Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft
File: XatFagUdSpN4i-9PrA0HvcDJ8M8.mft (raw, json)
Hash identifier: Tr8ndcoFqGt8BLZAsGN/L1CbUXu+HkGcRPi/UmulXJM=
Subject key identifier: 23:01:5B:88:30:7D:64:B7:E8:EE:34:CD:27:5B:25:98:39:28:09:8E
Authority key identifier: 5D:AB:45:6A:05:1D:4A:93:78:8B:EF:4F:AC:0D:07:BD:C0:C9:F0:CF
Certificate issuer: /CN=5dab456a051d4a93788bef4fac0d07bdc0c9f0cf
Certificate serial: 019D3AC1D9BBEEF00BDF3DDD551D766B1F33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XatFagUdSpN4i-9PrA0HvcDJ8M8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft
Manifest number: 189A
Signing time: Sun 29 Mar 2026 18:01:15 +0000
Manifest this update: Sun 29 Mar 2026 18:01:15 +0000
Manifest next update: Mon 30 Mar 2026 18:01:15 +0000
Files and hashes: 1: CbUjr1UvlkF8n-aSwRMeoAKRr08.roa (hash: uLotTSOrlblRssB3pzAzK8VGcBOkdwWIKgpcVkQ5HL8=)
2: XatFagUdSpN4i-9PrA0HvcDJ8M8.crl (hash: wfDScsDBKRjB5XLLTjuJ7NjNPDoE7LkLtQD7p8exbs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XatFagUdSpN4i-9PrA0HvcDJ8M8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:d9:bb:ee:f0:0b:df:3d:dd:55:1d:76:6b:1f:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dab456a051d4a93788bef4fac0d07bdc0c9f0cf
Validity
Not Before: Mar 29 18:01:15 2026 GMT
Not After : Mar 30 18:01:15 2026 GMT
Subject: CN=23015b88307d64b7e8ee34cd275b25983928098e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7c:88:b7:26:5a:fe:b1:17:61:84:9f:5b:a2:
83:8c:61:2c:51:79:c5:dd:d1:3e:42:ff:54:6f:31:
45:a5:4d:57:71:68:a5:9d:f9:a5:5a:91:32:e1:53:
4a:5d:4c:13:84:2c:39:2c:08:3e:3f:2c:8a:5d:2d:
62:44:c9:45:fd:e5:c5:e4:0f:b2:c4:91:cd:e4:16:
16:42:07:9a:76:ed:c9:d8:f7:b2:52:e8:94:07:b0:
b2:ed:f5:09:a9:bb:25:88:48:f1:9e:40:d2:bc:16:
55:00:87:ed:d1:6e:60:59:1c:fd:8e:8b:93:f4:c5:
f2:9c:6b:f6:ed:51:b7:65:dd:69:2d:1d:f2:02:e6:
87:a8:6b:47:b5:ed:08:9d:05:33:77:c7:89:60:86:
38:d8:50:65:1f:0f:cc:4a:b1:cd:40:5f:e4:73:26:
da:66:81:5f:f0:e5:ea:02:ac:86:38:df:f2:68:31:
af:b1:b5:95:17:28:9e:f9:2e:8a:c0:f7:0f:6b:5d:
ee:cb:72:eb:35:fa:b6:e7:0b:9d:f4:37:36:c7:32:
b8:dc:65:4a:99:e8:e9:5a:25:1c:8d:8d:83:00:0b:
5d:3c:2f:22:f7:1c:8f:84:99:02:60:9b:42:27:2d:
20:3c:be:d7:3a:20:e0:9e:0d:89:6b:3d:a5:79:05:
45:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:01:5B:88:30:7D:64:B7:E8:EE:34:CD:27:5B:25:98:39:28:09:8E
X509v3 Authority Key Identifier:
keyid:5D:AB:45:6A:05:1D:4A:93:78:8B:EF:4F:AC:0D:07:BD:C0:C9:F0:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XatFagUdSpN4i-9PrA0HvcDJ8M8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:f5:97:a7:77:91:d2:bd:31:af:59:33:ff:62:23:59:fa:4a:
f4:15:9c:33:36:15:1d:06:8c:0e:42:e1:97:16:73:23:8c:4a:
14:63:24:72:ff:d6:3e:94:87:bd:dd:1b:7d:62:75:14:ee:be:
1f:29:c8:eb:58:1c:ea:7c:fc:d3:e9:85:0c:48:f7:8b:d5:8e:
7e:09:d3:dd:20:3e:c4:b5:eb:f1:a2:6d:23:bf:d4:48:59:bd:
fd:be:7c:42:9b:3d:c3:e6:a8:76:3b:57:ac:ce:bd:8c:74:11:
6b:35:eb:b0:97:dd:ca:77:d5:1f:1f:56:77:f1:09:9b:ce:0d:
d8:9e:d0:94:70:ca:49:f5:86:9d:3f:bc:93:05:0f:ab:69:50:
f9:f2:9a:c9:4a:15:24:0f:d6:9c:cf:45:c7:02:12:2e:72:0d:
01:44:7b:1f:46:a1:a1:ae:2f:78:5d:14:09:ea:29:36:98:8a:
67:05:26:ab:81:1c:f6:9f:ae:3e:db:d2:b4:6f:8c:39:4e:cf:
42:9c:74:c6:bf:e3:5e:4e:5d:20:5e:cb:53:b8:ac:38:22:94:
9d:8d:e7:c0:a5:e9:f1:3b:0f:8a:30:a6:1c:c7:93:c8:90:09:
6c:57:ae:3a:07:74:79:7f:19:24:1e:ea:97:8c:7d:2e:10:28:
70:ca:ae:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:18 2026 by rpki-client