Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
File: xhKt-r-RXfMxmJNYCM8N-XONyoc.mft (raw, json)
Hash identifier: 4rr09jdlJpLZ3EeYHKZBGXvekyurYS/RZNOdIuFNZuE=
Subject key identifier: F3:5E:C8:86:2D:DF:1F:B7:D2:34:6C:BF:5E:AA:D4:AB:5C:95:00:78
Authority key identifier: C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87
Certificate issuer: /CN=c612adfabf915df33198935808cf0df9738dca87
Certificate serial: 019CACEB4AE363B83697410B322EFA657E18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 05:00:27 +0000
Manifest this update: Mon 02 Mar 2026 05:00:27 +0000
Manifest next update: Tue 03 Mar 2026 05:00:27 +0000
Files and hashes: 1: 8bjq5CLAkMYnJtGthdYrockLCPY.roa (hash: eDG4zg9ilYUKjh0gJA5+ITJl6INuXH1V6df209hapIs=)
2: xhKt-r-RXfMxmJNYCM8N-XONyoc.crl (hash: 5tqAR0p5vidqrtuw0Kvx8/eFQWeY6cuH8E1icV/lcOQ=)
3: y6q-4aOfHflX0pozAnd7z21SiEw.roa (hash: BNrcMKA3+AgY/9eYfHPZuG3AM/va4c4zSTiZb/uHiLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:4a:e3:63:b8:36:97:41:0b:32:2e:fa:65:7e:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c612adfabf915df33198935808cf0df9738dca87
Validity
Not Before: Mar 2 05:00:27 2026 GMT
Not After : Mar 3 05:00:27 2026 GMT
Subject: CN=f35ec8862ddf1fb7d2346cbf5eaad4ab5c950078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:60:0e:55:96:e5:8e:5a:60:4a:17:2d:7b:49:
a8:fc:b1:5c:7c:98:e5:d0:38:6c:26:1c:b7:cc:f9:
5e:df:b2:8a:d8:4c:13:00:50:f8:14:a7:71:a9:f7:
28:2e:5d:67:7f:d9:fd:88:26:79:5b:44:dd:a1:8a:
9b:83:bb:7e:0e:e2:cc:6d:fe:8d:aa:c1:1a:46:cd:
d3:32:ed:87:30:ed:62:0b:74:44:a6:72:4a:89:ff:
56:28:1d:e0:ec:92:d5:42:50:dc:55:aa:4d:44:c7:
13:fa:a1:1e:54:3e:59:00:ec:92:55:3c:74:4c:81:
3c:d6:93:d7:2f:0b:1b:06:86:92:ea:1e:04:a0:ca:
3c:87:cc:32:98:cf:0c:46:37:5f:8a:df:f8:3f:86:
57:76:c5:8d:82:09:5d:ee:22:5e:af:da:85:5e:fd:
ec:95:32:e7:23:5e:cf:76:9c:bd:bd:11:c7:c2:84:
58:8a:b5:eb:79:a0:4a:c5:09:9b:f1:54:40:b4:14:
f8:9e:2a:b6:3e:cb:1e:89:bf:7c:3a:93:75:58:a6:
0d:f3:06:31:3c:79:1d:2e:5f:fe:87:70:04:61:f6:
0c:dc:06:67:ee:e1:96:2b:05:fb:37:20:5b:01:61:
a7:1e:89:a5:14:f7:23:0a:13:02:26:bf:ce:88:d5:
91:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5E:C8:86:2D:DF:1F:B7:D2:34:6C:BF:5E:AA:D4:AB:5C:95:00:78
X509v3 Authority Key Identifier:
keyid:C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:a3:8e:cb:25:7e:b0:2a:48:8d:08:c5:85:85:e9:3a:70:64:
b9:b1:ec:7b:da:4a:ca:12:81:b8:df:a9:9e:53:51:39:b1:aa:
75:f5:6d:57:6e:28:d5:2e:4d:35:68:13:5b:52:dd:33:af:89:
65:5e:49:26:be:bb:41:23:38:cf:ae:35:8f:a9:05:71:3b:0a:
f2:85:37:34:20:ae:2b:ac:5d:7b:24:88:31:d3:9e:33:3e:f6:
63:a5:38:25:9e:e3:6a:9f:4b:34:62:9f:43:17:57:4a:93:02:
e8:83:a6:69:9d:1b:a0:70:5a:b8:80:73:d4:2d:86:7b:01:92:
42:73:f7:6f:77:92:f3:3c:68:31:fc:91:6a:04:74:78:42:e1:
c1:11:ca:e6:d4:7a:2f:b2:2b:2c:28:c6:cc:c2:91:44:e5:46:
8e:f4:4f:ae:19:ec:b0:58:72:d1:7c:f4:03:25:66:99:72:20:
7c:b1:3e:5c:b8:52:62:fc:a7:e9:79:17:19:f9:0c:b9:b9:0b:
f2:50:87:a2:82:39:c5:e5:2a:94:6f:20:9d:44:43:49:3c:2f:
f6:a5:6d:84:eb:fc:c5:e2:44:0e:cc:2f:67:48:a5:ca:a7:bf:
52:89:84:fe:cb:c1:bf:89:b8:49:57:8d:33:c9:1e:2a:ca:98:
67:2b:6e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:39:13 2026 by rpki-client