Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
File: XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft (raw, json)
Hash identifier: FzYNIji/XRh5tvbKy0PI0TWtwz8/4+DVTqeFWcssa8k=
Subject key identifier: F8:36:77:1B:AC:09:E7:27:8E:D2:F9:3E:1E:4F:22:9B:AC:D8:FC:A3
Authority key identifier: 5C:A0:53:DF:E7:71:2E:E6:3D:BF:F6:40:FA:E0:73:08:D6:6C:E7:48
Certificate issuer: /CN=5ca053dfe7712ee63dbff640fae07308d66ce748
Certificate serial: 019D2884CDB6708E367847D9DE97F2691D91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 05:01:25 +0000
Manifest this update: Thu 26 Mar 2026 05:01:25 +0000
Manifest next update: Fri 27 Mar 2026 05:01:25 +0000
Files and hashes: 1: JtY0Nc5KsnYFhq9gwtFkh9ll4_c.roa (hash: 2ee0ztpkOTTrJZ/rJndPjJzssmpY0MoOu/loesqHer8=)
2: XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl (hash: svx49yizIAx7yBhAy1fhvDVTAbeaOopa4asTIsTIKl4=)
3: XVPpnUXQ607rP--ePsLN9cz89_c.roa (hash: 0wqwWXvhEcuxDQDNA2phuoRTJPiVO88rNNJcF2GbNvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:cd:b6:70:8e:36:78:47:d9:de:97:f2:69:1d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ca053dfe7712ee63dbff640fae07308d66ce748
Validity
Not Before: Mar 26 05:01:25 2026 GMT
Not After : Mar 27 05:01:25 2026 GMT
Subject: CN=f836771bac09e7278ed2f93e1e4f229bacd8fca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5b:a2:f8:79:fe:e3:a2:58:a9:ac:08:50:10:
10:c3:91:a2:c1:e4:0b:74:e2:e3:23:6b:96:e8:31:
ac:5b:19:20:53:2e:6a:0f:90:0b:a7:be:e7:29:86:
69:f5:2f:0c:2c:99:bf:f6:09:be:77:76:8b:c3:1a:
43:bc:b2:99:d0:5f:75:cb:c9:29:0c:26:dc:2d:71:
dc:8b:3a:c0:90:6e:19:dd:53:cc:68:20:0a:a0:53:
8e:02:87:8f:dd:bc:68:ba:ae:5e:54:3d:be:6e:81:
b3:de:c6:ec:0a:38:10:c7:c5:6c:08:67:b1:5f:d4:
49:f0:9c:b8:b8:90:4b:84:91:c5:61:93:f3:c4:32:
bf:b9:c9:99:62:15:7e:cd:d9:ba:eb:7e:d4:1a:48:
1b:65:53:0b:f1:3b:f9:e2:e3:18:6d:cf:33:82:0f:
2e:c7:c7:25:a3:81:d3:b4:0e:ca:20:e0:7f:34:50:
d9:89:75:b3:56:73:97:83:b8:aa:86:b3:4f:4f:f4:
bf:df:4d:6d:f6:65:ba:2b:3b:56:68:95:72:8c:c0:
89:dc:78:f3:66:4a:28:b5:54:6a:12:79:f6:6a:bd:
66:7f:17:48:64:a2:d0:91:10:45:08:aa:27:31:1d:
92:0f:a2:91:bd:2b:0f:92:81:70:13:9d:7a:91:79:
e9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:36:77:1B:AC:09:E7:27:8E:D2:F9:3E:1E:4F:22:9B:AC:D8:FC:A3
X509v3 Authority Key Identifier:
keyid:5C:A0:53:DF:E7:71:2E:E6:3D:BF:F6:40:FA:E0:73:08:D6:6C:E7:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:e2:f1:93:27:60:a7:6b:2b:a9:5b:a6:5d:02:19:e2:06:6d:
56:9d:a6:75:dd:7e:ea:b5:ae:4f:f8:03:40:08:e4:1a:9f:73:
19:9c:ef:b8:a6:2e:f6:d8:4a:c8:eb:84:cc:e6:3a:29:d4:d0:
fa:69:1d:d5:f3:c0:77:f5:a3:9c:19:01:de:9b:18:02:aa:5e:
47:aa:f2:56:8f:fa:f1:dc:a1:d7:c8:79:ec:a3:14:6e:53:fe:
7b:ce:95:d0:6f:e2:87:3c:a9:ae:3f:28:57:09:46:1c:4a:ec:
0b:9d:81:34:11:1b:d1:3a:2b:a2:43:57:c8:ec:09:32:64:ad:
1b:25:71:71:ca:aa:9e:32:ba:15:60:6c:d9:c6:6f:a7:cc:d5:
46:6d:a4:ec:f9:00:d9:05:95:38:87:79:30:71:11:50:75:d3:
6c:f3:5a:32:a9:c1:59:be:47:eb:4c:32:64:e8:f7:e7:b6:9b:
51:de:e2:c3:00:39:bf:0b:74:c1:27:34:e1:d5:c6:13:70:64:
dc:2c:a0:5f:02:a7:d6:9a:37:18:57:f0:99:90:12:54:85:e9:
39:f5:d7:e2:70:be:4d:2b:f4:79:3f:bf:45:77:3a:44:73:7f:
20:c5:d7:19:a4:be:62:6b:64:17:ea:4f:ae:18:10:39:48:f5:
82:96:27:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:25:52 2026 by rpki-client