Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
File: XPVjIet-o-5Fze0ChmhCDjf6L6w.mft (raw, json)
Hash identifier: RoSegPDThjKCV400yG83aT7ix8pjOps99WZw0gdoS48=
Subject key identifier: 19:39:F6:F5:CE:B0:BF:70:CF:64:A1:09:15:4D:C5:CE:C4:35:06:EA
Authority key identifier: 5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC
Certificate issuer: /CN=5cf56321eb7ea3ee45cded028668420e37fa2fac
Certificate serial: 019D2C60CAB46731EA237B0C36B88FCB1A99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
Manifest number: 159A
Signing time: Thu 26 Mar 2026 23:00:33 +0000
Manifest this update: Thu 26 Mar 2026 23:00:33 +0000
Manifest next update: Fri 27 Mar 2026 23:00:33 +0000
Files and hashes: 1: F7EvqKPuCJrRbauscLqXiKU0tSU.roa (hash: Rn1QP+hzXdWW26eL4q5uEtv+FD1RDx8ao69irkAES9U=)
2: XPVjIet-o-5Fze0ChmhCDjf6L6w.crl (hash: +eE2AOz6Sg6UDIM1KQlJUGLdvMb3fyxE6ghvfygsvdg=)
3: a7oKAtXpujbjcSp7xIWIBbpbuwo.roa (hash: uOToHNzKGxHUJP96PSZDBVfJ0h4D91Ag2KcuZFpXViQ=)
4: bklYzzrT2LyqE_eolbd4uJqpn88.roa (hash: hL8JImvIqT8exdBOwwwQRZtRNMgq3QcD8ZDf3TXxPgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 23:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:60:ca:b4:67:31:ea:23:7b:0c:36:b8:8f:cb:1a:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf56321eb7ea3ee45cded028668420e37fa2fac
Validity
Not Before: Mar 26 23:00:33 2026 GMT
Not After : Mar 27 23:00:33 2026 GMT
Subject: CN=1939f6f5ceb0bf70cf64a109154dc5cec43506ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0a:23:1b:f8:83:55:eb:ef:97:47:6b:37:86:
48:9d:06:e6:39:20:5f:0e:75:a5:45:1a:b2:5d:e2:
b5:2c:d6:c9:f7:97:f6:f6:45:10:6d:e7:c3:f0:b8:
cf:42:35:bf:a5:97:8a:ab:17:f4:56:01:a0:e7:54:
e4:06:89:ef:bc:20:a0:74:83:2b:28:42:25:4e:f3:
f1:0e:be:aa:75:8c:3f:dc:12:7e:d6:35:01:13:6e:
bf:c6:b3:88:c8:9a:3e:cd:72:66:34:25:93:de:81:
b6:84:84:44:f1:9d:f5:2b:d2:b2:b9:bc:81:c8:89:
b1:1a:48:53:8d:8d:a0:a2:b7:be:a5:40:35:78:09:
18:45:c2:92:4b:c3:ae:5d:96:0e:6c:09:11:61:b4:
44:c1:ce:5a:6e:05:96:1d:1b:4f:4e:6f:45:ba:93:
8d:3f:85:7c:6e:bb:af:4b:4d:32:eb:7c:ec:c9:ea:
aa:f8:c3:70:d0:4b:83:21:40:ad:8c:8c:ed:3c:e2:
a7:95:d5:37:8b:34:ed:44:b7:52:8c:aa:34:03:03:
3b:8b:c1:5c:d6:0c:c6:fa:39:60:a9:94:13:b5:27:
68:b1:80:a9:6f:09:8c:4b:a5:e7:96:0f:d1:9e:d6:
ea:ee:7b:55:a2:8d:33:5e:d2:b3:88:39:2a:52:ca:
20:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:39:F6:F5:CE:B0:BF:70:CF:64:A1:09:15:4D:C5:CE:C4:35:06:EA
X509v3 Authority Key Identifier:
keyid:5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:5e:3c:43:ce:41:cb:b6:77:e7:04:64:4f:4e:15:79:3a:9a:
a8:55:a2:26:0b:5e:02:1a:53:49:f6:5a:be:87:10:fb:b3:45:
33:41:c0:da:8a:e5:99:17:ed:a6:88:1f:cb:06:12:6b:4b:f3:
60:eb:ae:e4:8e:6b:2f:93:36:4e:dd:f1:c2:e1:c0:19:f4:70:
5b:49:aa:ff:16:c7:a5:b5:7a:62:76:fb:7b:55:7d:98:74:55:
eb:87:0a:27:8e:15:ff:1e:bf:85:c0:38:1e:d7:00:0d:c7:38:
bb:30:49:5e:86:28:59:47:a1:35:fd:44:1c:45:be:fc:1b:03:
7f:6f:57:f3:c7:b6:7a:82:70:4f:23:9f:1b:e3:e3:22:85:ac:
9b:bf:d7:8f:40:40:46:6b:9c:48:1e:00:c5:89:4a:a2:3b:2a:
4e:f6:df:ee:f1:ca:3a:86:8f:aa:55:36:2a:18:5f:6e:93:d1:
c0:92:de:f7:09:bc:27:6d:f1:2a:32:13:82:97:2a:30:44:47:
67:f4:52:a1:46:36:9b:f1:31:09:fa:d2:7a:ca:e2:c0:d5:eb:
ac:d7:cf:9f:77:76:6c:66:62:05:2d:af:f3:45:61:11:89:1a:
1d:8a:7c:41:26:1c:51:24:00:4a:d3:a7:bd:a9:38:55:7e:84:
1f:a7:1d:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0sYMq0ZzHqI3sMNriPyxqZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZjU2MzIxZWI3ZWEzZWU0NWNkZWQwMjg2Njg0MjBlMzdm
YTJmYWMwHhcNMjYwMzI2MjMwMDMzWhcNMjYwMzI3MjMwMDMzWjAzMTEwLwYDVQQD
EygxOTM5ZjZmNWNlYjBiZjcwY2Y2NGExMDkxNTRkYzVjZWM0MzUwNmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAojG/iDVevvl0drN4ZInQbmOSBf
DnWlRRqyXeK1LNbJ95f29kUQbefD8LjPQjW/pZeKqxf0VgGg51TkBonvvCCgdIMr
KEIlTvPxDr6qdYw/3BJ+1jUBE26/xrOIyJo+zXJmNCWT3oG2hIRE8Z31K9KyubyB
yImxGkhTjY2gore+pUA1eAkYRcKSS8OuXZYObAkRYbREwc5abgWWHRtPTm9FupON
P4V8bruvS00y63zsyeqq+MNw0EuDIUCtjIztPOKnldU3izTtRLdSjKo0AwM7i8Fc
1gzG+jlgqZQTtSdosYCpbwmMS6Xnlg/Rntbq7ntVoo0zXtKziDkqUsogYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBk59vXOsL9wz2ShCRVNxc7ENQbqMB8GA1UdIwQY
MBaAFFz1YyHrfqPuRc3tAoZoQg43+i+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFBWaklldC1vLTVGemUwQ2htaENEamY2TDZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9kZmE0YTgtMzhiMC00NjFiLWEwODIt
ODQzZTI2MmRkOGRjLzEvWFBWaklldC1vLTVGemUwQ2htaENEamY2TDZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9kZmE0YTgtMzhiMC00NjFiLWEwODItODQzZTI2MmRkOGRj
LzEvWFBWaklldC1vLTVGemUwQ2htaENEamY2TDZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHl48Q85B
y7Z35wRkT04VeTqaqFWiJgteAhpTSfZavocQ+7NFM0HA2orlmRftpogfywYSa0vz
YOuu5I5rL5M2Tt3xwuHAGfRwW0mq/xbHpbV6Ynb7e1V9mHRV64cKJ44V/x6/hcA4
HtcADcc4uzBJXoYoWUehNf1EHEW+/BsDf29X88e2eoJwTyOfG+PjIoWsm7/Xj0BA
RmucSB4AxYlKojsqTvbf7vHKOoaPqlU2KhhfbpPRwJLe9wm8J23xKjITgpcqMERH
Z/RSoUY2m/ExCfrSesriwNXrrNfPn3d2bGZiBS2v80VhEYkaHYp8QSYcUSQAStOn
vak4VX6EH6cd3Q==
-----END CERTIFICATE-----
Generated at Fri Mar 27 08:16:17 2026 by rpki-client