Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
File: XW8uSaMejfnFqgiq8kC1yDK5y5M.mft (raw, json)
Hash identifier: Kex1onOGh7pQjXKwTxuKhtnRRf1F7oR35JmnpCeJ8Wo=
Subject key identifier: 1D:63:4B:E8:30:70:32:A3:0E:11:C5:A2:9C:1A:02:7F:F4:EA:00:79
Authority key identifier: 5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93
Certificate issuer: /CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93
Certificate serial: 019D2628379222168CD66040E6B130FC7A35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 18:01:02 +0000
Manifest this update: Wed 25 Mar 2026 18:01:02 +0000
Manifest next update: Thu 26 Mar 2026 18:01:02 +0000
Files and hashes: 1: 017yR2AH3nhtreOuYgsNpqkrBt0.roa (hash: jH8rFvA13JhY4szX2F6JGpx37/sl3RxTDMuhAZiU224=)
2: OOfgMgyirAjAQpzlSeWvWZ7kZIQ.roa (hash: wpPBvbubRrWqOyJudWgmsWq2Hw2lni+AI3RKu2B28mg=)
3: XW8uSaMejfnFqgiq8kC1yDK5y5M.crl (hash: jEC66Iz0iAimbOwSEZRJ5gmIn/xzSXiw8ouBTwpuWs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:37:92:22:16:8c:d6:60:40:e6:b1:30:fc:7a:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93
Validity
Not Before: Mar 25 18:01:02 2026 GMT
Not After : Mar 26 18:01:02 2026 GMT
Subject: CN=1d634be8307032a30e11c5a29c1a027ff4ea0079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ce:7e:52:33:1b:4d:33:8a:67:ec:11:da:d3:
dd:c7:b8:70:2d:a9:fb:c9:01:39:32:bf:61:9f:de:
02:41:cd:6a:ca:75:b9:bd:b3:50:59:2f:84:a7:2a:
91:4d:01:43:7b:9c:4f:ac:10:e8:92:be:dc:96:12:
3e:46:70:dd:de:91:67:92:3d:28:ce:d4:04:9b:2a:
a9:8d:32:3c:3e:02:43:15:b5:5c:0e:e4:23:f7:92:
0e:13:ec:e6:8d:18:51:83:e0:6f:05:bc:fe:82:17:
b9:87:65:8d:ff:95:1b:49:f9:f6:91:88:47:71:38:
bd:4d:83:7a:a2:9d:c0:57:47:dd:03:0b:76:20:a9:
42:1c:96:d7:cd:91:03:ee:b6:e3:36:2b:a9:91:34:
0e:37:fe:cf:66:2c:cf:70:03:3e:88:94:cf:54:82:
13:f4:a5:b3:0a:5b:07:c8:7d:de:90:46:2d:dd:a2:
f8:b9:3b:42:7f:d2:46:45:33:b1:c1:e6:3c:fc:5c:
70:ef:2f:87:52:98:ff:c2:08:fe:85:a3:aa:a0:b7:
0c:50:23:a3:e7:90:e7:94:eb:c1:c5:c6:0a:7c:8d:
84:91:41:16:a5:3c:bd:95:5c:fc:d5:e0:5a:60:1c:
f4:f3:52:50:fc:f2:53:3c:b2:6e:4a:fb:fd:7a:ae:
72:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:63:4B:E8:30:70:32:A3:0E:11:C5:A2:9C:1A:02:7F:F4:EA:00:79
X509v3 Authority Key Identifier:
keyid:5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ee:b4:86:fa:4e:72:b6:a1:56:a4:d6:cb:71:74:d2:8b:75:
cb:25:c5:09:62:33:78:96:3f:a0:6c:f1:c7:a1:6b:0f:89:d2:
80:82:df:c5:50:f0:3c:05:d2:a7:63:d0:77:fd:93:dd:bc:08:
81:71:5e:2f:73:ee:61:20:54:ad:70:8e:98:6a:85:ff:cb:a1:
45:62:81:53:99:0d:23:6d:90:22:72:07:23:6d:8b:f9:38:3d:
ba:13:ca:0e:8e:04:c3:04:6d:8a:c8:a9:43:86:95:fc:70:0b:
6e:65:fd:9a:e3:e4:58:7d:f7:42:7e:b7:6c:63:89:1b:c8:d8:
f2:07:27:8c:51:3a:24:05:e2:43:e0:de:bc:4b:9c:16:17:cc:
3e:aa:65:7c:a7:8d:53:76:47:0c:6a:a8:07:6d:aa:5c:cf:77:
7c:be:2a:7b:d1:f7:06:ae:b2:12:e9:35:32:66:b2:0b:e0:2e:
43:df:9e:0e:10:d3:a0:90:5b:08:ad:d0:c0:ca:8d:c4:16:6b:
45:df:8a:94:43:ee:f6:25:4e:18:2a:a5:e0:04:3e:a6:61:4c:
bf:47:8d:45:9e:47:c2:85:9d:73:b3:c3:c0:b3:4f:67:f1:ad:
19:d4:70:f6:aa:72:f9:72:87:5c:69:49:a2:34:81:b5:1f:13:
38:2a:f0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:11:12 2026 by rpki-client