Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
File: XxaylLGmR79tZ2g7UWFEl-dR8h8.mft (raw, json)
Hash identifier: YiMJt7pCK7J3UnuR8Zq+SZQMULbF8RaCzXXyuEjdhUE=
Subject key identifier: 5A:45:27:87:72:87:56:2C:96:36:B4:3D:35:75:16:97:CB:BE:21:8C
Authority key identifier: 5F:16:B2:94:B1:A6:47:BF:6D:67:68:3B:51:61:44:97:E7:51:F2:1F
Certificate issuer: /CN=5f16b294b1a647bf6d67683b51614497e751f21f
Certificate serial: 019D269623C3933535A190F4824AA5C2CE59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 20:01:06 +0000
Manifest this update: Wed 25 Mar 2026 20:01:06 +0000
Manifest next update: Thu 26 Mar 2026 20:01:06 +0000
Files and hashes: 1: NKg93JWQUnBu80RX13MwmqJxvVc.roa (hash: nG4jnHVVr/B/zg5snhsHaHEVH2wq5BQYMoc/wJLZKCM=)
2: XxaylLGmR79tZ2g7UWFEl-dR8h8.crl (hash: DkpwSAMC1MUIcw3d39KnzvgTarLBrCjvy7ifhNS8wYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:23:c3:93:35:35:a1:90:f4:82:4a:a5:c2:ce:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f16b294b1a647bf6d67683b51614497e751f21f
Validity
Not Before: Mar 25 20:01:06 2026 GMT
Not After : Mar 26 20:01:06 2026 GMT
Subject: CN=5a4527877287562c9636b43d35751697cbbe218c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:77:d9:a0:9e:c9:08:63:d0:f4:68:b5:a2:e6:
84:f5:89:1c:3a:ee:18:a4:e8:5b:70:b8:33:7a:41:
ef:a9:2f:11:0f:2d:d9:09:28:dd:37:2f:2b:14:f4:
c5:60:6f:4e:41:1e:44:9e:0f:04:ac:bb:d4:93:b3:
fe:2a:71:ec:1c:c1:10:63:39:ce:fd:f0:c1:49:bf:
49:a6:fc:51:e3:ac:f8:f7:eb:bb:df:30:f5:9a:82:
de:40:23:2e:8a:57:c7:a2:dd:b2:b7:ab:98:6d:9f:
0b:32:9c:a9:12:38:4d:a2:9a:8a:87:34:9b:a7:54:
26:14:69:47:05:c7:23:02:6f:1f:aa:5c:1d:88:ee:
b5:69:78:50:e1:07:5f:69:87:23:0e:73:42:95:78:
f5:44:44:94:70:42:7d:dc:67:d9:25:c9:d1:c9:29:
c1:ff:7d:e4:de:5b:86:73:fd:a1:ba:01:76:07:9b:
d6:f8:14:f3:83:f3:22:e4:98:1c:25:37:2f:c7:e2:
80:46:03:12:fb:9b:05:fb:da:3b:c8:e9:91:e0:3d:
64:c9:a2:60:af:9a:cf:f0:a5:22:d0:91:eb:43:a6:
5a:59:c6:e8:d1:38:c8:24:8c:e8:59:85:f1:a4:68:
bf:26:b6:e4:58:0c:2c:ee:e7:17:f1:da:20:33:0e:
01:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:45:27:87:72:87:56:2C:96:36:B4:3D:35:75:16:97:CB:BE:21:8C
X509v3 Authority Key Identifier:
keyid:5F:16:B2:94:B1:A6:47:BF:6D:67:68:3B:51:61:44:97:E7:51:F2:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:4b:c1:14:88:18:60:a6:55:50:dd:70:bc:da:42:5a:43:dc:
d9:35:83:d3:19:12:f2:a8:38:07:02:d9:57:d9:6b:cc:e3:4d:
67:ee:6b:ec:aa:ef:3b:f5:29:d0:a6:bc:04:f3:83:af:90:e6:
27:d9:cf:21:40:0a:e7:07:1c:55:8c:e9:be:84:28:de:1e:77:
a5:33:66:8b:76:29:c5:85:db:d9:1d:8d:77:19:a5:a1:65:29:
f7:6f:60:fe:86:f8:ab:93:15:83:be:9f:6b:b2:cb:2a:1a:47:
6c:30:42:54:48:47:30:12:5f:94:4c:97:9a:95:d5:36:44:6a:
48:ab:a6:2c:e3:5d:ba:9b:6c:30:a7:54:54:d8:1d:d3:25:79:
19:48:aa:fd:e5:31:6c:e5:ab:2a:1d:a5:2e:e6:53:d7:f6:7e:
c3:60:7e:94:81:6b:c7:cc:7f:12:71:44:1a:b5:b2:4a:65:e2:
81:84:b5:63:e3:d3:13:04:ae:d9:65:e8:2f:c1:a1:c6:06:64:
55:ef:b1:3f:a2:0f:42:7e:c4:e7:96:40:c8:f8:02:81:da:f5:
97:8b:86:e7:36:87:16:e0:a2:39:f6:05:53:fe:9a:a2:1e:83:
b7:68:8f:7f:a9:b9:85:57:73:2d:8e:85:b1:0e:7f:63:c8:95:
d9:b1:ea:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:23 2026 by rpki-client