Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
File: X-U8C_w8j7VrgRkTFxREQ-DinSU.mft (raw, json)
Hash identifier: BXVcVrkAPNAwzlLvXNZQLGlCtV2R5A8AjYMvROPBQ5E=
Subject key identifier: 43:C5:65:3C:6C:A0:04:E3:0D:13:5C:57:EC:09:98:22:67:E5:BE:05
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 019CAC105C2D1E10C85FE4DDAE663BB8DC4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
Manifest number: 85
Signing time: Mon 02 Mar 2026 01:01:19 +0000
Manifest this update: Mon 02 Mar 2026 01:01:19 +0000
Manifest next update: Tue 03 Mar 2026 01:01:19 +0000
Files and hashes: 1: 0fI4wmdGOQ1kLuvv1qHiK0C--L8.roa (hash: Z+X5uR9flAhy3leFkC+AcvzMmGH3LvnP56qA4XdH7UM=)
2: HlmZWhQKKZe7LbyNd19F5rOhw9c.roa (hash: Jouu85rdzqcnP2F6Q7QfLS0eE3v/NY3xgKHeYPAUq20=)
3: X-U8C_w8j7VrgRkTFxREQ-DinSU.crl (hash: 7awwWB8RYQDuHeK2xnwFmPIDeMcLEj17s7BVWiIrpWI=)
4: YnRGbn23osm23sihEIW9_mzI2RQ.roa (hash: aJ8GIGyGcSVIwVpN+pZVEdbKfxFXPkETizLUGD7ljB8=)
5: ZfXj0Cs-w3tqd3nR2H1CQe4DSjk.roa (hash: R+MPHlzGGciK9ag+NGwWU+mFvTI8dUefoBQsCIk0KTk=)
6: wb4RxzbkvODkvr8c1lotFZbk07I.roa (hash: v19ol9warSyYW++fuy8gfHR8gO87vsuzAdQvtcHeStc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:5c:2d:1e:10:c8:5f:e4:dd:ae:66:3b:b8:dc:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Mar 2 01:01:19 2026 GMT
Not After : Mar 3 01:01:19 2026 GMT
Subject: CN=43c5653c6ca004e30d135c57ec09982267e5be05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:46:3e:23:02:65:48:a7:e4:62:f0:b2:61:c0:
29:2a:89:f0:c5:d9:8a:8f:f2:1a:3f:37:15:fd:ae:
10:87:d9:52:9d:be:63:34:b5:57:48:57:47:54:56:
9b:f4:cd:20:5e:20:f3:31:b8:86:d2:13:5d:03:0b:
81:b9:a9:fe:00:9e:06:f0:98:9a:c3:0b:2e:13:a3:
87:bb:7f:c8:e4:79:ad:af:0c:7d:e7:e8:56:de:1e:
40:87:ca:b4:2c:4c:b1:19:e7:ae:49:c6:40:94:72:
7e:fc:20:2c:17:ae:7c:2f:0d:54:ec:4e:d8:b1:92:
0b:7e:de:64:21:b4:f0:ae:57:37:f7:2c:0a:e2:4f:
a3:2b:c5:e8:39:81:a4:d4:fa:2e:4f:e3:b9:31:dc:
cd:07:aa:e1:08:b7:9d:05:af:e9:04:7f:8f:86:7c:
bf:80:ff:d1:7c:3c:ae:e1:66:e6:87:58:6e:b8:ea:
9e:1c:c6:2c:55:69:6e:2b:76:e5:f7:c8:1a:e5:45:
9b:f9:5a:72:4c:16:cd:d0:4b:4d:94:7d:ea:76:8e:
3a:54:4c:85:6e:39:77:ed:fa:37:08:91:11:1b:ab:
26:cf:b6:5e:d7:c0:8d:f9:cf:fb:00:1d:a8:d1:b3:
d7:72:57:aa:8f:f4:47:95:0a:bf:b7:d8:a6:fe:2a:
14:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C5:65:3C:6C:A0:04:E3:0D:13:5C:57:EC:09:98:22:67:E5:BE:05
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:73:49:70:0c:25:5b:da:0a:42:e9:f8:f6:9a:41:a0:1c:cf:
5f:b9:b3:25:15:bc:91:2a:02:cb:08:25:dd:5e:34:7a:3b:e3:
0d:23:3d:8c:32:7b:d9:91:44:86:c6:61:af:4c:4a:d7:20:0b:
cb:89:76:b0:a6:ae:26:af:79:c0:e0:29:4b:94:52:b1:90:7f:
ec:14:e6:c9:b5:fc:c4:2e:29:61:3b:39:de:20:b5:35:3d:83:
fc:dc:70:31:05:53:b6:01:64:b6:be:44:88:0b:1a:4d:f2:76:
ba:d7:76:12:d9:17:f9:cb:71:00:71:b7:e1:d1:94:ad:9c:f8:
d5:56:57:af:fe:37:33:06:bd:b1:9e:75:e3:01:9d:fb:31:21:
60:be:c2:02:c6:a3:cf:43:b1:9e:d1:8a:95:44:79:ac:34:49:
f1:e2:89:dc:aa:bc:38:03:84:8b:95:15:98:68:f4:c1:62:52:
62:da:db:4f:6f:c9:22:a5:a5:82:e8:75:ac:6d:fd:fc:ea:2c:
3a:c3:b4:3f:45:20:bb:cc:34:27:a8:7b:55:ba:e4:5c:77:87:
44:f6:9f:25:2b:ea:d8:b8:b8:e4:83:bd:6f:92:52:0b:1c:bd:
9b:7c:92:29:10:c5:08:4b:32:f3:1b:da:68:14:d0:0e:06:9a:
63:b3:55:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:54:52 2026 by rpki-client