Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft
File: xX4MBpirwZpWiv7OaxkM7QM6coU.mft (raw, json)
Hash identifier: ETfjAh5KfI+NruF2UmgWvvTAJ3JrMLKE94c4sJKpnfw=
Subject key identifier: C4:54:48:CB:39:83:86:C0:6C:8F:55:A3:61:AF:DA:23:11:BC:CF:43
Authority key identifier: C5:7E:0C:06:98:AB:C1:9A:56:8A:FE:CE:6B:19:0C:ED:03:3A:72:85
Certificate issuer: /CN=c57e0c0698abc19a568afece6b190ced033a7285
Certificate serial: 019D26CD5C1A57ECCDFAE68E55ABCCA2D833
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xX4MBpirwZpWiv7OaxkM7QM6coU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft
Manifest number: 1785
Signing time: Wed 25 Mar 2026 21:01:25 +0000
Manifest this update: Wed 25 Mar 2026 21:01:25 +0000
Manifest next update: Thu 26 Mar 2026 21:01:25 +0000
Files and hashes: 1: hvm-1sw6yKhG-M4wHJ1S06-4bQ8.roa (hash: tKs3IGxy6JfH17/EICz+WfGgz3jmWl7OeQzPl058cdo=)
2: rHb_iz-JiMdt3RDI2-qf4obfFyQ.asa (hash: PB1OmdbHMMh/Gs2lwxTkfdhg+R2oRe0ZvKNcBWEoM4Q=)
3: xX4MBpirwZpWiv7OaxkM7QM6coU.crl (hash: /XcJWig9kIboqVqkUg9RNLrmEHQlGHKQNv1i6lbs5fw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xX4MBpirwZpWiv7OaxkM7QM6coU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:5c:1a:57:ec:cd:fa:e6:8e:55:ab:cc:a2:d8:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c57e0c0698abc19a568afece6b190ced033a7285
Validity
Not Before: Mar 25 21:01:25 2026 GMT
Not After : Mar 26 21:01:25 2026 GMT
Subject: CN=c45448cb398386c06c8f55a361afda2311bccf43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ec:d6:58:9e:04:8b:35:98:37:be:9d:27:b6:
77:a1:b6:0d:c4:17:7a:83:6b:26:d9:20:3d:2f:4a:
18:15:bc:ce:7b:30:2a:25:73:91:0f:30:e1:92:b1:
43:26:24:fa:a8:8b:f5:38:8f:1f:13:67:6e:38:6d:
bc:66:00:a9:2a:44:b3:c2:c9:d1:71:56:8a:d4:90:
3b:d2:c2:a0:fb:b4:75:2a:61:67:99:e5:9a:aa:4b:
24:f3:10:0d:a8:74:ca:b9:be:69:42:34:21:ca:6e:
24:40:fe:9d:7c:ed:fc:a1:63:5a:46:fc:14:6d:df:
f3:f4:cd:ed:43:dd:fc:69:aa:b4:a6:6f:12:21:27:
c9:e0:54:9d:54:60:85:e2:13:62:f1:f0:9b:29:e0:
bc:dd:b5:21:d8:2c:ee:a2:9e:7d:f9:a3:e3:7d:cd:
2d:fb:59:75:7a:bd:b3:eb:03:23:cd:80:be:65:dd:
79:cf:c6:3a:d3:5b:fa:1a:15:60:1c:a1:72:92:a6:
19:7a:9b:6c:e5:95:98:3a:69:af:7d:7a:3a:5b:4c:
8f:88:69:ae:98:03:27:6c:d7:56:8e:9e:3d:c5:68:
b9:f0:5a:be:8f:60:87:fd:db:0c:73:e4:bb:4a:28:
91:89:8f:f7:c3:d7:ba:12:3e:52:a9:4a:b7:29:f3:
f3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:54:48:CB:39:83:86:C0:6C:8F:55:A3:61:AF:DA:23:11:BC:CF:43
X509v3 Authority Key Identifier:
keyid:C5:7E:0C:06:98:AB:C1:9A:56:8A:FE:CE:6B:19:0C:ED:03:3A:72:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xX4MBpirwZpWiv7OaxkM7QM6coU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:29:b6:47:39:e9:91:bb:c7:f3:36:83:4c:eb:7f:f9:b7:66:
bc:4e:13:fd:82:55:5c:e3:58:9a:38:9b:c6:32:63:16:83:42:
97:36:ba:24:fb:f8:5e:c5:43:16:d5:32:ce:cc:51:dd:5b:6a:
58:3a:66:4b:12:3b:c4:37:a7:99:0b:33:b3:e5:6a:0f:aa:a8:
a0:92:6d:b5:df:50:8e:07:50:2b:2a:c2:f4:45:f3:4f:88:e7:
65:ef:60:e2:2e:44:f6:8c:17:e4:f3:67:71:f9:5e:79:73:46:
dd:5b:04:7e:d8:0c:85:90:f3:53:89:e1:89:0c:d1:c3:48:ab:
4f:d9:09:d2:25:c9:8e:69:69:d6:1d:50:ce:c7:27:bc:4b:44:
cd:5f:9e:ff:d3:15:f4:53:ea:4e:d2:e0:39:96:2e:41:07:e2:
c5:c5:ad:4b:3f:b0:8d:2e:dd:64:e0:30:4f:bb:ee:b8:01:db:
90:79:6a:5f:5e:cb:96:0e:d2:a1:aa:96:d9:fd:72:ae:70:24:
4f:d5:d3:fc:44:6a:22:bf:02:c6:9e:1d:99:f9:3c:0d:f3:80:
b6:a9:ef:e4:89:42:74:2e:c7:66:3f:5b:41:60:0e:08:e9:8b:
14:bf:05:8c:13:e7:25:2b:a7:c1:92:73:09:92:54:2b:6f:d4:
b9:52:79:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzVwaV+zN+uaOVavMotgzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1N2UwYzA2OThhYmMxOWE1NjhhZmVjZTZiMTkwY2VkMDMz
YTcyODUwHhcNMjYwMzI1MjEwMTI1WhcNMjYwMzI2MjEwMTI1WjAzMTEwLwYDVQQD
EyhjNDU0NDhjYjM5ODM4NmMwNmM4ZjU1YTM2MWFmZGEyMzExYmNjZjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOzWWJ4EizWYN76dJ7Z3obYNxBd6
g2sm2SA9L0oYFbzOezAqJXORDzDhkrFDJiT6qIv1OI8fE2duOG28ZgCpKkSzwsnR
cVaK1JA70sKg+7R1KmFnmeWaqksk8xANqHTKub5pQjQhym4kQP6dfO38oWNaRvwU
bd/z9M3tQ938aaq0pm8SISfJ4FSdVGCF4hNi8fCbKeC83bUh2Czuop59+aPjfc0t
+1l1er2z6wMjzYC+Zd15z8Y601v6GhVgHKFykqYZepts5ZWYOmmvfXo6W0yPiGmu
mAMnbNdWjp49xWi58Fq+j2CH/dsMc+S7SiiRiY/3w9e6Ej5SqUq3KfPz7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMRUSMs5g4bAbI9Vo2Gv2iMRvM9DMB8GA1UdIwQY
MBaAFMV+DAaYq8GaVor+zmsZDO0DOnKFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFg0TUJwaXJ3WnBXaXY3T2F4a003UU02Y29VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS80YThkMmEtNjY0Yi00NDY0LWE0ZTkt
MTcwOWY3YzdkNWU4LzEveFg0TUJwaXJ3WnBXaXY3T2F4a003UU02Y29VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS80YThkMmEtNjY0Yi00NDY0LWE0ZTktMTcwOWY3YzdkNWU4
LzEveFg0TUJwaXJ3WnBXaXY3T2F4a003UU02Y29VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYCm2Rznp
kbvH8zaDTOt/+bdmvE4T/YJVXONYmjibxjJjFoNClza6JPv4XsVDFtUyzsxR3Vtq
WDpmSxI7xDenmQszs+VqD6qooJJttd9QjgdQKyrC9EXzT4jnZe9g4i5E9owX5PNn
cfleeXNG3VsEftgMhZDzU4nhiQzRw0irT9kJ0iXJjmlp1h1QzscnvEtEzV+e/9MV
9FPqTtLgOZYuQQfixcWtSz+wjS7dZOAwT7vuuAHbkHlqX17Llg7SoaqW2f1yrnAk
T9XT/ERqIr8Cxp4dmfk8DfOAtqnv5IlCdC7HZj9bQWAOCOmLFL8FjBPnJSunwZJz
CZJUK2/UuVJ5VQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:56:53 2026 by rpki-client