Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
File: XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft (raw, json)
Hash identifier: aiOiUxkeSR2asBGa04RNHwzXp8QXiv6iEDVkoeDuVz0=
Subject key identifier: 4F:7F:E5:A7:B2:8F:AF:01:6E:4D:F5:23:36:2F:24:0D:8C:D3:BC:F1
Authority key identifier: 5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
Certificate issuer: /CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Certificate serial: 019D382DDA7A8033A9F9503BAC386CD76F4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
Manifest number: 17A3
Signing time: Sun 29 Mar 2026 06:00:22 +0000
Manifest this update: Sun 29 Mar 2026 06:00:22 +0000
Manifest next update: Mon 30 Mar 2026 06:00:22 +0000
Files and hashes: 1: 7oVXpAJyEuxYNuHmvd9aRWGoKfo.roa (hash: aOBhiDvMAxK+XYQzQVgLlx3/xd+jEySWQ2727ke/inY=)
2: Ey3m-lZEA987v9BNrn8LK_J0g00.roa (hash: bt6vCGnGpQLk0MF/D7iRAV+4/yJjQaAzG7ZTnezd07w=)
3: XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl (hash: o00jdGdV3XEP18+Z/iLgVO/2c1pNVtQQky7ESL5R3lc=)
4: YTkSY80BXrrm0yOSSyQ4NcWfFCg.roa (hash: Srwxxn9T4n8eBKaxltWuAJ0FzIn1uI4bI96/Rm2hnBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:da:7a:80:33:a9:f9:50:3b:ac:38:6c:d7:6f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Validity
Not Before: Mar 29 06:00:22 2026 GMT
Not After : Mar 30 06:00:22 2026 GMT
Subject: CN=4f7fe5a7b28faf016e4df523362f240d8cd3bcf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:66:1f:a8:d3:12:a3:d0:cf:dd:3b:14:57:38:
c4:f7:e2:2a:4b:6b:56:bc:d8:f2:96:b2:7e:25:c8:
0f:71:30:4a:82:c9:d5:4b:d4:41:8b:b8:d2:a6:33:
32:3c:46:17:62:dd:b7:56:b9:7c:27:d8:ee:c4:7e:
0e:06:c7:19:ce:b6:17:f2:94:b1:00:a7:73:62:4c:
d9:3f:f5:7c:29:0a:9b:f7:51:31:80:b1:f9:a9:12:
a0:0b:df:ec:a4:ed:32:44:5a:cd:a4:82:0e:af:88:
7b:52:94:56:58:e0:bc:f0:ad:64:ca:f0:d5:32:b1:
61:c4:b5:95:b1:88:1b:d4:ea:ea:c9:78:71:6c:34:
08:92:4e:c9:cf:4c:81:c9:de:9a:d3:26:7e:0e:98:
93:a9:57:a9:bf:aa:18:8f:d7:7a:cb:6b:ec:93:f3:
47:28:e1:45:4c:21:26:5d:d2:04:5a:df:4e:02:bf:
c8:57:39:be:e6:52:45:c9:cf:2b:8f:50:a9:5b:b6:
53:c4:26:dc:2f:6e:f4:6e:1f:de:fc:d1:11:41:18:
5f:9e:59:1f:4d:0a:76:c8:f8:a7:36:80:03:50:28:
1e:1e:5e:64:9c:13:94:4b:2d:73:9f:23:17:1a:7f:
0d:b3:53:78:59:12:c3:5b:8d:df:4e:47:e6:e7:20:
ef:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:7F:E5:A7:B2:8F:AF:01:6E:4D:F5:23:36:2F:24:0D:8C:D3:BC:F1
X509v3 Authority Key Identifier:
keyid:5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:b1:cf:ed:4e:8d:04:3e:6a:7d:90:e5:22:78:d4:23:fb:4c:
ec:98:1f:2f:7f:05:c6:cd:bc:18:05:36:2e:67:5c:13:50:36:
9d:31:c0:0e:4a:96:9e:66:55:de:57:b6:da:33:0b:92:b6:77:
c3:dc:d6:c3:c3:b4:c9:bb:b8:ec:20:42:32:4c:7d:68:42:ed:
7b:5e:f7:02:40:2f:d0:dc:97:eb:e9:e9:09:04:41:8d:64:22:
8f:39:dc:ac:4f:37:fb:ed:f3:ba:5a:c4:22:85:8b:5d:68:1f:
9b:1b:58:89:5a:e7:6e:34:fc:7d:4f:b0:0d:82:eb:39:11:77:
a3:a7:97:d1:f7:18:e5:02:b5:0e:4e:bc:8a:ea:ca:c2:15:d0:
2f:61:28:d9:37:f4:d1:cd:71:da:03:ff:ac:51:eb:9e:85:cb:
43:f3:92:8d:4d:a8:30:4b:76:bf:ff:ef:8d:95:1c:16:e5:12:
27:e1:bf:bd:77:43:dd:02:85:52:cc:8e:0f:f5:f4:48:06:e6:
93:23:aa:95:14:27:1e:cc:b2:23:09:a5:79:ad:c0:1b:81:d8:
0c:70:ef:54:71:d4:bf:3c:78:e2:d3:fb:cd:8e:20:ea:f8:bd:
c9:04:f8:5f:55:03:1d:f5:9c:ab:1a:f5:9e:a2:a3:06:d7:a3:
5f:06:28:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:07 2026 by rpki-client