Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft
File: Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft (raw, json)
Hash identifier: 3s2gp/yszuH81YZ6otemRbgpR/7RiZCtfdKrbizypNI=
Subject key identifier: 7D:3F:98:7F:C8:3E:0D:E7:DF:D2:31:E0:FC:FA:4F:55:11:87:88:9B
Authority key identifier: 5F:0F:16:2A:FA:7B:FD:7B:84:7C:1D:D0:EB:4A:EB:EA:93:C4:69:CF
Certificate issuer: /CN=5f0f162afa7bfd7b847c1dd0eb4aebea93c469cf
Certificate serial: 019D39410E6777C7445C778AACA4C1B35593
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xw8WKvp7_XuEfB3Q60rr6pPEac8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft
Manifest number: 114D
Signing time: Sun 29 Mar 2026 11:00:57 +0000
Manifest this update: Sun 29 Mar 2026 11:00:57 +0000
Manifest next update: Mon 30 Mar 2026 11:00:57 +0000
Files and hashes: 1: UZseksy0uhuo08VXcgnfylQC3DI.roa (hash: WI6osdG7JdUaHymm4KYLyMVR4pGV77Pctw9oWtJpBZw=)
2: Xw8WKvp7_XuEfB3Q60rr6pPEac8.crl (hash: 9iS/Pm/ZByVHRTx08DsKnCK6UVFuGsAKf6mSi1Jr9WY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xw8WKvp7_XuEfB3Q60rr6pPEac8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:0e:67:77:c7:44:5c:77:8a:ac:a4:c1:b3:55:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0f162afa7bfd7b847c1dd0eb4aebea93c469cf
Validity
Not Before: Mar 29 11:00:57 2026 GMT
Not After : Mar 30 11:00:57 2026 GMT
Subject: CN=7d3f987fc83e0de7dfd231e0fcfa4f551187889b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3a:d4:9f:63:b2:10:a3:7f:13:cb:22:d2:1f:
b1:59:3c:31:1a:71:1b:fc:6b:80:28:0e:4d:8e:c3:
c6:3e:26:47:70:b1:79:24:68:fd:b9:e7:d5:70:40:
41:8c:2a:6a:0e:32:9c:00:7d:22:da:26:e5:f8:e1:
44:9a:25:22:5b:bc:fe:23:3d:96:03:54:3f:eb:9a:
8a:77:86:d8:58:ea:b8:b8:96:c1:30:51:83:7b:be:
89:ea:20:f2:e8:fd:ff:1b:34:cb:0c:a9:91:2e:98:
3b:64:83:d2:93:28:77:5c:b4:50:41:5b:97:00:92:
85:3d:71:d0:53:17:86:cf:f3:3b:3e:d8:fe:8d:2a:
23:1b:fa:70:b5:f0:0e:05:87:eb:b7:85:b8:29:6a:
13:c9:fe:9c:c4:ae:8f:7e:64:14:fb:44:82:8d:d4:
e9:02:92:2d:ea:d6:06:aa:c7:79:ef:90:59:67:e7:
d6:34:be:c0:00:30:3a:54:24:6a:8c:f6:dc:4e:89:
64:4c:82:35:a4:66:f5:29:74:a0:22:a0:a5:66:f7:
fd:87:59:58:01:2d:80:06:a5:24:25:38:20:bc:cc:
1a:0b:2c:d5:74:92:db:f3:f5:6b:af:b8:1a:e6:97:
68:a5:17:b9:31:e8:fc:1d:36:8b:8a:b5:4c:19:80:
18:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:3F:98:7F:C8:3E:0D:E7:DF:D2:31:E0:FC:FA:4F:55:11:87:88:9B
X509v3 Authority Key Identifier:
keyid:5F:0F:16:2A:FA:7B:FD:7B:84:7C:1D:D0:EB:4A:EB:EA:93:C4:69:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xw8WKvp7_XuEfB3Q60rr6pPEac8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:b1:9e:32:53:fd:bd:9d:78:84:31:8e:b0:7d:94:51:46:77:
fa:95:ff:30:b9:40:a2:9f:09:21:76:91:74:30:b3:cf:f3:8a:
eb:84:80:e9:1e:5b:53:ca:78:b4:b9:9f:47:78:cc:bc:79:cb:
9b:d6:1e:69:d2:47:61:4a:c1:ed:9c:83:f4:fa:2d:13:5f:0a:
29:29:87:af:76:2d:d6:ac:ce:65:16:ef:26:70:e1:32:de:a2:
06:0a:62:86:9c:2a:dc:5e:41:d4:b0:dd:02:41:4d:fd:8d:eb:
96:74:09:50:2f:f3:c3:a6:95:86:e6:9f:8d:9c:18:32:ff:a2:
fd:52:16:16:98:7a:61:52:1d:8d:32:30:a9:d9:4a:a9:76:fa:
ff:2c:6d:b8:9f:fe:97:af:86:11:a4:8d:d5:16:30:9b:f8:5e:
2a:91:80:4e:dd:7b:d9:35:3f:eb:18:b5:35:82:4b:6d:68:e8:
00:43:c0:1c:fd:11:42:68:d4:29:c9:3e:f3:2e:89:53:fb:85:
1b:fa:f6:b3:92:7a:21:e7:5d:f7:b5:52:f8:ff:96:7e:83:d3:
b6:8a:4e:83:cf:34:47:9f:b4:9b:0c:c2:cf:67:a2:73:3a:e3:
fa:e6:90:f5:ee:10:d7:f5:6d:49:b0:e3:b8:63:61:d5:ec:5f:
b2:ca:42:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:49:57 2026 by rpki-client