Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
File: XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft (raw, json)
Hash identifier: MtTdhoUngO7n5Gk3quiIx0u9cDfQKWS2C5eUE6LmLgk=
Subject key identifier: CD:EB:3C:BF:0F:E5:C9:3E:4D:43:12:F9:E2:02:AB:E6:73:2E:66:93
Authority key identifier: 5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D
Certificate issuer: /CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d
Certificate serial: 019D277242810A381B16D082E25C4BD8CB66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 00:01:32 +0000
Manifest this update: Thu 26 Mar 2026 00:01:32 +0000
Manifest next update: Fri 27 Mar 2026 00:01:32 +0000
Files and hashes: 1: 0m0w4NNU4NOo-8_y3zxSZs-Hcdw.roa (hash: d/QLJQ6M0z3RViK7W5MP6w1Y/VAa68ow0nmGzD8+98w=)
2: HKYjGRXbhcsbgj-zO-lhhp8iHf4.roa (hash: r0qRRb9G05Y3zjQIakuz14pzZ5PruwE51RJizxy5NMg=)
3: OXzsf9355x_Po1YlBAMmXxH7YfM.roa (hash: HyUx0AM/t82HDbhNTlK93mKwtwtfVGbEby4qtiM7vwI=)
4: SD-pJr4ttUBaZ1S20Tz4AuB6P1I.asa (hash: +ZZUrq34lcu1uY7HrOMrXNxK/Du8JITTl9RrFi410RY=)
5: XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl (hash: TrZIhWekwrjQuqPL/EZ1aLco8BM82bOHEMKj7YcDYr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:42:81:0a:38:1b:16:d0:82:e2:5c:4b:d8:cb:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d
Validity
Not Before: Mar 26 00:01:32 2026 GMT
Not After : Mar 27 00:01:32 2026 GMT
Subject: CN=cdeb3cbf0fe5c93e4d4312f9e202abe6732e6693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6f:e2:34:5c:a8:59:32:2e:de:4b:ac:79:47:
e5:56:9f:e6:ae:bd:7b:aa:2e:f6:ad:c7:36:06:76:
a3:79:d3:2f:0b:71:d4:f0:ad:4b:f4:f2:33:5c:6d:
19:14:42:ad:68:5c:fc:9d:60:6b:dd:b7:f8:d9:16:
f2:b9:c6:14:33:0c:42:92:a3:c9:83:38:46:ee:58:
54:bb:c0:0f:da:02:ae:4e:68:48:95:d1:a6:af:ed:
9f:5f:45:a0:38:c8:59:ec:6c:90:cf:84:f9:d2:de:
13:1b:bd:d3:8f:88:24:7a:c6:38:58:8f:51:b4:f4:
82:10:63:56:dd:8b:3b:da:19:7e:0f:83:51:29:39:
8a:ff:c1:2b:7d:f2:2b:2e:85:5e:99:8f:ab:60:3c:
0c:cd:aa:fc:66:d5:90:11:77:c5:38:0e:b2:63:3a:
f6:b7:61:08:46:63:72:71:10:26:2a:0b:a3:f7:7b:
c0:22:2d:13:0c:23:35:ed:ec:4f:66:3b:99:ec:d4:
6f:db:2f:79:15:d4:2c:74:a0:1e:c9:20:d1:44:85:
24:26:5a:70:06:ad:bd:64:d1:24:4c:9f:a4:82:f5:
9d:84:cc:7c:dd:93:b0:94:3f:1b:ff:97:5b:93:c0:
3e:40:59:f1:25:74:3a:c4:fb:41:1f:93:33:18:ad:
6f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:EB:3C:BF:0F:E5:C9:3E:4D:43:12:F9:E2:02:AB:E6:73:2E:66:93
X509v3 Authority Key Identifier:
keyid:5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:9d:fe:f0:fb:15:1f:04:21:f0:b8:22:62:b6:ec:44:b3:1e:
76:db:0e:61:12:b1:06:ff:e3:90:2f:30:ad:81:ca:51:8b:6a:
31:7e:46:2b:91:e9:e6:c2:a2:6e:a0:aa:b2:49:3c:99:46:37:
06:82:08:bf:d6:74:92:b9:bf:ef:e4:d7:76:d7:52:25:e0:cf:
dc:77:92:89:68:08:73:05:74:08:7d:c8:8c:b0:34:97:e8:ca:
44:64:4f:3c:c5:cf:47:4d:c2:37:bd:8a:5b:72:89:5c:38:82:
a2:9c:34:fc:c0:17:4f:2d:93:14:6a:fc:c1:23:15:75:a1:ee:
61:fc:59:66:0b:e3:12:ce:cb:89:1f:f5:7f:c3:93:bc:68:a2:
ef:e4:6d:45:74:16:8e:58:2b:2c:73:be:02:05:16:03:14:83:
96:f4:b6:31:2d:dd:fb:7d:b0:1c:6e:b1:11:b2:45:04:9e:0b:
dc:d8:e4:57:a3:c4:8f:82:e0:ba:2a:99:aa:5e:bc:57:0e:8c:
ef:01:27:92:4e:1a:68:c9:bf:d2:a9:24:c1:30:b0:7c:25:73:
27:9d:46:ae:cf:82:55:7c:39:07:f3:9b:36:8e:af:34:c9:ad:
d7:d5:e2:9e:62:b1:f9:07:78:c9:aa:2e:e9:b3:8b:09:58:af:
6b:a2:b6:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:19:37 2026 by rpki-client