Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft
File: XYbEfabZB5NHtg8E7VxVV_6YPrg.mft (raw, json)
Hash identifier: tCqAfXpOLnsl8nz2eKfsoNEGgtPKLfhEZLEMKojQ3ng=
Subject key identifier: 5A:CB:D8:D8:97:B7:4E:6D:E2:5C:DB:12:54:09:DD:68:BA:99:CA:97
Authority key identifier: 5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8
Certificate issuer: /CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8
Certificate serial: 019D284D804A5BCCF6ABBD04C6EFA774250E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft
Manifest number: 0950
Signing time: Thu 26 Mar 2026 04:01:00 +0000
Manifest this update: Thu 26 Mar 2026 04:01:00 +0000
Manifest next update: Fri 27 Mar 2026 04:01:00 +0000
Files and hashes: 1: HhZLJKHTDSxUIKRb-RQDIpmwb2c.roa (hash: a/gPxO3vEuqfCp70KpDQq2lcCKuUQZuTopPVCy8m4LA=)
2: PLVDJ7dkDU--d-zDM1gbGBw8XBs.roa (hash: 7fFDeno1llfmG5xw2+UhwO2bFxAsVyxjb17vnpRCoYg=)
3: PfU-pIQUztpuCpjeK4PA6M387xY.roa (hash: IxKP4N/sSJx4IV1KMlr0VGqT7A6A6/R7M00aHJnoW/w=)
4: XYbEfabZB5NHtg8E7VxVV_6YPrg.crl (hash: ptlGzlDq3LWqt4XxPU0JqtwalsglHktlJJDrDIEHfSg=)
5: _BWqmK6mrfBuguQtqF75TBClGMs.roa (hash: uZ7P5xdR1guWm1uC7RQ3bBaQOHT/pKp/etCCjtf5eTs=)
6: mUrwLBSn-6OABt-a8CWyid9HQT0.roa (hash: QLR5JTAjIM5uhR1YB984cbq/Umms9s9InAJMrrGnnxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:80:4a:5b:cc:f6:ab:bd:04:c6:ef:a7:74:25:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8
Validity
Not Before: Mar 26 04:01:00 2026 GMT
Not After : Mar 27 04:01:00 2026 GMT
Subject: CN=5acbd8d897b74e6de25cdb125409dd68ba99ca97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:33:6c:c2:27:82:ce:86:a8:9d:22:bc:44:be:
23:1b:b8:69:68:7e:61:5f:36:fd:9f:4a:b9:7b:b4:
04:87:08:96:8b:a1:93:5e:bf:82:59:6a:5d:fe:2d:
e7:ee:f6:8c:c9:8c:3c:44:53:a0:6e:82:05:51:9e:
72:6c:f5:5a:bd:70:04:d1:f8:15:45:17:00:49:cc:
c0:48:d9:aa:db:af:fa:17:a8:b7:4c:4d:77:ea:ff:
36:12:77:ce:7e:fd:77:83:87:c1:c1:eb:7d:b1:9d:
e1:43:ec:d3:31:14:de:4a:4a:6a:6a:2a:c4:29:24:
e7:57:58:e2:6b:44:df:bf:3d:2f:38:f3:7f:33:37:
e0:01:fe:5a:36:7f:03:12:70:0c:bb:94:cc:7b:27:
09:60:7c:1b:92:33:6e:21:ca:c7:15:24:7c:6b:3b:
04:4b:20:4d:f2:41:a4:c3:b7:92:ff:47:71:23:4f:
53:85:8b:2e:da:d7:18:5d:6d:77:b4:bd:63:39:6c:
f4:0a:2e:82:01:43:f2:4a:aa:b6:85:5b:a8:e6:8a:
d0:0c:5a:88:d8:f9:ee:d3:be:e0:17:19:b5:81:23:
19:62:2c:a1:53:32:5b:83:bd:d1:d7:45:73:ca:1c:
70:fb:ed:87:04:36:db:84:03:f6:5e:70:10:39:a1:
75:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:CB:D8:D8:97:B7:4E:6D:E2:5C:DB:12:54:09:DD:68:BA:99:CA:97
X509v3 Authority Key Identifier:
keyid:5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:aa:09:a7:3e:d1:77:47:db:e8:88:d1:3a:ad:5e:97:ce:52:
9a:1c:22:31:81:c3:d8:43:0e:47:ab:72:97:7e:fd:eb:53:37:
ad:e7:62:11:64:09:0b:bc:a7:07:41:af:18:aa:68:8c:38:14:
11:80:1e:11:40:9b:bb:17:b1:20:7c:dd:4f:4d:e8:5b:fe:f1:
cb:4c:5d:a1:40:30:35:c1:e6:e5:85:ba:d8:44:9f:c9:0b:82:
6b:3b:6c:58:cd:fc:6d:bd:82:14:b6:6e:ac:37:00:5f:a3:d8:
79:03:d5:6f:85:ff:48:a2:fb:3c:b6:f9:e7:6a:87:ff:5d:5d:
a9:d6:21:67:05:49:2b:2e:4b:01:5b:fd:6a:62:60:34:5d:74:
05:44:8c:b1:28:b2:37:4c:0d:3a:f9:d5:c9:07:7d:2c:3b:cd:
a8:05:aa:b9:c0:85:33:31:98:04:2b:f3:60:8d:08:cf:dc:cb:
d6:a6:a2:6f:52:0b:16:5d:8e:2a:1f:44:20:15:a4:a6:83:ca:
d3:d2:19:23:eb:08:9c:15:0e:f8:03:7d:c2:f1:e1:87:87:d5:
c7:07:eb:9e:f8:6b:c4:85:fd:93:a3:6d:bf:47:65:5b:9e:2c:
78:77:81:4d:b1:5e:ee:6d:d4:b1:e1:3f:bf:c6:db:e8:a2:50:
89:d9:9b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:57:11 2026 by rpki-client