Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
File: xdzY0KKrrowlOR8jBRzD8PJHk6o.mft (raw, json)
Hash identifier: McVseiI7j0SoEwsJdl7Dqyux4fk8U614bIZixVIBkQE=
Subject key identifier: 6B:AD:33:17:08:7C:A7:88:2D:7E:2C:D3:F6:9F:9A:A8:0B:AF:E6:05
Authority key identifier: C5:DC:D8:D0:A2:AB:AE:8C:25:39:1F:23:05:1C:C3:F0:F2:47:93:AA
Certificate issuer: /CN=c5dcd8d0a2abae8c25391f23051cc3f0f24793aa
Certificate serial: 019D27A927EE257119448A1396B624F2655B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
Manifest number: 056D
Signing time: Thu 26 Mar 2026 01:01:30 +0000
Manifest this update: Thu 26 Mar 2026 01:01:30 +0000
Manifest next update: Fri 27 Mar 2026 01:01:30 +0000
Files and hashes: 1: EhoGVGxSzJ85EDf-pwsVPGfHrjk.roa (hash: bYaigFFh4NG+rmCpPKbaSMIoScBrwWuRStJPl8NxmHQ=)
2: xdzY0KKrrowlOR8jBRzD8PJHk6o.crl (hash: KbCpVS25kDEAJt0rHRFR3glYgeBtsadvyCL9IiL9Eas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:27:ee:25:71:19:44:8a:13:96:b6:24:f2:65:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5dcd8d0a2abae8c25391f23051cc3f0f24793aa
Validity
Not Before: Mar 26 01:01:30 2026 GMT
Not After : Mar 27 01:01:30 2026 GMT
Subject: CN=6bad3317087ca7882d7e2cd3f69f9aa80bafe605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:67:ce:b5:af:17:b7:11:ca:18:8c:b4:2d:a8:
fe:9c:76:12:1c:88:32:55:5b:86:e4:42:b1:ad:91:
ac:5f:89:63:5b:4b:96:76:ed:69:d4:6c:f6:91:24:
af:25:c4:95:aa:c8:d6:8e:e9:7f:67:67:f3:40:f2:
9c:63:4b:e8:e0:9f:17:9a:e7:34:ac:b4:e6:74:d7:
cd:91:e1:1f:32:9b:d6:93:54:97:77:4f:b2:2d:a9:
3e:2a:5b:56:50:97:45:29:ae:4a:f1:b0:e8:5d:10:
40:49:65:58:86:07:d9:ac:a8:ca:ea:92:eb:37:86:
45:8c:bd:59:8a:cc:c9:e4:47:97:75:5d:b6:8f:b5:
60:f1:90:42:88:d8:95:69:4d:26:61:05:c5:9f:10:
fd:db:0c:bd:1f:89:c2:66:f8:1d:20:56:92:ad:a8:
da:79:63:dc:0d:0e:40:22:77:11:00:cb:f6:33:88:
0e:54:c5:5f:0e:f8:bd:41:d8:82:62:d7:8c:07:7a:
a9:15:c9:fa:f8:fd:0c:58:d6:50:76:76:34:cd:c9:
d2:96:51:c3:b4:d8:b9:b1:23:52:67:3f:6b:fa:bf:
8c:0d:22:2e:8c:2c:93:65:c3:02:70:14:0f:fe:bd:
37:6b:7f:ab:8f:be:f4:c6:38:c7:f4:ae:b3:41:ec:
7a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:AD:33:17:08:7C:A7:88:2D:7E:2C:D3:F6:9F:9A:A8:0B:AF:E6:05
X509v3 Authority Key Identifier:
keyid:C5:DC:D8:D0:A2:AB:AE:8C:25:39:1F:23:05:1C:C3:F0:F2:47:93:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ef:c1:df:ed:3a:75:4e:9e:2d:3c:75:e0:b4:9c:32:48:f0:
74:81:fc:71:5c:01:15:09:50:10:12:45:79:40:71:ab:d2:75:
9e:00:9a:7b:e0:dc:45:80:77:ca:3a:b1:37:99:b7:16:2a:59:
ed:68:9f:6a:a6:59:4c:59:84:4a:12:85:58:88:77:d8:71:b2:
cf:03:36:33:69:a1:72:05:86:31:3c:88:06:54:d6:4f:99:7c:
1c:5d:57:71:67:fd:06:bd:78:44:5e:ab:ed:84:7f:20:fa:c3:
c5:c0:5a:78:3f:29:f0:dc:00:a8:24:ff:81:e8:8e:66:36:71:
56:f3:72:4f:4c:a8:0f:f0:8e:8a:9c:ca:73:d7:6f:99:9a:ae:
65:b0:9a:a7:c9:c9:fb:0e:ad:e8:bf:63:ae:ca:94:ba:96:7c:
78:f6:29:40:17:80:79:6b:46:eb:e9:66:04:46:0c:8f:e6:ce:
a1:9c:1b:c3:c4:95:bb:43:fd:07:61:e8:4f:6d:41:79:a1:19:
de:fd:2d:ca:e5:54:c5:06:73:0d:fb:54:f8:80:ce:67:2d:be:
d7:b0:1c:94:29:9f:c1:c7:2d:57:92:d1:76:ba:12:43:f8:71:
ae:7f:83:76:f6:0b:0a:23:79:64:a6:53:df:13:8a:a4:ff:22:
0b:37:54:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqSfuJXEZRIoTlrYk8mVbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1ZGNkOGQwYTJhYmFlOGMyNTM5MWYyMzA1MWNjM2YwZjI0
NzkzYWEwHhcNMjYwMzI2MDEwMTMwWhcNMjYwMzI3MDEwMTMwWjAzMTEwLwYDVQQD
Eyg2YmFkMzMxNzA4N2NhNzg4MmQ3ZTJjZDNmNjlmOWFhODBiYWZlNjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2fOta8XtxHKGIy0Laj+nHYSHIgy
VVuG5EKxrZGsX4ljW0uWdu1p1Gz2kSSvJcSVqsjWjul/Z2fzQPKcY0vo4J8Xmuc0
rLTmdNfNkeEfMpvWk1SXd0+yLak+KltWUJdFKa5K8bDoXRBASWVYhgfZrKjK6pLr
N4ZFjL1ZiszJ5EeXdV22j7Vg8ZBCiNiVaU0mYQXFnxD92wy9H4nCZvgdIFaSraja
eWPcDQ5AIncRAMv2M4gOVMVfDvi9QdiCYteMB3qpFcn6+P0MWNZQdnY0zcnSllHD
tNi5sSNSZz9r+r+MDSIujCyTZcMCcBQP/r03a3+rj770xjjH9K6zQex68QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGutMxcIfKeILX4s0/afmqgLr+YFMB8GA1UdIwQY
MBaAFMXc2NCiq66MJTkfIwUcw/DyR5OqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGR6WTBLS3Jyb3dsT1I4akJSekQ4UEpIazZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9mMzBjNGQtYjQyMi00NTgxLWJmMDQt
Yzc5ZDQ2YTkyMzliLzEveGR6WTBLS3Jyb3dsT1I4akJSekQ4UEpIazZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9mMzBjNGQtYjQyMi00NTgxLWJmMDQtYzc5ZDQ2YTkyMzli
LzEveGR6WTBLS3Jyb3dsT1I4akJSekQ4UEpIazZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADu/B3+06
dU6eLTx14LScMkjwdIH8cVwBFQlQEBJFeUBxq9J1ngCae+DcRYB3yjqxN5m3FipZ
7WifaqZZTFmEShKFWIh32HGyzwM2M2mhcgWGMTyIBlTWT5l8HF1XcWf9Br14RF6r
7YR/IPrDxcBaeD8p8NwAqCT/geiOZjZxVvNyT0yoD/COipzKc9dvmZquZbCap8nJ
+w6t6L9jrsqUupZ8ePYpQBeAeWtG6+lmBEYMj+bOoZwbw8SVu0P9B2HoT21BeaEZ
3v0tyuVUxQZzDftU+IDOZy2+17AclCmfwcctV5LRdroSQ/hxrn+DdvYLCiN5ZKZT
3xOKpP8iCzdUCg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:49:38 2026 by rpki-client