Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft
File: Xh1AYP1QHrrpPtRNprennmZwWy8.mft (raw, json)
Hash identifier: Ly9x9j9aONQzvdJoVc1vuN50KQZ4+uWj9MdY3wVcQlU=
Subject key identifier: 92:D8:43:A7:6D:42:CE:93:60:36:71:B3:65:BB:93:68:92:B0:85:66
Authority key identifier: 5E:1D:40:60:FD:50:1E:BA:E9:3E:D4:4D:A6:B7:A7:9E:66:70:5B:2F
Certificate issuer: /CN=5e1d4060fd501ebae93ed44da6b7a79e66705b2f
Certificate serial: 019D2CCF0FF2E32019323AF9CC6A417B7E0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xh1AYP1QHrrpPtRNprennmZwWy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft
Manifest number: 188C
Signing time: Fri 27 Mar 2026 01:01:00 +0000
Manifest this update: Fri 27 Mar 2026 01:01:00 +0000
Manifest next update: Sat 28 Mar 2026 01:01:00 +0000
Files and hashes: 1: JQHrdWqlz2UqGKCLzlTiY4SvfH4.roa (hash: bwaVBJc44mNBjusS1vQzeOwmOeBHHl10XyVb8yiVdpw=)
2: Xh1AYP1QHrrpPtRNprennmZwWy8.crl (hash: Db+XFwhWuhY/geBaXRUCWStDAhwCmKgb0HRkNz0OCZo=)
3: ZjTRqjLbUrNz2NUC-0NUb8hGxVI.roa (hash: lNRVW6GevA3klBK1hehDwbl+8Dt78Jzm0k/Uol69mug=)
4: euXoJUWr3F0_dXowhJbULwFHFkA.roa (hash: cczTixdHtcVBoqBRLYhdFy/dK3Tmrb19hmQ27lh4fQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xh1AYP1QHrrpPtRNprennmZwWy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:cf:0f:f2:e3:20:19:32:3a:f9:cc:6a:41:7b:7e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e1d4060fd501ebae93ed44da6b7a79e66705b2f
Validity
Not Before: Mar 27 01:01:00 2026 GMT
Not After : Mar 28 01:01:00 2026 GMT
Subject: CN=92d843a76d42ce93603671b365bb936892b08566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2d:c8:77:20:c3:68:c8:1e:d5:75:9b:29:30:
ba:22:a5:f7:a8:e7:97:a3:8d:4f:69:ff:83:22:f3:
2e:44:ee:d0:8a:90:d3:18:d2:83:24:04:c3:4c:4f:
5d:19:b6:81:31:34:ff:52:fc:47:0e:00:d0:df:67:
c9:92:0f:f3:3e:83:12:ee:31:55:0e:67:db:47:81:
7c:cd:eb:11:7a:cb:88:83:87:11:b8:71:4e:07:aa:
f9:df:0a:55:cc:54:17:dc:b8:f6:db:fc:5c:d8:5f:
c0:5c:4e:98:01:af:88:33:7c:2c:16:7f:71:ae:b3:
af:66:e6:2a:9c:98:29:09:bd:01:42:2b:6b:b8:c3:
e7:66:3e:75:20:13:01:38:74:f8:72:cb:93:ea:f7:
c5:93:16:5c:53:ad:32:c8:f8:0c:eb:f5:72:d1:13:
96:a8:98:39:8c:a7:d7:9e:0f:72:24:7f:93:df:b0:
cf:bd:a8:04:ca:e8:ca:c4:39:d3:e9:2c:2b:eb:3b:
c0:40:cd:a8:c4:8b:77:82:6c:74:f9:be:29:9b:39:
6d:d8:9e:a1:32:2e:a8:9f:1a:ac:11:25:94:b0:4c:
c2:b3:56:ef:49:57:85:b7:8e:04:f3:03:82:b3:46:
16:a6:b5:e0:11:f9:e8:7e:ef:c2:7b:95:96:2d:27:
0b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D8:43:A7:6D:42:CE:93:60:36:71:B3:65:BB:93:68:92:B0:85:66
X509v3 Authority Key Identifier:
keyid:5E:1D:40:60:FD:50:1E:BA:E9:3E:D4:4D:A6:B7:A7:9E:66:70:5B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xh1AYP1QHrrpPtRNprennmZwWy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:48:80:30:46:98:8b:af:39:9b:30:39:ad:9c:b2:e0:50:83:
2f:64:85:5f:b4:aa:24:13:18:54:be:33:c6:94:46:f6:74:63:
c2:23:b6:9c:e5:3e:69:f9:f9:33:02:19:73:53:a0:7b:50:99:
f0:41:8a:dd:b4:7b:d9:61:92:ab:3d:c9:da:31:fb:44:41:a4:
91:34:be:6b:77:dc:f0:ec:97:89:8e:05:68:a2:81:f3:ad:b4:
60:1d:7a:63:c4:7f:70:27:1b:de:9e:cb:38:d1:7f:3f:e9:de:
09:e0:31:a8:09:f3:6f:9e:95:8f:7b:39:7a:f7:ad:fc:49:e7:
f8:67:f4:32:49:0b:e9:11:cf:76:df:fa:ec:35:c4:8a:b9:12:
cf:0b:1f:5d:e1:a6:b8:bb:c3:34:7d:2d:b1:dd:60:76:99:1d:
a5:2e:27:a7:02:c2:e9:b1:45:84:f4:c9:ce:65:5e:31:68:25:
0d:2f:f5:ad:83:7f:f5:6a:5b:58:c7:41:11:4b:19:a2:55:58:
2a:cb:f2:79:ec:90:ef:96:65:1c:62:f5:bc:24:6b:e9:20:3e:
a0:18:14:a8:9d:04:4d:b6:3d:df:d6:be:bf:6a:ba:84:d7:d9:
a2:6a:1c:dc:f5:15:20:77:3f:32:c3:c6:3d:61:f5:33:59:68:
a9:36:05:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 08:32:46 2026 by rpki-client