Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
File: XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft (raw, json)
Hash identifier: UAD/ar/ZYZ3WSKGdm0BvWveLqublCa7tKBEiDgOiHbM=
Subject key identifier: 84:78:23:8F:95:38:C2:12:C7:72:06:1B:1D:89:95:81:66:D2:25:58
Authority key identifier: 5F:09:9F:49:97:8B:96:0F:A3:1F:81:AC:F5:46:71:27:3D:C7:FF:61
Certificate issuer: /CN=5f099f49978b960fa31f81acf54671273dc7ff61
Certificate serial: 019CAC7E6CC5B1F52D8B9C05E862327C7A39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 03:01:32 +0000
Manifest this update: Mon 02 Mar 2026 03:01:32 +0000
Manifest next update: Tue 03 Mar 2026 03:01:32 +0000
Files and hashes: 1: 0ZEt5hO5jk8I5B1ric3lV5QOPjY.roa (hash: 2SzUB4ARPZ7+BuiAiToaYolTUFVyZHL4/odctgbUciE=)
2: PX4jRvV2Is0w59EuWq6-Cko1_qM.roa (hash: o5zSrmvOazS6EGtXXnfbpDTf59xV6PS54zdbjnXbBvw=)
3: XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl (hash: fJu3V+ov/nz/RiHNPrvuPVxUcCcQTNEEFi6mXvOAkio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:6c:c5:b1:f5:2d:8b:9c:05:e8:62:32:7c:7a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f099f49978b960fa31f81acf54671273dc7ff61
Validity
Not Before: Mar 2 03:01:32 2026 GMT
Not After : Mar 3 03:01:32 2026 GMT
Subject: CN=8478238f9538c212c772061b1d89958166d22558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:03:53:2d:b3:63:ab:d9:ae:89:80:0d:b4:b6:
f4:84:a5:a8:8a:a6:6f:ba:5d:02:6f:97:ab:ec:e5:
21:66:a0:3d:7e:27:e2:25:30:95:96:83:5c:aa:8e:
44:95:d5:40:62:63:42:f7:8e:d1:9d:9d:ee:1b:3d:
2e:44:03:c0:da:11:91:b9:bd:4a:ee:d5:d4:f8:02:
b7:3f:e6:63:f0:b9:9f:92:ed:e6:53:a7:b3:10:b3:
80:fc:dd:dc:a7:2e:61:82:88:80:ff:88:39:88:bf:
20:77:23:5f:ba:f3:bd:0c:b3:84:7d:c7:88:74:4b:
90:18:02:3c:8a:8d:60:52:06:66:c0:e9:42:6c:bd:
05:5e:7a:ac:ab:5a:4e:21:ff:9d:51:ee:d9:d6:24:
41:00:b5:1c:4e:c6:be:c0:e2:c4:04:5e:b7:1d:12:
ec:bb:9e:b9:e7:ad:cb:96:e7:e9:3e:41:a7:86:f4:
2d:98:30:f9:fc:93:12:a6:99:d5:66:51:4e:61:4e:
9a:d9:a7:52:c5:89:ec:79:bf:dc:15:9a:a3:ff:e2:
18:7f:54:9d:18:09:17:19:72:84:9b:56:9e:70:58:
3b:29:a9:98:7e:a0:4d:5f:e6:49:83:d4:bf:f7:3e:
06:12:b0:90:ab:c2:1b:1b:56:b0:b2:62:bf:a6:88:
1e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:78:23:8F:95:38:C2:12:C7:72:06:1B:1D:89:95:81:66:D2:25:58
X509v3 Authority Key Identifier:
keyid:5F:09:9F:49:97:8B:96:0F:A3:1F:81:AC:F5:46:71:27:3D:C7:FF:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:12:6e:88:d9:56:0a:b4:78:23:94:ea:d7:6d:a9:58:cf:dd:
4a:43:96:6b:ae:49:0b:f8:b6:39:7a:f3:27:6f:77:be:a7:42:
b6:0d:7f:74:7a:ba:12:1d:1b:5a:75:5a:48:b0:1f:8e:71:c3:
f0:ce:61:07:ab:c3:f8:92:0c:22:60:b4:9c:62:10:6b:04:73:
35:05:ad:0c:93:fb:36:4f:2f:5e:c9:fc:0d:af:e7:f8:2a:45:
ec:e6:2d:2a:fd:e5:ad:48:2e:73:00:67:0e:9d:1d:be:fa:86:
a0:05:f9:ee:c8:bd:a3:d0:d7:7d:f9:f4:a7:64:80:e7:56:49:
60:aa:ec:68:c7:7b:70:96:36:d7:71:18:f2:a8:b5:70:e5:a1:
12:27:13:35:0b:60:79:7b:f2:fd:44:07:89:4d:3a:31:5c:16:
2f:45:fe:8e:12:47:54:40:65:e1:4d:9d:ac:7c:de:51:f6:9e:
2e:cb:a5:2e:03:d1:6c:60:bf:12:8e:d3:71:f6:dc:ea:f5:70:
71:ed:0e:bb:b7:81:06:6a:9a:6c:54:ab:e4:38:d0:2f:5f:65:
33:dd:89:ef:7a:3e:99:f0:ad:6f:e8:96:34:e2:7e:44:6a:1e:
84:7c:e2:8c:4e:6c:92:44:1d:aa:78:1c:30:ce:0a:aa:b4:24:
b6:6d:f8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:51:45 2026 by rpki-client