Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
File: XP6NclJuTnOjtX2TYPOlG-tZpF8.mft (raw, json)
Hash identifier: O/98FnzSbuWAqq4r6iztGblB1CH6cVbZRM7/0Sm6Efw=
Subject key identifier: 99:FF:9E:DB:1A:29:20:14:A9:B8:24:00:FA:BC:20:7C:87:DA:E6:4B
Authority key identifier: 5C:FE:8D:72:52:6E:4E:73:A3:B5:7D:93:60:F3:A5:1B:EB:59:A4:5F
Certificate issuer: /CN=5cfe8d72526e4e73a3b57d9360f3a51beb59a45f
Certificate serial: 019D37C0D9D72FD299A06CCC19A2C3112D44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 04:01:18 +0000
Manifest this update: Sun 29 Mar 2026 04:01:18 +0000
Manifest next update: Mon 30 Mar 2026 04:01:18 +0000
Files and hashes: 1: XAYcuxsajA5hLrmscRs4oynzyUg.roa (hash: AvPY1r1vk0ST8v3sz0+K9LIFAxv9kmWL/J2CaIlXu0s=)
2: XP6NclJuTnOjtX2TYPOlG-tZpF8.crl (hash: qtIg0LcfqLCkRhSdowxO2Al2PTn5tp3tfh/cudt/has=)
3: mjMQEKksicvgZzYu86cOaUikq_o.roa (hash: 7g64PoLicqxVLeKtHUopkjJGRzw3GYF64nr8YZ5vEEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:d9:d7:2f:d2:99:a0:6c:cc:19:a2:c3:11:2d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfe8d72526e4e73a3b57d9360f3a51beb59a45f
Validity
Not Before: Mar 29 04:01:18 2026 GMT
Not After : Mar 30 04:01:18 2026 GMT
Subject: CN=99ff9edb1a292014a9b82400fabc207c87dae64b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e9:be:e4:04:e7:6b:14:7f:0e:a6:8a:7e:91:
31:d0:7d:cb:f7:f8:00:dc:f2:19:ec:73:41:08:67:
81:7d:b0:fa:98:c4:92:35:f8:64:ab:0b:b5:f5:b6:
18:f7:a3:2d:e4:73:18:b9:23:f6:91:d6:40:62:eb:
86:e0:d0:bb:fb:fe:af:2c:af:10:96:df:e1:4d:9f:
7e:a0:63:82:e2:6e:e9:9b:9a:40:20:75:dc:6f:4d:
7b:2e:f9:7a:3e:6d:48:14:c1:26:68:65:aa:d6:df:
93:c4:77:8e:e7:c3:27:13:ca:25:bf:23:e4:6a:26:
f8:bf:65:2f:62:65:14:62:d9:23:d5:1a:0b:34:30:
d6:99:a4:ba:3a:d5:ca:16:d4:b0:ba:c1:74:b7:8e:
83:08:0a:6c:04:b0:d9:0b:50:77:d4:ca:eb:43:ab:
26:13:8b:4f:ef:ce:28:54:87:67:c2:36:d3:86:ca:
28:78:d8:01:1c:b3:fa:80:9c:36:33:64:53:a8:4d:
32:b8:10:74:f6:af:b0:0e:0e:33:89:3d:eb:30:6b:
45:06:41:9c:80:51:09:0c:57:66:4b:b4:b4:07:02:
97:90:7b:c1:ea:a4:96:24:32:4e:e5:f5:24:ba:97:
33:4e:8f:f8:ff:6a:c3:b3:8c:5d:66:c7:6d:aa:71:
c6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:FF:9E:DB:1A:29:20:14:A9:B8:24:00:FA:BC:20:7C:87:DA:E6:4B
X509v3 Authority Key Identifier:
keyid:5C:FE:8D:72:52:6E:4E:73:A3:B5:7D:93:60:F3:A5:1B:EB:59:A4:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:02:e4:12:04:51:2b:c5:df:b2:72:b0:b1:f7:f6:26:84:0e:
58:a2:94:04:52:ce:8d:29:7b:58:6e:70:07:a9:2e:80:60:9f:
68:89:e3:dd:ce:fe:e7:b4:8c:d2:22:00:bc:5c:c8:3b:04:38:
3e:6d:20:11:e5:b0:4d:d0:01:34:80:e5:07:20:ce:5f:27:df:
39:76:aa:fb:83:18:ad:56:8c:1a:81:6d:de:ec:e2:f2:3d:0c:
1a:27:80:fb:f4:d3:b8:1f:92:a6:13:f2:41:1e:a7:e3:cd:66:
be:46:ba:da:98:e7:c4:cf:2e:cb:77:92:48:85:91:ce:0a:71:
7c:10:70:f3:04:84:58:ac:11:e9:5f:6b:9d:8b:ab:46:4c:79:
66:07:b1:f1:ec:8f:17:6a:be:97:15:24:d1:5e:d6:5a:7a:05:
f1:65:5a:05:eb:1e:1f:b6:9f:ff:42:f0:d6:c4:1d:6d:94:e7:
21:68:6f:47:f6:74:65:8e:c1:33:cb:d5:a8:c2:1f:5e:f4:3d:
7c:a4:24:38:af:34:a0:80:50:4c:21:6e:26:42:98:cb:e8:70:
32:f1:97:3f:ff:4b:e8:5a:4e:10:e6:ee:af:c0:8f:c0:49:af:
8f:57:d0:8e:d6:d7:01:ec:4e:09:45:bc:b4:9c:87:51:00:64:
31:6d:02:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:00 2026 by rpki-client