Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
File: xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft (raw, json)
Hash identifier: 7u18eUyO5FVPdQKVSk5rvC9EltEOicAnB2vPp8sFk7o=
Subject key identifier: 09:F7:E4:25:81:9E:1B:5D:5E:E8:D4:F4:27:BB:7E:98:97:2D:2F:64
Authority key identifier: C6:58:3F:58:C7:11:0A:D4:CC:60:9F:4F:FB:7C:AB:2F:80:C8:35:81
Certificate issuer: /CN=c6583f58c7110ad4cc609f4ffb7cab2f80c83581
Certificate serial: 019D39AF1D4C5353A83D04441AB565672B9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
Manifest number: 189C
Signing time: Sun 29 Mar 2026 13:01:10 +0000
Manifest this update: Sun 29 Mar 2026 13:01:10 +0000
Manifest next update: Mon 30 Mar 2026 13:01:10 +0000
Files and hashes: 1: 8149JdL_bdhKPVAGngPZY1WVUZc.roa (hash: Vqmxphay09Dowf+HIB9gAzSfzwRKej0t5zClWsx36sY=)
2: xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl (hash: EMhfSXg2/i0r99xFwqrSgBwE4BXmJY/6x10sJ9LrbcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:1d:4c:53:53:a8:3d:04:44:1a:b5:65:67:2b:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6583f58c7110ad4cc609f4ffb7cab2f80c83581
Validity
Not Before: Mar 29 13:01:10 2026 GMT
Not After : Mar 30 13:01:10 2026 GMT
Subject: CN=09f7e425819e1b5d5ee8d4f427bb7e98972d2f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:95:64:61:44:4c:72:e1:c3:53:c2:73:76:20:
54:f5:4a:85:7c:37:c5:c4:0d:d6:37:4b:60:66:ad:
f1:41:4d:0a:2f:74:45:28:bd:01:46:61:43:fc:ae:
8d:9b:71:7a:f0:6d:0d:58:94:af:6b:e3:ba:4c:ed:
58:d3:2b:6a:f9:01:a5:79:79:6a:56:31:0e:45:b7:
b7:be:0c:cb:9b:07:ee:c0:b9:2c:96:a8:2d:37:8d:
e9:23:78:6a:5d:db:a1:9b:3e:77:1e:3c:ca:ba:92:
59:03:ee:cf:16:2f:47:56:cb:0b:83:54:93:ea:a0:
a8:94:f7:55:c3:d7:66:74:b8:e7:0f:14:7d:d0:8a:
c5:90:22:65:66:e2:63:ed:09:c4:9d:a5:d6:2a:2c:
15:c5:35:4a:1e:31:0f:10:32:df:19:71:e5:f3:51:
b7:49:a2:46:e6:da:76:e6:55:36:5c:e0:da:d4:94:
ba:37:bf:0c:82:69:6c:20:05:d6:1d:50:b1:fc:45:
5f:d4:7f:38:e8:2d:f0:58:84:5b:31:dd:d6:d7:4a:
6d:92:19:68:33:f3:69:cf:dd:0f:dc:1b:cf:9d:87:
8e:1d:79:99:f6:20:6a:79:17:83:37:f4:b0:52:d4:
3a:63:21:95:d3:21:d7:08:fe:b6:f7:2b:3e:cb:8f:
b3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F7:E4:25:81:9E:1B:5D:5E:E8:D4:F4:27:BB:7E:98:97:2D:2F:64
X509v3 Authority Key Identifier:
keyid:C6:58:3F:58:C7:11:0A:D4:CC:60:9F:4F:FB:7C:AB:2F:80:C8:35:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:cf:b7:87:6c:e3:a6:33:03:2d:e4:49:7e:c1:fb:71:d9:47:
79:82:d4:90:f3:a9:72:1f:92:c5:86:51:73:54:1e:dc:4e:13:
94:b6:10:42:b5:bd:86:66:e3:31:5b:9a:33:63:b9:1c:72:95:
41:d5:41:14:bc:15:d2:d2:b1:f1:51:bb:16:70:7a:ba:83:17:
95:92:cd:3b:99:16:95:80:6d:4f:0d:05:a5:a4:49:4e:95:82:
b4:68:3b:b0:50:ec:bc:08:10:1b:98:52:d0:2d:f0:19:42:17:
15:5d:2a:8b:f9:dd:05:21:11:e4:38:0c:71:b0:b0:4e:c5:49:
c9:ca:6d:93:36:06:bb:f8:0f:e5:fc:4a:ec:60:37:69:7c:f3:
d6:af:1e:07:f2:4c:ee:25:53:27:a3:29:34:89:ed:b9:79:83:
3c:3f:d8:78:ad:1d:23:05:b5:e8:b8:eb:a3:68:d0:81:32:48:
81:4d:da:99:d2:49:fb:45:b7:d4:ab:8b:51:24:66:04:3d:8d:
8f:df:e0:66:48:b7:7e:72:19:d0:63:e1:04:f2:89:4a:20:49:
af:68:5e:85:44:8f:9f:90:91:3d:3f:29:a4:17:29:6a:ef:3d:
a1:6e:bc:00:1b:68:70:01:69:f3:7d:28:e6:0a:92:db:47:52:
18:ee:23:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:14 2026 by rpki-client