Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft
File: XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft (raw, json)
Hash identifier: g1lp7k0MTMcPkVVp37icpRYuUaLT/SsQjZ6LpYMJlqY=
Subject key identifier: 82:A2:CA:96:BD:0B:BE:77:10:FA:6F:C6:6E:57:AA:0A:EB:DA:2A:5E
Authority key identifier: 5D:65:6B:20:13:E8:51:51:6B:94:2F:A9:07:06:C7:20:90:DC:DD:EF
Certificate issuer: /CN=5d656b2013e851516b942fa90706c72090dcddef
Certificate serial: 019D2772C73055A366530BAD25B18816A8CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWVrIBPoUVFrlC-pBwbHIJDc3e8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 00:02:06 +0000
Manifest this update: Thu 26 Mar 2026 00:02:06 +0000
Manifest next update: Fri 27 Mar 2026 00:02:06 +0000
Files and hashes: 1: QlZ3EwceRly-CQVyh76fsical88.roa (hash: GhqviNkjdeBBcrA1tzvOBRebTTX9kM0EqFFhCTAnsnQ=)
2: XWVrIBPoUVFrlC-pBwbHIJDc3e8.crl (hash: qonFf8/I0n8D2kHw3YMq29SO1a3BQ0ZiHQCpgoyiNdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWVrIBPoUVFrlC-pBwbHIJDc3e8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:c7:30:55:a3:66:53:0b:ad:25:b1:88:16:a8:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d656b2013e851516b942fa90706c72090dcddef
Validity
Not Before: Mar 26 00:02:06 2026 GMT
Not After : Mar 27 00:02:06 2026 GMT
Subject: CN=82a2ca96bd0bbe7710fa6fc66e57aa0aebda2a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:29:0e:0e:89:a2:39:e8:b1:70:ff:04:f7:21:
8d:40:70:31:9e:57:4f:00:b5:da:d9:85:06:5d:9c:
5e:91:c4:04:3d:81:43:92:3d:9d:0f:f1:f1:7a:ad:
2e:51:78:19:34:83:b7:db:e5:27:fd:58:21:59:71:
5a:aa:f8:26:9e:21:e0:f4:9d:42:36:e8:16:47:54:
17:a9:ca:63:a2:da:4f:30:6f:48:78:93:e1:2e:21:
f6:21:8a:5e:68:46:d5:22:9c:c4:04:cb:a5:6c:5c:
67:ba:ec:0d:f3:62:5c:61:1a:37:43:e3:2f:6f:c2:
d4:e3:8f:73:8b:0e:45:0f:0d:21:3e:87:d7:26:f1:
61:9d:0b:3b:da:f1:df:c5:ed:97:15:b7:d0:bb:54:
e4:84:b5:2d:2f:2d:6d:4b:83:4b:33:55:b6:41:bd:
02:84:a6:41:50:d6:c1:e9:d9:ef:ba:94:10:59:2c:
c2:2c:e7:a4:34:d4:68:0e:0b:c6:36:75:a5:79:13:
8e:31:6b:0b:55:f8:59:66:f8:b8:ef:6f:92:bc:30:
7d:5e:d6:92:fd:77:a4:52:35:c3:49:c1:00:26:fa:
dd:46:88:a4:d7:90:a2:0b:a2:e6:ee:3a:e9:e7:c4:
df:44:6b:00:3f:ef:b5:37:e9:52:b7:a9:57:38:a0:
70:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A2:CA:96:BD:0B:BE:77:10:FA:6F:C6:6E:57:AA:0A:EB:DA:2A:5E
X509v3 Authority Key Identifier:
keyid:5D:65:6B:20:13:E8:51:51:6B:94:2F:A9:07:06:C7:20:90:DC:DD:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWVrIBPoUVFrlC-pBwbHIJDc3e8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:8b:0b:dd:4d:2b:1e:6a:c4:89:f6:24:17:06:38:91:0b:a5:
85:ca:bf:1f:7a:4f:29:31:c3:1b:59:cf:f3:29:82:26:68:ca:
8a:1f:6f:7b:51:d4:62:04:43:9e:31:ba:4c:44:ca:c8:00:54:
39:90:b5:ed:ac:fe:db:99:65:cb:e9:81:d8:e7:4f:b7:49:b2:
70:07:e6:d1:74:f7:f6:82:00:f4:21:57:de:f5:b7:80:da:35:
cc:5d:78:8f:9d:8a:04:e9:b3:a9:7f:08:0e:15:ef:b5:14:e6:
8b:bc:a0:bc:5a:93:1f:a1:ed:2d:5a:28:21:56:ae:8d:5d:17:
d0:58:c9:11:86:3d:16:78:3e:88:9a:09:f4:9c:04:d6:be:6b:
1c:4e:57:f9:50:d6:da:5e:6e:16:b2:ac:b8:2a:ce:fb:f1:15:
28:92:b2:b5:38:52:38:24:73:77:81:05:1f:37:a0:5b:b3:fc:
f8:30:c4:6f:c9:aa:7c:c3:5e:9c:d5:2b:dc:f8:ae:7d:fa:48:
65:a3:55:59:2f:73:76:11:28:fb:aa:88:79:ae:04:67:8c:c8:
c8:34:54:1a:c1:e5:11:34:cc:2e:02:c5:0f:0f:10:0a:aa:af:
4f:e5:e8:3d:b6:dd:68:74:b2:a1:64:7d:fb:a3:bb:3e:5f:b2:
45:cd:2c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:41:08 2026 by rpki-client