Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
File: XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft (raw, json)
Hash identifier: l9Exv00PVdGszpc4tN+6fzLBC2AFIpQ3oj8H+2CTOwc=
Subject key identifier: 43:EE:64:BC:7D:29:58:C7:6C:BE:23:E8:F4:7D:55:1D:85:79:68:BA
Authority key identifier: 5D:D3:9E:1D:E1:85:14:BA:C2:F5:A2:39:10:F8:C7:D4:67:2A:0F:D8
Certificate issuer: /CN=5dd39e1de18514bac2f5a23910f8c7d4672a0fd8
Certificate serial: 019D3909BB1ADC2E09B9B669101BDBBE8A5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 10:00:32 +0000
Manifest this update: Sun 29 Mar 2026 10:00:32 +0000
Manifest next update: Mon 30 Mar 2026 10:00:32 +0000
Files and hashes: 1: 5ncwIjdV-lgqxsPk6TejDPmjLoU.roa (hash: gvOpAQoTeSfO+y1nRziJ19qDe2iH3kf8RYDheGEeWc8=)
2: XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl (hash: irmI6o/ohXOcrkdBNZPS4ljExc7ZFVjWfQnLBPzxT84=)
3: x58D33wXY03IBALkfNVEewlOjxI.roa (hash: l4BRaOtR+rQZWBsP3tk/LVs3kvHtYkV6QExE7KMTpnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:bb:1a:dc:2e:09:b9:b6:69:10:1b:db:be:8a:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd39e1de18514bac2f5a23910f8c7d4672a0fd8
Validity
Not Before: Mar 29 10:00:32 2026 GMT
Not After : Mar 30 10:00:32 2026 GMT
Subject: CN=43ee64bc7d2958c76cbe23e8f47d551d857968ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0d:a4:20:25:26:ce:54:21:7e:a9:02:6a:57:
86:65:0b:6d:36:c2:df:1a:4a:ca:76:6f:65:f3:29:
86:9e:06:cf:39:f2:88:33:27:3c:45:8b:76:e2:74:
23:35:94:f3:bf:bc:1f:8c:37:80:86:8f:30:ab:81:
c3:f5:2d:ac:9d:8c:82:12:d4:d6:6f:30:1a:e3:02:
5e:b8:97:22:a2:45:ec:ab:53:ac:c0:f0:a2:16:51:
bb:fc:50:5c:28:c4:09:b6:00:fc:79:cb:48:3c:cf:
14:d0:4d:22:b3:a0:a7:a0:b8:a7:17:43:07:8c:0d:
e5:d7:ae:82:51:26:5f:36:21:0d:f4:66:3a:fb:99:
26:7d:ec:11:80:cd:03:13:eb:26:00:90:06:ca:73:
86:53:7c:18:93:47:4a:74:b8:10:df:38:25:d0:93:
ec:5d:cf:83:c1:66:e7:d1:e3:e2:11:f5:44:ac:f8:
1a:22:a6:78:b1:20:5c:4d:7a:94:39:e5:c0:4d:83:
d6:4f:c4:77:e3:0c:40:52:0f:de:0d:ab:03:c8:4c:
95:ec:0e:61:28:5b:0c:95:1a:63:4e:f9:1b:ec:27:
87:e4:e9:55:b5:8b:4e:35:e7:d2:74:f0:03:27:04:
bf:7c:78:0d:f1:50:9a:af:96:93:01:16:29:a2:be:
36:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:EE:64:BC:7D:29:58:C7:6C:BE:23:E8:F4:7D:55:1D:85:79:68:BA
X509v3 Authority Key Identifier:
keyid:5D:D3:9E:1D:E1:85:14:BA:C2:F5:A2:39:10:F8:C7:D4:67:2A:0F:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:78:bb:3f:c0:08:83:74:61:93:f9:14:11:16:c7:17:2e:71:
b6:c2:45:50:a0:7d:ec:85:3e:c6:48:b4:6d:53:fd:a6:d2:ab:
c2:aa:e3:ca:ae:82:ec:c9:33:8f:63:77:ab:53:da:73:c5:18:
3f:d7:04:7b:88:d7:25:f3:1d:c8:c6:26:da:2e:fc:e0:2d:ea:
8f:85:e5:e4:40:f2:62:7e:bd:c8:ab:32:cc:18:5f:b9:8b:32:
f9:5a:72:cf:0b:ab:61:26:b1:0b:97:d0:36:37:9d:02:d9:1a:
04:54:70:6a:7a:37:f9:af:d1:d9:c0:53:b3:50:ba:46:80:5d:
13:50:e3:45:ea:bb:5e:9b:ca:d3:5e:ed:2a:c5:e5:98:6c:79:
bd:25:12:f4:9e:a9:73:5c:51:85:42:37:eb:fd:48:d9:5a:b6:
a0:68:11:dd:2e:33:5f:59:26:f3:49:a7:31:ee:a2:b0:69:e0:
d0:42:bf:a5:3a:79:ee:4e:6b:6d:b4:37:c5:d7:94:a8:f2:f5:
e5:92:c7:b7:aa:5d:15:83:18:b6:43:57:82:1c:11:4e:36:76:
0c:7d:d4:9c:be:61:94:25:bb:1e:e2:9b:29:75:f0:a5:60:7d:
cd:45:9b:3c:98:31:d8:92:d4:0f:4f:88:09:36:0f:2d:b0:74:
ba:4c:f5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:37 2026 by rpki-client