Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
File: xaL0JAfyHJ12kPsw_YzbK_320DA.mft (raw, json)
Hash identifier: ID2g+hAMCkqsaNkHfuxiXtJ1SjRkFHv0EXzBxwV/IFk=
Subject key identifier: A2:5C:C5:14:AF:56:02:3C:73:CB:25:8B:3B:63:F7:6B:19:57:A3:60
Authority key identifier: C5:A2:F4:24:07:F2:1C:9D:76:90:FB:30:FD:8C:DB:2B:FD:F6:D0:30
Certificate issuer: /CN=c5a2f42407f21c9d7690fb30fd8cdb2bfdf6d030
Certificate serial: 019D27722F16F53D3462687FEBB1506AC3C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
Manifest number: 18A3
Signing time: Thu 26 Mar 2026 00:01:27 +0000
Manifest this update: Thu 26 Mar 2026 00:01:27 +0000
Manifest next update: Fri 27 Mar 2026 00:01:27 +0000
Files and hashes: 1: vvOgIMkDpg0381NKvOJ6xEsVrhU.roa (hash: Ilfe2d/82ILTFX47xfIYllXXNOO6y9+T+nkxBpSb/2g=)
2: xaL0JAfyHJ12kPsw_YzbK_320DA.crl (hash: AklerjfhrRcphntmog5Fu2zNPlgrAP0o9S8X2CBFPAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:2f:16:f5:3d:34:62:68:7f:eb:b1:50:6a:c3:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a2f42407f21c9d7690fb30fd8cdb2bfdf6d030
Validity
Not Before: Mar 26 00:01:27 2026 GMT
Not After : Mar 27 00:01:27 2026 GMT
Subject: CN=a25cc514af56023c73cb258b3b63f76b1957a360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:79:61:e0:cc:c5:75:c6:b2:a6:bd:ef:dd:ff:
cc:f3:21:96:33:5d:9e:65:44:b7:96:62:5e:a8:f2:
1f:4f:98:78:eb:fe:db:03:7d:82:ad:1e:87:14:e1:
14:a9:0b:a1:12:dd:0f:41:54:50:0e:99:16:1b:40:
7c:13:6f:14:9c:14:02:64:c5:ae:b1:9d:9b:a7:07:
ac:97:21:a2:5e:bc:1f:34:f6:6e:53:2e:1d:49:f0:
01:b4:c8:2b:a7:e6:b7:67:70:c4:14:a9:8c:d6:6e:
00:81:46:de:84:6a:35:9d:48:4c:14:7e:1a:d5:32:
0f:77:2c:75:27:2f:55:d5:c7:41:c1:bc:0f:cb:42:
5e:f5:6f:b9:54:fa:63:ed:91:c7:59:9c:f0:e0:1f:
02:5b:2d:b1:8d:b2:3f:37:de:f5:c9:1d:99:ed:fb:
9b:f4:ec:56:76:1d:a1:16:f1:08:31:20:2a:ff:84:
3b:b6:2b:5e:db:07:42:e8:39:23:34:3b:ba:3d:19:
91:d7:28:33:06:ab:64:c8:16:db:7b:89:76:54:69:
38:f8:95:c4:78:45:5a:2a:21:45:eb:14:04:41:ff:
bb:66:e9:0e:eb:70:a1:8b:80:00:3a:0a:59:80:89:
cb:6c:7b:f3:31:ac:c8:5d:31:a6:72:16:f3:c9:92:
bb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:5C:C5:14:AF:56:02:3C:73:CB:25:8B:3B:63:F7:6B:19:57:A3:60
X509v3 Authority Key Identifier:
keyid:C5:A2:F4:24:07:F2:1C:9D:76:90:FB:30:FD:8C:DB:2B:FD:F6:D0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:3b:f4:d6:ba:57:13:64:5d:a4:98:9f:de:97:36:82:77:7c:
fe:59:f9:23:d0:89:fa:dc:0c:43:18:f6:2b:0b:3d:b5:33:5e:
b8:73:e4:96:b5:f2:c0:b1:97:eb:f1:86:89:0a:06:2b:65:bc:
be:00:ff:f7:8b:47:af:94:fe:c2:a6:c3:ed:15:14:59:65:2c:
06:93:fb:1f:9d:0d:cf:78:45:b5:4a:a8:ca:1e:54:67:96:39:
8e:ab:8c:e9:8d:1d:44:ba:2e:bb:d7:75:15:b3:25:e4:08:ac:
ab:b6:a0:6a:60:14:6f:32:df:45:da:0f:e8:f7:e3:0c:fc:58:
45:16:39:a0:b0:08:29:a6:89:59:e9:03:a1:19:19:f9:f7:5f:
c3:26:75:0c:62:4d:f8:89:95:e7:6c:77:95:cb:f1:ab:d6:ba:
cf:05:a3:df:04:3d:2e:64:2e:46:57:d4:bb:96:3c:bd:c3:ab:
06:f0:30:ca:82:49:2f:7d:89:54:ab:e9:cd:47:67:cc:82:2a:
31:3e:32:12:0a:23:49:c8:8a:4d:df:3e:96:59:e1:19:9d:6a:
8f:d6:59:79:7a:ec:89:9f:dc:42:db:34:b9:be:73:ef:06:e5:
b4:b2:d1:3c:e6:6c:19:5e:32:7d:27:c5:5a:b7:7a:12:90:53:
59:52:91:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nci8W9T00Ymh/67FQasPDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1YTJmNDI0MDdmMjFjOWQ3NjkwZmIzMGZkOGNkYjJiZmRm
NmQwMzAwHhcNMjYwMzI2MDAwMTI3WhcNMjYwMzI3MDAwMTI3WjAzMTEwLwYDVQQD
EyhhMjVjYzUxNGFmNTYwMjNjNzNjYjI1OGIzYjYzZjc2YjE5NTdhMzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXlh4MzFdcaypr3v3f/M8yGWM12e
ZUS3lmJeqPIfT5h46/7bA32CrR6HFOEUqQuhEt0PQVRQDpkWG0B8E28UnBQCZMWu
sZ2bpweslyGiXrwfNPZuUy4dSfABtMgrp+a3Z3DEFKmM1m4AgUbehGo1nUhMFH4a
1TIPdyx1Jy9V1cdBwbwPy0Je9W+5VPpj7ZHHWZzw4B8CWy2xjbI/N971yR2Z7fub
9OxWdh2hFvEIMSAq/4Q7tite2wdC6DkjNDu6PRmR1ygzBqtkyBbbe4l2VGk4+JXE
eEVaKiFF6xQEQf+7ZukO63Chi4AAOgpZgInLbHvzMazIXTGmchbzyZK74wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKJcxRSvVgI8c8sliztj92sZV6NgMB8GA1UdIwQY
MBaAFMWi9CQH8hyddpD7MP2M2yv99tAwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGFMMEpBZnlISjEya1Bzd19ZemJLXzMyMERBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8xYTE4ZTEtNjdjOC00OTJlLThmYmEt
ZmI1YzYyZTQyZjZiLzEveGFMMEpBZnlISjEya1Bzd19ZemJLXzMyMERBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8xYTE4ZTEtNjdjOC00OTJlLThmYmEtZmI1YzYyZTQyZjZi
LzEveGFMMEpBZnlISjEya1Bzd19ZemJLXzMyMERBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXDv01rpX
E2RdpJif3pc2gnd8/ln5I9CJ+twMQxj2Kws9tTNeuHPklrXywLGX6/GGiQoGK2W8
vgD/94tHr5T+wqbD7RUUWWUsBpP7H50Nz3hFtUqoyh5UZ5Y5jquM6Y0dRLouu9d1
FbMl5Aisq7agamAUbzLfRdoP6PfjDPxYRRY5oLAIKaaJWekDoRkZ+fdfwyZ1DGJN
+ImV52x3lcvxq9a6zwWj3wQ9LmQuRlfUu5Y8vcOrBvAwyoJJL32JVKvpzUdnzIIq
MT4yEgojSciKTd8+llnhGZ1qj9ZZeXrsiZ/cQts0ub5z7wbltLLRPOZsGV4yfSfF
Wrd6EpBTWVKRvw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:08 2026 by rpki-client