Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
File: _xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft (raw, json)
Hash identifier: HfAiqVDa4wqkBJ06CGFlsjX0VKUacfonMPQWnh3WZuA=
Subject key identifier: BB:6C:35:BF:97:A4:19:67:BE:26:FA:B3:B2:B6:DE:ED:05:5A:2F:84
Authority key identifier: FF:1A:0A:75:54:38:57:03:97:4A:E1:5E:F9:47:BC:54:C0:B8:9C:95
Certificate issuer: /CN=ff1a0a7554385703974ae15ef947bc54c0b89c95
Certificate serial: 019D27A86CC9C779E0C85DCC3E01AA515FB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
Manifest number: 06A0
Signing time: Thu 26 Mar 2026 01:00:42 +0000
Manifest this update: Thu 26 Mar 2026 01:00:42 +0000
Manifest next update: Fri 27 Mar 2026 01:00:42 +0000
Files and hashes: 1: _xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl (hash: 87rY+1WfjpaGenFAPZAVF/TL6A9+GbYd1JGqHCQ9QJY=)
2: zIooxkz42P8_5ReZHQIQQDyh_E0.roa (hash: vHG8nX4oJh4/M/Rbe7SvWBLoOWc7PYioObPqt6DtUuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:6c:c9:c7:79:e0:c8:5d:cc:3e:01:aa:51:5f:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1a0a7554385703974ae15ef947bc54c0b89c95
Validity
Not Before: Mar 26 01:00:42 2026 GMT
Not After : Mar 27 01:00:42 2026 GMT
Subject: CN=bb6c35bf97a41967be26fab3b2b6deed055a2f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d3:c5:64:4a:b9:5d:78:ee:94:84:14:08:7c:
44:ac:86:93:90:10:cb:cb:0b:3e:2a:6b:ea:90:5c:
35:66:b9:95:3d:a3:1b:ad:31:7b:1d:8e:5c:1d:26:
8b:fb:35:6f:18:df:bb:25:68:7e:29:ab:ab:7e:02:
fa:b0:3b:2e:03:7a:da:e4:12:e6:ab:50:27:04:c5:
eb:b9:01:26:3a:7a:ec:2c:2d:1f:90:d8:dd:bd:0e:
8d:9f:d1:08:6c:e0:ff:e9:60:50:27:61:a6:13:6e:
61:f6:f6:42:c1:03:2f:09:0a:34:c9:3a:35:fe:a6:
b3:8b:1f:70:c8:fb:21:b5:b1:21:14:96:64:08:6e:
4a:0f:84:b9:fa:5e:cb:cf:ec:67:41:fd:a7:d3:e8:
58:24:3d:7b:15:52:81:4a:d5:6a:98:12:1a:9b:eb:
d7:3b:b9:b0:cb:93:f2:bd:b7:3b:eb:db:ea:1f:d4:
02:fc:16:30:e5:c5:d3:e8:2e:a9:82:e2:ff:be:32:
01:77:76:5a:67:4e:99:5d:64:65:55:4d:b9:1f:50:
5a:f3:67:82:ab:4a:6d:81:d3:8f:6c:79:1a:e2:aa:
d5:9c:be:f5:9d:08:ca:ce:a1:7c:fd:2d:a7:6c:b4:
36:3c:f7:64:40:e7:74:6d:c8:2d:ce:5b:dd:a0:61:
7b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:6C:35:BF:97:A4:19:67:BE:26:FA:B3:B2:B6:DE:ED:05:5A:2F:84
X509v3 Authority Key Identifier:
keyid:FF:1A:0A:75:54:38:57:03:97:4A:E1:5E:F9:47:BC:54:C0:B8:9C:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:fa:f4:b3:52:20:19:3f:bf:91:82:9f:ce:40:39:19:89:5b:
c2:08:26:91:cf:e6:e9:1f:d9:99:28:d1:25:2a:e0:cf:5f:21:
b2:4c:67:f8:9a:2c:94:28:44:a1:8f:4e:2f:5d:d8:1a:59:b8:
dc:25:14:e3:7d:ea:d6:4c:8d:67:78:52:d9:a6:48:ea:24:24:
27:e0:e5:94:48:f2:7c:1d:13:e5:ba:f2:50:6a:68:ce:40:e2:
00:ef:91:bd:f8:6a:c6:76:b2:c9:d1:9c:17:f2:01:59:f4:90:
9b:34:32:a0:a7:49:ba:49:0d:a0:24:33:8c:e2:ff:33:52:d7:
06:b7:af:59:42:73:6b:5e:43:a3:9a:93:6c:13:35:07:0c:19:
8e:10:ec:23:8a:9e:ff:08:b9:9f:df:27:73:be:17:cb:b7:36:
bb:dd:95:1e:80:63:ad:b3:3a:55:67:ff:18:18:9d:e6:ff:c6:
40:ae:26:9a:6c:9a:67:85:4f:c5:45:04:4a:a0:46:fb:ed:fe:
31:29:28:01:e6:2e:53:b5:94:a4:f5:38:9e:fc:2c:3c:19:10:
d5:f7:5c:92:c8:b9:a6:29:58:cc:e0:5d:84:7f:a9:13:01:7e:
a2:5e:b1:f2:b4:55:89:4d:be:12:a3:a1:f1:ca:c5:43:b6:57:
dc:4e:1a:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqGzJx3ngyF3MPgGqUV+3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMWEwYTc1NTQzODU3MDM5NzRhZTE1ZWY5NDdiYzU0YzBi
ODljOTUwHhcNMjYwMzI2MDEwMDQyWhcNMjYwMzI3MDEwMDQyWjAzMTEwLwYDVQQD
EyhiYjZjMzViZjk3YTQxOTY3YmUyNmZhYjNiMmI2ZGVlZDA1NWEyZjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNPFZEq5XXjulIQUCHxErIaTkBDL
yws+KmvqkFw1ZrmVPaMbrTF7HY5cHSaL+zVvGN+7JWh+KaurfgL6sDsuA3ra5BLm
q1AnBMXruQEmOnrsLC0fkNjdvQ6Nn9EIbOD/6WBQJ2GmE25h9vZCwQMvCQo0yTo1
/qazix9wyPshtbEhFJZkCG5KD4S5+l7Lz+xnQf2n0+hYJD17FVKBStVqmBIam+vX
O7mwy5Pyvbc769vqH9QC/BYw5cXT6C6pguL/vjIBd3ZaZ06ZXWRlVU25H1Ba82eC
q0ptgdOPbHka4qrVnL71nQjKzqF8/S2nbLQ2PPdkQOd0bcgtzlvdoGF73QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLtsNb+XpBlnvib6s7K23u0FWi+EMB8GA1UdIwQY
MBaAFP8aCnVUOFcDl0rhXvlHvFTAuJyVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3hvS2RWUTRWd09YU3VGZS1VZThWTUM0bkpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8yNjkyOTAtNTlmZi00MjMzLThmYTAt
Mjc1NTBiMjE5NTA3LzEvX3hvS2RWUTRWd09YU3VGZS1VZThWTUM0bkpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy8yNjkyOTAtNTlmZi00MjMzLThmYTAtMjc1NTBiMjE5NTA3
LzEvX3hvS2RWUTRWd09YU3VGZS1VZThWTUM0bkpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAavr0s1Ig
GT+/kYKfzkA5GYlbwggmkc/m6R/ZmSjRJSrgz18hskxn+JoslChEoY9OL13YGlm4
3CUU433q1kyNZ3hS2aZI6iQkJ+DllEjyfB0T5bryUGpozkDiAO+RvfhqxnayydGc
F/IBWfSQmzQyoKdJukkNoCQzjOL/M1LXBrevWUJza15Do5qTbBM1BwwZjhDsI4qe
/wi5n98nc74Xy7c2u92VHoBjrbM6VWf/GBid5v/GQK4mmmyaZ4VPxUUESqBG++3+
MSkoAeYuU7WUpPU4nvwsPBkQ1fdcksi5pilYzOBdhH+pEwF+ol6x8rRViU2+EqOh
8crFQ7ZX3E4asw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:56:20 2026 by rpki-client