Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft
File: XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft (raw, json)
Hash identifier: p9GXXa6RRs2ys7uiZvaSc6+YoGAdpVeSRlQiW4yMJ80=
Subject key identifier: 61:8B:4D:CA:C3:C4:9B:1D:31:1A:71:07:B9:F9:15:00:48:CE:FF:C5
Authority key identifier: 5C:5D:86:97:4A:7B:62:41:92:EC:8D:83:4C:F2:90:6E:13:02:E4:31
Certificate issuer: /CN=5c5d86974a7b624192ec8d834cf2906e1302e431
Certificate serial: 019D31F545D50B9647EF043DA27EE3B31919
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft
Manifest number: 188C
Signing time: Sat 28 Mar 2026 01:00:50 +0000
Manifest this update: Sat 28 Mar 2026 01:00:50 +0000
Manifest next update: Sun 29 Mar 2026 01:00:50 +0000
Files and hashes: 1: 5i2TAh2og4TXto7xyAcopWr_UMg.roa (hash: ZekBhPcyoCd+84YvBPa87l2ubLNdolD6vu0bwY9F0iY=)
2: 8sy7RPYdN9OOw5GeBoNUqLHEJwg.roa (hash: Hl1lQvcDtC+ikOs/Ko0nJQFgSRezGLcK7o1ZONxr73k=)
3: XF2Gl0p7YkGS7I2DTPKQbhMC5DE.crl (hash: eFVKaEfJpv/ZlBmBs/+KbmzvveCAavmrCLPkS5g4gno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:f5:45:d5:0b:96:47:ef:04:3d:a2:7e:e3:b3:19:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5d86974a7b624192ec8d834cf2906e1302e431
Validity
Not Before: Mar 28 01:00:50 2026 GMT
Not After : Mar 29 01:00:50 2026 GMT
Subject: CN=618b4dcac3c49b1d311a7107b9f9150048ceffc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:c2:41:58:03:ff:07:d6:fd:4e:f7:66:5c:06:
36:be:85:25:32:3c:b2:b0:6a:a9:b8:4d:73:04:b9:
bd:5e:07:9e:fa:8c:da:1c:91:1e:9a:eb:6a:1e:0e:
91:f5:a8:0d:79:82:7e:d8:2c:cf:99:49:dc:17:8e:
b1:29:01:b0:4c:f5:57:fa:7d:b7:06:c8:fe:cc:90:
13:ab:93:67:28:a7:33:9c:13:25:45:fe:8d:6f:f0:
f8:cd:1e:95:ad:41:a7:57:9f:43:93:ac:13:2f:e0:
1c:16:05:88:f0:77:94:96:23:e5:c9:80:d7:ce:90:
2a:d4:79:a0:12:09:4f:5f:89:12:0a:ba:f0:20:5c:
f9:3b:a3:22:9f:55:84:e8:c6:e2:ac:3d:f7:bb:f0:
3a:76:c1:12:97:ac:9a:38:f9:de:31:c4:d3:14:20:
e4:6d:cf:e5:19:e9:1e:b9:db:5d:b7:1b:85:b6:0a:
c7:76:8b:f7:ec:d3:5a:76:01:a2:f8:4f:bc:6d:88:
87:61:a2:f8:0a:78:99:a8:a4:df:4b:57:45:40:59:
31:0f:5b:aa:35:d4:9e:ab:fe:9e:3b:9f:d2:fc:a3:
f7:81:99:dc:54:6e:e8:b2:62:5a:0b:1a:76:4c:7d:
01:e9:22:c4:a3:15:d1:be:56:46:17:1a:16:17:22:
5b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:8B:4D:CA:C3:C4:9B:1D:31:1A:71:07:B9:F9:15:00:48:CE:FF:C5
X509v3 Authority Key Identifier:
keyid:5C:5D:86:97:4A:7B:62:41:92:EC:8D:83:4C:F2:90:6E:13:02:E4:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:33:8c:b4:11:98:6f:09:54:56:d4:00:54:b6:87:f2:8a:89:
39:e7:e8:18:79:5d:54:b9:86:40:e1:41:7f:cd:49:8e:76:03:
8f:49:50:6c:cc:5a:2b:0c:d3:a5:a8:dc:f3:35:0c:9b:d9:b4:
45:b7:d4:bb:f0:34:53:f2:d5:be:a7:56:74:f6:74:32:07:2a:
af:ff:56:89:40:e8:af:98:37:55:bc:c2:7c:60:69:b4:2b:aa:
b3:f8:f7:06:86:3f:5b:a4:e0:92:87:2f:6f:16:44:d4:41:e7:
6a:17:c7:60:fb:d7:47:d0:ed:98:37:1c:c2:b7:52:cf:bc:12:
f6:48:6a:68:89:d2:0b:8c:ba:b7:c3:3f:7e:93:6b:a8:e8:43:
8e:4d:69:67:c4:ed:35:a2:92:33:65:31:d7:13:ae:9d:ca:9e:
58:a1:1e:eb:e1:d7:05:3b:25:db:0a:de:4d:ef:9e:a2:ab:c2:
3e:39:36:d0:4c:7a:7e:41:13:c1:51:a0:21:61:97:a1:f6:d6:
dc:b7:76:56:c5:50:f1:6e:e8:93:58:9b:0d:ea:e8:62:ef:b5:
a5:a6:45:00:5c:78:d1:82:d2:e9:13:94:e8:1f:9e:01:ca:1a:
90:ff:5a:0b:6c:f2:94:d9:6d:b5:f1:dd:93:0f:68:c5:aa:ff:
08:eb:3c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:22:39 2026 by rpki-client