Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft
File: Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft (raw, json)
Hash identifier: gXVxicLypglTdtYxx8QfAhWmFkenVl2PEAoCifZ0x2o=
Subject key identifier: 04:90:E4:86:DD:70:53:E8:AF:99:6A:D5:DD:F5:F3:13:79:FE:DA:84
Authority key identifier: 5F:0F:16:2A:FA:7B:FD:7B:84:7C:1D:D0:EB:4A:EB:EA:93:C4:69:CF
Certificate issuer: /CN=5f0f162afa7bfd7b847c1dd0eb4aebea93c469cf
Certificate serial: 019D27DFA7DD0E3E1FBE532E46CDAA39DDB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xw8WKvp7_XuEfB3Q60rr6pPEac8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft
Manifest number: 1144
Signing time: Thu 26 Mar 2026 02:01:02 +0000
Manifest this update: Thu 26 Mar 2026 02:01:02 +0000
Manifest next update: Fri 27 Mar 2026 02:01:02 +0000
Files and hashes: 1: UZseksy0uhuo08VXcgnfylQC3DI.roa (hash: WI6osdG7JdUaHymm4KYLyMVR4pGV77Pctw9oWtJpBZw=)
2: Xw8WKvp7_XuEfB3Q60rr6pPEac8.crl (hash: cqz0io7d9yAFaKlZ9DYlsVuvlbuHdGjRgDSFrwPNyqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xw8WKvp7_XuEfB3Q60rr6pPEac8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:a7:dd:0e:3e:1f:be:53:2e:46:cd:aa:39:dd:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0f162afa7bfd7b847c1dd0eb4aebea93c469cf
Validity
Not Before: Mar 26 02:01:02 2026 GMT
Not After : Mar 27 02:01:02 2026 GMT
Subject: CN=0490e486dd7053e8af996ad5ddf5f31379feda84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:43:54:49:51:d2:6c:62:77:c0:8c:60:d4:1b:
ca:4d:be:16:be:05:79:82:31:1a:69:19:61:69:26:
b2:ea:ef:f0:b2:50:78:58:bd:42:6f:40:27:1b:22:
e5:d5:32:fb:d1:53:80:4d:45:cc:9a:ed:3a:4f:3d:
9a:52:14:19:91:7e:ec:79:fd:d7:fc:37:5b:a2:3e:
83:ba:bd:50:68:db:d0:5f:55:2d:7d:8c:71:de:2a:
14:17:0e:b7:e4:24:ce:52:0c:4a:ce:c4:22:ab:bd:
88:a6:0c:8d:e8:e8:a7:8a:0b:7d:ec:81:0b:ee:36:
7c:10:16:16:ba:b5:26:85:0e:c8:fe:59:73:5e:b2:
6c:01:70:d3:25:bb:25:0d:74:32:b8:9a:09:07:e5:
66:0d:cb:77:fc:6f:8d:95:d6:03:81:f1:54:f1:d3:
74:1d:64:87:8c:77:81:16:35:ee:f5:53:f2:02:a3:
79:a0:46:88:ff:b5:96:81:0a:13:16:43:17:9b:dc:
5b:cf:ab:9f:3f:0e:27:a3:78:94:85:a5:1f:1c:86:
55:df:b3:88:40:5f:24:24:38:cd:1b:20:7a:f0:79:
06:02:5d:51:c4:44:62:8b:70:04:2c:8d:aa:f3:c1:
97:11:67:eb:95:10:79:20:a3:54:f8:f5:23:99:5f:
1b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:90:E4:86:DD:70:53:E8:AF:99:6A:D5:DD:F5:F3:13:79:FE:DA:84
X509v3 Authority Key Identifier:
keyid:5F:0F:16:2A:FA:7B:FD:7B:84:7C:1D:D0:EB:4A:EB:EA:93:C4:69:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xw8WKvp7_XuEfB3Q60rr6pPEac8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:91:45:54:c3:00:ce:32:52:56:97:9f:59:06:3c:74:f7:6d:
44:4f:dc:6c:9b:de:24:67:7f:34:80:3c:f5:61:3e:71:ca:b1:
59:1c:08:77:f6:ae:a7:86:54:e5:f4:df:0b:93:eb:52:dd:c3:
a6:93:91:59:4f:3f:8d:c9:fc:9d:65:f2:3f:44:06:e8:3e:1c:
b4:44:bd:37:3d:8f:06:42:2d:a3:4f:e4:1b:89:ee:14:be:de:
aa:46:1c:a2:5b:9d:67:25:30:f2:e0:ae:b5:cf:be:f5:ff:73:
80:5b:10:33:81:e9:a5:41:80:ba:7d:43:80:4d:f9:a2:86:0d:
a2:1c:9f:bb:b1:01:b7:23:de:22:68:96:a5:8c:88:79:37:cd:
3a:72:03:36:99:03:0c:63:cc:a1:d9:eb:da:0c:fa:b9:ca:85:
d4:80:26:1b:c7:d3:83:6c:1f:7d:ed:3c:67:b7:b3:78:e6:9b:
11:32:ef:85:47:64:bd:98:ac:f6:30:03:5c:56:11:c4:19:f4:
ef:d2:f2:7f:2a:a8:8d:6c:13:d5:ff:aa:87:24:e1:8d:27:0d:
19:f0:87:42:0d:32:6c:9d:ad:56:ab:4e:25:0e:9d:78:7e:a1:
b8:67:00:67:d6:63:73:e7:31:9c:f3:cc:d8:40:60:c1:58:06:
a2:e3:ef:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:57:44 2026 by rpki-client