Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
File: XYLKb462haVz5dHZH48GEhqwKjc.mft (raw, json)
Hash identifier: YzEpO+ApE+VaKQK3J1lMi+Eqc9b3A7/cRhUXyxyuDSs=
Subject key identifier: 43:CD:6A:3C:2E:1D:33:FB:F8:7E:EE:5E:5D:42:4C:B4:63:7B:78:3D
Authority key identifier: 5D:82:CA:6F:8E:B6:85:A5:73:E5:D1:D9:1F:8F:06:12:1A:B0:2A:37
Certificate issuer: /CN=5d82ca6f8eb685a573e5d1d91f8f06121ab02a37
Certificate serial: 019D29612B8E1DA9AC875A3948ACBEF23433
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
Manifest number: 14BF
Signing time: Thu 26 Mar 2026 09:02:07 +0000
Manifest this update: Thu 26 Mar 2026 09:02:07 +0000
Manifest next update: Fri 27 Mar 2026 09:02:07 +0000
Files and hashes: 1: Sg_4XUAI-4zoY2AzgRoGFITRYgE.roa (hash: J1EWDPsgpuehOfFX0CglsLJx+tt5cw97sY3WgurbJXo=)
2: TeQy6kFDHKNYmWvI94KK1SajumM.roa (hash: 9uvICF7tqz4KyCQG2zRzp+9JspsGn3aZOu1Zg1a40nY=)
3: XYLKb462haVz5dHZH48GEhqwKjc.crl (hash: OFOfZsNZoL/5lXBowx9oY9kDFBpH/X3UUpdD3iLLAzI=)
4: dhOZf_4fAgQZi4_moQSI8o9EFj0.roa (hash: 5T/3rUQwrhAAxuFwErHVP6jvrc57b61OVidSPKCnMBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:2b:8e:1d:a9:ac:87:5a:39:48:ac:be:f2:34:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d82ca6f8eb685a573e5d1d91f8f06121ab02a37
Validity
Not Before: Mar 26 09:02:07 2026 GMT
Not After : Mar 27 09:02:07 2026 GMT
Subject: CN=43cd6a3c2e1d33fbf87eee5e5d424cb4637b783d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7c:ba:5f:b8:10:e9:ad:b6:42:06:22:02:38:
96:d7:0e:af:18:1c:e7:79:a4:67:02:54:88:68:bd:
77:18:5b:42:ba:f2:26:80:73:d9:64:58:58:48:17:
55:91:aa:66:cc:2e:4f:96:fc:bd:b9:65:50:14:34:
d6:b0:d0:75:85:18:b8:4d:93:74:a3:0c:9d:33:8f:
3c:4f:23:6c:7a:ce:51:6c:d2:d7:f7:b0:ce:cb:20:
28:d9:ba:2e:ae:d1:4b:5a:cc:b3:81:3c:30:3f:dd:
b6:d1:af:cc:ec:30:1d:e9:bb:40:03:d2:0b:c9:db:
9a:e6:62:05:66:b3:79:9f:3d:c6:db:20:21:1a:20:
89:99:9d:05:20:f0:1e:da:10:0d:16:84:9e:ef:03:
4d:23:24:ee:27:e4:a8:a3:d0:50:6f:7b:8a:7e:c9:
bc:59:d5:74:11:63:e8:f8:9a:d1:58:7f:e4:bd:ab:
61:81:35:56:b2:b4:60:04:1c:34:3b:16:6f:f0:8d:
96:32:ca:d5:f5:32:ea:c7:7c:6d:04:1a:96:ee:a4:
7d:67:f6:c5:44:35:7b:48:ea:3c:c6:1a:bc:5d:dd:
dc:db:3d:2e:a0:04:ad:56:46:90:40:b2:cd:21:ef:
87:6c:c9:1b:fa:fc:f2:3d:c9:74:69:f4:e3:67:cc:
72:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:CD:6A:3C:2E:1D:33:FB:F8:7E:EE:5E:5D:42:4C:B4:63:7B:78:3D
X509v3 Authority Key Identifier:
keyid:5D:82:CA:6F:8E:B6:85:A5:73:E5:D1:D9:1F:8F:06:12:1A:B0:2A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:5c:c9:aa:df:86:fb:58:4d:a3:b6:e4:29:7b:bb:3d:71:25:
3d:2f:d7:f1:af:01:df:a1:4b:62:d7:26:11:f7:65:55:9a:6c:
6c:a8:c8:a8:2a:0f:f6:d5:d2:6c:9c:2a:a4:f8:37:06:64:5c:
b7:af:2b:43:56:e6:c7:5e:10:2b:68:cc:ba:a0:31:a4:d1:71:
10:99:5c:bf:34:e1:48:d5:33:44:8d:7e:cb:f7:40:7c:23:8b:
a7:58:3c:24:02:2f:17:08:0a:38:61:cd:e4:88:c1:b1:53:4d:
7f:d2:f7:e5:b1:1f:29:c7:6f:00:66:fe:76:52:e9:b3:ad:1f:
53:18:ea:55:fa:19:76:00:4e:85:e3:0e:b7:d7:40:37:53:00:
21:07:f9:da:75:44:09:91:44:bf:ae:07:77:b5:51:aa:c9:4b:
4f:c3:5d:16:70:10:39:6c:9a:14:99:23:6b:87:57:5c:37:00:
aa:04:de:e4:3c:a9:28:a7:31:5f:cd:87:0c:02:5a:31:64:0e:
4c:f6:8f:7f:7f:2c:36:09:73:08:c4:6e:00:f8:12:76:28:c6:
f2:6e:98:79:c6:48:58:18:9f:8c:85:8d:99:d9:27:99:7e:7d:
26:ea:56:11:8f:d2:d0:b1:e0:ca:01:56:3a:3c:27:04:47:11:
8a:f1:ac:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:25:24 2026 by rpki-client