Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
File: XU1jEWbo7t54curYq5qBrch31NE.mft (raw, json)
Hash identifier: m4LtoA+5+l7JitURNTlSg3QNGgs5zshpdLssWGAQPew=
Subject key identifier: 6A:4A:D7:A3:D6:68:21:9D:5C:4C:3E:DE:08:FE:1E:AC:15:7C:2C:AC
Authority key identifier: 5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1
Certificate issuer: /CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1
Certificate serial: 019D29CE9B467513022B02AE617E195E5740
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
Manifest number: 0BAA
Signing time: Thu 26 Mar 2026 11:01:39 +0000
Manifest this update: Thu 26 Mar 2026 11:01:39 +0000
Manifest next update: Fri 27 Mar 2026 11:01:39 +0000
Files and hashes: 1: 6KBg76wO49ZTNeUZLEQvdfuAEnc.roa (hash: C78F4tRrcjaUZ0tkRMKZ6DDDl8hmlq6D1hHs1hdNls0=)
2: XU1jEWbo7t54curYq5qBrch31NE.crl (hash: IKtseefbOnCkl3QbSL5vI+1f0NmEd/1JcI+VtlHLJY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:9b:46:75:13:02:2b:02:ae:61:7e:19:5e:57:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1
Validity
Not Before: Mar 26 11:01:39 2026 GMT
Not After : Mar 27 11:01:39 2026 GMT
Subject: CN=6a4ad7a3d668219d5c4c3ede08fe1eac157c2cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fc:f6:36:f0:7d:9a:60:5d:41:ca:fb:83:e7:
6e:0c:23:99:0d:0e:c7:57:e7:39:b2:d3:bd:5f:7a:
a2:d5:ad:6a:ea:75:00:a1:8a:27:c4:17:c1:85:f9:
3c:1e:8b:cc:d4:86:e8:bc:37:c1:12:9a:d2:19:2c:
82:8f:c5:3f:db:c4:45:83:2c:ee:06:09:36:d2:fe:
50:3a:06:e7:d4:3f:f5:e2:a2:79:95:a7:f9:f6:8a:
f3:bb:64:39:62:94:c6:ed:d5:52:3b:ba:f9:05:66:
cb:63:1c:93:07:b5:c6:c5:c4:45:e4:9b:0b:2e:06:
9b:7a:95:43:16:93:38:2e:23:71:aa:1d:48:4c:01:
ae:06:1a:9f:01:d4:33:5f:68:30:c0:bc:c9:8c:d2:
e9:b1:73:a0:18:71:e0:b4:cc:a5:42:b4:77:51:ed:
25:e0:93:23:98:04:9d:36:f6:65:b6:32:1f:4e:04:
e8:de:7b:15:ef:ec:d1:af:e1:82:74:e0:10:9f:12:
86:11:97:c0:ac:5e:4c:81:a0:0b:a2:62:33:57:99:
02:ef:ef:35:61:96:5f:55:8e:00:8c:5a:d6:65:a8:
a0:fa:c2:cc:c1:a3:4f:81:d9:ff:30:5f:74:2f:55:
b9:3b:03:af:7b:86:19:e6:d1:38:db:1d:0a:a3:88:
07:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:4A:D7:A3:D6:68:21:9D:5C:4C:3E:DE:08:FE:1E:AC:15:7C:2C:AC
X509v3 Authority Key Identifier:
keyid:5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:e6:f4:65:c0:0c:b6:1c:0c:48:aa:db:07:67:4b:32:b3:83:
4f:49:85:c7:99:3a:24:61:70:c1:2e:ef:92:a3:6e:a9:37:41:
0e:65:a0:f2:30:25:71:9f:e5:ec:99:69:1a:0f:b7:67:86:fc:
bf:b2:43:e1:97:f3:f4:80:f0:77:a3:c3:a2:4f:c1:82:e2:cb:
2d:a5:ca:14:f0:1e:22:cb:e5:97:3e:17:3a:29:b8:18:20:d3:
36:2f:2b:d4:36:a4:57:d4:04:42:c5:9b:1c:0b:8f:37:c8:16:
36:51:b3:2d:59:06:d5:41:8f:9d:9a:01:c1:65:76:90:09:1b:
34:61:2b:15:f8:0f:be:70:c1:68:3b:09:ac:61:46:4c:eb:80:
38:09:58:8d:0f:96:f0:58:a5:4e:3c:86:b8:45:d1:19:c4:e6:
95:5b:ea:ef:73:f7:2e:1f:1b:d7:96:8a:8a:3d:aa:8c:e2:3b:
4f:70:73:89:30:03:60:51:bf:36:ee:8f:61:aa:99:db:52:fc:
f4:70:2c:f0:88:d2:2c:a4:5d:55:88:a3:f0:47:5b:bc:78:42:
db:67:fb:90:04:29:f6:08:33:21:76:90:ad:43:de:02:b3:23:
60:d0:59:84:cb:f4:2f:56:ad:e1:bc:41:fd:ee:c1:7d:26:0e:
8b:5d:d8:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pzptGdRMCKwKuYX4ZXldAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkNGQ2MzExNjZlOGVlZGU3ODcyZWFkOGFiOWE4MWFkYzg3
N2Q0ZDEwHhcNMjYwMzI2MTEwMTM5WhcNMjYwMzI3MTEwMTM5WjAzMTEwLwYDVQQD
Eyg2YTRhZDdhM2Q2NjgyMTlkNWM0YzNlZGUwOGZlMWVhYzE1N2MyY2FjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Pz2NvB9mmBdQcr7g+duDCOZDQ7H
V+c5stO9X3qi1a1q6nUAoYonxBfBhfk8HovM1IbovDfBEprSGSyCj8U/28RFgyzu
Bgk20v5QOgbn1D/14qJ5laf59orzu2Q5YpTG7dVSO7r5BWbLYxyTB7XGxcRF5JsL
LgabepVDFpM4LiNxqh1ITAGuBhqfAdQzX2gwwLzJjNLpsXOgGHHgtMylQrR3Ue0l
4JMjmASdNvZltjIfTgTo3nsV7+zRr+GCdOAQnxKGEZfArF5MgaALomIzV5kC7+81
YZZfVY4AjFrWZaig+sLMwaNPgdn/MF90L1W5OwOve4YZ5tE42x0Ko4gH2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGpK16PWaCGdXEw+3gj+HqwVfCysMB8GA1UdIwQY
MBaAFF1NYxFm6O7eeHLq2Kuaga3Id9TRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFUxakVXYm83dDU0Y3VyWXE1cUJyY2gzMU5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS80M2I3OGMtNDUzOS00MTEyLWI3NTct
ZmEzNmZjM2I3Mzc2LzEvWFUxakVXYm83dDU0Y3VyWXE1cUJyY2gzMU5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS80M2I3OGMtNDUzOS00MTEyLWI3NTctZmEzNmZjM2I3Mzc2
LzEvWFUxakVXYm83dDU0Y3VyWXE1cUJyY2gzMU5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQub0ZcAM
thwMSKrbB2dLMrODT0mFx5k6JGFwwS7vkqNuqTdBDmWg8jAlcZ/l7JlpGg+3Z4b8
v7JD4Zfz9IDwd6PDok/BguLLLaXKFPAeIsvllz4XOim4GCDTNi8r1DakV9QEQsWb
HAuPN8gWNlGzLVkG1UGPnZoBwWV2kAkbNGErFfgPvnDBaDsJrGFGTOuAOAlYjQ+W
8FilTjyGuEXRGcTmlVvq73P3Lh8b15aKij2qjOI7T3BziTADYFG/Nu6PYaqZ21L8
9HAs8IjSLKRdVYij8EdbvHhC22f7kAQp9ggzIXaQrUPeArMjYNBZhMv0L1at4bxB
/e7BfSYOi13YyQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:36:15 2026 by rpki-client