Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
File: X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft (raw, json)
Hash identifier: cAMqQJfGFD+aQN361HV5pWWwTa5G9lrzcWbOhWIIRpQ=
Subject key identifier: DD:C5:24:67:AA:E2:44:C7:02:F7:FE:CE:81:0D:DB:39:71:12:0D:A1
Authority key identifier: 5F:F7:35:2D:47:DB:97:85:F4:91:18:09:2D:E8:70:4A:67:F6:52:0D
Certificate issuer: /CN=5ff7352d47db9785f49118092de8704a67f6520d
Certificate serial: 019D389C5D3A74A810230F1434B7BF35406E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 08:01:04 +0000
Manifest this update: Sun 29 Mar 2026 08:01:04 +0000
Manifest next update: Mon 30 Mar 2026 08:01:04 +0000
Files and hashes: 1: X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl (hash: x5FDZAlA11YDu8KHpkuaNRHhIFFzOpRcGFmxGVqGkks=)
2: f14wvH4Znzg6WIk8GxVNwDQOTW8.roa (hash: dWPM7JhBRPyTZuaRPxFbnXkRidLxpwn4nCmrshJkS9k=)
3: oX2MuFZ8yaRVQjpSCUgD1HiKoUg.roa (hash: gdua3nJQKjVmAVvDW1nuoRrLS6iVbV5h3laEz26kzUQ=)
4: qql6gI777A1gergrcYaN_jGizsg.roa (hash: nvniz/deTAtTtE36BhXTJgk+6BLR6Hthi8M387vZVHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:5d:3a:74:a8:10:23:0f:14:34:b7:bf:35:40:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff7352d47db9785f49118092de8704a67f6520d
Validity
Not Before: Mar 29 08:01:04 2026 GMT
Not After : Mar 30 08:01:04 2026 GMT
Subject: CN=ddc52467aae244c702f7fece810ddb3971120da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5b:4e:ba:47:68:7d:96:05:58:e3:74:44:49:
b2:1a:ec:10:dd:e3:0a:0f:6c:65:8a:a0:a7:12:31:
fb:ee:27:b6:8a:22:df:66:b4:14:72:2f:9d:9f:62:
58:b6:4b:dc:b6:5a:77:22:3e:cd:f4:89:ac:8e:53:
40:1b:7b:cf:54:3f:95:1b:2e:ba:be:58:ae:d2:ae:
b8:eb:30:be:8e:1d:9e:75:09:54:30:7e:68:d7:4d:
39:a4:58:1d:78:e4:b7:5a:eb:31:63:0d:e0:42:6c:
38:f0:b7:b6:70:cc:f6:9a:64:d1:9a:d1:11:e4:5f:
54:ad:ba:14:e6:61:f7:e6:f9:11:81:fd:00:42:ed:
86:19:86:50:19:89:ee:1d:38:f8:1f:fe:c7:30:3b:
6e:d0:ac:0c:ef:cc:f2:b5:99:43:67:ac:ff:c6:b9:
85:11:8a:10:6f:72:30:fb:d0:ad:4f:ff:b5:34:fb:
10:34:b1:c0:a0:aa:50:70:90:cf:cd:08:84:94:35:
a7:51:03:9b:38:30:78:f1:32:a5:04:0e:f9:29:c3:
63:34:7e:25:10:c4:42:55:4d:60:cb:e8:29:17:09:
ea:2c:d8:4f:04:da:67:c6:b4:29:21:49:ef:66:f2:
f0:a6:50:a5:d7:89:57:9d:3b:21:93:5f:a6:29:73:
3c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C5:24:67:AA:E2:44:C7:02:F7:FE:CE:81:0D:DB:39:71:12:0D:A1
X509v3 Authority Key Identifier:
keyid:5F:F7:35:2D:47:DB:97:85:F4:91:18:09:2D:E8:70:4A:67:F6:52:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:02:4e:22:4f:4b:31:eb:c2:a6:7f:d6:40:be:4c:c2:cd:1c:
56:cb:30:c5:bb:cf:a0:9f:b0:63:f9:eb:8b:07:d9:7d:77:ec:
6b:d4:38:8b:b9:d7:5e:c7:31:aa:a5:9c:b6:24:c8:20:a3:22:
1c:01:60:c7:4d:bb:46:45:a6:2a:eb:de:e1:b9:d3:02:6b:6c:
ed:9b:11:1b:c7:11:04:d8:9d:38:b8:c5:b8:e4:51:60:d0:5e:
1b:47:c8:ba:bd:bb:87:53:b4:44:a6:ff:68:91:82:09:39:0d:
88:4c:4e:e2:23:54:c1:af:a0:ee:09:43:82:02:fd:7a:c0:05:
2a:66:61:47:f0:07:80:b5:9e:ab:7b:f3:39:fd:c5:eb:80:b9:
a3:fc:ee:1b:b7:bd:3b:75:f3:8d:58:e4:f7:52:2f:4a:e2:61:
2b:92:6d:fb:7d:61:7b:bb:d7:6e:13:87:f3:a9:23:d4:e0:1f:
4b:24:08:d9:22:42:fa:f2:c1:20:6a:6e:5e:98:19:bc:fd:25:
6e:c9:75:5a:e9:64:6c:5d:0e:a8:b3:f2:de:a4:76:d3:f8:d9:
61:4c:48:35:61:92:2d:fe:a8:60:4e:26:bf:6a:b0:07:1e:60:
92:a3:24:38:50:b0:40:ae:32:52:51:4d:e5:7f:fb:85:e8:a1:
1c:80:a0:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:13 2026 by rpki-client