Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.mft
File: XaewUFU8jungWrTDf9l9KCEha0E.mft (raw, json)
Hash identifier: GrQsgRvV6pHb5ORHKBt0irZysXgaEmSCaf41f2ROMis=
Subject key identifier: 44:32:CE:D4:80:8A:94:E2:08:54:11:E7:6D:18:59:E3:CB:E7:28:E7
Authority key identifier: 5D:A7:B0:50:55:3C:8E:E9:E0:5A:B4:C3:7F:D9:7D:28:21:21:6B:41
Certificate issuer: /CN=5da7b050553c8ee9e05ab4c37fd97d2821216b41
Certificate serial: 019D292935E3C36C71F53EF1C1A676041C74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaewUFU8jungWrTDf9l9KCEha0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 08:00:59 +0000
Manifest this update: Thu 26 Mar 2026 08:00:59 +0000
Manifest next update: Fri 27 Mar 2026 08:00:59 +0000
Files and hashes: 1: XaewUFU8jungWrTDf9l9KCEha0E.crl (hash: 6a/G4bFBj11nI9f+ikys3e4OXnTwP+ssxocJwi6gQOY=)
2: b_miJDSe2X7LNQkUXBeBnfQ9NzY.roa (hash: 4d/0HZTRX3AwdeZwWVGFlksAKBE1o2Mvc3JLliWqra8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/XaewUFU8jungWrTDf9l9KCEha0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:35:e3:c3:6c:71:f5:3e:f1:c1:a6:76:04:1c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da7b050553c8ee9e05ab4c37fd97d2821216b41
Validity
Not Before: Mar 26 08:00:59 2026 GMT
Not After : Mar 27 08:00:59 2026 GMT
Subject: CN=4432ced4808a94e2085411e76d1859e3cbe728e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5d:14:d9:2a:c6:5c:ec:bf:b6:a5:6a:8b:51:
25:49:3b:be:60:4b:62:f6:1d:40:13:47:d0:ca:52:
92:d9:93:82:fc:1b:f4:a8:ea:7e:62:72:fe:53:7b:
78:e5:1e:e2:0a:65:22:80:aa:89:d9:68:6c:32:bf:
72:99:95:60:19:d1:02:7d:f9:e8:32:65:10:2f:62:
40:76:7b:ec:04:94:da:a1:7c:68:ca:d2:57:44:54:
55:7c:cd:b4:70:d5:22:f9:2c:60:c9:1d:22:67:81:
89:c7:bc:da:60:dd:56:88:e2:e8:83:7d:70:56:31:
02:78:b2:63:24:2e:18:df:eb:69:f3:61:c5:41:e9:
d9:02:35:e3:a2:df:3e:69:9b:43:e9:04:58:85:73:
09:c6:3a:53:cb:e6:94:cf:79:87:31:0b:99:a7:26:
7c:1e:d9:cd:51:68:5b:60:f9:9b:bb:d4:f0:29:5b:
03:57:e7:32:94:94:be:55:f1:91:3f:21:14:e7:7e:
b2:72:20:3e:62:34:b3:fb:80:03:0a:05:37:13:fa:
8f:21:2b:25:cd:b0:9a:85:88:5f:b9:be:ca:3d:cf:
d2:bc:3a:6a:c0:8c:9d:7d:d9:26:c3:6e:5a:4b:9e:
d4:36:59:7e:6c:f1:d1:23:fa:e7:93:26:7d:cd:04:
e8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:32:CE:D4:80:8A:94:E2:08:54:11:E7:6D:18:59:E3:CB:E7:28:E7
X509v3 Authority Key Identifier:
keyid:5D:A7:B0:50:55:3C:8E:E9:E0:5A:B4:C3:7F:D9:7D:28:21:21:6B:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaewUFU8jungWrTDf9l9KCEha0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:4e:f7:ed:a2:a6:bd:9d:81:23:c5:da:e3:14:40:aa:1b:1b:
85:f8:4e:32:db:3e:c5:36:eb:51:80:2e:ea:16:90:42:72:12:
fd:b8:1b:0c:8b:9b:49:e8:10:b1:01:10:fb:9b:64:4f:20:33:
f2:d4:82:e5:10:c5:22:b7:04:7b:a5:79:93:5b:a3:6b:4d:62:
e5:d9:1e:3b:9f:06:ef:43:d5:cb:40:9e:1f:86:5b:3b:46:3b:
48:dc:9e:3b:7d:4c:20:1d:36:bd:83:2e:a3:81:7c:dc:28:99:
a8:fe:8f:1d:d0:8d:9c:b9:db:34:91:c4:de:99:04:f5:c0:fd:
81:3c:9a:e2:f2:70:78:e1:c9:4c:33:9f:16:1e:11:cd:c7:ad:
fb:f4:82:e9:17:77:88:5b:16:4f:ac:43:c3:df:7c:f6:ef:04:
12:e0:6c:19:4d:76:23:d3:82:b5:e9:95:42:ae:b3:1d:bd:da:
94:b2:30:99:3b:96:99:28:b6:2b:28:6e:93:bb:ef:39:70:3c:
b6:19:39:ac:57:6f:a9:42:ba:78:ea:22:fb:e0:8c:c4:97:bd:
c2:11:9e:06:18:46:b3:80:12:bb:ae:dd:e3:b0:b0:70:82:37:
8f:03:35:6c:24:e0:a5:bf:53:f8:ac:a6:ce:8c:02:6f:dd:36:
ac:c7:75:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKTXjw2xx9T7xwaZ2BBx0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkYTdiMDUwNTUzYzhlZTllMDVhYjRjMzdmZDk3ZDI4MjEy
MTZiNDEwHhcNMjYwMzI2MDgwMDU5WhcNMjYwMzI3MDgwMDU5WjAzMTEwLwYDVQQD
Eyg0NDMyY2VkNDgwOGE5NGUyMDg1NDExZTc2ZDE4NTllM2NiZTcyOGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtF0U2SrGXOy/tqVqi1ElSTu+YEti
9h1AE0fQylKS2ZOC/Bv0qOp+YnL+U3t45R7iCmUigKqJ2WhsMr9ymZVgGdECffno
MmUQL2JAdnvsBJTaoXxoytJXRFRVfM20cNUi+SxgyR0iZ4GJx7zaYN1WiOLog31w
VjECeLJjJC4Y3+tp82HFQenZAjXjot8+aZtD6QRYhXMJxjpTy+aUz3mHMQuZpyZ8
HtnNUWhbYPmbu9TwKVsDV+cylJS+VfGRPyEU536yciA+YjSz+4ADCgU3E/qPISsl
zbCahYhfub7KPc/SvDpqwIydfdkmw25aS57UNll+bPHRI/rnkyZ9zQTosQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEQyztSAipTiCFQR520YWePL5yjnMB8GA1UdIwQY
MBaAFF2nsFBVPI7p4Fq0w3/ZfSghIWtBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGFld1VGVThqdW5nV3JURGY5bDlLQ0VoYTBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9kYzlkZGItYjE4Yy00MDlkLTk3MDct
ZjJjNmFjOTY4YzgwLzEvWGFld1VGVThqdW5nV3JURGY5bDlLQ0VoYTBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9kYzlkZGItYjE4Yy00MDlkLTk3MDctZjJjNmFjOTY4Yzgw
LzEvWGFld1VGVThqdW5nV3JURGY5bDlLQ0VoYTBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgk737aKm
vZ2BI8Xa4xRAqhsbhfhOMts+xTbrUYAu6haQQnIS/bgbDIubSegQsQEQ+5tkTyAz
8tSC5RDFIrcEe6V5k1uja01i5dkeO58G70PVy0CeH4ZbO0Y7SNyeO31MIB02vYMu
o4F83CiZqP6PHdCNnLnbNJHE3pkE9cD9gTya4vJweOHJTDOfFh4Rzcet+/SC6Rd3
iFsWT6xDw9989u8EEuBsGU12I9OCtemVQq6zHb3alLIwmTuWmSi2Kyhuk7vvOXA8
thk5rFdvqUK6eOoi++CMxJe9whGeBhhGs4ASu67d47CwcII3jwM1bCTgpb9T+Kym
zowCb902rMd1Tg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:30:23 2026 by rpki-client