Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
File: XXg76LX3rdAI1xK0N72fmXwIT98.mft (raw, json)
Hash identifier: PncSCH50NNsRMImfoE+NGDz61OFIsSegxzV+zs7wdx0=
Subject key identifier: 69:27:42:5E:5E:58:46:BD:46:EC:32:E2:8C:04:A6:B0:7D:0F:30:74
Authority key identifier: 5D:78:3B:E8:B5:F7:AD:D0:08:D7:12:B4:37:BD:9F:99:7C:08:4F:DF
Certificate issuer: /CN=5d783be8b5f7add008d712b437bd9f997c084fdf
Certificate serial: 019D27A88C0A9010E8DF35A366BF0B7AC865
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 01:00:50 +0000
Manifest this update: Thu 26 Mar 2026 01:00:50 +0000
Manifest next update: Fri 27 Mar 2026 01:00:50 +0000
Files and hashes: 1: 80ddEu08r1uFh6uix50N7d9F0o8.roa (hash: DtyowyLw2dVPCBg0r3cdDO/1HWaqkm/fNKE6IcB/i2Y=)
2: XXg76LX3rdAI1xK0N72fmXwIT98.crl (hash: W1OPwszdjft2qHAbPPqurDes4yqEYxs9M8+GRzgTBts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:8c:0a:90:10:e8:df:35:a3:66:bf:0b:7a:c8:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d783be8b5f7add008d712b437bd9f997c084fdf
Validity
Not Before: Mar 26 01:00:50 2026 GMT
Not After : Mar 27 01:00:50 2026 GMT
Subject: CN=6927425e5e5846bd46ec32e28c04a6b07d0f3074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0d:43:eb:53:35:c7:11:57:5e:00:fa:35:cf:
08:5b:89:c2:b9:d6:43:b1:4d:06:c8:d0:4c:d8:cc:
11:92:83:26:25:d4:47:f5:88:c8:f5:3a:98:ab:74:
cc:22:c3:01:3d:3f:c3:0a:ee:62:a2:bf:3f:b4:a8:
74:d7:a8:15:21:e1:21:7d:c3:ad:fb:a3:d1:9c:26:
ca:67:d2:57:5f:98:69:12:e0:1b:a6:30:e3:52:42:
fb:19:ae:75:53:88:56:6b:f9:f6:83:30:27:79:78:
02:db:dd:b3:b5:15:a8:f1:b7:29:2b:f3:9a:40:b8:
1b:f7:ef:dc:f8:41:07:e7:6f:d7:6d:5b:8d:63:9e:
d1:8a:d6:0a:be:b1:4a:92:87:f3:ff:53:62:26:7a:
33:07:6f:0a:83:02:2a:04:f8:8f:a9:b6:3c:b6:28:
cc:72:e3:4d:3e:2e:95:42:b8:2d:a1:c7:7d:74:fb:
03:3c:0d:b0:7d:ad:9c:16:cf:eb:79:aa:d7:f5:d7:
82:71:2d:96:06:f1:bd:6a:cf:4e:dc:ca:e1:ed:5f:
fa:26:c4:5b:13:ff:35:18:d5:cf:d1:fe:61:9c:49:
c2:3e:c3:f5:1b:da:15:9b:42:de:3b:9f:b2:56:17:
08:77:e3:ef:00:ff:af:75:86:78:bb:c7:f1:28:1f:
28:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:27:42:5E:5E:58:46:BD:46:EC:32:E2:8C:04:A6:B0:7D:0F:30:74
X509v3 Authority Key Identifier:
keyid:5D:78:3B:E8:B5:F7:AD:D0:08:D7:12:B4:37:BD:9F:99:7C:08:4F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:b0:22:ae:ee:c7:fc:fa:01:d7:2f:4c:1b:13:bc:7f:58:50:
64:e9:4e:3c:20:78:0e:7b:aa:5b:17:99:84:bd:87:ea:73:c1:
c5:61:9a:ef:8b:93:cc:b1:68:ef:bb:98:81:b9:d9:7b:80:e0:
83:ab:b4:e8:7b:87:1b:cc:12:5b:2a:db:01:7d:c4:12:46:92:
5c:9a:08:cf:4f:30:53:4a:1d:4a:9a:51:79:e3:e2:ea:23:b3:
c7:c7:9b:b9:8a:f5:86:24:02:46:71:9b:e4:65:55:62:81:30:
e0:34:c1:55:16:0a:8b:45:f1:12:98:f8:78:95:70:d9:04:13:
7c:84:04:8a:36:4c:dd:47:0a:f4:5d:ea:96:ea:44:f6:62:8c:
33:d9:10:74:24:63:90:37:fa:b3:4c:1d:e4:7a:e4:1a:ad:2d:
d1:ae:85:24:25:94:8f:4e:0b:18:f2:33:94:7a:8c:cc:5d:49:
bb:8b:08:ee:64:ab:ef:cc:e9:a8:21:cf:aa:47:9f:aa:17:0c:
20:e3:c7:68:b5:c0:82:8e:b4:92:f2:8d:d4:79:3b:e7:4b:4d:
f6:cf:e1:0f:39:e4:83:8a:ab:01:bf:5c:48:30:96:0a:b2:ff:
b5:71:cc:94:e8:a2:9f:ba:68:a2:56:e4:68:9f:4d:32:96:90:
1d:0b:91:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:16:20 2026 by rpki-client