Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
File: XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft (raw, json)
Hash identifier: QhGR81CYx0FG4DeGTivg87a8n4dnDjDjMTq5ksyIcSM=
Subject key identifier: 16:4F:0B:E1:54:0C:F6:36:3A:E5:5E:51:78:66:F7:98:23:4B:B0:F7
Authority key identifier: 5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
Certificate issuer: /CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Certificate serial: 019D28BB87185D4C88E673FA147D0A7D2A81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
Manifest number: 179B
Signing time: Thu 26 Mar 2026 06:01:11 +0000
Manifest this update: Thu 26 Mar 2026 06:01:11 +0000
Manifest next update: Fri 27 Mar 2026 06:01:11 +0000
Files and hashes: 1: 7oVXpAJyEuxYNuHmvd9aRWGoKfo.roa (hash: aOBhiDvMAxK+XYQzQVgLlx3/xd+jEySWQ2727ke/inY=)
2: Ey3m-lZEA987v9BNrn8LK_J0g00.roa (hash: bt6vCGnGpQLk0MF/D7iRAV+4/yJjQaAzG7ZTnezd07w=)
3: XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl (hash: zEIzBi8ySEJlYqjMuY4wUSFwQ8QGoOueBup5GfC/76k=)
4: YTkSY80BXrrm0yOSSyQ4NcWfFCg.roa (hash: Srwxxn9T4n8eBKaxltWuAJ0FzIn1uI4bI96/Rm2hnBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:87:18:5d:4c:88:e6:73:fa:14:7d:0a:7d:2a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Validity
Not Before: Mar 26 06:01:11 2026 GMT
Not After : Mar 27 06:01:11 2026 GMT
Subject: CN=164f0be1540cf6363ae55e517866f798234bb0f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:65:d9:f2:be:47:90:bb:96:f8:96:e9:94:ad:
1b:8a:c7:e5:4e:8d:55:f6:c1:15:b9:b6:aa:11:6e:
58:51:67:3f:90:97:16:94:47:02:59:b4:7f:2b:8b:
e9:e7:e6:77:45:29:3c:9d:7e:5d:6b:51:46:99:32:
7e:92:34:ad:ef:a6:bf:78:62:e3:c3:60:4a:f2:4c:
fe:cc:1c:11:fd:73:6a:fd:a0:ae:fa:ce:45:20:cd:
e0:29:f8:bb:73:f6:75:b6:33:44:cf:cc:68:56:13:
16:d3:b2:ba:9c:24:3c:e1:f7:db:6d:a7:4d:1e:84:
b6:a6:8f:d2:2b:c4:34:4e:24:54:2a:68:09:3e:9f:
50:5b:90:a6:83:3a:bf:18:b7:c6:f8:6f:ef:b3:4e:
24:61:12:04:40:8e:03:d2:0b:a9:08:6e:3b:0b:81:
3f:cb:fb:9b:fa:79:9e:cf:c9:44:84:d1:0f:ba:0b:
3c:74:b4:29:ca:a4:65:c4:2a:5c:68:20:62:41:02:
3d:33:40:a5:28:60:e0:75:f2:9e:a1:40:82:23:94:
f2:0c:d7:79:d4:40:05:67:9f:6c:9c:a9:11:2a:0f:
a9:d5:03:e2:f8:55:92:59:c3:d4:43:1c:29:e7:3d:
0d:ad:33:ac:75:a2:94:ab:cb:a8:2e:13:34:5d:75:
d6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:4F:0B:E1:54:0C:F6:36:3A:E5:5E:51:78:66:F7:98:23:4B:B0:F7
X509v3 Authority Key Identifier:
keyid:5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ba:46:96:9d:1c:b3:b6:c5:2d:75:94:91:46:be:22:98:cf:
ba:35:ee:e5:38:1c:30:94:43:1d:89:88:71:20:2b:2c:df:11:
f3:09:b5:21:0c:5c:40:e7:5f:c5:83:70:ad:45:c9:42:5a:cf:
80:9e:bf:1f:5f:fe:8e:7e:ee:40:e4:80:de:71:5d:a8:15:b5:
10:f7:eb:9d:bf:49:af:e1:e7:55:c0:73:c7:db:ff:8f:df:31:
5b:9f:ac:67:1d:49:d5:8e:9f:58:96:eb:ff:23:4d:5c:5c:38:
1c:fa:bd:b9:48:1b:f8:37:e2:75:75:cd:4a:0c:95:10:dd:b0:
df:c7:d0:47:98:a4:1d:52:d9:ab:5c:ff:37:fe:53:ab:2c:cd:
ac:20:92:9b:5a:3a:ae:98:2f:97:e2:67:46:cc:2f:74:36:bf:
66:31:2c:65:de:8e:60:91:68:42:bb:72:4e:5f:72:30:d0:23:
42:65:e7:7a:19:92:11:a8:9f:be:89:93:9c:f2:06:ee:4e:f7:
bd:e5:66:70:65:58:c2:99:0b:a5:50:f5:ed:f8:35:b1:99:54:
4f:ca:34:44:ab:e9:64:e5:6e:61:15:9d:fd:e5:4d:9c:2c:2b:
e8:9e:4a:be:8d:b6:85:c5:ec:0e:47:47:83:cb:8b:31:68:3d:
11:a8:9a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:26:51 2026 by rpki-client