Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
File: Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft (raw, json)
Hash identifier: KrHOBf/UnofQh9WMmuVdv4J45C931VVqApZReaRwovg=
Subject key identifier: 80:13:34:63:E3:FD:0A:E5:96:70:0F:4F:14:9E:78:A8:E2:8B:40:4E
Authority key identifier: 5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08
Certificate issuer: /CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408
Certificate serial: 019D265FEBD9520DDE9B63DBE3C79B6E3A56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
Manifest number: 188C
Signing time: Wed 25 Mar 2026 19:01:53 +0000
Manifest this update: Wed 25 Mar 2026 19:01:53 +0000
Manifest next update: Thu 26 Mar 2026 19:01:53 +0000
Files and hashes: 1: 2oiBg97yJfcku7AZ1xtBGexIP9I.roa (hash: ZkJc6vel+43QcyypXskCAIYVCyw1+ndC8Q1LjIoI34g=)
2: GWcwAEGL8dWNpctIdaHLmJt2F-M.roa (hash: icoIbE+7HxZrn6cToVlzjrHBi9MeFRezSthDAS8pPcs=)
3: Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl (hash: QxXv8kYemUB34Lxl7Hl2zg1OVj6XdT7yXUtN5c0yvEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:eb:d9:52:0d:de:9b:63:db:e3:c7:9b:6e:3a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408
Validity
Not Before: Mar 25 19:01:53 2026 GMT
Not After : Mar 26 19:01:53 2026 GMT
Subject: CN=80133463e3fd0ae596700f4f149e78a8e28b404e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:14:2f:01:b0:00:50:c7:61:fe:62:c0:c7:71:
84:b0:92:99:1f:3a:ec:a5:3a:6e:4f:eb:76:95:b7:
89:bd:66:e2:eb:d7:94:81:67:87:01:db:70:1a:5a:
db:1c:89:13:49:6e:10:cf:17:d5:12:3d:4b:40:b7:
b5:25:48:f9:23:37:e3:a1:14:24:ee:da:ed:de:7b:
00:02:8a:17:a4:7e:01:df:3c:df:93:b0:3c:02:58:
63:95:d0:77:05:ba:8e:44:17:38:08:b8:01:ab:69:
51:af:73:7e:3a:de:7a:96:d9:a9:f4:82:e1:bc:3f:
48:f9:04:ca:5e:41:f8:86:3e:7f:3b:cb:2a:2c:d7:
80:85:d5:09:b3:61:b4:62:8e:35:98:d9:76:01:ec:
ae:ff:9b:fd:ca:a5:53:33:79:b3:fa:50:60:12:a6:
57:84:70:13:f1:ff:cb:aa:52:f4:f3:71:cd:bd:af:
7c:89:64:8d:3a:5c:80:d2:fe:5e:1f:cd:40:05:70:
29:ab:a7:31:9d:a9:46:e8:10:40:8e:b8:df:71:83:
1e:cd:f0:90:2d:b1:be:3e:b0:13:9c:31:00:2c:8b:
10:bb:0c:f8:82:ae:89:b2:a1:2f:ba:a0:76:f7:18:
97:cd:fb:f5:1c:0f:f3:52:ba:cc:00:fd:6d:2d:1b:
a6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:13:34:63:E3:FD:0A:E5:96:70:0F:4F:14:9E:78:A8:E2:8B:40:4E
X509v3 Authority Key Identifier:
keyid:5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:15:58:29:a1:6a:68:91:c8:56:42:e3:c7:84:0f:b5:ed:25:
13:18:be:2c:25:50:d8:70:86:85:b6:e3:63:f7:06:5b:30:34:
0b:a1:14:f4:56:af:7f:98:e6:c2:c2:6e:6b:81:5f:74:bf:dd:
eb:ba:9a:7e:be:bf:39:b6:cc:57:38:c3:ae:e2:c4:de:1e:61:
68:a4:c9:9b:c9:07:21:df:b3:02:01:82:9d:3a:84:fc:ff:81:
64:0d:79:24:ea:82:9a:df:d9:4f:4f:63:97:8e:ab:08:6e:94:
f1:6e:53:e3:24:14:1a:f3:74:88:a9:fe:3c:ff:27:81:43:37:
a3:80:14:a4:d5:ba:9d:9f:04:7b:1e:bf:4d:01:ed:03:4a:2a:
0f:e3:37:76:85:1d:ef:35:d1:03:b1:fe:ce:55:8b:05:63:94:
21:9e:24:a7:f8:dd:0f:a4:9a:06:15:27:51:aa:6e:f2:0f:4d:
f6:4c:bb:ff:5f:c6:56:d6:7f:47:9d:dd:ee:1d:65:9e:f6:99:
7a:36:81:c7:87:16:6c:4e:1f:85:21:b6:d0:6d:91:58:b1:82:
ba:0f:8a:47:6a:72:9b:8a:ab:ae:f1:3f:e1:0f:b1:5e:a2:a8:
17:5b:f5:bc:9a:74:59:1b:f0:fb:6d:f4:2d:0e:93:16:e4:26:
3d:34:a0:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:56:38 2026 by rpki-client