Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
File: XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft (raw, json)
Hash identifier: 9UVhrOGt/ZG7WsxUu6rmKu05AM9jYMWJchZyxb21w/w=
Subject key identifier: EA:AF:FE:24:C0:87:8E:1F:2C:F6:66:67:68:D6:12:4C:64:72:BC:2B
Authority key identifier: 5D:D3:9E:1D:E1:85:14:BA:C2:F5:A2:39:10:F8:C7:D4:67:2A:0F:D8
Certificate issuer: /CN=5dd39e1de18514bac2f5a23910f8c7d4672a0fd8
Certificate serial: 019CAFED2EB1D87FFF6540D163725688E8FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 19:01:22 +0000
Manifest this update: Mon 02 Mar 2026 19:01:22 +0000
Manifest next update: Tue 03 Mar 2026 19:01:22 +0000
Files and hashes: 1: 5ncwIjdV-lgqxsPk6TejDPmjLoU.roa (hash: gvOpAQoTeSfO+y1nRziJ19qDe2iH3kf8RYDheGEeWc8=)
2: XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl (hash: NWJ6XujPILnt2rMkCq1rfX/S6kcvupdI7FS2xpf+Y3o=)
3: x58D33wXY03IBALkfNVEewlOjxI.roa (hash: l4BRaOtR+rQZWBsP3tk/LVs3kvHtYkV6QExE7KMTpnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:ed:2e:b1:d8:7f:ff:65:40:d1:63:72:56:88:e8:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd39e1de18514bac2f5a23910f8c7d4672a0fd8
Validity
Not Before: Mar 2 19:01:22 2026 GMT
Not After : Mar 3 19:01:22 2026 GMT
Subject: CN=eaaffe24c0878e1f2cf6666768d6124c6472bc2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:27:c3:91:46:ff:db:0e:ac:b3:22:21:40:8d:
78:33:da:b5:6b:fc:83:90:13:97:54:b8:61:d2:5e:
f5:0e:cf:d9:61:5d:17:60:ae:57:f0:89:09:08:e1:
b2:ea:59:4a:e8:4b:af:8e:c8:2c:45:ad:45:90:57:
0f:68:3b:3e:df:69:14:67:5f:b2:24:36:9f:7f:26:
db:a3:03:0e:8d:11:eb:2a:9c:d0:68:6e:e5:43:02:
24:1c:d5:9a:09:1f:47:30:5a:b1:57:d4:6c:db:82:
93:20:71:3b:d1:b3:40:10:3b:1a:33:7b:24:c6:67:
d0:28:e1:e3:bf:ca:cc:9f:10:57:aa:f1:1d:a0:db:
70:05:d3:60:8c:87:76:36:31:80:ac:1e:66:55:88:
89:1a:dc:18:72:2c:1d:b2:03:46:ba:b8:cc:22:fe:
0f:2d:2b:66:d5:5c:05:85:c5:2e:71:2d:33:e8:46:
06:57:68:bb:94:a2:e4:ce:f3:18:af:a5:11:5f:b4:
30:5b:b7:ed:73:8f:75:0d:f0:e3:21:e0:9f:87:7e:
3e:6e:6a:bf:67:29:96:01:2f:75:6d:d9:25:69:c8:
fc:2e:48:c0:ca:58:6f:c7:72:60:1a:c5:38:b4:96:
ae:2a:70:c1:8d:7d:9f:d2:b9:4f:0f:43:5a:79:fe:
5f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:AF:FE:24:C0:87:8E:1F:2C:F6:66:67:68:D6:12:4C:64:72:BC:2B
X509v3 Authority Key Identifier:
keyid:5D:D3:9E:1D:E1:85:14:BA:C2:F5:A2:39:10:F8:C7:D4:67:2A:0F:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:e0:1a:7e:17:38:39:9f:ed:8c:ec:ad:42:9e:82:32:eb:cd:
f3:17:19:1d:e7:0d:e5:e3:5d:f4:de:01:58:b1:0d:2e:c9:87:
35:83:c1:d9:5d:86:fa:6d:81:94:06:60:7a:c5:59:03:c6:3b:
24:44:0d:b9:98:77:f4:a8:b9:a3:df:54:14:b4:a5:8b:8c:c4:
36:bd:6c:53:01:4b:56:b7:a2:d7:d3:13:f6:ba:df:b7:cf:4d:
1b:71:53:42:37:22:48:da:c7:e7:be:ce:9d:91:d6:59:7a:ed:
1d:ea:15:c5:87:93:58:77:d8:bb:ef:c0:71:f5:bb:c6:e3:5e:
c0:77:18:36:10:fa:f0:53:e3:49:99:14:2e:7a:d6:99:c7:49:
9e:99:5f:56:26:f9:7d:e5:ea:89:47:a3:28:9f:c3:52:73:20:
0c:8c:7b:53:3a:dd:86:e7:3e:c9:ae:28:65:5a:42:49:65:20:
a8:6a:2d:4b:6b:65:32:41:48:22:b8:a1:c1:77:78:ef:70:cb:
e6:46:d1:21:c0:c5:6f:e5:0d:e6:30:b3:70:c3:99:76:e5:60:
61:6f:e2:da:9c:c6:d9:47:7f:fc:9e:ca:79:31:c1:56:c1:51:
a5:a5:cb:93:51:c4:b0:12:31:cb:80:bf:a3:98:73:15:bd:e6:
35:a7:97:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:14:00 2026 by rpki-client