Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
File: XZxbcz-6cemMB-E7A6fFWrhMyO0.mft (raw, json)
Hash identifier: WhPIftujwHzWiQWzh09eHsw4f6gbrnzfgA2SCz6C0uk=
Subject key identifier: CD:1B:B3:37:93:71:CD:58:0F:CB:79:05:FD:8C:F2:16:9E:70:30:B0
Authority key identifier: 5D:9C:5B:73:3F:BA:71:E9:8C:07:E1:3B:03:A7:C5:5A:B8:4C:C8:ED
Certificate issuer: /CN=5d9c5b733fba71e98c07e13b03a7c55ab84cc8ed
Certificate serial: 019D273AE12F8F20688CE9B32CD0F3984B4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 23:01:03 +0000
Manifest this update: Wed 25 Mar 2026 23:01:03 +0000
Manifest next update: Thu 26 Mar 2026 23:01:03 +0000
Files and hashes: 1: D7RyDh7lTL4H2jBeI3MtODxeB2w.roa (hash: j4FPb00AEU8sTGz7vN2WFChjUdkqXvKYmGt4w0kqQbw=)
2: XZxbcz-6cemMB-E7A6fFWrhMyO0.crl (hash: i3b4kVVFd/j+JIDjGkwE3YVirtN9GqnEIV2zsACRwro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:e1:2f:8f:20:68:8c:e9:b3:2c:d0:f3:98:4b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c5b733fba71e98c07e13b03a7c55ab84cc8ed
Validity
Not Before: Mar 25 23:01:03 2026 GMT
Not After : Mar 26 23:01:03 2026 GMT
Subject: CN=cd1bb3379371cd580fcb7905fd8cf2169e7030b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ff:cf:16:c6:11:d8:25:ef:fd:b6:90:29:ac:
4e:db:98:3b:99:6e:31:0f:85:36:e8:c4:22:92:c5:
93:c9:4a:77:31:7a:d0:1c:0e:a5:55:c0:2f:f9:98:
95:07:72:bb:68:c1:a7:87:2c:86:9e:fe:82:6e:2f:
b4:62:2f:86:1e:cd:90:4a:e7:4f:6f:d8:23:76:bd:
05:a0:ae:f8:d2:1f:e6:c6:24:8a:22:f2:b5:c9:0f:
e6:d1:d7:68:36:93:78:68:8f:3e:a4:ba:02:5c:70:
f3:86:32:00:be:b1:a5:16:1a:a7:75:53:5f:bb:f2:
07:0f:20:5f:89:ab:da:73:3a:49:4d:3a:5f:0c:f9:
78:a6:02:5e:8e:62:77:ad:23:d0:fe:28:1f:d4:e4:
c5:17:93:30:64:90:17:40:97:74:de:7e:1f:44:b2:
86:2b:11:da:e0:d5:05:e4:d1:f4:da:3a:cb:5a:ae:
71:37:e1:a1:f6:f8:44:66:55:3b:f8:8e:d0:5b:e8:
a2:1c:ec:8c:fa:1f:5c:45:f3:15:0f:bf:90:56:f6:
a8:19:69:17:6e:e3:dd:3e:54:8c:3b:a7:24:68:86:
95:b9:30:27:49:ec:01:00:57:20:23:91:21:42:6c:
72:77:22:0a:66:3c:7f:45:3e:55:d7:2f:4b:f9:59:
aa:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:1B:B3:37:93:71:CD:58:0F:CB:79:05:FD:8C:F2:16:9E:70:30:B0
X509v3 Authority Key Identifier:
keyid:5D:9C:5B:73:3F:BA:71:E9:8C:07:E1:3B:03:A7:C5:5A:B8:4C:C8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:a4:28:96:5c:9f:79:af:6d:bc:db:03:38:18:39:17:a2:f7:
7a:47:0c:93:86:d7:cd:4c:1b:3d:0f:35:ba:0c:6b:bf:ef:4d:
f2:9a:cf:0e:4a:80:6c:f7:b2:88:2f:8a:6e:98:38:57:6d:e8:
0b:54:d8:18:b5:d4:4c:98:a5:ca:e2:b6:ee:ca:08:b3:b2:20:
c8:10:e3:59:e0:a6:23:41:d5:5f:29:f6:70:1a:aa:13:e4:4e:
b0:f3:32:1a:dc:66:f1:9f:02:55:e7:1e:32:5b:13:7b:45:2a:
48:d4:da:3e:02:bf:2c:46:4f:66:19:2a:26:81:42:92:e9:32:
f3:65:0e:95:15:5d:34:8c:7e:ab:1e:02:4a:ee:e7:3f:ba:1f:
3f:a1:7a:7c:b2:ac:26:c3:d8:1e:fc:00:b3:f9:34:da:f3:cc:
58:3b:c4:c9:b7:b7:d9:99:f7:0e:85:c5:e3:29:dc:aa:68:74:
5b:e2:d3:b1:9b:23:ba:44:f7:a8:61:4e:8c:f3:83:0f:1e:83:
da:ab:a8:79:9c:76:8b:f0:f6:3c:f0:0d:91:f3:cb:8b:a2:4c:
04:4e:f4:3c:65:2c:da:86:d4:65:de:a3:5f:b3:98:7a:e8:84:
e9:bb:ea:c2:8e:7e:85:35:df:85:c9:81:80:5d:8c:45:52:51:
7f:52:08:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOuEvjyBojOmzLNDzmEtPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkOWM1YjczM2ZiYTcxZTk4YzA3ZTEzYjAzYTdjNTVhYjg0
Y2M4ZWQwHhcNMjYwMzI1MjMwMTAzWhcNMjYwMzI2MjMwMTAzWjAzMTEwLwYDVQQD
EyhjZDFiYjMzNzkzNzFjZDU4MGZjYjc5MDVmZDhjZjIxNjllNzAzMGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6//PFsYR2CXv/baQKaxO25g7mW4x
D4U26MQiksWTyUp3MXrQHA6lVcAv+ZiVB3K7aMGnhyyGnv6Cbi+0Yi+GHs2QSudP
b9gjdr0FoK740h/mxiSKIvK1yQ/m0ddoNpN4aI8+pLoCXHDzhjIAvrGlFhqndVNf
u/IHDyBfiavaczpJTTpfDPl4pgJejmJ3rSPQ/igf1OTFF5MwZJAXQJd03n4fRLKG
KxHa4NUF5NH02jrLWq5xN+Gh9vhEZlU7+I7QW+iiHOyM+h9cRfMVD7+QVvaoGWkX
buPdPlSMO6ckaIaVuTAnSewBAFcgI5EhQmxydyIKZjx/RT5V1y9L+VmqhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM0bszeTcc1YD8t5Bf2M8haecDCwMB8GA1UdIwQY
MBaAFF2cW3M/unHpjAfhOwOnxVq4TMjtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFp4YmN6LTZjZW1NQi1FN0E2ZkZXcmhNeU8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9hMmQ0Y2ItOTIzYS00ZTA0LThkODUt
YWQ5ZDVkYjBmMDk5LzEvWFp4YmN6LTZjZW1NQi1FN0E2ZkZXcmhNeU8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9hMmQ0Y2ItOTIzYS00ZTA0LThkODUtYWQ5ZDVkYjBmMDk5
LzEvWFp4YmN6LTZjZW1NQi1FN0E2ZkZXcmhNeU8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMKQollyf
ea9tvNsDOBg5F6L3ekcMk4bXzUwbPQ81ugxrv+9N8prPDkqAbPeyiC+Kbpg4V23o
C1TYGLXUTJilyuK27soIs7IgyBDjWeCmI0HVXyn2cBqqE+ROsPMyGtxm8Z8CVece
MlsTe0UqSNTaPgK/LEZPZhkqJoFCkuky82UOlRVdNIx+qx4CSu7nP7ofP6F6fLKs
JsPYHvwAs/k02vPMWDvEybe32Zn3DoXF4yncqmh0W+LTsZsjukT3qGFOjPODDx6D
2quoeZx2i/D2PPANkfPLi6JMBE70PGUs2obUZd6jX7OYeuiE6bvqwo5+hTXfhcmB
gF2MRVJRf1II5w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:52:14 2026 by rpki-client