Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
File: XEt3fWoBdf67oFtItHzfCmuJ1_s.mft (raw, json)
Hash identifier: eUbReglggeda3ABLJYJ9c++i+JXcdlB6+JYrJY6pytA=
Subject key identifier: 4E:EC:FF:7F:2E:6C:C8:32:1D:05:5B:B4:78:53:3A:03:D4:A2:2C:B7
Authority key identifier: 5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB
Certificate issuer: /CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb
Certificate serial: 019D38D3B3345A784102EF9360C60178FA89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 09:01:31 +0000
Manifest this update: Sun 29 Mar 2026 09:01:31 +0000
Manifest next update: Mon 30 Mar 2026 09:01:31 +0000
Files and hashes: 1: Rjq8qMoUVTv8QuPKAfl_sw6bDWA.roa (hash: Ykk34DqNXHApsE9nxxAgQ38pONoyVUESYWMP39kBFzk=)
2: XEt3fWoBdf67oFtItHzfCmuJ1_s.crl (hash: lRK+qfKi48Q1yb7XxOgk+pbwPdno6AaStU2Wv+4gyV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:b3:34:5a:78:41:02:ef:93:60:c6:01:78:fa:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb
Validity
Not Before: Mar 29 09:01:31 2026 GMT
Not After : Mar 30 09:01:31 2026 GMT
Subject: CN=4eecff7f2e6cc8321d055bb478533a03d4a22cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:be:26:dc:13:15:77:0e:be:e7:a4:2a:5f:c3:
73:61:fe:ce:f7:30:5f:70:d4:43:18:fd:5f:5a:45:
3f:9f:1b:3d:74:c7:fc:84:32:47:f7:e7:19:84:b0:
7f:a9:73:f9:09:b1:db:5a:55:20:d4:8c:31:d9:42:
b2:c6:bf:e9:d9:c8:6a:ca:9c:a6:34:b3:1c:25:f8:
6d:6c:7e:af:4f:66:29:27:d1:6f:80:cc:a8:cb:66:
d7:72:96:95:a4:38:64:22:fe:ff:a2:da:41:9d:fd:
e8:d0:3d:11:69:6a:47:89:24:cd:c5:58:ec:3a:da:
ac:e5:5a:14:4b:7f:d0:2c:48:1f:9f:67:80:4f:58:
41:d9:b4:aa:1d:5e:a3:04:73:03:fc:d3:80:1a:35:
47:d9:fb:d5:98:0f:6d:91:35:10:84:91:42:16:61:
14:f7:68:3c:40:8e:24:4e:dd:e4:92:eb:d8:f9:f8:
ea:bd:33:c7:7f:0b:9c:e1:4f:36:20:a0:43:02:cc:
3d:a7:cd:b2:3f:1a:e8:48:2b:6e:1b:f0:60:5e:9c:
2b:56:b4:dd:6d:b1:ec:5e:cb:8f:5d:40:ba:99:17:
8e:35:78:41:af:39:2d:26:79:50:94:0f:5b:20:7f:
d5:eb:b5:8e:24:14:45:99:79:5e:c6:b3:a2:bb:b9:
2c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:EC:FF:7F:2E:6C:C8:32:1D:05:5B:B4:78:53:3A:03:D4:A2:2C:B7
X509v3 Authority Key Identifier:
keyid:5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:45:6a:83:44:d1:f5:de:2b:2c:07:68:9d:b2:e5:13:16:df:
8f:49:a3:c5:e9:f0:7c:65:3b:b3:a2:ee:80:76:74:5b:01:2b:
ed:a0:c3:06:05:4b:36:74:c9:55:d0:ba:7e:8e:a2:ac:7f:cd:
90:63:85:d2:0d:d3:16:a9:77:72:30:06:48:53:e7:4a:42:9d:
f3:db:75:35:d7:5e:eb:cc:18:c1:8e:0d:7c:32:a7:7f:01:6d:
54:7f:b3:f2:6b:7a:27:23:d5:3c:7e:c6:c8:cc:6e:48:86:4e:
45:c2:6c:3c:72:78:f0:e7:5c:05:a7:30:90:f3:a4:d9:81:53:
dd:02:45:22:65:3c:2d:6b:c0:11:db:7f:36:9c:2a:6d:0f:49:
e8:8a:08:a3:03:fd:5d:9a:13:e7:d4:c4:1b:11:02:d0:3f:c5:
07:38:de:aa:2e:6a:7d:ad:ad:f3:f7:d3:b5:e4:58:5a:c8:4b:
f8:d4:ce:a6:4e:54:90:4f:38:68:e1:0d:24:62:6e:fc:ed:1d:
b8:e4:3f:9f:ba:c9:99:a9:b4:e8:2c:77:09:d3:3f:23:3a:9e:
b0:c4:2b:48:a4:2f:d6:69:1f:dc:ff:92:d7:96:76:ce:d8:e1:
ec:ae:ed:0d:79:18:72:dc:ad:d9:02:1f:a2:e2:0b:ae:77:83:
7b:85:c9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:43:17 2026 by rpki-client