Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
File: XP44gfPER3T1HMde5-b5HFVlpgY.mft (raw, json)
Hash identifier: MLww2aXLtiQdabkQucwWsCKqeaOMMe0lAqg1/9y7HxI=
Subject key identifier: F0:EE:6A:6C:51:05:C6:10:34:C2:AD:4A:D5:29:78:8E:D0:A6:F6:49
Authority key identifier: 5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06
Certificate issuer: /CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606
Certificate serial: 019D28F324AFFC77D1A20690506A0EE6C01F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 07:01:56 +0000
Manifest this update: Thu 26 Mar 2026 07:01:56 +0000
Manifest next update: Fri 27 Mar 2026 07:01:56 +0000
Files and hashes: 1: MsnqFaljx-vLs6R1klCk-k4mqbE.roa (hash: 9w5Fj/ix8Y1oWU+nhqJcIUFjp29qAgz5fs3U3GbWExc=)
2: XP44gfPER3T1HMde5-b5HFVlpgY.crl (hash: 1FqRAmQ0GGS5RbRFZvE6kuRZ5XeBoGxD1HnKnDYVKxk=)
3: Y-0LFW4QQXme0gq1FoIF-wZ-SQc.roa (hash: wu/R/xhocC/i/LlV9UK65CdEa6/Nxe99KI2JumwUKlc=)
4: a_XjHLHQF6uE4SSOtjsOa8f4-2Q.roa (hash: m3nX1Uyzi87lTewY/HPBoiE0m8iVkIMnK/iQX/3hwYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:24:af:fc:77:d1:a2:06:90:50:6a:0e:e6:c0:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606
Validity
Not Before: Mar 26 07:01:56 2026 GMT
Not After : Mar 27 07:01:56 2026 GMT
Subject: CN=f0ee6a6c5105c61034c2ad4ad529788ed0a6f649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:99:e9:c7:b7:31:87:da:ba:02:20:c2:78:15:
3d:43:bf:50:64:d9:6e:77:f0:06:b0:5a:c0:70:31:
bc:4b:7f:8f:56:2e:77:bd:f0:5d:33:54:76:27:9b:
fe:de:d1:f6:29:0b:c9:51:81:e6:19:b5:ce:c1:9f:
cc:83:e8:b7:06:a1:73:7e:3e:3b:12:a9:93:f8:a8:
a2:9b:74:97:32:6c:af:4b:7a:a0:04:7b:3c:b3:12:
e3:ab:a9:d5:9d:fa:ec:78:83:4c:48:e5:32:ce:82:
38:13:03:ca:70:3b:31:83:b7:65:d8:25:81:9f:63:
99:5b:29:bd:95:c1:fd:b6:a5:b6:fb:52:ef:61:86:
b2:70:b3:c8:20:a1:ec:cf:1e:a3:27:26:9b:87:bd:
9b:d8:94:88:86:d3:ea:e4:55:f9:fe:9b:c7:a9:af:
9d:c0:fa:b7:78:09:0b:0b:09:b4:3e:4a:3b:ba:8f:
67:0f:bf:f9:2f:15:34:4b:54:08:89:1e:00:a1:da:
17:4f:c8:f5:b6:36:7b:dd:e0:72:67:df:95:36:e9:
91:d1:28:87:52:c9:0a:b4:95:56:e5:8a:2d:29:54:
68:77:ac:9e:95:95:66:1d:2d:ff:1a:93:40:95:be:
af:d1:96:d4:46:04:99:92:e8:d6:14:0c:3a:41:d6:
bb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:EE:6A:6C:51:05:C6:10:34:C2:AD:4A:D5:29:78:8E:D0:A6:F6:49
X509v3 Authority Key Identifier:
keyid:5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:84:79:78:4f:25:d0:10:a1:22:45:4c:80:2c:f4:f5:ea:89:
67:95:12:89:c5:cf:60:07:b0:6a:a6:41:c4:82:ee:33:3a:38:
7a:bc:c8:40:3b:4f:5b:65:b0:e8:7e:e7:bb:f3:29:6b:c4:52:
cc:9e:72:13:5e:5d:36:9b:4b:70:2d:ff:64:c0:ba:de:41:37:
11:b0:1c:77:42:06:91:98:fc:d5:37:7c:bc:13:fa:ec:0e:39:
12:ed:03:7a:09:b0:82:42:58:dd:2c:96:62:81:aa:2c:29:ac:
b8:d5:b8:0b:28:b3:8d:68:77:04:5f:31:d9:82:36:9a:fd:d3:
7b:b3:61:00:36:cf:d8:08:60:e2:db:d8:a2:00:df:4e:9d:1f:
6e:f8:19:03:21:59:7c:56:4d:df:5d:b2:4e:1e:12:e2:69:c1:
55:87:8c:da:a3:71:a8:38:3a:33:52:23:be:d4:19:cf:2e:60:
6e:6b:90:43:d8:af:66:0c:6d:53:69:96:2c:a5:5a:c9:77:d0:
95:09:a8:60:86:be:f9:c2:57:4b:18:95:30:2c:0c:5c:7d:41:
63:cc:46:49:b3:04:f5:c5:9b:c9:3d:a9:ba:5b:92:7c:35:46:
9e:3c:e5:62:bc:65:dc:b5:57:53:f4:0f:86:89:51:17:6f:27:
d5:62:af:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:50:08 2026 by rpki-client