Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft
File: XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft (raw, json)
Hash identifier: JJznojfBFSimgN9g/5qeJQQIxcEbnVLTkDCos+K9zq0=
Subject key identifier: 15:30:4F:C8:1B:1F:7C:8C:0A:EB:CD:42:CD:57:CD:00:8D:B3:DA:AB
Authority key identifier: 5E:FC:CD:7D:7E:30:8F:81:80:70:51:F8:D4:87:E9:D8:29:C2:48:68
Certificate issuer: /CN=5efccd7d7e308f81807051f8d487e9d829c24868
Certificate serial: 019D2704B2E45CE52B288E0EB071E1F29539
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XvzNfX4wj4GAcFH41Ifp2CnCSGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 22:01:52 +0000
Manifest this update: Wed 25 Mar 2026 22:01:52 +0000
Manifest next update: Thu 26 Mar 2026 22:01:52 +0000
Files and hashes: 1: H7bzuNwWAw0WqWgCEkaaWLBrXww.roa (hash: qJ814Ut9PCA48je680EM2s8Vg9S3+E4bblZcpYFDxgI=)
2: XvzNfX4wj4GAcFH41Ifp2CnCSGg.crl (hash: kccGxSI1dvf9LnYOXypZxATyEWLp4j1DSExCdGPNf+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/XvzNfX4wj4GAcFH41Ifp2CnCSGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:b2:e4:5c:e5:2b:28:8e:0e:b0:71:e1:f2:95:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5efccd7d7e308f81807051f8d487e9d829c24868
Validity
Not Before: Mar 25 22:01:52 2026 GMT
Not After : Mar 26 22:01:52 2026 GMT
Subject: CN=15304fc81b1f7c8c0aebcd42cd57cd008db3daab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:74:2a:b2:62:42:02:1e:c5:c3:05:27:8f:e4:
0f:98:cc:67:cd:cf:0a:c3:ce:07:e4:27:0f:9d:a2:
7f:f9:2f:f8:15:56:49:2d:93:81:39:77:7d:6d:c1:
ed:80:81:dc:b6:1f:21:e6:54:76:f0:ca:5e:07:11:
ba:3f:4e:4a:f7:c9:d6:cf:02:ac:7a:40:7a:9e:43:
ba:7c:8d:d7:29:fe:a6:fd:bf:03:a2:a3:8a:8a:15:
3a:d3:5e:e1:61:d8:3c:43:d1:ec:2a:49:4e:7c:dd:
d6:a0:63:2b:0c:ea:6e:d0:a4:41:58:cf:fd:80:5b:
b1:96:d9:eb:8a:11:e3:02:0e:0f:62:a6:7a:6d:4c:
10:b3:f1:01:3b:4c:de:d3:68:43:90:bb:f7:6a:84:
29:7c:72:4a:a0:16:af:d3:e0:68:f2:52:97:cd:2f:
17:12:c3:29:6b:b1:0f:c6:33:cf:76:5b:2f:eb:33:
93:77:38:5d:1f:a6:00:d5:c3:e2:d8:89:52:ce:93:
be:40:2b:c3:6e:6e:be:9e:eb:9f:11:55:46:6a:41:
2b:f3:ea:7a:3a:ba:0e:92:2f:db:af:ed:da:26:5a:
85:2e:1f:29:93:0e:90:3d:cf:37:a8:52:68:0e:fe:
d3:84:3a:3a:cc:15:ac:e5:f4:a3:03:3d:5e:a1:61:
fb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:30:4F:C8:1B:1F:7C:8C:0A:EB:CD:42:CD:57:CD:00:8D:B3:DA:AB
X509v3 Authority Key Identifier:
keyid:5E:FC:CD:7D:7E:30:8F:81:80:70:51:F8:D4:87:E9:D8:29:C2:48:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XvzNfX4wj4GAcFH41Ifp2CnCSGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:01:85:1f:3f:28:a3:83:10:df:e0:14:8b:16:40:40:6d:2d:
1f:7d:a3:ef:74:14:b7:24:99:40:ed:85:9e:1a:e8:dc:4f:9e:
7f:96:48:3c:f5:65:d2:d9:df:19:cd:e0:33:7f:bc:f6:d7:bb:
ef:25:b7:fe:a5:8d:14:41:8e:9a:6b:e1:9b:83:13:9b:35:e4:
5d:6c:63:b5:f4:53:a9:b3:1d:ce:cc:10:4d:b6:6e:fc:2e:85:
5e:23:de:82:44:1f:03:a8:ec:fb:c9:e9:28:57:c6:40:c8:d0:
60:f7:6b:92:32:63:85:f7:82:fe:6c:b2:e3:2e:52:ea:c8:9d:
2c:14:1b:ea:21:1c:17:4c:9e:99:76:e3:77:d8:6c:0d:67:54:
54:86:40:b1:f7:67:1b:f2:b4:d2:da:de:f1:81:33:1e:dd:6e:
04:3d:a5:81:db:f0:32:99:82:f1:78:d0:f9:05:94:68:53:4b:
0a:94:c6:79:c6:2a:61:9d:08:98:14:be:f1:05:09:10:0d:ef:
36:9b:c8:da:ee:e7:ad:d3:38:91:34:2c:ea:5d:c9:cf:03:d0:
d2:fd:5e:c2:11:02:eb:e2:3e:22:03:c7:e1:b8:db:cd:2c:a8:
74:dd:61:70:29:80:12:7b:7c:4a:84:dc:21:f3:01:6d:4c:5f:
bb:ff:94:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBLLkXOUrKI4OsHHh8pU5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZmNjZDdkN2UzMDhmODE4MDcwNTFmOGQ0ODdlOWQ4Mjlj
MjQ4NjgwHhcNMjYwMzI1MjIwMTUyWhcNMjYwMzI2MjIwMTUyWjAzMTEwLwYDVQQD
EygxNTMwNGZjODFiMWY3YzhjMGFlYmNkNDJjZDU3Y2QwMDhkYjNkYWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXQqsmJCAh7FwwUnj+QPmMxnzc8K
w84H5CcPnaJ/+S/4FVZJLZOBOXd9bcHtgIHcth8h5lR28MpeBxG6P05K98nWzwKs
ekB6nkO6fI3XKf6m/b8DoqOKihU6017hYdg8Q9HsKklOfN3WoGMrDOpu0KRBWM/9
gFuxltnrihHjAg4PYqZ6bUwQs/EBO0ze02hDkLv3aoQpfHJKoBav0+Bo8lKXzS8X
EsMpa7EPxjPPdlsv6zOTdzhdH6YA1cPi2IlSzpO+QCvDbm6+nuufEVVGakEr8+p6
OroOki/br+3aJlqFLh8pkw6QPc83qFJoDv7ThDo6zBWs5fSjAz1eoWH75QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBUwT8gbH3yMCuvNQs1XzQCNs9qrMB8GA1UdIwQY
MBaAFF78zX1+MI+BgHBR+NSH6dgpwkhoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHZ6TmZYNHdqNEdBY0ZINDFJZnAyQ25DU0dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS81OTY1MGQtYzkzNS00YWE5LTk4MDQt
ZDFiZDA2ZjViZjAwLzEvWHZ6TmZYNHdqNEdBY0ZINDFJZnAyQ25DU0dnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS81OTY1MGQtYzkzNS00YWE5LTk4MDQtZDFiZDA2ZjViZjAw
LzEvWHZ6TmZYNHdqNEdBY0ZINDFJZnAyQ25DU0dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASAGFHz8o
o4MQ3+AUixZAQG0tH32j73QUtySZQO2Fnhro3E+ef5ZIPPVl0tnfGc3gM3+89te7
7yW3/qWNFEGOmmvhm4MTmzXkXWxjtfRTqbMdzswQTbZu/C6FXiPegkQfA6js+8np
KFfGQMjQYPdrkjJjhfeC/myy4y5S6sidLBQb6iEcF0yemXbjd9hsDWdUVIZAsfdn
G/K00tre8YEzHt1uBD2lgdvwMpmC8XjQ+QWUaFNLCpTGecYqYZ0ImBS+8QUJEA3v
NpvI2u7nrdM4kTQs6l3JzwPQ0v1ewhEC6+I+IgPH4bjbzSyodN1hcCmAEnt8SoTc
IfMBbUxfu/+UEw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:15:28 2026 by rpki-client