Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
File: XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft (raw, json)
Hash identifier: FZ6a8vO4OSlyipg7y4XiagRu5rF75i37ZYP1VL/B/kE=
Subject key identifier: 92:05:2E:4F:1C:02:61:F5:81:CE:D4:F3:96:33:E5:D5:FA:20:4F:7F
Authority key identifier: 5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D
Certificate issuer: /CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d
Certificate serial: 019CAB345F482F3BB0AAB0AB285B621E481B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 21:01:02 +0000
Manifest this update: Sun 01 Mar 2026 21:01:02 +0000
Manifest next update: Mon 02 Mar 2026 21:01:02 +0000
Files and hashes: 1: 0m0w4NNU4NOo-8_y3zxSZs-Hcdw.roa (hash: d/QLJQ6M0z3RViK7W5MP6w1Y/VAa68ow0nmGzD8+98w=)
2: HKYjGRXbhcsbgj-zO-lhhp8iHf4.roa (hash: r0qRRb9G05Y3zjQIakuz14pzZ5PruwE51RJizxy5NMg=)
3: OXzsf9355x_Po1YlBAMmXxH7YfM.roa (hash: HyUx0AM/t82HDbhNTlK93mKwtwtfVGbEby4qtiM7vwI=)
4: XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl (hash: bVItRsGX1iv1JMd+HfjLYhxhtQlCfsT5g12B46ObWEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:5f:48:2f:3b:b0:aa:b0:ab:28:5b:62:1e:48:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d
Validity
Not Before: Mar 1 21:01:02 2026 GMT
Not After : Mar 2 21:01:02 2026 GMT
Subject: CN=92052e4f1c0261f581ced4f39633e5d5fa204f7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ba:7a:36:26:d8:ce:fb:4b:41:ec:13:7a:db:
81:42:0f:09:57:87:15:0d:29:dd:1d:bc:f8:c0:a3:
24:5d:76:3a:66:66:e4:c0:3a:d0:62:2d:7e:3a:af:
50:5c:83:92:2d:5b:45:d1:32:45:db:87:f6:4a:e7:
ac:b9:c7:66:af:df:8a:e1:8a:fd:c3:17:50:6e:c6:
1c:d1:82:e3:22:6b:c3:80:49:50:db:dc:7d:25:a1:
b6:b3:74:91:c2:64:d1:b4:da:30:95:d5:b2:eb:24:
8e:0f:e2:be:00:3b:0c:74:dd:c3:ca:85:a0:13:68:
ee:db:32:81:e4:90:c4:1d:8c:3f:f0:2d:f1:51:8b:
db:80:7b:00:2a:41:5e:d2:a4:08:84:c7:a6:c5:7d:
ae:33:b6:04:6d:f4:e6:44:1d:7a:00:7c:2e:a0:50:
4a:b6:02:8b:3e:e3:fc:1b:f2:91:f2:61:af:b4:ba:
30:bf:47:68:5b:d3:7e:d1:1a:a8:fa:c7:76:eb:58:
ee:4e:4d:cf:80:5c:81:7f:2a:2f:97:6e:f0:82:07:
e7:9d:60:11:bc:61:2b:fd:33:ad:c6:b9:8a:3b:80:
2b:8d:3a:8e:ed:17:ea:7c:2b:6f:dd:e1:01:82:53:
af:0b:ed:d2:08:02:e4:0d:ef:06:7a:95:d2:52:54:
30:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:05:2E:4F:1C:02:61:F5:81:CE:D4:F3:96:33:E5:D5:FA:20:4F:7F
X509v3 Authority Key Identifier:
keyid:5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:c4:47:63:3e:5c:42:92:68:5f:8d:c9:9d:5f:be:f1:bf:16:
ed:86:fd:b1:89:7d:d2:d8:c3:7a:bd:80:4f:b8:a9:c3:29:7e:
7f:f4:0e:76:1f:89:8b:25:36:c0:f5:34:00:c0:68:10:9f:05:
50:2f:79:4d:66:63:5c:ce:76:73:00:56:e7:c1:60:1c:9a:d4:
bb:a8:10:35:cf:98:5e:5d:75:38:b9:c0:48:f6:09:c9:d1:1f:
2f:fe:79:96:4e:0c:4c:99:81:69:0b:c0:63:72:4d:74:be:9c:
69:76:42:67:f5:17:94:b2:3e:4b:de:c8:fd:07:26:06:68:58:
1d:2f:b4:6c:92:c8:1e:79:57:3b:6e:b3:bc:23:ed:9c:9a:fd:
1d:e2:ad:2f:cb:4c:d4:b1:9e:fd:55:14:ad:6e:80:94:5f:2e:
91:87:d9:55:0f:d3:20:95:06:04:5a:b1:ae:c8:8d:36:86:65:
7a:3c:aa:52:5a:c3:d5:6f:0b:22:f8:71:5f:e1:76:b9:2d:13:
2a:8a:e2:59:4b:bb:26:1b:d5:7a:a4:f0:ec:ee:0c:1c:5f:32:
74:15:c6:dd:6c:f3:3c:94:4a:84:d3:01:12:b4:91:3d:61:99:
14:2d:dc:3e:d7:24:0c:2d:e8:44:4c:11:89:3c:e0:45:68:5e:
86:6f:d1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:23:38 2026 by rpki-client