Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft
File: xm3GDRbf4WSdhsFpPheFjCMGOH8.mft (raw, json)
Hash identifier: GozBi+sF3kYW6fy6CHum10XZE/L6uppB9yDC6kpGKh8=
Subject key identifier: 88:E8:C7:00:57:3D:D2:F1:75:4D:84:CC:BB:A1:7F:50:55:96:0F:A9
Authority key identifier: C6:6D:C6:0D:16:DF:E1:64:9D:86:C1:69:3E:17:85:8C:23:06:38:7F
Certificate issuer: /CN=c66dc60d16dfe1649d86c1693e17858c2306387f
Certificate serial: 019D273AB70864860D5C05C47FFDEB6A41D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm3GDRbf4WSdhsFpPheFjCMGOH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft
Manifest number: 166F
Signing time: Wed 25 Mar 2026 23:00:52 +0000
Manifest this update: Wed 25 Mar 2026 23:00:52 +0000
Manifest next update: Thu 26 Mar 2026 23:00:52 +0000
Files and hashes: 1: TnQqYCMS5HYPe8dBEH3YlnPzvjc.roa (hash: A1cRotYs392TxWY0uuURFIGpI1Dw1TTRzXx3nGsePZY=)
2: UpvlotTuBAXXLl41-kBjCcqtcCo.roa (hash: YX4uJWFavI5W8loihl3QfahdLqjGtJrmnYd/3mcvAmc=)
3: xm3GDRbf4WSdhsFpPheFjCMGOH8.crl (hash: uxkfStADIQq2+CzjAeqtLUwGDWqZnLISr6EoW6sJKs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xm3GDRbf4WSdhsFpPheFjCMGOH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:b7:08:64:86:0d:5c:05:c4:7f:fd:eb:6a:41:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66dc60d16dfe1649d86c1693e17858c2306387f
Validity
Not Before: Mar 25 23:00:52 2026 GMT
Not After : Mar 26 23:00:52 2026 GMT
Subject: CN=88e8c700573dd2f1754d84ccbba17f5055960fa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:65:2d:a6:93:31:79:08:eb:58:2c:ad:c2:cd:
e2:2b:23:9a:52:9e:50:44:d3:24:fa:1d:2a:1e:62:
22:84:03:e3:68:a2:ba:0d:c3:59:3b:30:15:d4:0d:
28:70:36:ca:cc:5e:e6:26:08:36:7d:78:42:3e:cf:
f1:9b:bc:1c:57:06:c5:3e:d2:b5:93:26:35:f8:41:
7f:3a:0f:10:6d:3d:bd:4a:12:a0:73:3d:f4:95:6a:
d4:1d:ec:44:e3:cf:a7:96:fe:7e:75:8d:1f:a5:3f:
e7:87:f1:71:23:78:f2:f2:f8:b5:8d:30:b3:72:87:
a9:32:88:60:fb:25:63:39:49:26:69:9c:df:cd:5d:
48:e3:cd:03:33:fa:8d:1b:9e:1e:cb:81:d7:cd:20:
6c:49:6b:07:a9:02:03:52:d3:d7:2e:36:1b:8a:29:
b3:ac:8d:e2:14:ea:7a:2d:bd:5a:a3:1d:5d:3e:26:
48:e6:c6:99:81:06:c6:2c:4d:69:d8:a1:32:d6:37:
0a:2a:8e:f8:f8:5f:86:71:ed:0e:aa:31:c1:5f:f2:
0e:ae:3d:fe:6a:c7:63:69:d6:6c:62:c6:4e:4e:36:
31:9e:df:ec:6a:ee:48:60:1a:4f:62:74:dc:5d:00:
b2:5e:01:af:a5:86:4f:81:3e:52:af:1f:49:f6:27:
1c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E8:C7:00:57:3D:D2:F1:75:4D:84:CC:BB:A1:7F:50:55:96:0F:A9
X509v3 Authority Key Identifier:
keyid:C6:6D:C6:0D:16:DF:E1:64:9D:86:C1:69:3E:17:85:8C:23:06:38:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm3GDRbf4WSdhsFpPheFjCMGOH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:75:7a:74:3e:c4:03:57:da:c0:c7:34:e8:9d:87:56:ba:ca:
a2:b1:c5:a8:d9:d9:18:42:9a:ab:7c:e9:11:dd:48:32:60:9f:
2f:38:3a:ba:96:46:ab:e2:5e:8b:e8:13:1d:c1:ed:b1:a1:45:
d4:4b:77:95:4f:ee:f1:87:ac:90:1f:1e:3b:36:e9:82:e5:9d:
b8:f9:9d:df:f9:92:81:13:d3:05:b7:14:36:17:42:5d:2e:49:
c9:99:a2:6e:25:51:db:25:6c:44:05:cc:46:a5:d8:bf:60:ef:
a8:40:91:3e:27:7c:7f:e0:0e:29:cb:93:bc:b1:55:73:db:88:
72:d9:0c:f8:a2:85:f9:5e:1d:18:24:4a:e3:2c:cd:95:df:ef:
f9:a6:5f:a7:17:24:61:08:52:c2:e9:b6:f3:3a:85:38:15:77:
c2:60:38:26:dc:af:4e:37:2a:d5:4c:44:e2:1d:16:3a:69:0d:
b2:85:a3:62:5a:46:f0:d8:f9:b3:5d:33:ca:ae:fb:c4:25:a1:
d9:49:12:86:94:99:1a:df:6d:b6:6a:f8:00:e2:32:bb:30:9d:
70:8c:81:37:49:d1:4a:87:0a:f8:42:4b:60:69:f0:2a:04:e6:
93:78:80:fb:f1:1a:bd:ca:35:1e:70:58:f7:ad:6a:e8:ba:cd:
74:27:77:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:48:26 2026 by rpki-client