Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
File: XG19h_rsSNykNp1oOM7sUa4r2Go.mft (raw, json)
Hash identifier: EDEVbzPxO5aQwkmO8mv5E/kgNCEa95LDdlWMQJAglHw=
Subject key identifier: 4A:46:80:DD:C6:9F:D6:11:32:68:48:25:1A:36:B3:6D:82:AF:77:1C
Authority key identifier: 5C:6D:7D:87:FA:EC:48:DC:A4:36:9D:68:38:CE:EC:51:AE:2B:D8:6A
Certificate issuer: /CN=5c6d7d87faec48dca4369d6838ceec51ae2bd86a
Certificate serial: 019D2884C8349E989AC9A8402807D0FA92F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XG19h_rsSNykNp1oOM7sUa4r2Go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
Manifest number: 17B2
Signing time: Thu 26 Mar 2026 05:01:23 +0000
Manifest this update: Thu 26 Mar 2026 05:01:23 +0000
Manifest next update: Fri 27 Mar 2026 05:01:23 +0000
Files and hashes: 1: 4DzAOv88kFIOqHCs_9bsjlv3GTE.roa (hash: caV7/tYU8DPcz0xZ4ImkoJhJu5r2VSnvWFC2mJf3l9g=)
2: XG19h_rsSNykNp1oOM7sUa4r2Go.crl (hash: +vH7YrJfLcAQNvt/NpMTjVCi6LOOqIBMr/y813pEqTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
rsync://rpki.ripe.net/repository/DEFAULT/XG19h_rsSNykNp1oOM7sUa4r2Go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:c8:34:9e:98:9a:c9:a8:40:28:07:d0:fa:92:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6d7d87faec48dca4369d6838ceec51ae2bd86a
Validity
Not Before: Mar 26 05:01:23 2026 GMT
Not After : Mar 27 05:01:23 2026 GMT
Subject: CN=4a4680ddc69fd611326848251a36b36d82af771c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:61:0c:7d:f9:84:d7:39:2f:02:b0:5d:42:b2:
9a:4a:08:be:cc:f7:13:07:ac:b5:2a:51:00:44:d5:
90:a7:de:45:18:4b:e8:14:1b:1c:8f:53:2d:42:c1:
a7:b2:cb:71:3e:f8:67:f9:5b:4f:4f:3e:d5:a0:33:
fd:fb:ab:47:1e:45:dd:08:8f:16:86:00:e2:3c:ed:
18:51:89:79:4b:45:67:6d:ef:55:25:cb:ac:aa:30:
ef:8c:88:d2:20:49:c6:73:f5:5e:95:65:70:46:bd:
8e:d2:d4:3e:e0:e0:1b:af:e8:75:cf:d3:57:e5:67:
7c:31:91:cf:c4:38:f3:12:97:2b:5d:77:30:1d:f2:
f2:81:00:54:dd:a5:b4:7f:00:b0:8a:7d:6d:1f:7e:
8b:17:64:2d:a4:1e:38:67:46:06:b9:1e:5f:d2:c2:
ea:cd:7e:38:f8:71:2c:08:32:72:d3:a8:06:9e:a7:
89:20:93:4a:22:ba:ee:9b:65:9a:79:30:2f:c4:28:
d9:4a:9d:c6:b3:6e:be:f6:52:f1:f2:a9:73:8f:04:
c2:6d:81:d1:a3:11:b0:f1:a8:bd:cf:ca:6b:95:72:
10:94:98:2d:fc:28:60:a7:97:d0:89:33:3e:6b:60:
2c:20:84:ff:17:7d:37:c0:f7:e8:6d:b8:74:34:01:
b7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:46:80:DD:C6:9F:D6:11:32:68:48:25:1A:36:B3:6D:82:AF:77:1C
X509v3 Authority Key Identifier:
keyid:5C:6D:7D:87:FA:EC:48:DC:A4:36:9D:68:38:CE:EC:51:AE:2B:D8:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XG19h_rsSNykNp1oOM7sUa4r2Go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:2a:46:38:7d:e4:90:32:cb:56:ef:95:64:4c:6c:40:42:83:
13:bb:85:79:66:6a:cc:32:59:df:d7:ca:5c:47:51:d8:86:22:
8c:4c:98:d6:f9:6f:56:0e:43:6a:88:87:20:e3:cf:fa:66:c4:
c9:cd:b8:b5:04:1d:5d:40:f3:10:98:dd:f3:b1:fc:bc:3c:82:
73:ff:12:ba:12:7a:cb:46:08:61:3c:9d:fa:9a:b7:b6:ac:c6:
1a:0f:62:8b:fd:3f:f8:8c:d8:de:55:92:8c:16:06:71:94:29:
dd:0f:27:48:40:aa:5a:ae:9f:ac:c7:a9:51:7b:08:9b:b5:f0:
e0:74:68:39:76:57:51:66:f2:6a:44:59:3c:31:78:83:bb:10:
34:a0:e3:98:b0:13:e0:e3:d9:f0:f3:7c:ef:97:97:0a:94:ca:
dc:94:ec:aa:58:df:1e:39:3c:5a:ac:9e:5e:a3:14:d3:33:2d:
a2:10:83:48:07:b9:63:3d:1f:4b:cc:30:cb:c5:c9:07:74:56:
6a:5d:8c:49:03:a1:fc:83:71:69:1f:3b:14:2e:96:52:86:b1:
47:1a:a2:9b:55:8a:30:f5:85:6f:07:f7:ec:0f:e7:02:a4:5d:
6f:ea:fd:0b:a7:4d:cd:d3:18:5a:88:d0:e2:be:9c:24:3f:29:
c2:02:8f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:48:38 2026 by rpki-client