Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
File: Xdczb6kVchzjv-4hf06ZFk25Uys.mft (raw, json)
Hash identifier: 1yo9FknyPoB8SQ9a9j0pNv30rj1cqgefjWvP2izpWrM=
Subject key identifier: 7D:DB:A5:1E:78:26:2C:67:49:42:86:B5:35:40:A4:79:FF:52:EA:5C
Authority key identifier: 5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B
Certificate issuer: /CN=5dd7336fa915721ce3bfee217f4e99164db9532b
Certificate serial: 019D28BB1F1E918441D7CFE13B138D0BA71D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
Manifest number: 1895
Signing time: Thu 26 Mar 2026 06:00:44 +0000
Manifest this update: Thu 26 Mar 2026 06:00:44 +0000
Manifest next update: Fri 27 Mar 2026 06:00:44 +0000
Files and hashes: 1: 0K2pCDlU0pkDvqWKO7SJxoZ3lsI.roa (hash: Y26TNiFt+U9/ZCJnbcaya/o2zut2SxPMMS0KeeLWubY=)
2: 5bVrHFZm_9x7DsR30S7rosICdW0.roa (hash: TNCtAJMUf4J6FJnN+i2bTj70aWZ+c3ls9gu8xyrRaB4=)
3: 8hvOqdm8XRO6sXWDZkcaHc49vsM.roa (hash: rWJpUZIpb36Ggr6bjwKyRkuAjSB5QQdFYyzRQ+KUdsA=)
4: FXEme31L2W7KjDVDqu37hEKFe78.roa (hash: omRy5gYKlVoWEItXCmHX+rxLDaANZ2/4bfpF5i1mDS8=)
5: NbVqiX6wU_Fr5GSOQfJ8YNe7b_w.roa (hash: Nw5vSu+E6BX+vcoqztio2E9NJTou/UDDEAsPJgGV9fk=)
6: Xdczb6kVchzjv-4hf06ZFk25Uys.crl (hash: CCeLR48YuKH2Fj6HQ1pEjQqR594QnxlTfv8CPkFRves=)
7: _ylley7uO-q2SakQqri2IL9Vh_8.roa (hash: 1WOpzM1HXCxDoeeqL/oavgXUUoldzw84YoaeeKakTR4=)
8: eMaqzHhdOLPa-yFxTbqkJXzmfCs.roa (hash: wn03BA6mXWMu6Vji8bsJNtZWRlLC+mrxhHq0SG0AH6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:1f:1e:91:84:41:d7:cf:e1:3b:13:8d:0b:a7:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd7336fa915721ce3bfee217f4e99164db9532b
Validity
Not Before: Mar 26 06:00:44 2026 GMT
Not After : Mar 27 06:00:44 2026 GMT
Subject: CN=7ddba51e78262c67494286b53540a479ff52ea5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:51:a8:9d:65:46:15:9f:09:7c:11:de:69:58:
e8:1e:e8:24:67:81:74:10:2c:18:70:d6:c5:df:f8:
a4:b5:6e:c5:1f:56:d6:0f:59:02:d5:b2:71:d4:b0:
87:8f:da:b1:ab:1c:a0:18:7d:95:1b:d6:e1:89:e8:
4b:35:3f:67:b8:be:8a:d3:74:10:0e:ba:44:4d:39:
d4:f1:53:51:6e:35:36:4e:69:c2:e0:79:64:be:1f:
50:dd:e9:e9:f2:b6:d4:dc:d8:45:c7:dd:34:0b:3d:
49:5b:d8:0f:e0:0a:b5:31:55:7a:32:29:9c:eb:ac:
5f:95:5d:11:1f:b0:1d:aa:54:12:ed:e6:5b:84:ed:
9e:a3:30:2a:70:4a:11:f8:c1:1e:4f:2c:00:98:05:
f7:a9:8a:5b:be:20:fd:87:89:ba:65:24:83:db:f7:
ce:df:01:74:e5:91:02:8e:12:5c:10:fa:4f:73:6e:
88:2a:c1:0f:6e:ba:41:62:88:5f:c3:53:9a:4a:69:
70:37:75:97:84:4f:84:75:1d:68:ef:d1:bb:4d:bf:
e5:67:6b:8e:35:d7:46:d3:e8:de:5e:37:c6:03:a0:
bd:e2:9a:57:f3:92:51:d4:b8:d8:06:55:44:de:1e:
a2:c6:fa:c8:9f:30:ed:be:82:5c:79:4a:d6:24:f1:
f2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:DB:A5:1E:78:26:2C:67:49:42:86:B5:35:40:A4:79:FF:52:EA:5C
X509v3 Authority Key Identifier:
keyid:5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:a1:0f:96:ef:4c:03:77:65:0c:74:f6:63:b3:ee:9c:0e:3e:
d2:e1:2c:25:25:c2:4f:20:75:77:06:d0:1e:ed:e0:3c:b3:3f:
b4:75:55:6d:03:84:ff:24:57:bb:a0:a5:72:b4:fb:aa:b0:8e:
c9:46:43:41:35:62:13:fe:a4:14:1e:23:3d:c2:4b:17:72:b5:
d6:29:85:32:60:a4:df:62:a4:a2:16:17:23:dd:78:d6:f7:20:
b7:39:43:9f:3b:32:c1:92:4e:74:7e:87:e9:56:6d:6e:5b:24:
a5:dc:35:fc:3a:fb:b8:99:25:31:8a:0c:63:34:5c:d9:93:73:
42:8c:95:3c:fb:27:b4:ff:da:f6:51:59:77:a8:4b:11:0c:38:
c7:5e:f0:31:f8:25:a6:b2:ed:3f:7e:0f:89:9a:9b:9a:78:a5:
4b:ae:32:30:6e:3f:87:11:83:c5:0a:6d:fa:9d:ed:a4:50:5f:
fd:57:7e:92:d7:0d:0a:88:d1:10:9e:78:10:a6:e2:a5:c7:dd:
e4:52:25:f1:57:9d:8d:24:ac:f1:b8:2a:90:56:6f:ba:d9:7d:
9f:3e:8e:09:71:ca:6b:94:aa:9d:3a:5c:8d:78:23:53:f5:ee:
da:4e:fe:bd:f5:8e:4a:37:2d:1f:08:bf:3a:5d:bd:1d:53:7f:
be:7d:1f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:31:19 2026 by rpki-client