Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft
File: Xo08C2QUychuPJSnFN-yactekWk.mft (raw, json)
Hash identifier: ptX4rssD7dXUHBvY+AhVIOQD0JfXyswsGgJjxmSQMlE=
Subject key identifier: FC:0D:90:55:83:68:11:F3:A9:20:D5:6B:F1:86:B9:7F:02:2B:FF:0B
Authority key identifier: 5E:8D:3C:0B:64:14:C9:C8:6E:3C:94:A7:14:DF:B2:69:CB:5E:91:69
Certificate issuer: /CN=5e8d3c0b6414c9c86e3c94a714dfb269cb5e9169
Certificate serial: 019D389C3CFDA0370B71A29ACAD9C6563637
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo08C2QUychuPJSnFN-yactekWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 08:00:56 +0000
Manifest this update: Sun 29 Mar 2026 08:00:56 +0000
Manifest next update: Mon 30 Mar 2026 08:00:56 +0000
Files and hashes: 1: 4hS0kBMyB9H-tHz_FPDfcYD-NR0.roa (hash: +7cyCy/NdgEzdqXIvMYXBG6PX6qWy1L3JHGAtDMeS30=)
2: IVJmRlo_N7uujpHOQ1PY0oGuwPE.roa (hash: HId6QIpCvryq7pzO2cSpzlsjWi8B2cu2NyD1dmCRRqc=)
3: Xo08C2QUychuPJSnFN-yactekWk.crl (hash: CbSL4+dWgOaFFctL/sAMz5n1zGadQ7zoaX0ZiO+mGYo=)
4: YU7DQQUK3WS2GF1fwXGzic4CVRE.roa (hash: 5Kaf0g8MgSwJ+dws3X5JQrcvkrcgCUQzsjR1OpBYhtw=)
5: cJHyNL6n_BStyxq8HQ3hJvNAMq4.roa (hash: V4roFS8vi9SUabC+vIIX/fQMu7+uk5jkREg7A/YHemc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xo08C2QUychuPJSnFN-yactekWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:3c:fd:a0:37:0b:71:a2:9a:ca:d9:c6:56:36:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8d3c0b6414c9c86e3c94a714dfb269cb5e9169
Validity
Not Before: Mar 29 08:00:56 2026 GMT
Not After : Mar 30 08:00:56 2026 GMT
Subject: CN=fc0d9055836811f3a920d56bf186b97f022bff0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:59:a1:32:af:c2:3b:7d:9c:cc:a5:18:4a:d3:
4a:f6:62:74:15:99:2a:05:20:38:f1:7a:ed:d0:76:
79:17:97:e8:26:42:7f:fb:2c:49:ee:a7:6b:f5:db:
9f:35:cb:06:87:bd:cd:6b:36:dc:21:56:08:c5:f4:
ee:3c:c7:4d:65:77:8d:03:b3:73:60:82:4c:f8:5a:
ee:f8:c5:b1:f5:74:fb:7d:94:39:a8:b1:94:4a:47:
24:dd:a7:22:8d:9a:89:1c:0a:19:0a:77:02:ef:40:
bd:cb:cd:98:b7:95:0b:38:39:82:18:2a:e7:9e:f5:
f0:7a:0b:7e:ec:9f:a9:4d:67:93:fd:54:e2:09:11:
9c:6e:70:41:72:31:8e:11:a5:b8:52:1e:3d:aa:df:
cf:2d:04:fd:92:f6:64:72:7c:e8:34:39:79:bb:65:
6e:c5:f3:f5:1e:ed:1e:48:83:f1:12:c5:ef:74:6d:
8c:2e:90:22:75:61:78:ad:de:fc:da:15:02:97:01:
46:c4:39:fa:e5:e6:8c:5a:ac:f6:b7:18:2d:39:8e:
81:a0:25:6a:6f:9d:a4:ad:65:e3:da:b7:e4:ac:c4:
4c:c1:4f:b6:eb:7a:28:04:25:26:dd:7d:d3:33:df:
96:b3:2b:0f:bc:ff:c0:ea:be:7a:4d:25:cd:4b:bb:
8d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:0D:90:55:83:68:11:F3:A9:20:D5:6B:F1:86:B9:7F:02:2B:FF:0B
X509v3 Authority Key Identifier:
keyid:5E:8D:3C:0B:64:14:C9:C8:6E:3C:94:A7:14:DF:B2:69:CB:5E:91:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo08C2QUychuPJSnFN-yactekWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:3c:3b:24:92:55:28:f7:a7:1e:21:fb:5f:1a:5d:aa:49:18:
da:7b:3d:5d:4f:21:62:77:1d:f9:73:cf:55:f5:80:03:9a:0d:
6e:8e:c9:41:d0:7a:96:09:62:4d:2a:75:4b:26:2e:57:7c:69:
97:88:9e:b8:8e:e7:3b:26:52:30:b7:ff:bd:d7:8f:66:87:22:
67:d7:1d:8c:f4:07:1b:17:6e:d8:84:c4:53:93:29:50:32:e3:
d6:78:f5:aa:93:80:29:5e:01:7a:f3:c5:fa:0a:f5:5f:2c:bb:
2e:ae:17:b1:a2:95:23:8c:49:11:f7:59:43:7d:08:fb:2d:2d:
7a:f4:80:8a:32:f3:ea:1c:e7:1d:f9:0a:b0:6e:9a:90:eb:1b:
15:69:89:59:9b:e7:cd:c4:f9:0c:d2:d8:10:75:6f:96:e8:93:
4e:fd:dd:b5:a3:3d:12:ff:b0:a8:c5:b7:46:ec:e2:5c:37:43:
69:76:48:aa:eb:70:90:3b:72:59:19:2a:27:eb:ea:79:34:51:
50:b6:8e:72:15:4c:be:98:59:62:84:6d:ab:10:d0:e4:51:a4:
77:db:6e:fb:ca:b9:f3:07:e4:9c:17:54:ef:46:67:13:4a:3f:
4a:de:83:6b:60:f3:1f:b3:cb:d9:f6:68:f2:9f:66:b8:3c:be:
20:ba:47:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:46:44 2026 by rpki-client