Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
File: XRKbBGDPnuBQDuiAos-hpSTk3wA.mft (raw, json)
Hash identifier: rYtqbR0NzCuUKYvFhvNzFrZubj1lJ5AKhQptNUBvPwM=
Subject key identifier: D5:40:4C:2B:08:7D:9C:74:AE:F2:78:91:54:EF:FC:E1:4D:E5:39:07
Authority key identifier: 5D:12:9B:04:60:CF:9E:E0:50:0E:E8:80:A2:CF:A1:A5:24:E4:DF:00
Certificate issuer: /CN=5d129b0460cf9ee0500ee880a2cfa1a524e4df00
Certificate serial: 019D2914C02E865F6CE9F3DED3171ECF37C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
Manifest number: 188F
Signing time: Thu 26 Mar 2026 07:38:38 +0000
Manifest this update: Thu 26 Mar 2026 07:38:38 +0000
Manifest next update: Fri 27 Mar 2026 07:38:38 +0000
Files and hashes: 1: L40pPH6TicBG2s3pYm_kCH0QuH8.roa (hash: T9wzscjITMGr1trkfg1j7FXPyni8Fc+OiviUYZ5c/0E=)
2: QiuDIuRkSViN_0aiLux397WPPaM.roa (hash: 0ZwM9X61p4unEOmNfSSTesI8zR2qkfQh2THCBqFCSqM=)
3: XRKbBGDPnuBQDuiAos-hpSTk3wA.crl (hash: C50NjOUbBWOSgTxrKRTXafXOk0OygAZ46Ona/Z4Zo8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:38:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:14:c0:2e:86:5f:6c:e9:f3:de:d3:17:1e:cf:37:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d129b0460cf9ee0500ee880a2cfa1a524e4df00
Validity
Not Before: Mar 26 07:38:38 2026 GMT
Not After : Mar 27 07:38:38 2026 GMT
Subject: CN=d5404c2b087d9c74aef2789154effce14de53907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:25:32:f4:8a:3e:20:9d:1f:21:ea:b9:9c:4b:
03:97:7b:02:72:90:c2:0e:6f:a3:be:65:e5:e1:c0:
0d:0b:13:12:f7:ad:2e:8e:47:32:c5:07:fb:25:95:
59:3a:f1:7f:b0:61:68:91:10:e1:48:de:a5:cf:b4:
60:1d:c1:59:80:47:36:0f:f0:17:b7:23:1d:9f:66:
dd:50:77:2d:e9:62:8a:fd:5f:f8:56:bd:37:a7:40:
cf:92:84:16:8d:51:9f:b0:92:19:6d:db:f3:86:5e:
2d:6a:f4:ed:63:bc:fb:dc:83:1e:d5:1a:26:59:61:
be:36:4c:02:1f:52:7f:db:a9:d5:21:f3:5e:38:68:
83:ca:4b:5b:cc:77:87:cb:37:4c:ff:4e:be:bc:1d:
ae:38:86:54:fe:f6:dd:99:97:0f:2e:80:d4:80:ff:
db:ad:dc:30:05:e7:8b:75:49:09:1d:56:48:ef:bd:
71:26:0b:27:13:5c:c8:b4:b0:68:1f:eb:1d:33:8d:
21:31:9e:11:00:35:a0:78:ac:ec:79:fb:4c:f4:46:
bc:37:39:1e:de:6d:0f:58:ca:2b:38:d0:68:a9:be:
f3:57:1b:45:53:87:79:50:36:1e:19:ba:71:ba:70:
6c:1c:10:db:32:ac:40:4c:e9:7e:20:c2:5f:4f:86:
3b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:40:4C:2B:08:7D:9C:74:AE:F2:78:91:54:EF:FC:E1:4D:E5:39:07
X509v3 Authority Key Identifier:
keyid:5D:12:9B:04:60:CF:9E:E0:50:0E:E8:80:A2:CF:A1:A5:24:E4:DF:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:8c:ec:fa:52:98:6e:c4:b0:29:d4:11:5f:50:f3:d2:5b:07:
4a:a9:9e:19:77:fc:a6:96:c6:73:1a:d8:7a:2f:60:99:a8:57:
b4:46:19:31:bc:39:e1:fc:99:b9:4c:e7:32:1c:e2:cc:77:19:
8f:b3:24:e6:e3:e4:3f:74:78:ad:74:d0:ed:25:bf:a2:43:d8:
ba:a6:d1:f8:d0:ab:11:ce:ab:b8:7e:af:5f:f3:a9:66:27:d8:
79:76:0c:fb:5b:b2:88:e8:2e:d7:2a:37:3f:5d:04:b6:ec:d4:
47:c6:6c:1a:e1:37:57:2e:d5:14:27:c5:25:0d:9b:a8:3f:f9:
82:c6:7a:31:46:73:69:8f:9f:04:2f:dc:2b:3d:04:cf:af:36:
c8:0a:fc:dc:71:de:8f:3f:b8:0d:b3:32:53:4e:06:35:4c:2f:
d3:cc:bd:31:ec:7b:75:d5:78:51:26:fa:f5:8e:c2:2b:c8:d7:
44:ef:d3:76:d9:b9:60:d4:2d:19:75:b3:fb:b8:88:5d:22:cb:
28:d3:a1:38:1a:f4:47:25:c4:85:33:27:9f:47:67:b0:e0:f4:
fe:37:b5:b3:e6:ff:07:67:35:12:01:f0:cf:29:c8:04:a1:bb:
5d:11:ef:35:d9:0a:41:22:72:79:3b:67:57:6f:40:5c:a1:4b:
24:a0:7a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:59:49 2026 by rpki-client