Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft
File: XS8h5aT74BUgX2zviK-uGc0GphI.mft (raw, json)
Hash identifier: VD4ZHeqcI8LxjWEBX9cEUMAuY+j2UpAqTWFwNb5sMgg=
Subject key identifier: 2E:09:4B:31:D1:35:02:B9:EA:D1:D4:25:1C:D7:78:DA:53:B0:62:B3
Authority key identifier: 5D:2F:21:E5:A4:FB:E0:15:20:5F:6C:EF:88:AF:AE:19:CD:06:A6:12
Certificate issuer: /CN=5d2f21e5a4fbe015205f6cef88afae19cd06a612
Certificate serial: 019D27A86FA0F1131A2D798732D3A6D445E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XS8h5aT74BUgX2zviK-uGc0GphI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft
Manifest number: 181A
Signing time: Thu 26 Mar 2026 01:00:43 +0000
Manifest this update: Thu 26 Mar 2026 01:00:43 +0000
Manifest next update: Fri 27 Mar 2026 01:00:43 +0000
Files and hashes: 1: TsOOfWYO7s3iDHFcR1k7ZOE39Ec.roa (hash: j+9fyMphVuQhWbTHtgX76YqDUNucL2DHLde2/xPrgJg=)
2: XS8h5aT74BUgX2zviK-uGc0GphI.crl (hash: hM8AfMu+34cEwB/hUE4wlay2jlXIy/CHGtwf9bqVe6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XS8h5aT74BUgX2zviK-uGc0GphI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:6f:a0:f1:13:1a:2d:79:87:32:d3:a6:d4:45:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d2f21e5a4fbe015205f6cef88afae19cd06a612
Validity
Not Before: Mar 26 01:00:43 2026 GMT
Not After : Mar 27 01:00:43 2026 GMT
Subject: CN=2e094b31d13502b9ead1d4251cd778da53b062b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7d:43:05:95:c7:87:bc:da:fe:00:67:a9:b3:
12:2a:36:8c:d7:c8:f1:31:21:09:fa:03:7d:fa:0d:
70:5a:6b:2d:a9:8f:66:4f:a7:4b:ca:16:b4:7d:ff:
9b:39:69:99:96:9f:21:fd:6b:72:d3:14:1d:ea:31:
07:84:3b:f7:f3:1a:74:dd:a1:1b:33:eb:7b:3e:38:
a3:f9:6e:24:28:e0:24:07:6c:79:f0:0c:49:5c:a6:
7d:cf:d9:db:fd:8d:aa:d2:46:91:1b:5c:a6:4b:a6:
77:68:9a:1d:a6:fa:ae:17:1f:0a:0b:47:98:1a:51:
79:4c:27:43:e3:65:7e:f9:30:a0:2a:76:2f:0a:3a:
0a:41:ca:76:cc:ca:00:d1:b8:11:9d:de:cc:39:d9:
ac:fe:3b:4b:e4:e7:be:3d:4f:6b:64:df:22:f8:21:
e0:ee:1a:60:28:52:66:55:33:78:96:49:2d:c9:77:
bc:d3:30:a0:ad:f7:7c:b2:3d:fa:d6:6d:87:24:dc:
07:e5:14:e5:a6:b3:c3:ae:83:b1:12:d7:2c:77:25:
a0:42:e8:84:05:b6:30:b5:95:a9:eb:9d:fb:88:60:
8e:ed:20:78:49:89:45:38:65:4f:4e:a5:e6:99:af:
4c:3b:e1:d2:ac:e5:ec:b9:8b:59:a6:20:ab:e3:50:
d9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:09:4B:31:D1:35:02:B9:EA:D1:D4:25:1C:D7:78:DA:53:B0:62:B3
X509v3 Authority Key Identifier:
keyid:5D:2F:21:E5:A4:FB:E0:15:20:5F:6C:EF:88:AF:AE:19:CD:06:A6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XS8h5aT74BUgX2zviK-uGc0GphI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:f4:dd:ee:06:17:63:d2:90:f9:a1:7b:d3:b5:37:23:2a:a2:
d7:83:91:04:c0:1f:71:c2:24:15:0f:f8:39:92:b6:ae:f2:59:
36:98:78:58:fd:d0:a3:17:5a:29:9e:63:d8:ca:cb:1f:28:c0:
7d:88:2c:aa:d1:c8:d6:44:9d:72:d6:58:a2:2c:2c:d9:d9:93:
ee:64:47:92:98:7e:b0:45:a8:12:5e:a1:97:fa:28:60:a0:12:
06:9d:08:aa:c4:9f:fe:b4:36:86:da:d7:7e:63:25:e9:4e:29:
15:b0:4b:98:c9:da:b1:f9:09:51:25:6c:b2:3a:1b:69:8e:98:
75:b5:68:e6:07:dd:8b:4d:43:6b:75:a5:73:78:45:bd:59:fe:
e6:d7:cc:83:e2:d1:95:51:43:2d:37:22:76:08:31:4c:c3:a6:
64:dc:f8:e8:42:f4:21:45:e5:35:48:3e:fc:04:66:06:93:91:
09:3c:67:ba:a5:1f:df:d8:84:59:b2:ff:0d:9e:1c:da:c8:24:
14:0f:44:34:38:f3:42:98:22:99:fe:07:34:b4:a5:e8:81:4a:
0b:50:75:43:d0:50:f6:42:aa:a7:bf:f7:5f:23:1e:80:a6:ca:
5f:ce:fc:76:40:4d:98:5d:89:0f:0a:4d:f1:44:2a:80:f2:a4:
84:49:bd:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:55:59 2026 by rpki-client