Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft
File: XyxxJryPOQVnRN4hOyzia3a8mSM.mft (raw, json)
Hash identifier: 9HxhglWSfnLIf4PFSaYriSTTG79OyvdS7OuD9rhkVvM=
Subject key identifier: AC:BE:CD:F4:5E:D8:2B:18:E6:84:EA:8D:A0:38:48:4D:69:DE:78:E2
Authority key identifier: 5F:2C:71:26:BC:8F:39:05:67:44:DE:21:3B:2C:E2:6B:76:BC:99:23
Certificate issuer: /CN=5f2c7126bc8f39056744de213b2ce26b76bc9923
Certificate serial: 019D273B39306F10A9CB3E8E19007F26B665
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 23:01:25 +0000
Manifest this update: Wed 25 Mar 2026 23:01:25 +0000
Manifest next update: Thu 26 Mar 2026 23:01:25 +0000
Files and hashes: 1: XyxxJryPOQVnRN4hOyzia3a8mSM.crl (hash: p6SGI9qqnemdFnnrPKXkvtxRpUFqBIvg+SVeM7zIvk0=)
2: rUpXn5OLFWI8Nb4opFx-ZMazNF4.roa (hash: CyKHZsof9BroFMJ4kJHFaNGpd7KJ3UUKrH85vt5M3yM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:39:30:6f:10:a9:cb:3e:8e:19:00:7f:26:b6:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f2c7126bc8f39056744de213b2ce26b76bc9923
Validity
Not Before: Mar 25 23:01:25 2026 GMT
Not After : Mar 26 23:01:25 2026 GMT
Subject: CN=acbecdf45ed82b18e684ea8da038484d69de78e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:57:e8:b2:2a:ee:59:e0:2e:37:ac:82:a9:9d:
ff:06:75:c3:8e:63:7a:85:42:91:1a:c4:9e:41:ed:
49:0e:f9:09:22:7f:0b:83:16:ab:d8:69:e2:41:5c:
38:79:e0:cd:34:b8:46:3c:3e:4d:42:cf:f3:c2:6d:
ad:56:d7:73:f6:12:55:e2:09:00:a2:82:e6:12:5f:
4b:cd:2e:98:30:39:71:a2:78:79:de:13:be:00:8a:
90:6e:5e:60:c9:52:a7:3d:83:e8:c4:b7:e3:aa:08:
eb:cf:a6:ee:01:a8:4d:fb:8c:53:b4:c9:5b:ef:d3:
93:38:f0:b0:87:f0:3a:65:ac:90:76:ba:45:6a:4a:
08:03:68:ff:db:46:68:ed:13:02:fd:92:4a:6f:ab:
1e:e4:d0:9c:13:ba:be:ff:73:26:3a:6c:69:19:59:
44:2e:d4:a4:02:16:a8:9d:c2:5e:f0:a9:a4:28:1c:
88:41:0b:55:95:e2:54:cc:35:be:6c:82:9c:c1:77:
63:92:d3:58:6b:65:16:41:45:7e:81:ca:88:89:02:
63:f8:71:4e:b9:5f:60:ee:8a:d2:ca:0d:cb:cf:11:
7b:44:89:6c:93:36:b1:46:56:a8:f9:e8:9e:47:dd:
72:7c:2a:d0:4d:02:45:17:0e:93:5f:d7:ff:68:e8:
f5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:BE:CD:F4:5E:D8:2B:18:E6:84:EA:8D:A0:38:48:4D:69:DE:78:E2
X509v3 Authority Key Identifier:
keyid:5F:2C:71:26:BC:8F:39:05:67:44:DE:21:3B:2C:E2:6B:76:BC:99:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:7e:46:24:0c:2f:eb:f9:1d:df:91:05:1b:23:9c:ca:39:42:
2e:80:89:ea:73:22:34:61:f9:2a:7d:5f:31:b6:df:79:b5:66:
2d:b5:48:04:86:f8:e1:43:2b:73:5b:a2:e8:94:bb:a1:f7:5b:
d0:6e:f9:1d:81:e6:4f:f2:23:86:cd:a4:02:4a:8b:0d:24:bc:
31:d0:4f:9e:4a:b1:da:e8:30:e6:e6:df:f4:d7:a2:46:d2:4e:
e4:ce:f7:4e:d4:f2:02:b9:6a:37:20:be:cd:77:79:44:f8:cb:
a2:47:bf:f9:e3:a1:2d:53:eb:e2:72:2f:f3:18:33:34:08:f5:
fa:65:f8:83:0a:1c:bd:10:39:78:51:78:00:eb:df:ca:7f:77:
cc:90:ec:c7:09:ad:a4:f0:40:f6:59:e2:3d:ac:f8:8c:c3:00:
99:dc:95:44:3d:19:d0:f5:be:9e:86:80:52:d5:63:4a:d5:56:
4d:ec:72:84:a8:bc:90:ad:54:87:7a:73:6b:06:6d:5d:b0:6c:
03:2d:a0:92:ec:32:b8:87:d6:5b:07:9c:49:2e:c1:86:fb:54:
77:df:09:85:46:c9:76:b7:6b:6f:da:46:b7:3b:75:4a:54:ea:
35:3c:4d:7e:83:69:49:15:72:e4:39:de:bb:76:a0:43:9a:3f:
fc:0e:14:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOzkwbxCpyz6OGQB/JrZlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMmM3MTI2YmM4ZjM5MDU2NzQ0ZGUyMTNiMmNlMjZiNzZi
Yzk5MjMwHhcNMjYwMzI1MjMwMTI1WhcNMjYwMzI2MjMwMTI1WjAzMTEwLwYDVQQD
EyhhY2JlY2RmNDVlZDgyYjE4ZTY4NGVhOGRhMDM4NDg0ZDY5ZGU3OGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslfosiruWeAuN6yCqZ3/BnXDjmN6
hUKRGsSeQe1JDvkJIn8Lgxar2GniQVw4eeDNNLhGPD5NQs/zwm2tVtdz9hJV4gkA
ooLmEl9LzS6YMDlxonh53hO+AIqQbl5gyVKnPYPoxLfjqgjrz6buAahN+4xTtMlb
79OTOPCwh/A6ZayQdrpFakoIA2j/20Zo7RMC/ZJKb6se5NCcE7q+/3MmOmxpGVlE
LtSkAhaoncJe8KmkKByIQQtVleJUzDW+bIKcwXdjktNYa2UWQUV+gcqIiQJj+HFO
uV9g7orSyg3LzxF7RIlskzaxRlao+eieR91yfCrQTQJFFw6TX9f/aOj1MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKy+zfRe2CsY5oTqjaA4SE1p3njiMB8GA1UdIwQY
MBaAFF8scSa8jzkFZ0TeITss4mt2vJkjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHl4eEpyeVBPUVZuUk40aE95emlhM2E4bVNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9mNzZiMWQtNDhjYi00YWIxLTkwZWMt
ZTYxNWY1NmY3OGIxLzEvWHl4eEpyeVBPUVZuUk40aE95emlhM2E4bVNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9mNzZiMWQtNDhjYi00YWIxLTkwZWMtZTYxNWY1NmY3OGIx
LzEvWHl4eEpyeVBPUVZuUk40aE95emlhM2E4bVNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQn5GJAwv
6/kd35EFGyOcyjlCLoCJ6nMiNGH5Kn1fMbbfebVmLbVIBIb44UMrc1ui6JS7ofdb
0G75HYHmT/Ijhs2kAkqLDSS8MdBPnkqx2ugw5ubf9NeiRtJO5M73TtTyArlqNyC+
zXd5RPjLoke/+eOhLVPr4nIv8xgzNAj1+mX4gwocvRA5eFF4AOvfyn93zJDsxwmt
pPBA9lniPaz4jMMAmdyVRD0Z0PW+noaAUtVjStVWTexyhKi8kK1Uh3pzawZtXbBs
Ay2gkuwyuIfWWwecSS7BhvtUd98JhUbJdrdrb9pGtzt1SlTqNTxNfoNpSRVy5Dne
u3agQ5o//A4UDQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:43:57 2026 by rpki-client