Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft
File: xyCKi4W8uAfK1kE4VDJjrLIERIs.mft (raw, json)
Hash identifier: Gfk0ayd87GF47277y9n5Xj9xGuMyojohSiD49SeMghc=
Subject key identifier: C5:B2:75:22:8D:73:92:47:98:5E:9E:82:2C:75:A3:45:37:7C:80:7E
Authority key identifier: C7:20:8A:8B:85:BC:B8:07:CA:D6:41:38:54:32:63:AC:B2:04:44:8B
Certificate issuer: /CN=c7208a8b85bcb807cad64138543263acb204448b
Certificate serial: 019D26CCFB16D218F22210C1C1D9258F57D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xyCKi4W8uAfK1kE4VDJjrLIERIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft
Manifest number: 0873
Signing time: Wed 25 Mar 2026 21:01:00 +0000
Manifest this update: Wed 25 Mar 2026 21:01:00 +0000
Manifest next update: Thu 26 Mar 2026 21:01:00 +0000
Files and hashes: 1: RgWi-aprHOGj2N0T2_M-Cs4Yuhc.roa (hash: FwSEX5ZWPDMp7ATa85IYHEA7kyGOC21zknxdskogO04=)
2: xyCKi4W8uAfK1kE4VDJjrLIERIs.crl (hash: enLRUH7HeMA+L+9h5zpsqma6dRZj3SC1lJarx0bABM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xyCKi4W8uAfK1kE4VDJjrLIERIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:fb:16:d2:18:f2:22:10:c1:c1:d9:25:8f:57:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7208a8b85bcb807cad64138543263acb204448b
Validity
Not Before: Mar 25 21:01:00 2026 GMT
Not After : Mar 26 21:01:00 2026 GMT
Subject: CN=c5b275228d739247985e9e822c75a345377c807e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1f:45:b6:ef:98:5b:6b:5f:db:df:49:31:3b:
b8:02:9e:c4:14:b5:3c:a7:0e:46:3d:52:fc:b2:a5:
39:59:1d:53:c7:a9:f9:f5:13:ad:c3:6d:2c:b5:37:
54:36:42:52:d5:e6:94:ba:c5:de:80:87:34:15:7e:
80:7b:a6:57:fa:04:65:ee:81:ac:03:dc:02:9d:6f:
c8:4c:14:22:74:7e:84:d0:bf:f0:35:a0:40:17:18:
72:bd:00:c0:f2:59:b2:58:e9:10:64:5d:86:e9:c5:
d7:5b:7e:50:ed:a1:2c:2f:5e:91:af:01:a7:4f:25:
5c:21:71:67:a9:4b:a6:cf:2d:83:c4:91:71:d7:be:
e7:da:a0:43:2d:a8:ba:6f:0f:3d:14:16:56:af:8c:
84:73:9c:4b:d4:a8:18:b4:51:dc:a8:fb:cd:60:47:
fd:83:28:96:95:65:5a:b7:83:15:c0:e4:eb:4e:02:
9c:26:15:bd:ad:02:51:c0:48:ee:f2:50:b6:5a:5f:
b1:63:33:a6:3f:f5:85:ea:0a:7d:80:76:62:8f:4e:
dc:16:67:09:a9:8a:d0:5b:20:16:c5:e3:99:f6:d1:
34:4a:23:2d:ec:5a:95:fa:4b:f1:05:03:56:34:0c:
fa:2b:65:c9:04:a2:d1:cc:74:cb:04:9e:bf:ba:15:
41:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B2:75:22:8D:73:92:47:98:5E:9E:82:2C:75:A3:45:37:7C:80:7E
X509v3 Authority Key Identifier:
keyid:C7:20:8A:8B:85:BC:B8:07:CA:D6:41:38:54:32:63:AC:B2:04:44:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xyCKi4W8uAfK1kE4VDJjrLIERIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:59:13:37:77:79:ae:0c:38:9a:9c:c2:65:ff:c9:ad:78:3d:
75:ee:60:a1:d6:83:84:12:fd:b9:c4:72:61:72:fc:db:01:ce:
c2:1e:2b:cd:00:e5:80:5c:bd:53:ed:29:74:d7:2d:d6:64:9f:
2e:7a:dd:ff:6c:11:94:24:d6:2e:ce:13:a5:53:04:93:d2:02:
cb:96:db:47:56:fb:99:2e:a2:d0:79:e3:fe:85:4e:4f:6d:52:
c3:ba:e3:f9:cd:91:19:39:64:ad:3e:5e:1f:7c:bd:c8:97:5a:
98:1e:1c:71:e3:db:c2:6d:e9:ff:1a:7e:46:4d:dc:24:e8:38:
f4:57:22:a3:aa:13:7c:9c:0c:ef:2b:9e:1f:6d:4b:e8:e9:96:
26:49:94:3f:87:65:c0:10:a5:64:b1:31:2a:d2:43:22:a7:cd:
34:dd:c6:fb:b2:c5:b2:7a:05:56:7c:42:24:d6:40:a5:dc:dc:
3d:d9:4d:72:39:69:0f:65:73:d2:01:de:11:a0:fc:4a:73:13:
7e:3b:42:fc:2b:22:5e:b5:4d:04:e1:93:50:78:71:51:95:3e:
bb:14:03:2d:4c:09:2a:77:86:90:fe:c7:e2:14:62:d7:3b:51:
e7:40:ca:55:0d:79:f1:14:0d:58:f1:27:79:25:18:a2:d6:24:
38:b3:0e:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzPsW0hjyIhDBwdklj1fXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3MjA4YThiODViY2I4MDdjYWQ2NDEzODU0MzI2M2FjYjIw
NDQ0OGIwHhcNMjYwMzI1MjEwMTAwWhcNMjYwMzI2MjEwMTAwWjAzMTEwLwYDVQQD
EyhjNWIyNzUyMjhkNzM5MjQ3OTg1ZTllODIyYzc1YTM0NTM3N2M4MDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyx9Ftu+YW2tf299JMTu4Ap7EFLU8
pw5GPVL8sqU5WR1Tx6n59ROtw20stTdUNkJS1eaUusXegIc0FX6Ae6ZX+gRl7oGs
A9wCnW/ITBQidH6E0L/wNaBAFxhyvQDA8lmyWOkQZF2G6cXXW35Q7aEsL16RrwGn
TyVcIXFnqUumzy2DxJFx177n2qBDLai6bw89FBZWr4yEc5xL1KgYtFHcqPvNYEf9
gyiWlWVat4MVwOTrTgKcJhW9rQJRwEju8lC2Wl+xYzOmP/WF6gp9gHZij07cFmcJ
qYrQWyAWxeOZ9tE0SiMt7FqV+kvxBQNWNAz6K2XJBKLRzHTLBJ6/uhVBBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMWydSKNc5JHmF6egix1o0U3fIB+MB8GA1UdIwQY
MBaAFMcgiouFvLgHytZBOFQyY6yyBESLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHlDS2k0Vzh1QWZLMWtFNFZESmpyTElFUklzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8yNzlhM2EtZTdhMC00MDY1LWI2ZDgt
MGY2YzQxMmNmM2RmLzEveHlDS2k0Vzh1QWZLMWtFNFZESmpyTElFUklzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8yNzlhM2EtZTdhMC00MDY1LWI2ZDgtMGY2YzQxMmNmM2Rm
LzEveHlDS2k0Vzh1QWZLMWtFNFZESmpyTElFUklzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe1kTN3d5
rgw4mpzCZf/JrXg9de5godaDhBL9ucRyYXL82wHOwh4rzQDlgFy9U+0pdNct1mSf
Lnrd/2wRlCTWLs4TpVMEk9ICy5bbR1b7mS6i0Hnj/oVOT21Sw7rj+c2RGTlkrT5e
H3y9yJdamB4ccePbwm3p/xp+Rk3cJOg49Fcio6oTfJwM7yueH21L6OmWJkmUP4dl
wBClZLExKtJDIqfNNN3G+7LFsnoFVnxCJNZApdzcPdlNcjlpD2Vz0gHeEaD8SnMT
fjtC/CsiXrVNBOGTUHhxUZU+uxQDLUwJKneGkP7H4hRi1ztR50DKVQ158RQNWPEn
eSUYotYkOLMOuA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:21 2026 by rpki-client