Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.mft
File: xtGGU_v7b9VzLclAwdZdd6sLv6M.mft (raw, json)
Hash identifier: LzhJbiYBi7EetufCEf3tbu9nFBRSLffZaEU9BHHcRD0=
Subject key identifier: B5:AD:CC:0D:4E:63:8D:0A:99:9E:52:31:75:40:9B:01:FD:2C:21:C3
Authority key identifier: C6:D1:86:53:FB:FB:6F:D5:73:2D:C9:40:C1:D6:5D:77:AB:0B:BF:A3
Certificate issuer: /CN=c6d18653fbfb6fd5732dc940c1d65d77ab0bbfa3
Certificate serial: 019D389C2FE4E9DFABDA773948B498113CC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.mft
Manifest number: 1897
Signing time: Sun 29 Mar 2026 08:00:53 +0000
Manifest this update: Sun 29 Mar 2026 08:00:53 +0000
Manifest next update: Mon 30 Mar 2026 08:00:53 +0000
Files and hashes: 1: 2S0egMPr-zdQkgAq_bpCVGy4WpA.roa (hash: re4isGbhSWMB6fqoWf7gvs6FB5l6F8k5c1sHfF3v4hQ=)
2: bdjR-oD_Oii7Pli7R8XyAmbHV-o.roa (hash: ggKFIgIElCHZMireZeFZrOPcIaJP8Yn+MeT51gputK0=)
3: xtGGU_v7b9VzLclAwdZdd6sLv6M.crl (hash: lM5w13UJg82A1ZTgX0U1rrR4if+bsi15iNqIY4492TI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:2f:e4:e9:df:ab:da:77:39:48:b4:98:11:3c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6d18653fbfb6fd5732dc940c1d65d77ab0bbfa3
Validity
Not Before: Mar 29 08:00:53 2026 GMT
Not After : Mar 30 08:00:53 2026 GMT
Subject: CN=b5adcc0d4e638d0a999e523175409b01fd2c21c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9f:ce:86:10:66:10:c2:29:32:5b:a5:11:7b:
b4:be:b7:fc:43:58:b2:d0:e8:ff:da:d1:1f:d0:0f:
12:60:91:b0:d8:ea:7c:2a:65:55:1c:39:c9:8d:63:
8b:22:0b:b6:38:e2:1b:e0:b1:c7:a6:64:07:dd:1b:
8b:d2:57:a9:25:c5:fb:13:08:15:4b:33:f2:5c:0a:
49:77:c9:64:d7:2f:1b:fd:58:9e:e6:ac:9f:cd:2c:
dc:22:41:6c:82:06:8d:8b:cb:fb:7c:dd:fa:04:ca:
2b:46:62:7e:51:84:be:2e:8b:fd:f3:a7:aa:4b:f4:
94:13:85:b2:5d:b6:a7:e0:a6:36:6a:bd:21:eb:27:
80:5b:66:c1:c2:37:87:5d:28:e1:27:9c:75:85:a8:
65:29:67:59:84:fb:4e:cf:27:f4:ce:ad:35:42:76:
8b:83:91:a9:5e:31:fa:ad:f9:3c:b5:d7:79:dc:c2:
12:99:9c:4c:26:cf:af:31:13:57:92:5c:0d:5b:bc:
4e:17:ce:b6:f8:e2:5e:a5:7b:97:56:1d:ab:3f:d6:
5f:71:34:32:cb:de:ac:1b:3a:88:c5:1a:4b:83:cb:
fd:82:7c:de:a0:46:8c:23:f6:ae:3b:dd:ff:ef:3c:
dc:fe:ed:c7:a8:38:33:18:fa:8f:91:b2:c0:fc:0c:
d2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:AD:CC:0D:4E:63:8D:0A:99:9E:52:31:75:40:9B:01:FD:2C:21:C3
X509v3 Authority Key Identifier:
keyid:C6:D1:86:53:FB:FB:6F:D5:73:2D:C9:40:C1:D6:5D:77:AB:0B:BF:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:c2:c1:97:73:c9:4b:e2:29:c6:df:ca:f5:7d:d5:60:98:13:
13:90:2d:08:19:a2:8e:ac:d8:9e:9f:b5:d3:70:d4:70:4b:b7:
cb:64:07:fe:30:84:75:60:6b:61:d4:3a:68:f0:bf:a1:3c:58:
77:66:84:49:ee:e1:40:d9:13:61:06:f0:a6:8f:89:4d:27:a8:
69:75:34:bb:6a:29:46:63:9a:eb:36:ed:1e:b6:4d:cc:57:1f:
24:65:b7:58:66:69:c1:21:88:72:67:fa:71:28:ef:25:ef:19:
ee:47:6a:f0:d4:d2:27:d6:fa:cc:f5:fb:49:94:a8:7c:9e:2f:
44:83:ae:e2:63:e6:29:66:35:80:a8:80:8f:67:cb:6f:f7:00:
fa:cc:45:44:95:f6:9e:0c:e5:54:e3:ed:b7:c6:74:ff:ad:ea:
51:4c:fa:94:db:06:a4:1c:27:6e:5a:35:38:ef:8d:1f:e2:15:
2e:12:98:18:32:00:51:76:a7:d4:63:de:50:f3:f6:78:44:fe:
d2:65:06:2a:e8:b1:b1:7a:d7:d9:d6:5a:43:35:24:a5:d4:78:
90:eb:c7:99:65:ec:4b:38:4c:2c:6f:85:73:c1:9f:bb:7e:e3:
0a:e9:ee:6a:19:e1:d5:88:41:f4:51:32:cc:86:a4:1f:43:5b:
ca:d8:76:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:20 2026 by rpki-client