Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
File: XWlT20hASwxmoV8Npu-n-sCpNp4.mft (raw, json)
Hash identifier: atX/m0vQXeFFdy17zYQc7k0CCKDXGi1w+R76JGS3boE=
Subject key identifier: EC:01:37:3B:42:35:B1:31:2F:A3:39:1F:D5:C3:3F:3C:F0:A1:B3:9E
Authority key identifier: 5D:69:53:DB:48:40:4B:0C:66:A1:5F:0D:A6:EF:A7:FA:C0:A9:36:9E
Certificate issuer: /CN=5d6953db48404b0c66a15f0da6efa7fac0a9369e
Certificate serial: 019D3789890DB5281B1DC3D5606F691EFF95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 03:00:53 +0000
Manifest this update: Sun 29 Mar 2026 03:00:53 +0000
Manifest next update: Mon 30 Mar 2026 03:00:53 +0000
Files and hashes: 1: PnV6MRrCbEDbUgZOWZkw0F-5fTw.roa (hash: gpEq7vfgynN+KUY61gV3ilXsbaQKj+P9YjZ3SCCvLxo=)
2: XWlT20hASwxmoV8Npu-n-sCpNp4.crl (hash: kz/xq6+DIHR48KXdYFGVGkkzKJi/16B5PmAhYaSukWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:89:0d:b5:28:1b:1d:c3:d5:60:6f:69:1e:ff:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6953db48404b0c66a15f0da6efa7fac0a9369e
Validity
Not Before: Mar 29 03:00:53 2026 GMT
Not After : Mar 30 03:00:53 2026 GMT
Subject: CN=ec01373b4235b1312fa3391fd5c33f3cf0a1b39e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a7:99:89:fc:58:5b:ee:7f:88:a9:78:4c:86:
cf:1f:d9:b9:5a:ca:94:f1:e3:20:12:a2:fc:2c:17:
a7:9e:df:ad:c4:9b:e9:bf:9e:91:8a:66:11:59:9d:
37:d8:f4:2e:55:75:b5:51:27:5b:5e:2f:9d:46:e9:
7f:4e:bd:11:9e:81:f7:3d:ef:bc:cf:81:06:8c:7a:
ea:cb:86:a0:0c:fe:52:43:b7:13:10:14:1e:bc:5b:
61:13:41:19:c0:a5:15:78:2d:fe:26:57:af:5a:52:
8b:2e:55:6d:3e:0c:b0:2a:ac:96:ed:b5:1d:c8:6b:
78:e6:26:b1:f5:5c:da:ac:f7:52:85:f2:d0:23:86:
ea:d6:a2:54:4c:af:80:f6:c7:73:95:81:0c:2d:55:
43:f5:d4:f6:b8:f0:55:fb:51:c6:8d:cf:e7:01:e8:
83:e8:00:46:03:87:d7:b9:c3:ce:a0:12:bb:b7:d6:
28:be:02:5e:40:55:5b:4e:cf:ae:d3:71:fa:47:84:
ef:c1:ab:42:f5:78:3b:ea:ec:ee:54:62:96:9d:4c:
06:3a:00:84:51:ec:cd:fa:89:8a:ce:6e:a8:bc:2b:
81:63:9e:6f:2b:f0:06:d4:3c:43:1f:95:96:22:d9:
0d:08:47:4a:f2:61:c5:18:83:ee:53:40:e5:1c:9d:
cc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:01:37:3B:42:35:B1:31:2F:A3:39:1F:D5:C3:3F:3C:F0:A1:B3:9E
X509v3 Authority Key Identifier:
keyid:5D:69:53:DB:48:40:4B:0C:66:A1:5F:0D:A6:EF:A7:FA:C0:A9:36:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:0d:3b:18:47:de:b9:9e:ed:0f:30:cc:95:e3:9d:19:04:9f:
c6:38:14:5a:06:65:81:63:b8:7d:fb:d3:f3:53:73:19:98:44:
af:02:20:a5:ec:ca:96:2f:81:d2:bf:49:1c:9e:e4:f9:8b:da:
05:fb:bd:79:3b:58:82:7d:38:bf:b4:71:9d:24:06:e0:cd:16:
b6:e9:32:4a:63:5b:e8:52:3b:c0:d5:3a:01:48:cb:7b:db:18:
27:6b:00:00:15:69:76:74:c2:c8:d9:89:f2:28:2a:71:ba:1e:
b8:99:e4:b8:7a:56:90:75:ff:94:66:b9:e6:3a:1d:ad:e9:5e:
b7:fb:6d:8b:46:1b:ee:8a:92:11:92:0b:1e:f6:b0:6d:60:d5:
c4:a6:e6:43:95:83:4b:c8:69:ea:c1:26:bf:25:ba:21:70:92:
e1:67:86:34:e4:9e:07:64:cc:93:2b:3e:70:82:7e:cb:db:d5:
af:bd:e3:23:22:cd:a8:3c:37:5b:cb:8e:3a:98:52:d1:85:81:
c9:9b:7b:b4:dd:e4:06:dd:7c:00:99:fe:34:40:3c:1a:81:6c:
ad:8a:0d:df:6e:d5:cd:86:e1:99:93:ff:c1:83:52:2e:92:95:
fd:90:31:20:01:d8:a0:6d:8d:3d:f7:6b:97:73:af:2a:0d:68:
62:70:09:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:41 2026 by rpki-client