Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
File: XDodlz-bM5HorayqZk0bI9d48Ag.mft (raw, json)
Hash identifier: HhTfRmMGInmSvbdGPI4xy91Jf3bbypxblgeQ48Tc6uw=
Subject key identifier: 39:7F:D3:FC:BD:1F:9F:56:9A:D5:C8:40:7A:19:2C:98:C8:59:2C:50
Authority key identifier: 5C:3A:1D:97:3F:9B:33:91:E8:AD:AC:AA:66:4D:1B:23:D7:78:F0:08
Certificate issuer: /CN=5c3a1d973f9b3391e8adacaa664d1b23d778f008
Certificate serial: 019D273AA31EC164969A118E381D29E9AD04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDodlz-bM5HorayqZk0bI9d48Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 23:00:47 +0000
Manifest this update: Wed 25 Mar 2026 23:00:47 +0000
Manifest next update: Thu 26 Mar 2026 23:00:47 +0000
Files and hashes: 1: XDodlz-bM5HorayqZk0bI9d48Ag.crl (hash: ipG3SqXfoiXz0bRlOseHEwOs7iUsK29kRS1PuSQfNE0=)
2: nESdHSYfa1deK4cuMEoqKlkUBhA.roa (hash: Ne5xi2gxYVVWXxqP7e6edUaF5lMzo3AlLl0nnSwGj20=)
3: rZYX5fKPq_iTsTklZo3tUzGErD8.roa (hash: Bkadagr0tzraTAYCN3j7TcAW/fLW29DF6wAopom2qpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDodlz-bM5HorayqZk0bI9d48Ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:a3:1e:c1:64:96:9a:11:8e:38:1d:29:e9:ad:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c3a1d973f9b3391e8adacaa664d1b23d778f008
Validity
Not Before: Mar 25 23:00:47 2026 GMT
Not After : Mar 26 23:00:47 2026 GMT
Subject: CN=397fd3fcbd1f9f569ad5c8407a192c98c8592c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ed:82:8c:3c:e2:73:30:1d:83:68:c2:15:cf:
86:bf:26:6d:78:db:65:4e:8f:4e:f9:bb:ac:fc:cf:
4d:f9:af:d4:6d:2f:27:e6:a1:42:8b:bb:5c:02:6d:
a0:0b:bc:74:95:9c:34:cc:8c:98:a1:d1:fd:0c:ce:
8c:5e:ff:fd:9f:e7:61:25:f0:bd:a9:ab:8b:88:66:
9d:7f:34:da:3c:6c:23:d0:81:06:d0:e4:12:9a:f4:
06:a0:0e:11:8f:dd:0f:94:40:9b:eb:d1:be:79:e7:
d4:99:5b:3e:e7:43:1d:a3:22:21:63:0a:d8:53:fc:
ee:5a:96:3f:81:bf:86:f9:97:8a:74:87:e7:c2:a0:
18:4f:a7:1d:c7:6b:59:cd:05:85:4f:fe:0d:76:54:
ee:94:2b:f2:32:6f:b7:7d:ad:36:e5:e0:2d:67:0a:
f8:ab:61:89:47:25:99:7f:d8:1c:39:90:be:69:d3:
60:f6:38:b7:ed:b7:12:d3:c8:f5:f4:06:5b:fd:a3:
52:f4:4d:ad:ec:21:3a:f8:7f:18:16:7c:c2:f7:e8:
d0:27:22:6b:e0:20:d3:1d:a4:66:26:3a:74:e1:68:
76:41:18:1f:f3:f0:24:cf:73:aa:db:0d:89:6a:5f:
f3:fa:50:9a:e2:5b:bd:4c:58:52:60:76:d0:74:15:
ed:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:7F:D3:FC:BD:1F:9F:56:9A:D5:C8:40:7A:19:2C:98:C8:59:2C:50
X509v3 Authority Key Identifier:
keyid:5C:3A:1D:97:3F:9B:33:91:E8:AD:AC:AA:66:4D:1B:23:D7:78:F0:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDodlz-bM5HorayqZk0bI9d48Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:88:7c:91:25:77:53:9c:0f:b3:52:b6:5d:cc:81:bb:42:30:
5d:52:11:5d:fd:0a:54:26:59:29:ed:3e:de:79:ed:5c:3e:b1:
25:13:32:3d:ee:56:f2:e8:18:70:2e:cd:bd:61:d3:d5:41:1b:
e0:1a:19:65:6c:f8:91:03:32:a8:84:e1:95:1a:91:7a:79:10:
36:af:32:b9:ee:a4:af:5b:26:8e:51:e4:8d:5d:7b:10:f3:50:
1b:17:7d:af:83:3f:1f:9e:f2:8a:23:f1:dc:26:39:0b:e7:1b:
6b:ac:b0:20:73:0f:b8:dc:05:72:cb:7d:95:b0:cb:99:e3:6a:
5c:2b:00:3b:cc:16:0f:33:98:4a:93:7a:87:20:09:5e:3d:88:
78:8f:13:5e:75:59:ab:fb:61:ee:ea:33:c6:bb:a9:57:eb:80:
19:e1:53:b9:0b:12:0c:cb:82:97:87:ae:68:50:85:59:33:09:
47:79:62:49:ca:f6:2d:b0:cd:0f:5c:3c:61:33:8a:87:3a:49:
b1:c1:9d:14:34:2a:74:1e:9c:70:15:b1:20:50:d6:e8:a9:f6:
c9:71:89:70:f0:61:bc:ce:ae:3b:06:0f:31:fc:fe:35:0e:79:
21:5f:7a:0e:60:c0:4b:38:1d:a6:ce:21:79:2c:52:76:67:46:
7e:c5:1a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:05:41 2026 by rpki-client