Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
File: xgWHGIm53K_n7DE2rtHd_uLfvH0.mft (raw, json)
Hash identifier: q6oXkHgYZMIvHqjP8wju3WctpojfO7P/cBpJM+5bmdQ=
Subject key identifier: EB:BB:CE:30:42:4E:C6:55:B0:00:7F:A8:E9:1C:07:F0:F4:D9:CB:02
Authority key identifier: C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D
Certificate issuer: /CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d
Certificate serial: 019D3752AFC74D73CC17B5C0725C1FC66FD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 02:00:58 +0000
Manifest this update: Sun 29 Mar 2026 02:00:58 +0000
Manifest next update: Mon 30 Mar 2026 02:00:58 +0000
Files and hashes: 1: LS6g_qbOyr5L3M2tEJSHcqYLaGo.roa (hash: pmKUoQElX3xSvG0E8J7HtZYFqjVisgOfWkSTHkEuCRA=)
2: p_1zOjE7RDNIPM-9ijPLsTD4cC4.roa (hash: XKWGoP/7AKlCb/UQ1yCnmOl4XCSltYQxcpO0+1gE4vE=)
3: xgWHGIm53K_n7DE2rtHd_uLfvH0.crl (hash: yQw5fXuoqmOc8jbDzZLKyXmV0NJDoorUbE4focSBc2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:af:c7:4d:73:cc:17:b5:c0:72:5c:1f:c6:6f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d
Validity
Not Before: Mar 29 02:00:58 2026 GMT
Not After : Mar 30 02:00:58 2026 GMT
Subject: CN=ebbbce30424ec655b0007fa8e91c07f0f4d9cb02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:74:8e:c5:21:dc:e8:a9:d9:c8:c0:f7:25:16:
99:cd:8d:df:83:be:65:52:40:65:b2:48:fa:b2:d4:
56:95:cf:fe:85:57:19:ad:dd:b3:91:36:a4:6e:0c:
8c:48:03:ea:3d:39:71:8e:cb:d3:f7:74:4f:a6:0d:
ba:e7:15:34:df:dd:90:88:5d:60:73:f8:82:f9:65:
61:1c:f1:e9:f3:b9:40:f5:a4:c9:ac:a5:f5:14:fb:
ae:98:5c:5b:d3:3f:91:00:b8:21:ae:4c:4f:04:0b:
40:ae:35:d0:97:e4:5a:fa:94:51:fe:05:4d:27:43:
fd:4c:0b:73:dc:c8:d3:6b:b3:cc:4b:d2:e9:3e:b0:
05:1c:a2:88:06:64:ae:26:0b:2b:ad:20:76:13:99:
d5:08:df:ba:ab:ac:c3:3a:c9:0d:4b:91:99:fb:e6:
2f:6b:fa:91:f6:81:f9:8d:21:bf:83:06:76:89:bd:
a1:46:c5:2c:b1:9d:b4:b6:1b:fd:20:01:5b:d5:36:
62:d6:17:85:60:ae:f8:74:ac:5b:d9:71:3b:fc:00:
63:7e:d8:4b:97:35:95:14:9a:a8:ee:ea:b5:b9:74:
59:ed:52:a4:75:0c:2c:0c:60:54:31:cb:ab:d4:ed:
0e:ce:77:3b:2b:20:33:17:63:78:d2:6f:3f:15:ce:
e9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BB:CE:30:42:4E:C6:55:B0:00:7F:A8:E9:1C:07:F0:F4:D9:CB:02
X509v3 Authority Key Identifier:
keyid:C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:b1:f6:84:ea:ca:f5:29:c0:2f:40:0f:9a:09:47:42:4e:3d:
43:6c:23:e5:6d:98:df:4c:13:a3:ef:b9:a7:44:79:8e:a3:31:
90:98:d1:98:4a:4a:30:a1:79:01:b8:fe:0d:c2:e2:a3:37:e5:
61:9a:93:d8:8a:56:fa:2f:ea:e0:61:8b:a5:59:26:81:c6:4e:
3d:d4:0b:b7:72:23:5b:75:35:62:69:09:3a:40:a2:a7:61:ff:
4d:f6:fe:ae:08:45:7e:06:dd:5f:58:87:27:9c:76:f4:ac:b5:
52:c7:64:6a:25:b9:83:ce:0c:bf:fe:ed:08:07:35:2c:04:22:
f4:a5:82:51:75:ac:97:62:bd:e4:30:cd:a5:99:ed:3d:95:af:
49:08:fb:bb:ce:aa:fe:25:ce:26:62:75:56:57:61:e8:eb:30:
38:a4:c5:50:e2:9d:07:8b:4b:0a:a7:8e:ae:e6:0f:d9:51:5e:
be:d0:35:fb:27:02:dc:07:da:a2:35:5f:6b:ec:fa:fc:cb:06:
e9:61:4e:80:43:7e:9e:d4:cd:39:ac:43:5e:88:0a:38:b7:19:
62:33:0b:b0:79:82:cf:13:02:30:22:7b:f4:28:7e:78:19:de:
57:67:48:ee:bd:f6:d3:da:66:df:ad:e6:2e:a8:2f:0f:2b:9b:
6d:e3:55:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:46 2026 by rpki-client