Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft
File: Xpidr2T6291TSPfdIm7Mn-_ARRU.mft (raw, json)
Hash identifier: Ee/peROI6kHOi6d/2as5OCSotHrfUlNGjZb7mOkIXYM=
Subject key identifier: 2C:A5:99:BD:DA:CE:3E:02:28:F4:06:69:45:BB:83:93:0A:10:86:54
Authority key identifier: 5E:98:9D:AF:64:FA:DB:DD:53:48:F7:DD:22:6E:CC:9F:EF:C0:45:15
Certificate issuer: /CN=5e989daf64fadbdd5348f7dd226ecc9fefc04515
Certificate serial: 019D273B150BCBF258B5F5D48613A3E5465C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xpidr2T6291TSPfdIm7Mn-_ARRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft
Manifest number: 0D2C
Signing time: Wed 25 Mar 2026 23:01:16 +0000
Manifest this update: Wed 25 Mar 2026 23:01:16 +0000
Manifest next update: Thu 26 Mar 2026 23:01:16 +0000
Files and hashes: 1: Xpidr2T6291TSPfdIm7Mn-_ARRU.crl (hash: +AenU+LpUCLi7D7c4S0EY7+QTauMeuFGkom8ewWJG+0=)
2: c0i8991UJCOly_bGDSBQG4Aot8k.roa (hash: fe/DfYOp9gMMpbSc+SphBLp4DkHzqjeSNzT9WK5FYRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xpidr2T6291TSPfdIm7Mn-_ARRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:15:0b:cb:f2:58:b5:f5:d4:86:13:a3:e5:46:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e989daf64fadbdd5348f7dd226ecc9fefc04515
Validity
Not Before: Mar 25 23:01:16 2026 GMT
Not After : Mar 26 23:01:16 2026 GMT
Subject: CN=2ca599bddace3e0228f4066945bb83930a108654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ec:98:e4:65:ab:7c:e2:50:d9:04:02:5d:0c:
90:13:0c:6d:83:a0:f6:ca:63:9d:3c:dd:55:54:6c:
8a:ef:ed:72:77:24:69:61:19:38:08:66:a0:9a:ed:
80:9c:20:9f:4e:7b:55:c9:fb:81:97:28:aa:da:3d:
e1:26:0c:e7:82:95:f4:01:1c:71:8f:c1:a0:d1:a4:
44:f0:8f:aa:c9:0f:f6:37:4c:ba:ad:f1:b5:59:54:
31:ba:f1:21:37:ee:83:36:85:b9:cc:43:cf:95:46:
50:cd:b5:6e:c1:d8:d0:67:4e:c7:37:75:a9:98:ad:
88:cf:09:66:a6:d2:b3:f6:eb:3b:a6:8e:23:41:2d:
7c:54:67:85:f1:8e:9c:75:b2:31:28:b5:b8:b4:07:
05:8c:f6:0d:37:fe:53:a4:f4:b1:2f:a6:ae:d0:b5:
04:86:86:1c:61:cb:bb:87:47:f9:4a:ee:d1:e9:e6:
ec:f6:dc:40:28:c3:1e:3b:c3:37:97:d3:20:1f:05:
ba:c8:e7:a5:2d:75:05:f3:cd:25:c1:67:19:1e:01:
bb:35:a1:e7:52:59:ea:f3:e6:7e:64:94:91:11:e0:
c0:aa:de:05:b3:0b:21:99:3e:aa:31:d4:73:8d:11:
f4:38:56:f7:4d:c2:40:c7:32:a5:ae:47:b4:13:eb:
4d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A5:99:BD:DA:CE:3E:02:28:F4:06:69:45:BB:83:93:0A:10:86:54
X509v3 Authority Key Identifier:
keyid:5E:98:9D:AF:64:FA:DB:DD:53:48:F7:DD:22:6E:CC:9F:EF:C0:45:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xpidr2T6291TSPfdIm7Mn-_ARRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:a0:43:a6:0e:d9:6d:2f:c9:0b:bb:f4:57:78:b1:8a:2e:92:
0d:8c:07:85:96:bb:40:7e:bc:d9:da:bf:36:b3:71:72:98:d9:
05:86:ef:7b:c9:6c:97:72:51:39:3d:16:c7:cd:35:62:2d:1f:
79:f3:48:90:89:b0:4a:96:25:f9:e0:ec:3b:87:b0:3b:11:a9:
37:9e:68:e6:bf:23:2e:93:43:ef:d6:e6:d8:b2:28:8b:5a:67:
ed:18:65:66:a7:bc:13:eb:c0:5b:45:46:2e:07:da:c2:ee:60:
2b:68:99:be:a7:34:24:e8:54:81:d1:39:04:40:3c:e4:31:95:
8a:42:ac:de:56:fb:8a:18:fd:97:d4:c1:24:c6:60:a5:94:b9:
e7:9e:5e:a9:85:03:a0:93:3e:71:3e:c7:92:55:68:61:61:77:
69:23:c6:07:92:1b:c6:93:94:59:fb:8d:a2:82:8b:59:2b:19:
2e:fa:12:01:c4:fb:fb:73:89:f2:cf:70:38:04:fa:11:28:e3:
03:6b:e5:47:1b:05:87:bd:60:92:31:d2:33:39:be:31:64:0d:
22:87:f6:e6:9a:27:55:c6:32:59:fa:c5:4b:bc:93:b6:c6:f5:
59:4b:c6:b4:74:18:b7:85:f8:62:7e:15:15:a3:90:51:19:18:
ca:4c:8c:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOxULy/JYtfXUhhOj5UZcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlOTg5ZGFmNjRmYWRiZGQ1MzQ4ZjdkZDIyNmVjYzlmZWZj
MDQ1MTUwHhcNMjYwMzI1MjMwMTE2WhcNMjYwMzI2MjMwMTE2WjAzMTEwLwYDVQQD
EygyY2E1OTliZGRhY2UzZTAyMjhmNDA2Njk0NWJiODM5MzBhMTA4NjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+yY5GWrfOJQ2QQCXQyQEwxtg6D2
ymOdPN1VVGyK7+1ydyRpYRk4CGagmu2AnCCfTntVyfuBlyiq2j3hJgzngpX0ARxx
j8Gg0aRE8I+qyQ/2N0y6rfG1WVQxuvEhN+6DNoW5zEPPlUZQzbVuwdjQZ07HN3Wp
mK2IzwlmptKz9us7po4jQS18VGeF8Y6cdbIxKLW4tAcFjPYNN/5TpPSxL6au0LUE
hoYcYcu7h0f5Su7R6ebs9txAKMMeO8M3l9MgHwW6yOelLXUF880lwWcZHgG7NaHn
Ulnq8+Z+ZJSREeDAqt4FswshmT6qMdRzjRH0OFb3TcJAxzKlrke0E+tNbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCylmb3azj4CKPQGaUW7g5MKEIZUMB8GA1UdIwQY
MBaAFF6Yna9k+tvdU0j33SJuzJ/vwEUVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHBpZHIyVDYyOTFUU1BmZEltN01uLV9BUlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC83NDg4MWQtZWE5Zi00NTNmLWJiNTEt
ODhiMjM4ZTViYjgwLzEvWHBpZHIyVDYyOTFUU1BmZEltN01uLV9BUlJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC83NDg4MWQtZWE5Zi00NTNmLWJiNTEtODhiMjM4ZTViYjgw
LzEvWHBpZHIyVDYyOTFUU1BmZEltN01uLV9BUlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF6BDpg7Z
bS/JC7v0V3ixii6SDYwHhZa7QH682dq/NrNxcpjZBYbve8lsl3JROT0Wx801Yi0f
efNIkImwSpYl+eDsO4ewOxGpN55o5r8jLpND79bm2LIoi1pn7RhlZqe8E+vAW0VG
Lgfawu5gK2iZvqc0JOhUgdE5BEA85DGVikKs3lb7ihj9l9TBJMZgpZS5555eqYUD
oJM+cT7HklVoYWF3aSPGB5IbxpOUWfuNooKLWSsZLvoSAcT7+3OJ8s9wOAT6ESjj
A2vlRxsFh71gkjHSMzm+MWQNIof25ponVcYyWfrFS7yTtsb1WUvGtHQYt4X4Yn4V
FaOQURkYykyMXw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:01:07 2026 by rpki-client