Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
File: 1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft (raw, json)
Hash identifier: kjuCtMr7i2TfhoTPkh+oZmT0AFTmg+FSpeVkpg+wqWc=
Subject key identifier: 28:0A:69:2A:BA:67:A7:52:8D:8C:7A:4D:CF:D0:4C:BC:31:8F:D2:B2
Authority key identifier: F9:73:20:96:25:E2:A0:3D:DE:EC:F9:1B:B4:80:54:8E:57:29:D4:79
Certificate issuer: /CN=f973209625e2a03ddeecf91bb480548e5729d479
Certificate serial: 019D38D2944DED7774AD655808198988B20C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 09:00:17 +0000
Manifest this update: Sun 29 Mar 2026 09:00:17 +0000
Manifest next update: Mon 30 Mar 2026 09:00:17 +0000
Files and hashes: 1: 1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl (hash: QdXTHTUt3LRLXo7dwsx66jQ5REAJbfjHqS1OPgy2T7s=)
2: McYjjC5KqcvB_nVezfbVebYSEGE.roa (hash: RfRO6ieaH0AVTevS9LKIVFeYDX2W75T2UkbyiNhzcEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:94:4d:ed:77:74:ad:65:58:08:19:89:88:b2:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f973209625e2a03ddeecf91bb480548e5729d479
Validity
Not Before: Mar 29 09:00:17 2026 GMT
Not After : Mar 30 09:00:17 2026 GMT
Subject: CN=280a692aba67a7528d8c7a4dcfd04cbc318fd2b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:00:7d:e6:d0:20:84:20:36:51:44:98:41:aa:
91:ef:79:1b:01:35:38:b3:7a:8a:73:6e:c2:93:1d:
d8:96:67:56:73:ee:9c:16:5c:7b:69:33:47:aa:09:
4a:89:35:98:8d:dd:e3:30:dd:68:37:2b:97:13:8e:
06:d9:6a:83:53:bb:2d:d5:da:d2:d3:4f:24:25:64:
03:a6:1b:61:2a:48:37:34:84:78:3d:3e:d1:d6:47:
9e:57:d4:73:8b:f3:0e:60:df:46:6e:79:17:1b:43:
e0:f3:d6:8d:f4:56:3c:fb:94:34:99:c2:6f:3e:f4:
b7:76:0d:3d:c6:e8:46:b7:d3:77:09:33:d2:f9:bf:
bf:de:53:5c:de:f4:03:50:ce:6f:b8:4f:a1:35:af:
7c:b1:c2:d9:31:16:28:d0:f3:05:17:69:a8:54:93:
68:7b:9e:bf:bd:41:1b:6e:dd:73:81:72:32:e5:a3:
95:53:c8:6d:c9:29:1b:61:65:54:32:56:45:3b:f1:
1f:6f:ea:a2:f8:03:38:29:91:2d:45:68:e9:78:6d:
a2:93:6c:8a:3d:f9:8d:d4:e1:5f:ea:89:51:ef:75:
42:d5:43:b7:9e:e0:00:d1:d8:5a:35:21:eb:e0:7a:
21:39:62:94:f2:54:9b:09:2c:d2:50:c0:ee:6e:ec:
18:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:0A:69:2A:BA:67:A7:52:8D:8C:7A:4D:CF:D0:4C:BC:31:8F:D2:B2
X509v3 Authority Key Identifier:
keyid:F9:73:20:96:25:E2:A0:3D:DE:EC:F9:1B:B4:80:54:8E:57:29:D4:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:19:45:de:a6:8b:05:e2:84:0c:88:d2:94:c6:7e:4c:11:89:
b8:17:71:7c:eb:d7:8c:79:65:12:d6:d7:8e:c1:3b:e1:b6:79:
fc:d4:c4:03:36:c6:03:e3:8f:a7:73:ac:86:d9:a7:a8:ce:db:
01:2d:b1:0f:23:6a:03:81:bb:e4:11:23:4a:3d:72:af:79:62:
e6:98:11:2b:69:f9:48:5a:05:93:76:ba:26:02:fe:59:75:72:
02:ad:53:5d:0b:1f:75:4b:db:4e:1b:9e:78:53:f5:9d:ad:f0:
b1:04:7a:98:67:4d:48:cb:04:35:1b:9b:94:35:12:6e:a5:27:
bb:b5:13:46:ce:25:2f:cd:ae:1d:09:cb:f6:b5:ce:07:6f:b3:
c7:18:99:34:df:a1:0d:60:b6:bf:2a:b0:d8:d3:6b:7d:5a:d6:
05:db:06:3a:a4:78:1b:11:bb:7c:dd:2d:26:7e:89:da:8a:7b:
d6:ce:d7:21:2b:f6:fa:b2:8e:88:52:94:be:e0:d4:fe:94:9a:
38:e1:06:d7:62:36:25:7e:7f:91:08:dc:41:94:48:e6:a8:e5:
8e:ec:8f:50:7e:63:2d:f5:0b:b3:87:8a:d6:d3:c1:d6:28:de:
d5:3e:23:2e:bb:56:cd:6e:33:3d:bd:1b:e9:aa:15:58:25:97:
a0:b6:44:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:28 2026 by rpki-client