Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.mft
File: XpNr6hsMOiCKuifYsQsnXkdN3iw.mft (raw, json)
Hash identifier: Swo5q9QaliBeuig1wduvnDwkD8JjZGN3AJw2GfC2CfY=
Subject key identifier: D2:9E:B4:4D:CF:01:2B:7D:55:64:80:6C:D0:A3:3F:AD:AE:A0:AA:9D
Authority key identifier: 5E:93:6B:EA:1B:0C:3A:20:8A:BA:27:D8:B1:0B:27:5E:47:4D:DE:2C
Certificate issuer: /CN=5e936bea1b0c3a208aba27d8b10b275e474dde2c
Certificate serial: 019D3909DB963D5692BF05D55D45273C4014
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XpNr6hsMOiCKuifYsQsnXkdN3iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 10:00:40 +0000
Manifest this update: Sun 29 Mar 2026 10:00:40 +0000
Manifest next update: Mon 30 Mar 2026 10:00:40 +0000
Files and hashes: 1: I4H-h-0IvTFBhVPDqjS4bNj_Ebs.roa (hash: sH+OJNMuVDP+q4KSVOmVWCp6qFy7xvvRbWmFSeE0ZQA=)
2: XpNr6hsMOiCKuifYsQsnXkdN3iw.crl (hash: s9vgfnA7f9U5dW+nyimDTpAxRYWAAbSAHX36GrNXGs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XpNr6hsMOiCKuifYsQsnXkdN3iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:db:96:3d:56:92:bf:05:d5:5d:45:27:3c:40:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e936bea1b0c3a208aba27d8b10b275e474dde2c
Validity
Not Before: Mar 29 10:00:40 2026 GMT
Not After : Mar 30 10:00:40 2026 GMT
Subject: CN=d29eb44dcf012b7d5564806cd0a33fadaea0aa9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2b:9c:f6:3c:fa:5f:84:2b:08:e9:ed:49:aa:
25:ff:67:c6:0d:fd:40:da:6a:c4:b2:3f:ff:c2:83:
35:da:5b:2e:16:bc:bd:be:da:81:a2:df:1e:c4:21:
c3:6c:2e:94:0f:41:bc:f3:39:ca:ec:a4:f6:f2:a0:
90:c4:80:5e:b1:6e:47:39:ed:b4:39:da:10:c1:1c:
36:c5:39:4d:ef:5d:33:b9:6b:ce:f6:0e:53:45:1a:
4a:77:ce:15:9a:d8:a8:9b:d8:05:a2:34:8d:12:66:
9a:46:66:30:eb:97:ae:5e:ca:40:fa:2e:bd:21:40:
04:6e:b6:a4:fe:e7:ea:ad:66:19:ad:b5:a2:d5:2f:
19:f7:10:1f:b3:33:3c:1c:ce:fe:99:53:3d:16:ec:
61:66:28:8d:77:22:db:39:bf:b6:7b:0a:08:8d:ad:
f2:a2:6c:6a:e9:7d:b6:0b:53:3b:7f:91:86:a3:cb:
0c:a4:82:07:f4:71:25:78:33:02:2b:26:6f:3a:e8:
35:a1:88:72:dc:3e:52:f3:33:75:b4:fc:f5:8f:1c:
31:19:65:b1:c5:07:71:c6:e0:3e:94:7e:a3:1a:eb:
60:46:a8:05:58:0f:55:b0:94:ab:8a:c0:39:40:88:
04:f4:8f:16:66:ab:e5:5a:e3:d0:d2:34:88:b4:12:
47:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:9E:B4:4D:CF:01:2B:7D:55:64:80:6C:D0:A3:3F:AD:AE:A0:AA:9D
X509v3 Authority Key Identifier:
keyid:5E:93:6B:EA:1B:0C:3A:20:8A:BA:27:D8:B1:0B:27:5E:47:4D:DE:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XpNr6hsMOiCKuifYsQsnXkdN3iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:d7:c2:88:a6:27:b7:21:ca:50:e5:50:b9:72:bc:1a:9b:89:
e6:64:ae:a2:3f:c5:af:9d:da:8a:99:1e:f0:7b:e0:8d:8b:55:
c2:89:5d:53:92:dd:81:02:ba:e8:5a:1a:aa:7c:15:96:cb:d6:
13:c3:67:26:06:7c:c0:58:94:f8:c6:e0:27:61:78:83:80:9a:
5a:02:4c:d0:56:67:5d:00:37:94:69:fc:9b:85:e2:19:f8:09:
19:f8:c4:3a:d3:62:e5:7b:39:1f:a1:58:ca:cd:a1:39:6b:e6:
f3:9d:a7:86:3d:d0:41:a8:bd:9b:32:c0:7c:8a:bc:b4:7b:ce:
c5:f7:15:9f:00:39:09:15:43:df:62:19:de:a9:11:c9:c5:9a:
a2:08:36:9d:d7:b5:86:04:87:19:f7:aa:59:14:d2:cc:fd:bf:
af:39:94:0a:c4:37:ed:09:d4:e5:9e:c6:c3:fc:a7:d9:07:b7:
d0:6c:23:26:eb:94:2b:d7:01:2d:5c:b3:94:75:61:3f:9a:0d:
84:b6:6e:90:f6:9a:60:b8:a5:bd:5b:e2:5a:81:99:f2:b8:9d:
9f:2f:2e:f2:f6:e0:e6:4f:2a:e1:63:f7:79:3f:1f:af:fd:98:
3b:ed:f3:ce:a3:f4:6e:ab:76:c6:87:99:0a:5d:9b:14:2b:e0:
14:34:ae:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:22 2026 by rpki-client