Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.mft
File: v00XR_NcDNayXwsKDmjQRCyTkUw.mft (raw, json)
Hash identifier: MOVmxAKpDQZwqGZF+mVRwQQ36CLZGaIOgKXIFqpa018=
Subject key identifier: 49:6C:6E:33:36:C7:81:8B:8C:B2:04:25:41:07:5E:65:ED:B4:06:34
Authority key identifier: BF:4D:17:47:F3:5C:0C:D6:B2:5F:0B:0A:0E:68:D0:44:2C:93:91:4C
Certificate issuer: /CN=bf4d1747f35c0cd6b25f0b0a0e68d0442c93914c
Certificate serial: 019D26CCF148813C097D92528095BE3744C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v00XR_NcDNayXwsKDmjQRCyTkUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.mft
Manifest number: 0566
Signing time: Wed 25 Mar 2026 21:00:58 +0000
Manifest this update: Wed 25 Mar 2026 21:00:58 +0000
Manifest next update: Thu 26 Mar 2026 21:00:58 +0000
Files and hashes: 1: XqXq0lu4hhkfUjIupnzFYlf_0AY.roa (hash: wDEIYcOU1jFM2otuCniD9mD3XBpASPyj3p4B1WJeSKE=)
2: v00XR_NcDNayXwsKDmjQRCyTkUw.crl (hash: xfgnRU1+ScIbQlHPCjVjCa4dY9uNp+W+E5ngQBl+D1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/v00XR_NcDNayXwsKDmjQRCyTkUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:f1:48:81:3c:09:7d:92:52:80:95:be:37:44:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf4d1747f35c0cd6b25f0b0a0e68d0442c93914c
Validity
Not Before: Mar 25 21:00:58 2026 GMT
Not After : Mar 26 21:00:58 2026 GMT
Subject: CN=496c6e3336c7818b8cb2042541075e65edb40634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:87:33:e3:2f:38:b6:2a:32:07:fd:44:67:c1:
2d:32:cc:da:f4:8c:0f:bb:9d:ea:96:d0:c4:bf:48:
93:4b:e8:3d:4a:dc:c9:30:44:3e:f1:17:cc:03:fd:
f3:f9:08:4d:73:e4:1d:6e:fd:d3:11:45:b6:d1:d9:
50:85:f6:90:90:4c:fe:e5:f0:5f:cd:3b:b0:ba:24:
f6:ba:09:12:6a:ae:5a:ff:a0:47:09:6b:38:4e:25:
85:e2:ec:27:4b:13:c8:a6:f5:b7:76:4f:f6:7a:4a:
ca:3d:78:c7:f2:61:d2:ab:6e:50:d4:34:07:17:d7:
55:2f:a8:69:31:7f:c4:a2:0c:03:22:a8:8c:f5:0a:
b6:08:cf:41:5a:1f:a8:c1:5e:0e:5a:23:07:b8:1c:
16:07:fc:07:fe:8b:1f:b7:81:ba:0b:f2:1c:37:eb:
7c:65:99:00:49:9d:b1:c1:5e:02:e2:f2:f1:1e:cb:
40:d7:07:0c:f3:74:3e:44:a0:f8:5b:55:c2:e7:e5:
19:8d:86:8c:84:55:51:3c:e3:1c:a1:8d:ba:14:65:
1c:fe:40:19:90:61:64:3e:e1:63:cb:09:27:02:74:
c1:8c:fa:e1:1a:a1:d3:b1:b9:43:9d:2b:16:74:0d:
2c:7b:1c:01:cc:36:1e:d4:3b:f2:ad:1c:f9:8a:4a:
08:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:6C:6E:33:36:C7:81:8B:8C:B2:04:25:41:07:5E:65:ED:B4:06:34
X509v3 Authority Key Identifier:
keyid:BF:4D:17:47:F3:5C:0C:D6:B2:5F:0B:0A:0E:68:D0:44:2C:93:91:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v00XR_NcDNayXwsKDmjQRCyTkUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:0e:69:57:4a:d4:f2:ee:95:63:ce:f1:58:7d:35:ef:da:d6:
60:6a:24:96:6e:d9:8a:23:91:e3:af:7d:32:e0:da:8e:0f:23:
3f:47:84:99:ad:69:8b:6a:58:b0:64:bd:b8:02:e6:31:d1:9f:
d8:1f:96:77:54:2b:2c:d6:e9:a5:14:b2:20:52:2c:70:6b:75:
ef:d7:64:96:ff:c2:14:0a:77:b2:49:7a:53:c1:73:20:b2:1d:
b9:df:32:fd:34:da:52:5c:40:75:32:ac:03:e0:f3:33:4d:52:
a1:19:19:09:06:6b:c3:31:13:6f:7c:18:e8:dd:14:56:91:c9:
d9:01:e9:88:4a:b3:11:9d:77:dd:e1:9e:51:8a:06:e3:05:fd:
52:7f:94:16:fa:41:6c:b1:6b:62:c8:0c:0d:f5:d5:66:cf:fc:
7a:c4:9b:8b:93:1f:76:37:66:3f:24:60:f7:e8:93:f3:c2:55:
89:55:e0:46:bc:77:cb:46:81:fe:79:05:8f:6b:10:88:38:5f:
fe:d6:a7:09:a3:5d:0e:31:34:06:a9:7a:d1:05:2f:65:30:b3:
74:1c:f5:ba:06:7e:b4:da:57:5f:ad:4b:fc:c5:7c:39:10:fa:
f0:21:62:63:af:be:52:d8:da:b6:4b:59:3d:f4:5d:1d:ff:21:
8d:15:08:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:48 2026 by rpki-client