Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
File: XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft (raw, json)
Hash identifier: s4T1I9ysY8TBqoES/tXEdWE1KevN0R3lrT9Dnl4B2Sc=
Subject key identifier: 01:F7:D5:8D:D8:AC:84:AD:2B:D5:56:66:33:93:8E:47:EA:1E:97:E0
Authority key identifier: 5F:09:9F:49:97:8B:96:0F:A3:1F:81:AC:F5:46:71:27:3D:C7:FF:61
Certificate issuer: /CN=5f099f49978b960fa31f81acf54671273dc7ff61
Certificate serial: 019CEC38B0EFF9F4E803AA2A53587CC66297
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
Manifest number: 1866
Signing time: Sat 14 Mar 2026 12:01:03 +0000
Manifest this update: Sat 14 Mar 2026 12:01:03 +0000
Manifest next update: Sun 15 Mar 2026 12:01:03 +0000
Files and hashes: 1: 0ZEt5hO5jk8I5B1ric3lV5QOPjY.roa (hash: 2SzUB4ARPZ7+BuiAiToaYolTUFVyZHL4/odctgbUciE=)
2: PX4jRvV2Is0w59EuWq6-Cko1_qM.roa (hash: o5zSrmvOazS6EGtXXnfbpDTf59xV6PS54zdbjnXbBvw=)
3: XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl (hash: 9+rM4xca0JK1Tdjt9Uhxk3Fhv4kDf3XQdzpUa7yCrVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ec:38:b0:ef:f9:f4:e8:03:aa:2a:53:58:7c:c6:62:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f099f49978b960fa31f81acf54671273dc7ff61
Validity
Not Before: Mar 14 12:01:03 2026 GMT
Not After : Mar 15 12:01:03 2026 GMT
Subject: CN=01f7d58dd8ac84ad2bd5566633938e47ea1e97e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:69:ee:0b:0e:fc:6d:52:17:33:0d:b1:d9:0a:
d5:50:62:11:22:44:af:e8:f0:2c:92:0d:7f:df:81:
10:84:66:79:cd:80:79:20:6c:6a:50:6f:cc:74:1e:
8d:9b:b7:9e:38:98:e7:d1:99:c3:8d:40:1e:4a:23:
6a:fa:8d:57:70:ea:87:78:44:1d:32:57:a0:b7:81:
0c:ff:26:79:5a:ee:d0:33:8f:70:6d:b4:91:19:10:
67:fe:3f:6f:93:a4:7a:b7:36:37:88:11:0a:e7:9d:
9d:cf:66:5c:22:91:c9:c3:b1:65:71:6c:e6:4b:20:
e9:59:cb:73:ef:8f:35:b3:fb:6f:df:a2:b3:6b:0d:
12:ad:e6:a7:44:c5:95:af:73:96:5d:3d:21:c8:2d:
8a:12:a7:76:60:53:f8:7f:b0:77:3e:e6:0f:4b:00:
12:7b:28:92:ab:a6:7a:a9:24:83:93:9d:5a:b2:b4:
57:27:1a:6a:b7:0d:ba:df:2d:12:c2:05:10:8a:2d:
2a:14:12:00:a5:a6:3e:5f:ce:d4:07:39:18:c4:85:
94:b5:bb:09:fd:33:6a:8a:c2:6d:e6:ad:37:0d:bf:
aa:93:aa:e9:81:bb:ed:96:df:06:bc:94:8e:2d:b3:
49:45:0b:f6:6b:ca:8c:cf:86:ab:5f:15:d2:dc:73:
3a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F7:D5:8D:D8:AC:84:AD:2B:D5:56:66:33:93:8E:47:EA:1E:97:E0
X509v3 Authority Key Identifier:
keyid:5F:09:9F:49:97:8B:96:0F:A3:1F:81:AC:F5:46:71:27:3D:C7:FF:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:3b:45:3c:6f:c4:88:b5:5e:c3:ba:de:2f:a0:3c:84:d5:eb:
e4:2d:61:f6:3a:98:59:55:48:e1:18:5f:d9:03:47:88:21:1c:
46:42:4e:44:f5:be:1e:42:9f:be:51:99:d9:ed:ee:bc:2b:e0:
d9:98:d8:3c:14:a9:fd:13:c0:c7:c2:ef:9f:15:dc:70:ab:8d:
31:02:4f:0a:76:57:ce:15:e6:7a:dd:d7:d0:e1:c3:d6:50:c3:
54:67:0d:a8:76:a6:20:74:32:7b:d5:90:33:2a:b7:7f:f1:87:
bd:13:4c:89:15:f0:4a:e1:b9:15:82:12:55:f2:da:1d:d7:93:
14:af:7d:34:ef:47:54:e8:7b:94:30:fe:75:59:84:7e:c3:e0:
51:98:f5:1c:57:79:7b:48:77:10:2a:89:74:c1:01:1b:bc:30:
95:37:03:b6:b7:5a:ab:1c:69:a6:38:80:17:a6:47:0c:e7:e2:
6a:b2:80:3d:7c:2c:38:34:4c:c8:cc:45:c2:ca:67:ff:3c:fa:
e6:98:8f:7c:6a:03:6e:9d:b9:2f:e7:50:b3:0c:6c:26:95:99:
d5:63:c0:10:f7:22:f9:f9:da:6b:12:44:d0:8c:d6:07:e6:b9:
90:1a:a7:a3:43:2d:ba:53:bd:ff:bc:d6:8a:13:10:b0:c7:63:
bf:84:cd:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 19:19:56 2026 by rpki-client