Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.mft
File: Xw_ZDZhyl8td1OB76EDSgNHizEo.mft (raw, json)
Hash identifier: 5jNUASOGmd7e3ctfTa9zx7SF5cZPoPl0ebfXZKDGH7s=
Subject key identifier: 4C:11:4F:C9:E2:76:51:E1:F2:08:5F:05:70:E6:F8:F7:A7:E2:7B:CF
Authority key identifier: 5F:0F:D9:0D:98:72:97:CB:5D:D4:E0:7B:E8:40:D2:80:D1:E2:CC:4A
Certificate issuer: /CN=5f0fd90d987297cb5dd4e07be840d280d1e2cc4a
Certificate serial: 019D28BB1E8BB4E2169BCC9B54D5ADF216DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xw_ZDZhyl8td1OB76EDSgNHizEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.mft
Manifest number: 0BE1
Signing time: Thu 26 Mar 2026 06:00:44 +0000
Manifest this update: Thu 26 Mar 2026 06:00:44 +0000
Manifest next update: Fri 27 Mar 2026 06:00:44 +0000
Files and hashes: 1: IGvyNAGkUwt5swY3ZPAsKMi4Y9A.roa (hash: 9R/m5HiUPddcgvtc69T2bzqCBkVGTvcPZN9UWeURM0E=)
2: XSXw8zz6wHnklahOljGNkkMK48Q.roa (hash: p4JyRpCAuLEOOG8JHAgwOmpcnmRpxW2S31rpM+z8Q1Y=)
3: Xw_ZDZhyl8td1OB76EDSgNHizEo.crl (hash: VQUeCoND+g6KPInEUemSshwMje3zbeVSAsEDN5ukJl0=)
4: jfJDf-L9uOm-plysAb0D7Pwv-XM.roa (hash: /1wlo6BoLw4GajX9St+IqQx9/1PVrea3LjLhasyV+pk=)
5: jusKsFR2myH5y_SxmZdhc547TOU.roa (hash: FjWKJu5eJdLGQtzzBBkYvevz1z9xR9jrxtDvXtKd9FQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xw_ZDZhyl8td1OB76EDSgNHizEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:1e:8b:b4:e2:16:9b:cc:9b:54:d5:ad:f2:16:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0fd90d987297cb5dd4e07be840d280d1e2cc4a
Validity
Not Before: Mar 26 06:00:44 2026 GMT
Not After : Mar 27 06:00:44 2026 GMT
Subject: CN=4c114fc9e27651e1f2085f0570e6f8f7a7e27bcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f0:36:24:c4:f9:5f:60:33:c1:eb:79:fe:94:
22:5b:6d:d8:8b:d1:84:5d:2b:e8:e7:eb:c3:33:a2:
a5:fa:bb:35:1d:40:17:f0:75:4e:b3:ec:09:52:03:
aa:f2:b3:f7:dc:06:22:cf:12:1d:a3:5f:b9:0b:56:
5c:56:89:94:ca:66:8e:0c:08:31:dc:8a:47:19:c7:
15:88:94:8a:98:04:4d:d9:d5:b9:cd:0a:37:2a:8d:
55:07:19:a7:f4:21:79:2b:df:6d:b3:b2:6c:33:7c:
f9:aa:36:7e:6e:1b:dc:a3:1f:52:9c:24:95:9b:5f:
b5:af:09:e2:40:c9:02:e1:aa:d6:92:ea:6d:24:b8:
ef:f0:75:53:e9:83:4b:7d:29:24:ff:03:80:a4:80:
f0:e5:d2:a3:78:de:d2:8f:0c:fa:3e:a2:06:35:4a:
0b:9d:1c:87:a5:98:19:34:08:31:be:14:81:12:0c:
f3:84:cb:27:59:d8:bc:42:a3:3b:d5:a7:2e:5d:3c:
70:f1:b0:5f:a5:f9:c0:dd:4c:ba:62:38:10:52:ee:
4a:0b:35:fb:28:a9:54:e0:bf:ac:53:94:0b:e0:09:
95:22:22:a5:8e:59:bc:d9:37:d1:b5:a6:53:ff:e9:
a3:5b:96:aa:6a:26:13:fb:de:b2:61:ef:7d:ce:fe:
6b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:11:4F:C9:E2:76:51:E1:F2:08:5F:05:70:E6:F8:F7:A7:E2:7B:CF
X509v3 Authority Key Identifier:
keyid:5F:0F:D9:0D:98:72:97:CB:5D:D4:E0:7B:E8:40:D2:80:D1:E2:CC:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xw_ZDZhyl8td1OB76EDSgNHizEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:6f:eb:3b:49:a8:1f:bc:dd:4f:f7:f6:75:b1:10:75:0a:7c:
26:f6:5b:2e:4a:9a:66:60:40:52:b2:80:06:a9:70:fa:9b:5f:
8e:d3:db:d9:41:7b:24:32:dd:05:ce:a9:6f:0f:52:00:80:86:
14:71:66:18:5d:84:80:60:eb:a4:73:05:23:f0:b2:1f:7f:8c:
a5:17:cd:30:b5:15:44:ff:12:54:a5:b6:6a:c5:1a:ee:41:44:
0e:a9:89:22:dc:8e:8b:16:fe:5d:53:87:1b:55:5f:90:d8:6c:
e8:ca:54:ca:0b:46:58:3f:fa:f8:58:78:6f:ee:a8:d0:5f:ca:
af:c8:36:49:e6:0f:53:03:d0:f3:15:c8:50:eb:a4:56:22:3a:
3b:0d:9f:cf:e3:b7:7f:cd:b0:7b:fa:4d:82:d5:f6:71:d3:ff:
3e:ed:38:f1:a5:99:c2:18:3b:3b:61:13:98:fb:48:99:48:af:
86:b2:7e:2f:36:5e:17:6c:43:ba:d2:6c:a1:42:b0:e0:0c:64:
f8:b2:34:e6:c4:63:14:c9:e2:fe:3d:48:08:d8:20:ac:03:5c:
69:58:ac:2b:d1:dc:ee:c4:e2:77:2c:e5:ef:c0:64:30:bd:8b:
a8:fc:d7:19:0b:f5:30:f5:bb:f0:52:3f:aa:0d:0a:ff:b8:dd:
ab:fa:40:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oux6LtOIWm8ybVNWt8hbdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMGZkOTBkOTg3Mjk3Y2I1ZGQ0ZTA3YmU4NDBkMjgwZDFl
MmNjNGEwHhcNMjYwMzI2MDYwMDQ0WhcNMjYwMzI3MDYwMDQ0WjAzMTEwLwYDVQQD
Eyg0YzExNGZjOWUyNzY1MWUxZjIwODVmMDU3MGU2ZjhmN2E3ZTI3YmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPA2JMT5X2Azwet5/pQiW23Yi9GE
XSvo5+vDM6Kl+rs1HUAX8HVOs+wJUgOq8rP33AYizxIdo1+5C1ZcVomUymaODAgx
3IpHGccViJSKmARN2dW5zQo3Ko1VBxmn9CF5K99ts7JsM3z5qjZ+bhvcox9SnCSV
m1+1rwniQMkC4arWkuptJLjv8HVT6YNLfSkk/wOApIDw5dKjeN7Sjwz6PqIGNUoL
nRyHpZgZNAgxvhSBEgzzhMsnWdi8QqM71acuXTxw8bBfpfnA3Uy6YjgQUu5KCzX7
KKlU4L+sU5QL4AmVIiKljlm82TfRtaZT/+mjW5aqaiYT+96yYe99zv5rkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEwRT8nidlHh8ghfBXDm+Pen4nvPMB8GA1UdIwQY
MBaAFF8P2Q2YcpfLXdTge+hA0oDR4sxKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHdfWkRaaHlsOHRkMU9CNzZFRFNnTkhpekVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9mNjZjYTktM2JkYy00Mjk0LWFkNjIt
N2JjZWZhOWY1OWU4LzEvWHdfWkRaaHlsOHRkMU9CNzZFRFNnTkhpekVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9mNjZjYTktM2JkYy00Mjk0LWFkNjItN2JjZWZhOWY1OWU4
LzEvWHdfWkRaaHlsOHRkMU9CNzZFRFNnTkhpekVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg2/rO0mo
H7zdT/f2dbEQdQp8JvZbLkqaZmBAUrKABqlw+ptfjtPb2UF7JDLdBc6pbw9SAICG
FHFmGF2EgGDrpHMFI/CyH3+MpRfNMLUVRP8SVKW2asUa7kFEDqmJItyOixb+XVOH
G1VfkNhs6MpUygtGWD/6+Fh4b+6o0F/Kr8g2SeYPUwPQ8xXIUOukViI6Ow2fz+O3
f82we/pNgtX2cdP/Pu048aWZwhg7O2ETmPtImUivhrJ+LzZeF2xDutJsoUKw4Axk
+LI05sRjFMni/j1ICNggrANcaVisK9Hc7sTidyzl78BkML2LqPzXGQv1MPW78FI/
qg0K/7jdq/pAaQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:32:54 2026 by rpki-client