Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
File: Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft (raw, json)
Hash identifier: XtdTSYMuUrdCBCWJ4HLehuSYMdaezyXnmXuTClqcv/0=
Subject key identifier: E0:7B:BC:8C:DA:6E:40:A2:A1:2E:56:EF:98:D8:B2:8F:CE:36:9F:C8
Authority key identifier: 5F:17:68:E2:6F:F4:F9:A2:A8:A5:6D:A4:DC:B7:E1:EC:0C:2E:4A:93
Certificate issuer: /CN=5f1768e26ff4f9a2a8a56da4dcb7e1ec0c2e4a93
Certificate serial: 019D265EDF83A095F2401C34963B2EEAA975
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 19:00:44 +0000
Manifest this update: Wed 25 Mar 2026 19:00:44 +0000
Manifest next update: Thu 26 Mar 2026 19:00:44 +0000
Files and hashes: 1: 1-KKEOWBhq-Xin1u07sp8fmHrvqc.roa (hash: PYl3rvHgnbdTXI4oGxGWGnIZl/efX3OeaWnZ83sqU1U=)
2: Xxdo4m_0-aKopW2k3Lfh7AwuSpM.crl (hash: UIgjiNzT71W2WQgMt/I0nMN6msPVmGtGFvwdyxfyr04=)
3: hRCE6LdZkeQzF92rmCQdMQvaaL8.roa (hash: UB0DT/MFY2dNlWf8e/9nwn7NarMnjJ7fyxrd+zzOII8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:df:83:a0:95:f2:40:1c:34:96:3b:2e:ea:a9:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1768e26ff4f9a2a8a56da4dcb7e1ec0c2e4a93
Validity
Not Before: Mar 25 19:00:44 2026 GMT
Not After : Mar 26 19:00:44 2026 GMT
Subject: CN=e07bbc8cda6e40a2a12e56ef98d8b28fce369fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1b:79:24:9d:77:3b:7c:94:92:cd:b0:69:88:
c6:17:be:17:58:46:8b:16:60:2f:74:a1:64:66:06:
f3:0e:6a:97:10:2c:0d:d4:fc:ea:c4:98:f8:b6:74:
c7:79:8c:63:90:e7:5b:08:1f:b4:cd:47:e3:df:ef:
82:d9:e6:b7:98:bc:e5:02:ab:17:a1:03:5d:3e:22:
1d:93:d4:7d:12:63:73:bd:38:be:58:bd:c7:e3:82:
11:74:fc:2f:60:2c:6f:2c:90:40:ab:d9:ac:1c:a0:
c3:30:b0:b4:08:ef:fd:b8:7b:f8:26:f3:b0:81:22:
5a:5f:f4:11:b5:11:27:c4:17:ea:50:23:b7:57:6f:
c0:47:26:29:74:89:31:01:e3:68:71:39:77:d8:64:
17:fe:92:92:a5:df:00:5e:fb:26:2a:72:71:24:d5:
f5:b5:92:5a:7c:64:b1:48:cb:fc:64:91:72:d8:b1:
c5:94:4b:3b:6c:d0:36:65:e1:90:25:85:44:1d:21:
1e:1f:8e:86:bf:90:d0:ac:6e:bf:a7:ad:06:73:53:
45:4e:53:e0:9e:fc:08:f8:b5:32:c4:f4:d8:f2:ec:
c5:a0:20:40:eb:4c:2c:4d:75:b1:58:ec:90:7c:1d:
33:95:b6:8b:f0:3f:0f:ca:4a:ef:49:44:27:2c:c0:
fa:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:7B:BC:8C:DA:6E:40:A2:A1:2E:56:EF:98:D8:B2:8F:CE:36:9F:C8
X509v3 Authority Key Identifier:
keyid:5F:17:68:E2:6F:F4:F9:A2:A8:A5:6D:A4:DC:B7:E1:EC:0C:2E:4A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:9c:63:af:ba:58:7f:d1:67:22:3e:60:ea:58:be:8f:44:36:
13:1a:ec:ef:2c:b1:69:5f:cb:a5:fb:1a:f2:f0:62:85:aa:6c:
0b:04:d4:16:4e:bd:0e:6f:cd:8a:a3:93:12:76:83:25:c7:71:
18:7b:b9:7f:33:7e:34:d7:92:3a:55:b0:8b:50:1e:82:14:b8:
b0:8a:ec:d3:be:c8:58:b8:6c:e6:ce:05:70:f8:51:4f:df:c8:
90:af:a8:16:16:33:9c:61:f3:cc:e9:74:59:10:71:f9:9c:5e:
26:77:8c:5e:ae:f9:2e:ee:99:e6:9a:c9:6b:f5:38:ae:4e:5f:
b0:ff:c8:67:10:2c:9c:5f:03:43:63:73:71:cd:50:61:82:54:
0a:64:7b:ae:cd:40:c6:62:b3:c6:3d:56:80:46:21:83:3b:a0:
73:e4:fd:f1:29:7a:97:12:79:df:fa:cf:5c:d0:fa:7f:fd:77:
f8:71:69:f1:a6:08:05:67:b8:dd:99:de:10:b3:0a:bb:da:e6:
6e:43:fb:50:e4:3f:6e:c4:83:e3:a0:ea:ca:14:29:60:dd:e5:
10:03:c7:ff:9b:c5:ac:c6:20:03:63:b8:c8:e8:ce:aa:65:9b:
91:ca:d7:d0:95:a6:8b:ee:4a:c9:16:59:79:2a:28:e5:56:c4:
91:be:1d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:34:02 2026 by rpki-client