Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft
File: XDDZUEYzG9zjAYt__g8T2_n8cY0.mft (raw, json)
Hash identifier: /YSAaXVTaWKGnflmu6Smy+qY5BKIIsSSdgFW5Mh66z0=
Subject key identifier: 4C:BA:C1:AC:A0:D6:E4:24:AE:2B:55:A0:E3:6A:7A:6B:DC:51:A6:8D
Authority key identifier: 5C:30:D9:50:46:33:1B:DC:E3:01:8B:7F:FE:0F:13:DB:F9:FC:71:8D
Certificate issuer: /CN=5c30d95046331bdce3018b7ffe0f13dbf9fc718d
Certificate serial: 019CAD59B50805A4435502957BC921354786
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDDZUEYzG9zjAYt__g8T2_n8cY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 07:01:03 +0000
Manifest this update: Mon 02 Mar 2026 07:01:03 +0000
Manifest next update: Tue 03 Mar 2026 07:01:03 +0000
Files and hashes: 1: XDDZUEYzG9zjAYt__g8T2_n8cY0.crl (hash: Dkm9kF+kRlu5Vav2EaV5Htm7f+jn9q1PS/sd22G5i30=)
2: i7ahmmzCoN5G9N5UQomOHHe69RA.roa (hash: GGCZiPMQLo6nn63tOlWXS7/n5qwIMxP1oeej8rFYFvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDDZUEYzG9zjAYt__g8T2_n8cY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:b5:08:05:a4:43:55:02:95:7b:c9:21:35:47:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c30d95046331bdce3018b7ffe0f13dbf9fc718d
Validity
Not Before: Mar 2 07:01:03 2026 GMT
Not After : Mar 3 07:01:03 2026 GMT
Subject: CN=4cbac1aca0d6e424ae2b55a0e36a7a6bdc51a68d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:eb:44:1e:1d:74:75:2f:82:16:fc:89:52:79:
62:0b:ed:b5:9a:02:b1:60:2b:12:be:33:62:45:fa:
f3:fb:12:9c:7b:c8:f2:35:0c:67:6b:a7:97:7b:fc:
1d:7b:78:76:5d:9f:fd:3c:d2:21:3b:36:04:5b:92:
71:47:10:ee:27:ff:98:d3:64:d2:40:23:e0:29:00:
42:59:26:4b:d6:a5:56:a7:5c:55:71:73:6f:4e:0c:
e7:8b:20:a0:62:6e:1c:76:db:ec:7e:80:e3:39:5d:
47:0d:24:89:73:c4:1d:84:01:51:fa:49:f3:ee:92:
09:28:06:e8:5f:07:54:f0:dc:4a:7a:4c:dd:d9:cd:
ca:00:16:ec:65:8f:a5:98:2d:bd:2e:bb:0a:8d:d5:
9d:ee:1f:eb:6e:90:38:aa:f0:26:9f:52:5e:ce:92:
84:c7:7d:ec:5d:17:43:83:15:f5:61:7c:93:b9:53:
5e:a4:43:b1:4a:bc:fc:ca:69:86:3b:b3:35:d2:7f:
f9:5a:e9:2c:cf:42:9f:51:66:dd:eb:34:c0:6c:b6:
40:db:0a:a1:8d:03:1a:85:28:26:f8:2f:bf:2c:9e:
b7:eb:7a:8c:f2:39:c8:79:32:0e:e8:e3:3b:36:09:
c1:f5:d3:e9:7b:7d:82:74:75:88:a6:f1:ec:b8:60:
c7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:BA:C1:AC:A0:D6:E4:24:AE:2B:55:A0:E3:6A:7A:6B:DC:51:A6:8D
X509v3 Authority Key Identifier:
keyid:5C:30:D9:50:46:33:1B:DC:E3:01:8B:7F:FE:0F:13:DB:F9:FC:71:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDDZUEYzG9zjAYt__g8T2_n8cY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:a9:15:c1:23:d1:43:f5:35:c4:7a:1a:1b:13:73:30:e4:05:
9a:80:cd:c2:d6:a0:ba:9d:d0:f1:2e:c2:4b:a8:77:5c:5c:af:
33:70:7e:2b:6c:c2:a7:3e:9e:3d:08:22:f9:cd:ab:ea:29:fd:
ae:14:76:67:d9:15:ba:15:c3:28:0c:5b:a3:ba:9f:04:74:4e:
0c:50:eb:75:cd:d3:3f:98:3d:73:a2:12:7e:e0:56:90:c3:0e:
d6:54:00:de:a9:74:6c:da:08:63:6f:ad:3b:56:63:bd:7a:1f:
8e:6d:a3:13:ce:1d:9a:52:71:a0:12:40:ad:b2:33:41:36:9c:
70:42:96:3f:71:97:46:c3:0d:12:a5:24:ee:1a:45:cf:21:50:
31:82:cc:0d:c4:59:0c:07:a5:9a:10:5e:e5:c6:c3:2e:35:cd:
63:aa:f3:48:fa:50:33:ff:7e:04:3e:5f:1b:20:51:c2:15:bc:
e1:69:c9:43:6b:b4:8d:3b:1c:c2:95:90:17:31:d3:85:98:ae:
96:c4:cb:03:e4:a7:87:4a:13:b5:30:70:e3:7e:91:3c:75:bb:
01:64:43:21:a5:1d:92:cd:6c:74:27:3d:c0:d8:28:eb:73:81:
eb:7e:c2:83:47:6f:0e:09:8e:84:55:1e:02:ed:c3:1a:9c:e9:
1f:4b:a3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:45:25 2026 by rpki-client