Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft
File: xpWUB18xxROhM36RdZKQA35me_k.mft (raw, json)
Hash identifier: hPWGUZQYO6BTHWWXwGv7h4JbdpJDCUAPHuLTvQqI41o=
Subject key identifier: D4:68:15:09:A7:DC:DB:87:4E:D5:CD:D3:66:81:87:E9:C3:DE:B7:B7
Authority key identifier: C6:95:94:07:5F:31:C5:13:A1:33:7E:91:75:92:90:03:7E:66:7B:F9
Certificate issuer: /CN=c69594075f31c513a1337e91759290037e667bf9
Certificate serial: 019D2AA9C4C35575D9CEEE0FA440AAAF7AA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpWUB18xxROhM36RdZKQA35me_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft
Manifest number: 04EE
Signing time: Thu 26 Mar 2026 15:01:01 +0000
Manifest this update: Thu 26 Mar 2026 15:01:01 +0000
Manifest next update: Fri 27 Mar 2026 15:01:01 +0000
Files and hashes: 1: 1JH1P29Kf09zWZrF1xe3ZZfCieI.roa (hash: DhT9OAA9PZuMRclwlwztAMTiBJcJK2NakyvCDwGRGYc=)
2: xpWUB18xxROhM36RdZKQA35me_k.crl (hash: Jub/PmIjYzPdR0L7BBN066qcAp4UZUmpwetW8yVBjkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpWUB18xxROhM36RdZKQA35me_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:c4:c3:55:75:d9:ce:ee:0f:a4:40:aa:af:7a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c69594075f31c513a1337e91759290037e667bf9
Validity
Not Before: Mar 26 15:01:01 2026 GMT
Not After : Mar 27 15:01:01 2026 GMT
Subject: CN=d4681509a7dcdb874ed5cdd3668187e9c3deb7b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5e:b1:4d:b2:72:31:b7:04:1b:ba:d4:b6:36:
c4:c7:7a:2c:4b:4c:bc:84:72:a3:e2:e8:3a:e3:ce:
1e:2d:35:74:e6:e1:12:7a:0d:9f:1c:30:fb:9d:1f:
fb:be:e6:80:a9:77:7f:5c:59:67:95:8f:ec:c9:00:
ce:f5:2f:cb:da:90:19:fe:6f:f0:77:52:a4:d8:1c:
b4:26:49:27:1d:41:e0:ff:7f:17:fa:87:e9:d5:66:
79:08:62:85:51:f9:de:9b:83:08:6f:63:49:b3:a7:
af:dc:1d:f4:fe:3f:f8:64:e4:4e:d6:73:fb:c0:0b:
d0:e0:8b:7f:43:81:c1:5a:8d:40:d8:7e:a4:18:e4:
6d:fe:25:fd:dc:70:96:37:29:5a:d5:42:dd:d1:36:
4c:16:5d:1b:58:f4:e7:fa:69:d5:31:3f:ee:d7:4b:
8a:51:c0:58:58:13:c0:a5:63:04:29:a6:2f:c6:87:
f3:76:4a:0a:bf:02:01:9e:0f:9b:c0:55:b8:9f:c9:
79:76:5c:cb:13:7a:4f:3e:e9:92:70:37:4e:5d:fd:
e7:79:9f:29:78:63:13:bc:bf:39:cf:36:e0:ef:18:
f0:62:ed:27:7b:24:9b:71:17:92:b1:d6:49:26:70:
38:a1:ac:db:9f:d0:7c:44:6f:2d:87:d6:47:0a:5c:
dc:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:68:15:09:A7:DC:DB:87:4E:D5:CD:D3:66:81:87:E9:C3:DE:B7:B7
X509v3 Authority Key Identifier:
keyid:C6:95:94:07:5F:31:C5:13:A1:33:7E:91:75:92:90:03:7E:66:7B:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpWUB18xxROhM36RdZKQA35me_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:0d:c6:4e:3b:28:2d:59:c7:8d:40:89:55:41:d8:b8:26:31:
69:77:f3:2e:6b:13:02:4c:b0:c6:7b:33:36:1d:7b:5b:c6:33:
47:5e:b4:24:23:89:c3:7d:ca:88:32:27:a6:69:78:d2:ec:fc:
5e:b0:ee:9e:a4:af:67:a8:b5:e4:c3:39:9a:1a:15:8b:d4:af:
10:4b:60:2e:fc:9d:df:8b:7e:5a:ae:76:82:8f:80:fd:a8:8c:
ec:d4:d3:02:44:a8:04:82:8b:52:b7:d9:e0:1a:89:f7:21:96:
e2:3d:6f:b4:43:25:99:2b:7b:69:26:ff:47:d3:af:e0:77:16:
dc:c7:dc:0b:a8:25:15:8e:66:f5:09:62:51:7f:82:a9:43:62:
e3:8a:bf:c3:85:d1:f6:47:64:a9:c0:fa:a5:f1:0c:90:fe:ba:
14:8f:ba:60:74:45:cb:31:da:cd:2a:a0:70:eb:49:ff:aa:2a:
3f:ff:d5:96:9b:43:d4:a8:25:ea:78:e1:9a:c9:c8:a1:7e:ff:
c2:01:6e:60:9c:42:b4:72:b3:e9:5a:05:b0:38:09:f3:b1:4c:
ba:c6:e4:34:20:16:43:93:1f:1f:2b:b4:c7:d9:70:89:6a:4a:
1c:c9:2f:e0:4f:bd:c8:f1:7f:31:e1:45:60:39:0e:2b:d3:98:
fd:7f:07:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:28:19 2026 by rpki-client