Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
File: XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft (raw, json)
Hash identifier: nLNaQO8xYYZAtxH12kuwKoR+5xyf+rjb89b3de9KaGw=
Subject key identifier: 28:35:2B:58:BE:E9:D0:04:A4:2A:52:EB:FE:28:AC:A7:14:EC:57:79
Authority key identifier: 5E:74:01:F3:2C:D2:81:69:9F:BE:4D:CF:3B:B5:02:A6:3A:2A:60:DE
Certificate issuer: /CN=5e7401f32cd281699fbe4dcf3bb502a63a2a60de
Certificate serial: 019D265F2C16D91B3DE7D1AE8525FA3C4D18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
Manifest number: 1047
Signing time: Wed 25 Mar 2026 19:01:04 +0000
Manifest this update: Wed 25 Mar 2026 19:01:04 +0000
Manifest next update: Thu 26 Mar 2026 19:01:04 +0000
Files and hashes: 1: XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl (hash: yHlHctk1vEyOzqqVLYmwQx/MIr4Np9ESsgFMcKIbX3g=)
2: jr0yuNLqeK_xhbuJCsSNuRbhB6M.roa (hash: iEdWiLEjiAZO/NJAgyr1vdLHg3AlGR9Y7mg3YwAaB/Q=)
3: txhV4jAB0u0krXb4kFMl_-o4obY.roa (hash: s+N5nLT8dkenkTXD8VPGodvyzkSe6kSpR2hC6MCplu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:2c:16:d9:1b:3d:e7:d1:ae:85:25:fa:3c:4d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7401f32cd281699fbe4dcf3bb502a63a2a60de
Validity
Not Before: Mar 25 19:01:04 2026 GMT
Not After : Mar 26 19:01:04 2026 GMT
Subject: CN=28352b58bee9d004a42a52ebfe28aca714ec5779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:a4:e8:3f:a1:d0:ac:dd:a7:2f:ed:d4:08:e8:
18:b7:b6:13:70:e2:7b:6d:59:3c:83:f8:14:29:db:
ca:b3:7e:fb:58:80:f7:8b:01:5c:bd:db:35:7e:d8:
56:46:11:8b:c4:e1:fc:53:d0:42:a3:29:d2:65:34:
70:b9:e0:95:cd:88:62:59:89:db:4c:e5:43:1e:aa:
9f:91:d0:aa:ea:c0:03:46:ec:6e:23:fa:00:60:12:
9e:05:21:18:ee:a6:c1:8a:35:bd:c4:0b:bf:dc:4f:
ba:e2:c0:da:19:a3:41:3b:bc:db:c7:da:f0:a9:94:
b2:e7:1c:ed:44:4d:8c:b1:43:cc:f8:c9:14:35:ad:
75:8d:dc:73:3f:2a:bf:17:ba:15:f5:aa:05:f5:ed:
89:1a:60:3b:45:f4:78:62:1a:4e:ae:da:69:22:27:
9f:bc:e9:45:29:18:42:5b:3b:f0:a7:51:aa:66:0b:
bb:c3:28:79:72:99:d9:5a:a3:11:bf:b2:df:25:ad:
d8:23:ba:ba:59:cf:0f:dd:fe:79:1f:09:f5:27:23:
46:54:a4:df:8b:95:4c:df:d5:aa:b7:94:a8:d3:68:
04:a7:a3:44:53:13:8e:82:74:79:59:8c:a6:7e:a6:
ca:cd:4c:a2:68:17:aa:cc:55:f3:3f:0b:b9:79:a6:
fe:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:35:2B:58:BE:E9:D0:04:A4:2A:52:EB:FE:28:AC:A7:14:EC:57:79
X509v3 Authority Key Identifier:
keyid:5E:74:01:F3:2C:D2:81:69:9F:BE:4D:CF:3B:B5:02:A6:3A:2A:60:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:f6:fe:aa:b3:be:4b:79:ec:ce:54:f1:c8:fb:be:b2:36:1b:
b1:95:9f:1b:df:0a:9d:57:4e:f9:41:3b:fa:d2:4d:7a:5d:35:
58:5f:da:e0:98:d8:bb:cd:97:ef:4c:df:49:5b:d8:ad:aa:62:
51:01:f5:93:31:df:1c:5e:22:ff:84:3e:cc:7a:6f:41:60:60:
95:cb:5d:ca:24:6d:27:10:d0:9a:31:16:d4:79:a3:d2:65:f7:
29:60:2a:c2:64:29:4d:c3:db:72:f2:9c:7c:a6:67:8c:92:be:
29:36:65:d4:54:2c:a8:3e:a6:6d:18:24:52:5c:76:bd:56:46:
92:59:36:fc:48:12:36:3d:72:73:94:d2:13:0f:77:9d:41:89:
4f:85:75:31:2d:73:09:66:8f:71:9f:25:3f:1a:69:93:66:2b:
0c:c8:f1:72:e8:61:21:c8:03:45:9c:2a:65:ae:a3:85:f0:94:
7c:ec:08:da:23:4d:6f:89:1b:8c:70:04:4c:58:aa:79:49:e2:
b7:2d:06:f0:be:2f:27:20:fb:21:5c:83:87:09:3c:12:d8:48:
03:df:1b:9b:9e:33:d8:ea:bb:6a:eb:15:c5:45:a5:77:be:ea:
72:60:e8:4c:41:b1:f1:a0:56:01:2b:02:b4:4e:cc:ca:af:e9:
a8:05:af:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:17 2026 by rpki-client