Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
File: XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft (raw, json)
Hash identifier: JgSI2eDBokWdCiEkdyD+A7znAlCfdbIfa+cj/tXmhu4=
Subject key identifier: B4:5E:F4:61:60:DC:C1:C1:09:BC:B3:EC:20:E2:9F:AC:BD:03:A3:47
Authority key identifier: 5D:D3:9E:1D:E1:85:14:BA:C2:F5:A2:39:10:F8:C7:D4:67:2A:0F:D8
Certificate issuer: /CN=5dd39e1de18514bac2f5a23910f8c7d4672a0fd8
Certificate serial: 019D2997843DF965A87965077DDC51DB4437
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 10:01:28 +0000
Manifest this update: Thu 26 Mar 2026 10:01:28 +0000
Manifest next update: Fri 27 Mar 2026 10:01:28 +0000
Files and hashes: 1: 5ncwIjdV-lgqxsPk6TejDPmjLoU.roa (hash: gvOpAQoTeSfO+y1nRziJ19qDe2iH3kf8RYDheGEeWc8=)
2: XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl (hash: dsWJ4k1ArQP17XOJn3v1zVOHLKq5XR/dCCbmWoOIEtA=)
3: x58D33wXY03IBALkfNVEewlOjxI.roa (hash: l4BRaOtR+rQZWBsP3tk/LVs3kvHtYkV6QExE7KMTpnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 10:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:84:3d:f9:65:a8:79:65:07:7d:dc:51:db:44:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd39e1de18514bac2f5a23910f8c7d4672a0fd8
Validity
Not Before: Mar 26 10:01:28 2026 GMT
Not After : Mar 27 10:01:28 2026 GMT
Subject: CN=b45ef46160dcc1c109bcb3ec20e29facbd03a347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7e:00:51:8a:c6:c7:5b:56:39:9a:b5:8b:31:
b3:e9:af:5d:36:07:04:7d:22:42:8e:62:b9:ef:8d:
7b:e3:bf:20:22:2a:9b:e4:1b:43:08:eb:95:87:db:
60:88:4f:2a:70:45:6d:34:36:28:bb:9c:b5:cb:a0:
a1:dd:a1:c0:8c:ae:16:74:a4:f9:ae:df:bf:40:90:
0d:2f:cf:f0:8a:15:9d:3c:c9:ff:f4:22:9b:53:94:
80:07:f5:d1:f5:18:d5:37:8d:c3:74:8c:4d:5d:f2:
4c:40:51:fb:86:a0:4f:05:9c:7e:db:d6:17:d7:00:
69:75:9c:a9:63:e4:df:5e:cc:3b:ac:a6:4e:d2:cf:
5c:70:8f:52:47:92:22:1c:30:61:8d:ab:95:3b:a9:
21:46:7f:29:0d:ea:ca:61:87:67:47:26:60:cf:b2:
2f:db:c7:e0:48:69:89:16:c5:2b:08:cd:3b:0d:4f:
82:e3:ec:7b:bb:bc:06:3f:4f:ff:7c:40:6f:41:e6:
4b:ae:64:4d:b5:3a:e7:42:99:ed:f8:ad:ce:13:e2:
de:d6:71:e0:24:fc:64:83:95:24:b5:1b:73:32:cf:
14:9b:31:a4:24:50:1a:f6:f9:aa:03:64:64:65:92:
6e:56:8c:87:53:02:8b:9e:7d:b3:01:63:d6:e8:65:
60:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:5E:F4:61:60:DC:C1:C1:09:BC:B3:EC:20:E2:9F:AC:BD:03:A3:47
X509v3 Authority Key Identifier:
keyid:5D:D3:9E:1D:E1:85:14:BA:C2:F5:A2:39:10:F8:C7:D4:67:2A:0F:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:67:46:20:e6:49:39:c8:00:75:cf:f5:ae:89:69:38:c2:17:
01:b2:80:32:38:cd:dd:6e:d7:fd:b4:bd:4a:c0:52:81:0a:f2:
4d:44:02:fd:cd:79:99:9d:58:1d:b1:08:b4:2b:e0:95:01:2e:
4b:43:71:3e:a5:7a:a7:25:94:8f:45:5c:da:14:fb:31:b2:af:
26:bd:c9:e9:fa:2c:85:27:53:f7:4a:4d:38:bf:22:9a:c5:77:
36:42:73:59:22:01:94:23:c0:c1:85:bb:d8:54:55:44:7f:53:
8d:46:03:58:61:ee:ff:88:eb:20:6d:e1:52:ca:ca:a8:35:c2:
b6:2b:97:a4:35:ec:ef:aa:a4:e8:32:60:45:d0:78:87:cb:f8:
a6:63:e2:6f:48:24:9c:0d:94:1b:f3:ab:ff:38:14:50:50:d5:
86:bc:81:86:85:1f:83:5c:0d:84:f1:6f:d7:c0:18:27:ed:09:
95:af:21:3c:af:6e:2d:1a:55:70:e9:dc:d3:86:a7:ba:06:d8:
00:d3:5a:79:85:79:10:b9:92:30:42:96:95:67:30:bb:2b:f7:
90:95:20:77:1c:25:b1:f1:9a:44:e8:9e:e0:6c:80:53:b3:4c:
8a:b4:9f:a3:3d:49:64:ab:e8:43:92:2e:48:04:c2:4f:52:22:
29:f2:f3:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:27:13 2026 by rpki-client