Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.mft
File: XQu-t4M73JvnJQYRV8A58qEPGoA.mft (raw, json)
Hash identifier: jfs/CxS3q//meUFXYVivk40dUzFxrfQJK2SZnL+wFkQ=
Subject key identifier: 21:25:D4:36:C7:56:A1:58:A3:EC:C4:40:94:2A:9E:CD:65:EC:65:8E
Authority key identifier: 5D:0B:BE:B7:83:3B:DC:9B:E7:25:06:11:57:C0:39:F2:A1:0F:1A:80
Certificate issuer: /CN=5d0bbeb7833bdc9be725061157c039f2a10f1a80
Certificate serial: 019D288437945A1514CAD520F6E90D629304
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XQu-t4M73JvnJQYRV8A58qEPGoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 05:00:46 +0000
Manifest this update: Thu 26 Mar 2026 05:00:46 +0000
Manifest next update: Fri 27 Mar 2026 05:00:46 +0000
Files and hashes: 1: XQu-t4M73JvnJQYRV8A58qEPGoA.crl (hash: 6p1DIxiL3Zu5nHt43/d8+pYE0SidxOorcl6n+cKoRUw=)
2: tLZ0vd3hZne2YN5KbPWPpWn9_8g.roa (hash: HKLOzks2rDfm/VvNHgcbNaGddSHwrQ2C+smhCCvmgLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XQu-t4M73JvnJQYRV8A58qEPGoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:37:94:5a:15:14:ca:d5:20:f6:e9:0d:62:93:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d0bbeb7833bdc9be725061157c039f2a10f1a80
Validity
Not Before: Mar 26 05:00:46 2026 GMT
Not After : Mar 27 05:00:46 2026 GMT
Subject: CN=2125d436c756a158a3ecc440942a9ecd65ec658e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:84:b8:73:89:2b:d9:1c:74:3e:f7:a5:b3:cc:
79:67:58:03:3c:eb:29:46:9a:ff:2d:77:04:de:b9:
a5:b9:91:2e:14:21:60:36:69:ba:47:80:24:8c:7b:
de:bb:9a:9d:05:82:34:97:5e:eb:f8:c2:21:ce:df:
7a:6e:bf:9f:d5:cf:3d:1f:41:92:bd:4f:75:8e:16:
b5:d8:f0:ea:e9:14:d5:53:43:c1:ed:71:c6:b9:e5:
7b:77:70:81:d5:9a:82:b4:3e:39:86:12:02:d8:d0:
85:ab:dd:65:ea:6b:d4:ce:e0:98:8f:3f:78:39:55:
6b:48:a2:46:ea:1e:2a:fa:64:29:e0:43:2a:2b:4c:
b6:4e:cd:62:9e:ca:4d:65:8e:3f:ea:94:ec:a2:e8:
1e:4c:71:55:93:05:47:52:56:0f:33:12:bd:d9:31:
f8:db:4f:6b:42:54:1e:e8:60:69:01:78:a5:ca:ab:
95:ca:22:d0:d6:ac:99:00:bf:11:c5:6a:b4:33:33:
17:b5:a1:eb:e1:50:73:12:bc:32:7e:f7:d8:d0:eb:
ab:bc:c3:c6:52:b5:12:77:80:6d:7d:77:20:d8:c3:
95:df:b4:53:72:b4:4f:ca:aa:7b:59:0f:8e:d3:8d:
20:15:5e:ab:cc:7f:08:f9:62:49:42:9d:f9:16:51:
f9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:25:D4:36:C7:56:A1:58:A3:EC:C4:40:94:2A:9E:CD:65:EC:65:8E
X509v3 Authority Key Identifier:
keyid:5D:0B:BE:B7:83:3B:DC:9B:E7:25:06:11:57:C0:39:F2:A1:0F:1A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XQu-t4M73JvnJQYRV8A58qEPGoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:fe:90:46:b4:24:7f:8e:5e:8a:db:f0:6d:e5:d9:8c:17:c7:
09:1b:ce:26:36:f2:ea:70:90:4c:b7:e8:ff:14:26:50:9a:a2:
ba:a8:ca:73:02:a2:f9:5f:70:b9:7d:e3:54:2e:97:1f:55:da:
8d:06:30:9a:ca:fc:b3:ef:33:5f:e4:3d:1f:75:b1:c6:a4:31:
ba:8e:f8:af:4a:3f:f4:d3:7f:39:6f:f6:d2:01:f5:6f:38:ad:
43:43:75:59:7c:41:67:ae:0a:d7:f7:ba:a3:a8:cd:a1:a9:5e:
3a:29:2d:53:d3:9a:07:33:81:68:5e:d0:eb:b5:c3:dc:ed:61:
6d:bb:6d:26:df:58:80:46:22:14:87:57:9d:66:19:c3:76:a8:
7c:2e:d8:76:e2:d1:8e:a5:be:fa:e7:c8:58:ce:55:c6:7d:29:
56:23:42:46:47:7d:16:ab:36:81:d0:0a:61:ca:6c:20:1f:81:
4b:04:8c:c9:d4:b0:e3:df:38:25:5d:15:a2:5b:6f:3f:37:37:
3c:b3:6e:b3:b2:06:ca:51:6d:68:d4:4d:dd:e7:3b:29:cb:dc:
e3:1c:e5:75:20:86:2b:78:90:38:fe:99:63:31:f0:9c:c3:9e:
2d:e4:a8:b9:3b:38:9c:06:1b:ea:9b:35:27:d2:21:44:5f:f3:
31:1b:ee:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:04:58 2026 by rpki-client