Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
File: XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft (raw, json)
Hash identifier: 1gI7+x+3SFQD2nB6Wo6yUdN2EOTShQHAH2yIfHr68Rs=
Subject key identifier: 30:6A:DE:42:21:2F:35:5F:EA:64:49:00:4B:F7:8F:03:BE:36:C5:CD
Authority key identifier: 5D:F5:ED:04:0E:FE:2E:58:17:54:DE:B5:C3:CD:82:D9:9D:FE:E8:D9
Certificate issuer: /CN=5df5ed040efe2e581754deb5c3cd82d99dfee8d9
Certificate serial: 019D284DA347A0D3CAC9236772B8168D3CF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
Manifest number: 188C
Signing time: Thu 26 Mar 2026 04:01:09 +0000
Manifest this update: Thu 26 Mar 2026 04:01:09 +0000
Manifest next update: Fri 27 Mar 2026 04:01:09 +0000
Files and hashes: 1: Npw06d3i6OT6W1cbnDgGuSW4ge4.roa (hash: XuYzx4X8wj26HqV6SxCe8B8EhqEndYSd+I3KwtxjVxU=)
2: XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl (hash: C7Aun3kHPU5EQyTyANBrewd/gGV069EgUCqvTDuzQA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:a3:47:a0:d3:ca:c9:23:67:72:b8:16:8d:3c:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df5ed040efe2e581754deb5c3cd82d99dfee8d9
Validity
Not Before: Mar 26 04:01:09 2026 GMT
Not After : Mar 27 04:01:09 2026 GMT
Subject: CN=306ade42212f355fea6449004bf78f03be36c5cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6a:46:9c:57:23:d4:dd:0d:1e:33:6f:a6:05:
04:d0:5a:1c:b5:e3:9b:fc:70:b6:d0:cf:4e:84:26:
55:40:09:a5:02:9b:42:b2:b2:88:bc:ce:a0:66:a5:
cf:28:6c:f5:a5:a9:94:2e:77:4a:f0:90:f5:d5:25:
49:08:db:21:5f:9d:99:12:f1:3a:a1:06:76:ba:27:
95:6a:14:91:7b:eb:3d:5b:01:d9:7b:85:49:c5:97:
b0:bd:21:09:b2:cc:ba:ae:63:48:b3:54:cf:c2:59:
5b:c2:ba:62:51:d7:a9:e0:67:2c:3c:22:2b:37:d2:
24:a9:86:6b:7b:6f:16:66:1b:f0:07:55:52:f5:24:
64:d4:d5:53:59:d1:b5:85:24:9a:19:ef:8d:44:15:
19:b1:54:3a:0d:bf:54:f3:e7:5d:72:6a:8f:84:68:
23:cf:5f:b6:ce:3e:2f:a0:3c:9f:44:be:af:e7:59:
4b:ea:50:56:6d:91:dd:91:8b:de:5c:45:10:a8:29:
15:cd:a8:bb:98:38:4d:10:71:95:bc:20:0c:39:50:
b0:a3:96:02:7e:94:00:8f:dd:8e:d7:f1:14:3e:92:
ca:0e:f9:63:39:e7:71:1f:5d:47:c4:5f:39:9f:89:
e7:86:9f:48:ca:ff:a1:b0:22:ee:7a:46:74:58:da:
c7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:6A:DE:42:21:2F:35:5F:EA:64:49:00:4B:F7:8F:03:BE:36:C5:CD
X509v3 Authority Key Identifier:
keyid:5D:F5:ED:04:0E:FE:2E:58:17:54:DE:B5:C3:CD:82:D9:9D:FE:E8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:e3:9b:ee:51:50:56:73:0a:ad:e0:91:f0:7d:4a:e9:f2:62:
5d:0c:b1:7a:cd:78:2b:ee:08:c1:17:2c:3d:eb:56:2d:8d:eb:
a8:06:8b:3d:9c:09:a1:67:f7:d7:20:3e:e3:94:f5:71:f1:8a:
00:5e:e1:66:76:8c:c7:0d:c8:14:b9:fa:3e:4a:2e:e6:40:6a:
17:fa:4b:57:4f:ad:3b:f6:1c:05:d7:da:cf:97:11:92:fc:bb:
5e:f7:bb:88:90:b0:ba:86:40:82:5e:d7:1f:78:49:07:a8:e8:
53:ed:5b:0e:e7:9b:ac:15:f2:17:90:0f:a7:dc:ff:f3:e9:1d:
f6:61:06:71:86:e2:67:52:5e:e0:22:be:fd:ed:81:95:f4:10:
a4:8a:23:23:dc:81:82:03:d1:6f:a9:77:12:60:79:e0:e1:84:
f2:7a:fc:82:6f:48:1a:e7:67:b2:f0:de:9f:40:c0:6e:b8:a4:
79:40:54:70:be:63:2b:c6:5b:b0:08:10:58:ed:70:59:84:a2:
b0:c7:5e:2f:67:c4:f8:e7:17:65:0e:83:b2:97:c8:fc:56:3f:
74:f3:40:d3:a5:8c:49:38:54:61:00:94:d7:1e:eb:48:1a:59:
71:3d:24:c4:a0:b6:7e:4a:f7:ab:26:96:6c:35:da:d0:eb:f9:
68:3a:ea:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTaNHoNPKySNncrgWjTz3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZjVlZDA0MGVmZTJlNTgxNzU0ZGViNWMzY2Q4MmQ5OWRm
ZWU4ZDkwHhcNMjYwMzI2MDQwMTA5WhcNMjYwMzI3MDQwMTA5WjAzMTEwLwYDVQQD
EygzMDZhZGU0MjIxMmYzNTVmZWE2NDQ5MDA0YmY3OGYwM2JlMzZjNWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2pGnFcj1N0NHjNvpgUE0FocteOb
/HC20M9OhCZVQAmlAptCsrKIvM6gZqXPKGz1pamULndK8JD11SVJCNshX52ZEvE6
oQZ2uieVahSRe+s9WwHZe4VJxZewvSEJssy6rmNIs1TPwllbwrpiUdep4GcsPCIr
N9IkqYZre28WZhvwB1VS9SRk1NVTWdG1hSSaGe+NRBUZsVQ6Db9U8+ddcmqPhGgj
z1+2zj4voDyfRL6v51lL6lBWbZHdkYveXEUQqCkVzai7mDhNEHGVvCAMOVCwo5YC
fpQAj92O1/EUPpLKDvljOedxH11HxF85n4nnhp9Iyv+hsCLuekZ0WNrHxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDBq3kIhLzVf6mRJAEv3jwO+NsXNMB8GA1UdIwQY
MBaAFF317QQO/i5YF1TetcPNgtmd/ujZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGZYdEJBNy1MbGdYVk42MXc4MkMyWjMtNk5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9iM2Q3NmYtNmVmOS00YzRhLTgxMmMt
YmVmZTRiMzRjNmYwLzEvWGZYdEJBNy1MbGdYVk42MXc4MkMyWjMtNk5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9iM2Q3NmYtNmVmOS00YzRhLTgxMmMtYmVmZTRiMzRjNmYw
LzEvWGZYdEJBNy1MbGdYVk42MXc4MkMyWjMtNk5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAreOb7lFQ
VnMKreCR8H1K6fJiXQyxes14K+4IwRcsPetWLY3rqAaLPZwJoWf31yA+45T1cfGK
AF7hZnaMxw3IFLn6Pkou5kBqF/pLV0+tO/YcBdfaz5cRkvy7Xve7iJCwuoZAgl7X
H3hJB6joU+1bDuebrBXyF5APp9z/8+kd9mEGcYbiZ1Je4CK+/e2BlfQQpIojI9yB
ggPRb6l3EmB54OGE8nr8gm9IGudnsvDen0DAbrikeUBUcL5jK8ZbsAgQWO1wWYSi
sMdeL2fE+OcXZQ6DspfI/FY/dPNA06WMSThUYQCU1x7rSBpZcT0kxKC2fkr3qyaW
bDXa0Ov5aDrq9Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:57:48 2026 by rpki-client