Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
File: xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft (raw, json)
Hash identifier: 2QiGTu3Kth2wdHTQNvlpLtq7T33XU3sL5IhiUsG4oSk=
Subject key identifier: B8:AC:BF:88:B4:32:94:C6:A8:BB:CB:52:83:35:2E:5C:F2:85:53:B5
Authority key identifier: C6:58:3F:58:C7:11:0A:D4:CC:60:9F:4F:FB:7C:AB:2F:80:C8:35:81
Certificate issuer: /CN=c6583f58c7110ad4cc609f4ffb7cab2f80c83581
Certificate serial: 019D2A3B61D98DBAA47036F44B7AADCADACB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
Manifest number: 1894
Signing time: Thu 26 Mar 2026 13:00:27 +0000
Manifest this update: Thu 26 Mar 2026 13:00:27 +0000
Manifest next update: Fri 27 Mar 2026 13:00:27 +0000
Files and hashes: 1: 8149JdL_bdhKPVAGngPZY1WVUZc.roa (hash: Vqmxphay09Dowf+HIB9gAzSfzwRKej0t5zClWsx36sY=)
2: xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl (hash: DPRzmB9ooDBA+mKkTkjaQUF9B6Pwm7kMz6l7v2Pky1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:61:d9:8d:ba:a4:70:36:f4:4b:7a:ad:ca:da:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6583f58c7110ad4cc609f4ffb7cab2f80c83581
Validity
Not Before: Mar 26 13:00:27 2026 GMT
Not After : Mar 27 13:00:27 2026 GMT
Subject: CN=b8acbf88b43294c6a8bbcb5283352e5cf28553b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2c:e2:9a:92:10:ad:22:06:34:55:2d:07:97:
d0:26:df:ca:da:7c:42:00:d0:4b:1a:11:ed:be:ba:
db:0e:94:38:80:59:2e:38:f3:cf:b4:fa:6f:ae:76:
d7:57:a7:85:93:1f:b2:44:10:7e:4e:16:e8:f6:9c:
71:7d:c6:52:b4:f3:14:4d:fc:6e:83:6f:9d:6e:d2:
67:0e:0b:63:12:f6:30:d0:73:eb:f4:d9:fe:10:d3:
34:8b:fa:2b:98:2f:5d:bb:fc:da:3e:bf:26:e1:48:
d9:f2:6d:7e:8f:b0:bd:cf:bb:4e:de:44:8b:82:93:
95:47:7f:e9:6a:db:1f:9a:4d:eb:5c:2b:15:fa:13:
73:8d:cb:0e:a6:6b:4d:7f:06:ad:36:e3:e6:5c:3c:
69:d7:f2:dc:cd:c9:c1:95:cd:f3:56:90:92:97:4e:
4e:bd:c1:be:9f:d8:95:b1:1e:9d:95:86:a3:a4:34:
6f:7e:a8:e4:ba:87:1a:65:b7:e5:78:ba:b3:49:a1:
b3:af:ea:ba:71:d7:01:79:4f:c7:28:af:6e:6d:9a:
82:79:85:87:5c:a0:1f:54:1e:92:91:8f:12:83:a4:
14:5f:79:0f:81:6b:7b:81:f7:97:21:ed:ef:c2:cd:
b0:ab:49:81:e6:da:65:30:7e:c4:22:b7:60:b5:a7:
4b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:AC:BF:88:B4:32:94:C6:A8:BB:CB:52:83:35:2E:5C:F2:85:53:B5
X509v3 Authority Key Identifier:
keyid:C6:58:3F:58:C7:11:0A:D4:CC:60:9F:4F:FB:7C:AB:2F:80:C8:35:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:d4:9b:57:83:58:d8:9f:8d:2b:00:07:0c:a7:57:6e:25:2a:
d4:db:0f:c0:02:a7:8d:7a:6f:9b:b5:7a:b9:64:8e:53:ac:46:
58:d7:2a:19:1e:57:32:ee:5f:c8:7b:d5:ba:f6:a3:18:7b:0a:
7a:f3:ac:17:39:7e:77:e1:f4:1d:81:33:d6:cb:94:bd:92:b0:
3f:db:4d:ff:6a:49:ec:5a:32:b5:a0:f1:20:77:7a:14:99:df:
a6:58:39:75:c2:d3:6d:97:1c:2f:01:1c:fe:bb:7f:15:ec:37:
9b:d5:5e:54:0d:e5:34:36:fd:49:6e:11:d1:ba:57:f1:b1:e0:
e0:00:02:cc:ab:f7:ec:39:6b:eb:59:5f:31:c3:97:0d:50:d3:
42:d4:34:7c:36:de:82:8e:0a:dc:c5:80:b9:e3:ae:c9:03:4f:
e6:c4:02:fd:fa:6e:10:f5:fd:2e:80:aa:51:59:af:94:5c:63:
87:1f:01:61:92:71:3a:b2:a4:e7:49:c4:a1:c3:1d:c3:e6:2d:
2a:01:40:c2:c9:ab:3b:df:23:73:d4:62:23:0a:77:cf:b3:10:
d7:13:17:41:41:71:cf:69:8b:db:3c:e5:09:c7:3c:c3:f6:9e:
d7:00:a2:b3:a7:bd:70:80:57:49:df:52:80:c6:9b:a5:6a:52:
87:6a:30:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:23:51 2026 by rpki-client