Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
File: XRKbBGDPnuBQDuiAos-hpSTk3wA.mft (raw, json)
Hash identifier: ZscXa4emHizt2kolMbUaFC1synhIU/oOFCgzkweCmxE=
Subject key identifier: 33:5D:C7:E4:B6:0C:66:D0:80:60:77:41:6A:06:8A:42:0D:EF:DD:4E
Authority key identifier: 5D:12:9B:04:60:CF:9E:E0:50:0E:E8:80:A2:CF:A1:A5:24:E4:DF:00
Certificate issuer: /CN=5d129b0460cf9ee0500ee880a2cfa1a524e4df00
Certificate serial: 019D3865D9B6CC3F4C7E9A3B4A3BDFEED615
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
Manifest number: 1897
Signing time: Sun 29 Mar 2026 07:01:32 +0000
Manifest this update: Sun 29 Mar 2026 07:01:32 +0000
Manifest next update: Mon 30 Mar 2026 07:01:32 +0000
Files and hashes: 1: L40pPH6TicBG2s3pYm_kCH0QuH8.roa (hash: T9wzscjITMGr1trkfg1j7FXPyni8Fc+OiviUYZ5c/0E=)
2: QiuDIuRkSViN_0aiLux397WPPaM.roa (hash: 0ZwM9X61p4unEOmNfSSTesI8zR2qkfQh2THCBqFCSqM=)
3: XRKbBGDPnuBQDuiAos-hpSTk3wA.crl (hash: NVM06D3C7a6alyT8n/wMgPl8XYpH9D6MjVc+82Qqhl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:d9:b6:cc:3f:4c:7e:9a:3b:4a:3b:df:ee:d6:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d129b0460cf9ee0500ee880a2cfa1a524e4df00
Validity
Not Before: Mar 29 07:01:32 2026 GMT
Not After : Mar 30 07:01:32 2026 GMT
Subject: CN=335dc7e4b60c66d0806077416a068a420defdd4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:70:c2:80:ff:7a:74:87:ba:ab:49:63:5a:9c:
fa:39:6f:1e:bf:00:4f:ff:83:5b:4a:0f:a8:f5:9f:
fa:56:b5:40:c8:ce:54:3c:64:73:8a:e1:6e:30:53:
bb:7d:8c:3e:7c:d3:aa:99:26:b0:05:e4:41:b8:78:
b1:bc:de:5d:f1:c3:6b:78:56:f6:02:cc:0b:9e:59:
ef:f8:11:fc:86:7c:bb:9e:19:c8:d0:7d:02:20:d3:
8b:d2:ac:a0:f3:54:a5:99:92:91:0a:18:8f:f5:e2:
ec:df:1e:bf:30:56:ec:5a:6f:d7:0d:78:cb:df:f5:
1c:ec:e8:3a:73:3f:74:a8:f7:47:5a:39:3a:81:4e:
50:4a:fb:84:1b:e7:1a:9b:03:ef:f0:7d:86:9c:ae:
35:01:d6:2f:bb:fe:b1:61:d0:95:cb:fe:c8:28:f3:
cb:78:ef:08:61:e6:b8:41:a1:6c:2d:2a:0c:4b:ee:
1f:82:55:d7:19:7c:aa:c6:b0:09:d6:9c:e2:b2:4b:
0d:c1:83:9b:14:78:ee:80:2c:6d:01:7b:b9:1f:1b:
08:4b:23:45:58:1b:90:79:6b:0e:19:44:9a:1b:54:
f5:db:8f:76:7e:84:a6:d1:58:86:33:06:99:5b:e5:
39:d4:e2:b5:3a:8b:44:da:19:f6:4d:1a:f9:46:60:
f2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5D:C7:E4:B6:0C:66:D0:80:60:77:41:6A:06:8A:42:0D:EF:DD:4E
X509v3 Authority Key Identifier:
keyid:5D:12:9B:04:60:CF:9E:E0:50:0E:E8:80:A2:CF:A1:A5:24:E4:DF:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:ae:11:ef:32:92:1f:69:e2:83:64:f4:a4:b9:e3:af:92:35:
68:88:ca:7f:a8:59:55:93:87:71:3e:53:5d:8e:6a:fa:02:8c:
81:c2:ae:13:dd:ef:cb:81:af:2c:b9:ac:ee:d0:d0:21:7f:2a:
b1:ef:36:30:a6:6f:af:71:89:dc:41:ea:6c:da:95:8e:03:e8:
0c:ee:d5:22:08:dd:6d:61:87:f4:ef:75:99:6e:18:29:2b:6d:
1c:09:2c:36:b6:64:f9:8b:0c:18:cc:1b:cf:2f:19:00:e6:aa:
79:b8:9e:0b:b9:84:ee:62:f5:18:20:fb:17:8f:87:34:d5:9e:
8f:6d:2f:ed:0b:e8:26:ae:30:13:2c:fc:6c:79:f2:44:d5:68:
bf:fb:30:9c:59:25:46:47:7e:f0:b8:38:ce:2b:9a:ce:37:69:
91:34:83:b7:77:dd:c2:a2:50:0e:56:39:c7:a8:37:59:84:8a:
91:9e:62:a4:b1:d1:93:34:65:95:cd:61:0c:27:cf:1a:92:f6:
a7:f8:de:4f:9f:06:4f:5d:8a:c1:76:ec:89:ad:43:53:9f:9d:
68:0e:ec:28:53:d0:d4:0a:c8:3b:f7:d0:9b:0f:15:64:da:ee:
18:59:52:6b:21:18:42:e7:aa:91:06:e1:11:f9:9f:f2:ad:70:
a0:6a:9d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:03 2026 by rpki-client