Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.mft
File: XwoN0vlk6GD2ukwXYRKl1xK6k6o.mft (raw, json)
Hash identifier: 9xm9cfCNDd0ecuPQWP019AibnDVyMU3M3bdR/QD0CQk=
Subject key identifier: 55:05:7C:E8:1D:F8:FD:70:C1:75:D6:B7:68:46:E0:D3:77:A3:42:BF
Authority key identifier: 5F:0A:0D:D2:F9:64:E8:60:F6:BA:4C:17:61:12:A5:D7:12:BA:93:AA
Certificate issuer: /CN=5f0a0dd2f964e860f6ba4c176112a5d712ba93aa
Certificate serial: 019D26289B891CCAAEF7CBFBE2871660E7D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwoN0vlk6GD2ukwXYRKl1xK6k6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 18:01:28 +0000
Manifest this update: Wed 25 Mar 2026 18:01:28 +0000
Manifest next update: Thu 26 Mar 2026 18:01:28 +0000
Files and hashes: 1: 1rycSUcTdaDk5pB1L_oKODCIzyk.roa (hash: lY+q81hPBQAO0hJH6+2LuVbPAelcZFxt/Ngf0xBiC5g=)
2: XwoN0vlk6GD2ukwXYRKl1xK6k6o.crl (hash: HNsherf+T6IJhSLFS3iIKc4Hsqr70RG2wEwuFLkxWlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwoN0vlk6GD2ukwXYRKl1xK6k6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:9b:89:1c:ca:ae:f7:cb:fb:e2:87:16:60:e7:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0a0dd2f964e860f6ba4c176112a5d712ba93aa
Validity
Not Before: Mar 25 18:01:28 2026 GMT
Not After : Mar 26 18:01:28 2026 GMT
Subject: CN=55057ce81df8fd70c175d6b76846e0d377a342bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:81:8a:c3:8f:87:f9:da:df:c7:ba:b5:c8:c1:
66:2a:fa:db:84:48:66:b7:d7:d0:ce:86:bb:8f:d5:
d7:b2:e8:bb:7f:0c:d8:13:4b:dc:2c:7f:15:a0:01:
22:39:47:21:08:6f:ba:f8:35:36:1a:a0:72:f5:34:
9a:3b:bf:f7:48:eb:11:2f:a2:a6:fa:dd:8e:99:6b:
c9:01:72:3d:69:4b:cc:b2:4f:d7:48:60:53:37:a7:
be:ca:38:cf:a4:ae:1d:4d:89:80:78:f7:8b:09:31:
27:27:ad:e4:db:de:f0:68:bb:b2:f0:79:51:6b:fe:
cb:10:a4:6a:be:e8:f4:41:8f:5a:e7:3b:7a:2a:b8:
67:78:8c:42:78:a8:b4:2b:c7:d2:3d:83:6c:f0:ba:
6a:91:0b:2f:5c:d2:b7:35:0c:e4:b5:87:4a:b0:cd:
b5:ac:ef:6a:f2:e0:de:c7:0f:2f:b8:6a:b2:2c:80:
17:c5:14:89:9c:7e:17:c1:a2:28:5b:13:8e:07:3b:
20:ca:b4:f6:e3:bf:5d:59:d6:2e:1d:9c:f8:e7:5f:
7a:be:b6:8a:a9:60:20:26:cb:07:14:bc:68:ec:37:
c3:f2:d4:e7:52:e9:e2:44:28:d1:94:5d:b6:63:41:
92:34:47:9f:f8:35:3a:2c:36:7c:9d:19:fa:58:cd:
e0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:05:7C:E8:1D:F8:FD:70:C1:75:D6:B7:68:46:E0:D3:77:A3:42:BF
X509v3 Authority Key Identifier:
keyid:5F:0A:0D:D2:F9:64:E8:60:F6:BA:4C:17:61:12:A5:D7:12:BA:93:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwoN0vlk6GD2ukwXYRKl1xK6k6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:17:00:80:61:81:aa:f1:89:4e:11:a0:1a:30:4c:22:b8:1d:
d7:ee:81:9e:6f:52:a1:24:17:d3:f7:67:cf:fe:4c:a5:af:40:
f4:62:5e:99:1d:01:2d:c9:f5:a4:95:f1:3d:b8:bd:a4:e4:1f:
a8:2a:76:f4:6f:dd:1c:76:3c:ac:00:52:55:50:f9:be:7e:e4:
c9:18:3d:d6:a6:b7:2c:92:77:46:7e:4d:ed:b7:2c:95:f8:70:
e9:dc:f1:7b:24:57:45:41:5c:05:bb:92:94:0f:59:40:16:78:
3a:ce:74:a2:2c:69:ec:2c:df:3c:f7:99:22:b5:5c:11:10:4a:
19:af:a5:60:a3:71:12:00:18:be:d3:67:b9:9d:50:08:ba:d3:
33:ee:c0:99:cb:10:ff:47:a8:1e:20:8c:dc:44:bf:87:a3:1c:
47:ee:7d:04:e2:81:f7:94:80:d6:d6:7f:e2:25:28:a0:7f:e3:
b7:21:31:8d:a9:05:2b:fa:4f:ec:e1:49:0e:fd:90:9f:fb:30:
2d:74:76:63:a6:4e:c6:2c:a2:7c:df:6d:ee:b5:53:a5:8e:05:
0c:ef:70:23:bb:0e:c8:95:1e:18:bd:07:b0:13:5a:08:5c:53:
35:06:00:aa:96:77:ef:b3:6d:3f:d2:e6:8c:8f:29:1e:45:04:
08:93:9b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:25 2026 by rpki-client