Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.mft
File: XTPX-5Z6W1wgP0NMAP_xJTTmF2k.mft (raw, json)
Hash identifier: WxfNo8yFitUmm48d4woCqU5r9Ayr145tSZAb7+ANpvk=
Subject key identifier: 4F:FB:38:DD:71:17:28:F8:06:2A:F8:73:6E:1F:52:DC:42:EA:51:0F
Authority key identifier: 5D:33:D7:FB:96:7A:5B:5C:20:3F:43:4C:00:FF:F1:25:34:E6:17:69
Certificate issuer: /CN=5d33d7fb967a5b5c203f434c00fff12534e61769
Certificate serial: 019D29292CCC2AC223DFBFE6CECB90B00929
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.mft
Manifest number: 9F
Signing time: Thu 26 Mar 2026 08:00:57 +0000
Manifest this update: Thu 26 Mar 2026 08:00:57 +0000
Manifest next update: Fri 27 Mar 2026 08:00:57 +0000
Files and hashes: 1: XTPX-5Z6W1wgP0NMAP_xJTTmF2k.crl (hash: g8w8ZCaD4i0JTXufXgWM7BrnFORErCDF2slBOeDaBPA=)
2: sILmqECvPUOwIkOHOOhRTao7v74.roa (hash: llFUAC/mu2lwxUsJ40bzdjW3ddWww0AROSXO714SrqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:2c:cc:2a:c2:23:df:bf:e6:ce:cb:90:b0:09:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d33d7fb967a5b5c203f434c00fff12534e61769
Validity
Not Before: Mar 26 08:00:57 2026 GMT
Not After : Mar 27 08:00:57 2026 GMT
Subject: CN=4ffb38dd711728f8062af8736e1f52dc42ea510f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:84:d0:4e:1c:1d:87:72:f2:71:a8:3c:70:ca:
32:dd:a3:7f:d1:6a:f6:d0:b0:d9:c7:d7:d9:d7:ae:
da:be:c9:a1:58:e0:d7:7a:c8:ec:43:57:66:0f:ff:
be:28:e7:23:db:46:e7:aa:3a:a1:ac:29:b8:6e:11:
eb:c9:5e:e4:af:eb:e1:b9:fd:48:68:78:c3:62:a4:
ce:5b:f7:47:1d:22:13:3a:dd:9d:6a:e3:88:20:ac:
74:66:98:eb:1b:17:bc:b0:d4:98:48:54:5d:15:bf:
f4:1f:1d:cb:d5:91:33:7f:60:50:08:20:0e:57:33:
0a:ce:d8:5a:7a:39:9a:92:85:f7:c4:f9:54:47:ef:
85:55:ab:6d:67:12:70:52:d2:70:70:04:2f:e9:70:
f0:73:98:a1:b8:3d:c6:16:bf:4e:14:9d:57:6a:58:
4f:5b:2f:27:42:a5:80:08:02:b7:f8:4a:42:c1:61:
38:16:40:dc:c9:e4:e3:58:16:32:cf:a9:bb:59:89:
57:3a:e6:0e:66:3a:8a:25:46:4d:81:6c:8f:f1:7b:
e2:e9:bf:ed:fe:78:9e:0f:3b:9d:0a:85:07:ae:eb:
48:37:dc:de:63:b2:32:5f:bd:8c:0d:8e:2d:30:2a:
1b:88:3c:f6:cb:0b:1b:c5:aa:72:89:a6:1f:5c:53:
e1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:FB:38:DD:71:17:28:F8:06:2A:F8:73:6E:1F:52:DC:42:EA:51:0F
X509v3 Authority Key Identifier:
keyid:5D:33:D7:FB:96:7A:5B:5C:20:3F:43:4C:00:FF:F1:25:34:E6:17:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:7b:d7:e0:3c:d8:54:4d:f3:67:3e:4c:6a:11:2c:b7:10:40:
00:da:53:e3:96:e5:35:e0:c5:92:76:ef:69:2e:7b:53:64:e0:
6e:d9:e7:96:b1:ae:66:34:ef:5a:5b:cd:05:33:91:55:c6:f2:
97:2e:7c:12:74:90:98:20:4a:6a:7f:35:27:5e:67:36:23:a5:
e5:22:5f:99:a9:1c:3d:6e:b6:2b:ae:a1:bd:98:11:1d:2f:81:
8c:9b:ba:44:5c:9e:97:35:02:97:67:19:54:c6:f2:82:b3:02:
f5:67:b1:3b:89:01:be:6e:90:8d:a7:69:af:e1:c5:3d:70:8f:
78:2b:d7:1b:1c:e0:ce:46:14:fe:7d:d3:65:ed:58:8a:bf:c4:
7a:04:08:f9:7c:f7:c1:77:53:d5:eb:04:5a:b6:e7:ee:50:f2:
3b:77:ea:ac:5c:2d:e3:06:41:5f:99:38:f8:e7:96:73:cd:2e:
1e:79:f5:ae:5d:26:d4:8d:ce:57:be:e9:ff:92:b7:c2:c8:bb:
eb:8e:e6:da:7a:fb:8b:8e:af:03:ff:61:9c:75:bc:e1:4d:4a:
9a:94:66:ec:06:d7:e6:fd:6e:26:1a:2d:c0:c3:90:af:50:47:
28:38:66:f5:11:f6:40:e6:a8:57:02:a3:ef:b1:bc:8b:1b:bd:
a4:84:d5:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKSzMKsIj37/mzsuQsAkpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkMzNkN2ZiOTY3YTViNWMyMDNmNDM0YzAwZmZmMTI1MzRl
NjE3NjkwHhcNMjYwMzI2MDgwMDU3WhcNMjYwMzI3MDgwMDU3WjAzMTEwLwYDVQQD
Eyg0ZmZiMzhkZDcxMTcyOGY4MDYyYWY4NzM2ZTFmNTJkYzQyZWE1MTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvITQThwdh3Lycag8cMoy3aN/0Wr2
0LDZx9fZ167avsmhWODXesjsQ1dmD/++KOcj20bnqjqhrCm4bhHryV7kr+vhuf1I
aHjDYqTOW/dHHSITOt2dauOIIKx0ZpjrGxe8sNSYSFRdFb/0Hx3L1ZEzf2BQCCAO
VzMKzthaejmakoX3xPlUR++FVattZxJwUtJwcAQv6XDwc5ihuD3GFr9OFJ1XalhP
Wy8nQqWACAK3+EpCwWE4FkDcyeTjWBYyz6m7WYlXOuYOZjqKJUZNgWyP8Xvi6b/t
/nieDzudCoUHrutIN9zeY7IyX72MDY4tMCobiDz2ywsbxapyiaYfXFPhLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE/7ON1xFyj4Bir4c24fUtxC6lEPMB8GA1UdIwQY
MBaAFF0z1/uWeltcID9DTAD/8SU05hdpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFRQWC01WjZXMXdnUDBOTUFQX3hKVFRtRjJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi80MDQzMzgtMmFjYi00MjhmLTk4ZDEt
MThiZGE1M2M1ODQyLzEvWFRQWC01WjZXMXdnUDBOTUFQX3hKVFRtRjJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi80MDQzMzgtMmFjYi00MjhmLTk4ZDEtMThiZGE1M2M1ODQy
LzEvWFRQWC01WjZXMXdnUDBOTUFQX3hKVFRtRjJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWHvX4DzY
VE3zZz5MahEstxBAANpT45blNeDFknbvaS57U2TgbtnnlrGuZjTvWlvNBTORVcby
ly58EnSQmCBKan81J15nNiOl5SJfmakcPW62K66hvZgRHS+BjJu6RFyelzUCl2cZ
VMbygrMC9WexO4kBvm6Qjadpr+HFPXCPeCvXGxzgzkYU/n3TZe1Yir/EegQI+Xz3
wXdT1esEWrbn7lDyO3fqrFwt4wZBX5k4+OeWc80uHnn1rl0m1I3OV77p/5K3wsi7
647m2nr7i46vA/9hnHW84U1KmpRm7AbX5v1uJhotwMOQr1BHKDhm9RH2QOaoVwKj
77G8ixu9pITVlg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:20:51 2026 by rpki-client