Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
File: XxaylLGmR79tZ2g7UWFEl-dR8h8.mft (raw, json)
Hash identifier: H8WsU4LcBDbJamaivh9zL4hv7kRGlhNPhKhqOVd9/kE=
Subject key identifier: 2F:2B:FA:41:38:93:EA:DE:B5:00:0A:C9:6F:06:85:A0:99:51:F9:EF
Authority key identifier: 5F:16:B2:94:B1:A6:47:BF:6D:67:68:3B:51:61:44:97:E7:51:F2:1F
Certificate issuer: /CN=5f16b294b1a647bf6d67683b51614497e751f21f
Certificate serial: 019D37F7174AE864E1BA16A9F0CFE2E327A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 05:00:33 +0000
Manifest this update: Sun 29 Mar 2026 05:00:33 +0000
Manifest next update: Mon 30 Mar 2026 05:00:33 +0000
Files and hashes: 1: NKg93JWQUnBu80RX13MwmqJxvVc.roa (hash: nG4jnHVVr/B/zg5snhsHaHEVH2wq5BQYMoc/wJLZKCM=)
2: XxaylLGmR79tZ2g7UWFEl-dR8h8.crl (hash: 4CEUEKb1KGOd10GlAm8yJ3N0tetzMbAHbJh/S56v7Co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:17:4a:e8:64:e1:ba:16:a9:f0:cf:e2:e3:27:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f16b294b1a647bf6d67683b51614497e751f21f
Validity
Not Before: Mar 29 05:00:33 2026 GMT
Not After : Mar 30 05:00:33 2026 GMT
Subject: CN=2f2bfa413893eadeb5000ac96f0685a09951f9ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:57:39:b4:f8:88:b4:df:4d:49:9c:05:cb:ed:
3c:bb:c2:c1:b4:24:88:9a:38:2e:90:17:cf:0d:4d:
31:4f:c3:15:36:c5:5a:4a:46:c8:52:69:df:4d:73:
8f:25:1a:af:c6:34:bd:0e:72:60:64:73:19:cc:85:
38:b2:e6:e8:f8:0b:78:a5:53:97:af:ef:3e:e9:f6:
86:46:34:cb:13:f6:fb:1a:fe:a4:47:9a:e5:cf:dd:
11:b8:43:e1:1b:27:d4:a4:7c:20:26:9e:f5:d6:ac:
29:82:b9:98:d1:e8:5f:18:d7:05:2e:96:ce:79:e7:
06:33:e2:78:95:54:a1:33:7d:36:20:1e:61:7d:31:
18:cd:12:43:2d:e2:e0:8c:6c:2a:d2:5f:28:14:68:
ec:35:ad:8c:b2:30:24:6c:38:f4:d6:54:7b:38:84:
d2:13:30:a9:16:2d:c0:65:42:67:56:d7:ec:16:c9:
a1:43:fa:cd:a4:92:38:01:e6:2d:12:e2:0c:d1:b4:
da:c8:fc:dc:0c:a1:70:b8:01:02:eb:c2:21:43:18:
c4:e3:f3:df:0e:b1:d0:7f:66:d1:40:1b:95:49:8a:
84:91:c4:c1:06:89:a4:6e:80:6d:7d:20:08:02:2c:
56:0d:bb:8c:ca:d2:ef:7d:7f:9f:ef:57:ef:d6:fa:
5e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:2B:FA:41:38:93:EA:DE:B5:00:0A:C9:6F:06:85:A0:99:51:F9:EF
X509v3 Authority Key Identifier:
keyid:5F:16:B2:94:B1:A6:47:BF:6D:67:68:3B:51:61:44:97:E7:51:F2:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:9c:1c:b5:71:a0:da:43:6d:33:3b:6b:d9:fe:c2:f3:f6:8c:
87:15:d5:b6:1a:16:fa:ea:84:00:91:4f:45:75:a8:73:fb:c1:
59:32:fe:39:a6:db:4a:06:2d:fa:77:4f:48:89:e2:56:3d:d2:
78:f5:e2:31:c2:b7:d3:1b:e9:54:54:ad:da:b5:f2:a2:93:1d:
ea:e7:7c:5a:cb:e0:55:52:02:e8:77:52:f8:f8:e3:e4:2b:75:
2a:26:82:20:24:01:7e:c3:4d:e9:84:db:43:58:e4:72:b3:b8:
74:f1:c6:9d:55:15:1e:33:30:d7:a5:ab:23:24:5b:88:70:0a:
02:6c:ad:2b:af:81:52:df:7c:c4:f9:32:3b:95:68:ae:b7:35:
e2:70:a5:81:d6:b0:4f:5a:c7:ce:6c:bf:9d:3b:6f:9c:22:75:
36:4c:78:80:60:73:62:bc:01:34:6d:d2:4a:15:ce:0b:dd:b2:
8d:c1:31:4a:f6:b5:fb:21:4f:88:65:b6:e1:bc:ab:9f:c6:6a:
2e:87:d0:27:94:d7:e3:69:c5:a3:d9:0a:65:1d:26:b1:6a:40:
40:29:95:77:76:5d:9e:ee:c8:07:2f:5c:f8:2b:d7:e3:17:71:
a5:3a:1b:fb:1c:89:d5:18:45:b0:e9:63:d3:2f:98:67:54:7e:
74:82:be:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:54 2026 by rpki-client