Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft
File: X6TYBGSXj26_upX3RaMwVyb3LZM.mft (raw, json)
Hash identifier: dgOiKYVAjiHAbFAUr5Y1cAQ77NoRlBPW5dExkNwRjMk=
Subject key identifier: A4:4D:29:4D:E4:98:B0:27:9C:55:67:BC:EA:B9:D8:3A:20:B7:F9:1E
Authority key identifier: 5F:A4:D8:04:64:97:8F:6E:BF:BA:95:F7:45:A3:30:57:26:F7:2D:93
Certificate issuer: /CN=5fa4d80464978f6ebfba95f745a3305726f72d93
Certificate serial: 019D27A8D9BBE2D190E824052AD28EE78EF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft
Manifest number: 129B
Signing time: Thu 26 Mar 2026 01:01:10 +0000
Manifest this update: Thu 26 Mar 2026 01:01:10 +0000
Manifest next update: Fri 27 Mar 2026 01:01:10 +0000
Files and hashes: 1: OgANtrj8j6WImSC_x9463NVhsNw.roa (hash: 0EdUSPwLZaULLi34jwJduN5d3rfdYn4zQ6i+IIL5P2I=)
2: X6TYBGSXj26_upX3RaMwVyb3LZM.crl (hash: hvcHv3oXSBKAPvMYSeLe/4EEWhtMi+Cokxjt1526UoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:d9:bb:e2:d1:90:e8:24:05:2a:d2:8e:e7:8e:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fa4d80464978f6ebfba95f745a3305726f72d93
Validity
Not Before: Mar 26 01:01:10 2026 GMT
Not After : Mar 27 01:01:10 2026 GMT
Subject: CN=a44d294de498b0279c5567bceab9d83a20b7f91e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6e:f7:ef:ba:85:8f:3d:2e:d5:2e:4c:75:9c:
53:2a:c5:72:db:ae:64:f5:9e:e2:e2:f2:a0:d4:3b:
3e:ef:cc:80:91:43:7c:b2:75:24:76:71:b0:67:10:
9e:ee:3a:80:89:5c:6f:18:2d:46:cf:af:1b:52:fe:
4f:e7:fd:19:16:73:08:54:45:b8:42:db:80:74:d5:
c8:7a:85:9f:65:36:bc:1e:e5:36:c4:71:05:91:f8:
ac:b8:a4:bd:41:54:ac:2c:2d:e2:f5:59:44:40:cd:
fa:78:fe:02:5b:40:0a:de:e4:42:c4:de:69:33:0c:
d2:29:95:7d:16:f5:19:2b:96:01:8f:eb:de:9b:04:
9e:35:fa:eb:2b:55:8a:53:52:8a:dd:f8:a1:c9:51:
7a:db:5a:41:29:8d:ef:ec:70:42:74:19:88:9a:e8:
84:68:1b:8e:90:00:45:91:06:83:d1:fe:69:c7:5e:
30:85:e4:0e:d0:b7:e1:80:6e:6b:33:7c:ca:c3:ed:
b7:21:5e:3b:fa:78:e0:b2:7b:f2:47:bd:b6:59:50:
ca:0c:73:9d:67:ea:8c:42:36:82:4e:7c:5c:f6:cc:
41:a9:0a:77:60:77:17:a7:90:b3:8d:b1:e8:c8:dd:
00:1a:77:bf:b3:b5:9e:57:ba:12:cf:46:58:d4:ac:
f7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:4D:29:4D:E4:98:B0:27:9C:55:67:BC:EA:B9:D8:3A:20:B7:F9:1E
X509v3 Authority Key Identifier:
keyid:5F:A4:D8:04:64:97:8F:6E:BF:BA:95:F7:45:A3:30:57:26:F7:2D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:d7:c8:1e:70:92:da:3a:48:f6:3f:7f:8e:7f:08:59:fa:d0:
91:ef:56:e5:9e:32:5f:15:12:ae:d2:84:d6:ca:2b:55:2f:85:
af:f8:eb:c2:8e:c1:96:36:e6:45:ab:a4:32:e6:bc:a3:dd:e6:
32:df:6a:0e:8f:e9:3f:41:c5:59:c9:1a:54:94:5b:ab:04:1d:
8b:24:88:cc:7f:82:3f:09:fd:94:dc:30:59:8c:08:6e:59:b8:
a0:57:22:4a:14:9b:82:13:8c:44:63:2a:de:71:14:e1:95:6d:
ca:0c:b2:61:3e:1f:69:33:92:92:ca:2c:9c:34:c3:8e:c1:9c:
4c:cf:88:66:23:34:b4:0a:6f:14:0d:bf:91:0e:b8:7b:83:51:
fe:09:37:4f:c6:26:cc:30:02:e9:4b:06:8c:51:8a:99:5e:bc:
b3:5f:49:44:7a:dd:1e:b4:93:de:24:d4:c2:62:8f:38:d9:fd:
56:f0:44:ae:81:55:63:1d:8a:ab:60:73:89:86:10:a1:ca:84:
a1:c9:a9:23:05:b5:d9:e4:b5:8a:80:8a:66:43:58:94:78:92:
bc:44:a7:8f:89:96:1c:82:52:04:a9:f4:f4:eb:e0:51:58:0d:
8b:ab:c7:55:24:d9:f8:d8:a8:97:dc:e4:41:23:7a:8b:75:bb:
0a:c8:8d:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqNm74tGQ6CQFKtKO5472MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYTRkODA0NjQ5NzhmNmViZmJhOTVmNzQ1YTMzMDU3MjZm
NzJkOTMwHhcNMjYwMzI2MDEwMTEwWhcNMjYwMzI3MDEwMTEwWjAzMTEwLwYDVQQD
EyhhNDRkMjk0ZGU0OThiMDI3OWM1NTY3YmNlYWI5ZDgzYTIwYjdmOTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy27377qFjz0u1S5MdZxTKsVy265k
9Z7i4vKg1Ds+78yAkUN8snUkdnGwZxCe7jqAiVxvGC1Gz68bUv5P5/0ZFnMIVEW4
QtuAdNXIeoWfZTa8HuU2xHEFkfisuKS9QVSsLC3i9VlEQM36eP4CW0AK3uRCxN5p
MwzSKZV9FvUZK5YBj+vemwSeNfrrK1WKU1KK3fihyVF621pBKY3v7HBCdBmImuiE
aBuOkABFkQaD0f5px14wheQO0LfhgG5rM3zKw+23IV47+njgsnvyR722WVDKDHOd
Z+qMQjaCTnxc9sxBqQp3YHcXp5CzjbHoyN0AGne/s7WeV7oSz0ZY1Kz3AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKRNKU3kmLAnnFVnvOq52Dogt/keMB8GA1UdIwQY
MBaAFF+k2ARkl49uv7qV90WjMFcm9y2TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDZUWUJHU1hqMjZfdXBYM1JhTXdWeWIzTFpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMDUwYjQtOWJhMC00ZTg1LTlkNzYt
NGZhNjI0MmI4YTNhLzEvWDZUWUJHU1hqMjZfdXBYM1JhTXdWeWIzTFpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9lMDUwYjQtOWJhMC00ZTg1LTlkNzYtNGZhNjI0MmI4YTNh
LzEvWDZUWUJHU1hqMjZfdXBYM1JhTXdWeWIzTFpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAItfIHnCS
2jpI9j9/jn8IWfrQke9W5Z4yXxUSrtKE1sorVS+Fr/jrwo7BljbmRaukMua8o93m
Mt9qDo/pP0HFWckaVJRbqwQdiySIzH+CPwn9lNwwWYwIblm4oFciShSbghOMRGMq
3nEU4ZVtygyyYT4faTOSksosnDTDjsGcTM+IZiM0tApvFA2/kQ64e4NR/gk3T8Ym
zDAC6UsGjFGKmV68s19JRHrdHrST3iTUwmKPONn9VvBEroFVYx2Kq2BziYYQocqE
ocmpIwW12eS1ioCKZkNYlHiSvESnj4mWHIJSBKn09OvgUVgNi6vHVSTZ+Niol9zk
QSN6i3W7CsiN5A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:51:05 2026 by rpki-client