:d5:8c:de:
07:ec:7b:27:4f:72:82:f7:b3:49:e4:39:82:7a:11:3d:e4:b1:
31:85:1c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:45:11 2026 by rpki-client