Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
File: XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft (raw, json)
Hash identifier: zxbibNKGylZ4+HDV9JgbWKF9oKrVAZ09GsQV1UGr5rc=
Subject key identifier: 5A:C9:27:05:EE:34:C2:93:17:F6:9C:E4:CE:7A:7C:80:25:E0:9E:B3
Authority key identifier: 5C:A0:53:DF:E7:71:2E:E6:3D:BF:F6:40:FA:E0:73:08:D6:6C:E7:48
Certificate issuer: /CN=5ca053dfe7712ee63dbff640fae07308d66ce748
Certificate serial: 019D2A725AA400E4DB35C24AB1E48B86EE65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 14:00:30 +0000
Manifest this update: Thu 26 Mar 2026 14:00:30 +0000
Manifest next update: Fri 27 Mar 2026 14:00:30 +0000
Files and hashes: 1: JtY0Nc5KsnYFhq9gwtFkh9ll4_c.roa (hash: 2ee0ztpkOTTrJZ/rJndPjJzssmpY0MoOu/loesqHer8=)
2: XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl (hash: aeNnSuDR1mkz8VCq4hYSJHDm/uDQDCyK2FeNQTeRkzc=)
3: XVPpnUXQ607rP--ePsLN9cz89_c.roa (hash: 0wqwWXvhEcuxDQDNA2phuoRTJPiVO88rNNJcF2GbNvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:5a:a4:00:e4:db:35:c2:4a:b1:e4:8b:86:ee:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ca053dfe7712ee63dbff640fae07308d66ce748
Validity
Not Before: Mar 26 14:00:30 2026 GMT
Not After : Mar 27 14:00:30 2026 GMT
Subject: CN=5ac92705ee34c29317f69ce4ce7a7c8025e09eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:fd:9e:03:2c:ef:1c:1c:cf:5b:cd:1a:00:15:
16:8f:2e:02:24:97:a3:d1:ea:64:03:15:87:6a:68:
a7:24:95:aa:f8:cd:b6:21:e0:bb:dc:27:68:25:07:
e5:a4:24:0f:51:4b:8a:fa:3a:3d:a7:25:9d:aa:eb:
a3:01:4e:09:3a:06:7e:2d:bf:02:67:dd:f1:0f:66:
55:1f:51:aa:27:8d:85:49:61:61:0d:0b:b3:90:e8:
3d:10:a8:0d:ce:a2:67:e4:ee:89:c1:f0:b4:7b:d6:
12:9e:56:12:c5:49:7a:11:89:3c:a1:ca:ff:41:f2:
b2:18:d6:67:3c:b3:1d:57:db:e9:4d:c9:3c:1f:b3:
9b:f6:6b:e5:a5:4c:42:9b:4e:a3:2c:f5:78:f9:40:
f9:c4:7b:e4:1e:c9:72:32:b1:bc:d9:7a:ad:03:d6:
d1:01:c3:ba:7e:4d:f7:ac:16:4d:4f:2f:a1:19:75:
52:38:6f:79:b5:22:99:60:5a:b4:4f:20:90:d5:ca:
c2:39:44:7b:53:af:0d:62:b5:6d:d0:5b:1a:7f:e7:
5d:5a:45:85:e5:08:3c:9f:b2:54:ca:c3:ed:d7:e7:
5f:38:25:b3:8a:2e:9e:37:33:17:92:c7:7f:81:d0:
92:33:cd:55:74:68:7b:e3:ea:ac:7b:a8:9e:07:05:
27:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C9:27:05:EE:34:C2:93:17:F6:9C:E4:CE:7A:7C:80:25:E0:9E:B3
X509v3 Authority Key Identifier:
keyid:5C:A0:53:DF:E7:71:2E:E6:3D:BF:F6:40:FA:E0:73:08:D6:6C:E7:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:0e:a5:b6:68:99:55:fb:e0:79:0d:64:15:12:df:47:e9:a8:
18:9e:12:d3:55:a8:e1:ad:d8:c3:7e:1d:bc:00:9b:3a:ed:43:
f6:15:e5:13:94:92:d2:20:d2:88:a2:b7:63:2c:08:e1:1f:0e:
54:ad:4a:e0:45:2c:e1:f7:06:69:9c:9d:9e:44:56:f2:a9:55:
f7:54:51:19:83:ed:ac:3e:4b:f5:37:45:65:82:55:e1:ef:0a:
6b:39:7d:70:64:e0:b1:62:27:4e:be:37:5f:a2:53:dd:56:68:
e8:65:18:40:5e:1d:49:b3:35:c9:55:17:53:75:25:48:8f:ec:
bc:01:86:17:c9:b6:12:eb:cd:4d:c3:13:d2:fa:48:3a:7f:46:
7c:14:a7:34:a4:90:98:79:1c:d1:44:1d:cc:a1:40:9f:f9:b2:
08:2c:80:6d:31:f8:50:60:1c:ed:52:9e:35:4a:a8:eb:54:0b:
b3:74:48:3e:ef:5c:61:91:ee:3c:d1:b7:07:d8:3b:f5:60:23:
eb:75:6d:c3:92:07:92:84:2d:11:4f:be:bc:1c:16:8b:82:fc:
c7:75:75:c2:cd:64:9c:06:13:47:1c:78:7f:1f:9f:c2:dd:29:
19:cc:85:51:a7:df:75:c4:44:30:f4:ce:61:14:cd:92:9a:a5:
d4:76:b9:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:47:45 2026 by rpki-client