Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.mft
File: XHVwB66_AAmKgAIo2x9ZMO5m5nU.mft (raw, json)
Hash identifier: RKWUd8g/0ERuVBfYwgXsvOFSI29jtDvLgOLBxeuh7o0=
Subject key identifier: 91:A9:2B:F9:4F:0F:AD:0D:86:31:AE:37:A7:3F:51:0A:80:1C:ED:AE
Authority key identifier: 5C:75:70:07:AE:BF:00:09:8A:80:02:28:DB:1F:59:30:EE:66:E6:75
Certificate issuer: /CN=5c757007aebf00098a800228db1f5930ee66e675
Certificate serial: 019D28BB689FA1DD1602EAFD405593129624
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHVwB66_AAmKgAIo2x9ZMO5m5nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.mft
Manifest number: 088D
Signing time: Thu 26 Mar 2026 06:01:03 +0000
Manifest this update: Thu 26 Mar 2026 06:01:03 +0000
Manifest next update: Fri 27 Mar 2026 06:01:03 +0000
Files and hashes: 1: XHVwB66_AAmKgAIo2x9ZMO5m5nU.crl (hash: FCfwZgoRQZOuPhSm8XeO/PZOfCOXfvJYCQEUGqHcGo4=)
2: iaWZDNhDLscYcfyYSiXpXFomI88.roa (hash: Pf7br+pz9PCLXjlHTpNcxUaJd9dwtWHArZdZaJaAooU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHVwB66_AAmKgAIo2x9ZMO5m5nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:68:9f:a1:dd:16:02:ea:fd:40:55:93:12:96:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c757007aebf00098a800228db1f5930ee66e675
Validity
Not Before: Mar 26 06:01:03 2026 GMT
Not After : Mar 27 06:01:03 2026 GMT
Subject: CN=91a92bf94f0fad0d8631ae37a73f510a801cedae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1a:9c:21:9e:6a:99:48:96:93:bf:69:2c:1a:
40:88:3c:88:43:c1:b6:bc:3e:bc:e4:0f:7a:33:3b:
09:1b:c4:9b:74:a2:e1:a2:bb:2d:c5:4d:70:ec:ae:
58:0d:e3:84:98:c2:a3:1e:f4:e1:2f:e1:68:0a:eb:
b4:6e:b0:75:70:76:e2:ac:ae:0d:ed:f8:dd:e5:62:
af:8d:eb:13:65:4b:95:6b:6c:b4:23:dc:84:0c:3d:
a5:82:0d:3a:cb:7a:10:6b:c3:59:c6:bc:a2:ae:53:
f6:29:d6:8a:4c:2e:42:bc:a4:cc:6e:0a:b0:bc:58:
7d:44:fb:3f:96:90:fa:fb:84:8c:40:73:08:13:e2:
81:63:4d:b9:ba:6f:9e:b0:5a:54:49:69:0e:21:5f:
55:e7:f7:0b:32:df:ca:38:3a:96:ba:a9:0c:df:26:
78:2d:17:08:8d:03:b4:7d:12:9f:60:34:a9:3f:36:
04:ed:fc:b1:08:28:67:32:e0:74:67:55:a6:69:48:
10:ff:5d:99:09:85:c0:13:f3:4d:f6:1d:03:f9:e4:
79:90:eb:65:92:6d:8d:3e:b0:4b:5c:e8:ea:b2:42:
49:54:75:cb:98:e3:84:b2:02:de:bc:15:4c:a6:58:
e4:83:3a:91:77:85:91:a5:61:65:e7:3d:90:22:22:
ee:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A9:2B:F9:4F:0F:AD:0D:86:31:AE:37:A7:3F:51:0A:80:1C:ED:AE
X509v3 Authority Key Identifier:
keyid:5C:75:70:07:AE:BF:00:09:8A:80:02:28:DB:1F:59:30:EE:66:E6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHVwB66_AAmKgAIo2x9ZMO5m5nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:a6:65:3f:fa:78:28:c6:c7:8e:96:29:38:d5:d5:6e:94:66:
77:a1:6f:e6:3e:52:61:64:71:c5:e0:ae:c2:99:cf:06:bb:cf:
fa:4e:16:19:20:d2:e1:cc:08:3b:77:0b:3b:f0:54:92:f6:8d:
d0:17:fe:bf:2b:97:99:0b:e2:31:78:a6:49:2f:cd:ec:c5:ad:
3c:e7:0b:c1:5a:e6:9f:87:0f:c7:e4:41:33:9d:e8:cb:d5:2f:
d8:84:fe:1a:67:9c:b3:98:94:d8:86:8f:f9:a4:64:9c:a0:27:
4e:4a:9d:52:86:aa:44:6a:3a:7a:2a:a2:15:50:7b:72:0b:5e:
8b:0f:6e:ce:c3:14:91:55:38:fc:b9:2a:32:63:2f:b3:f1:6d:
9d:60:2a:c8:eb:a4:0e:52:2c:63:4e:32:0f:03:a1:1a:4c:02:
54:6b:51:b3:89:b9:95:3f:79:a4:81:c3:6c:15:d8:e8:70:d3:
77:bb:4c:d1:c9:e6:43:03:ad:02:a6:82:ae:e2:71:bd:3f:2b:
81:fb:50:87:88:a8:32:b1:20:79:d6:ef:19:da:f2:31:37:c2:
5f:31:b3:c3:f5:06:14:ff:eb:87:d1:87:6c:95:91:d6:71:0a:
84:84:75:d5:67:4b:8d:b5:ae:3d:a4:67:1b:9d:92:77:69:14:
91:ea:5b:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou2ifod0WAur9QFWTEpYkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNzU3MDA3YWViZjAwMDk4YTgwMDIyOGRiMWY1OTMwZWU2
NmU2NzUwHhcNMjYwMzI2MDYwMTAzWhcNMjYwMzI3MDYwMTAzWjAzMTEwLwYDVQQD
Eyg5MWE5MmJmOTRmMGZhZDBkODYzMWFlMzdhNzNmNTEwYTgwMWNlZGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hqcIZ5qmUiWk79pLBpAiDyIQ8G2
vD685A96MzsJG8SbdKLhorstxU1w7K5YDeOEmMKjHvThL+FoCuu0brB1cHbirK4N
7fjd5WKvjesTZUuVa2y0I9yEDD2lgg06y3oQa8NZxryirlP2KdaKTC5CvKTMbgqw
vFh9RPs/lpD6+4SMQHMIE+KBY025um+esFpUSWkOIV9V5/cLMt/KODqWuqkM3yZ4
LRcIjQO0fRKfYDSpPzYE7fyxCChnMuB0Z1WmaUgQ/12ZCYXAE/NN9h0D+eR5kOtl
km2NPrBLXOjqskJJVHXLmOOEsgLevBVMpljkgzqRd4WRpWFl5z2QIiLuMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJGpK/lPD60NhjGuN6c/UQqAHO2uMB8GA1UdIwQY
MBaAFFx1cAeuvwAJioACKNsfWTDuZuZ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEhWd0I2Nl9BQW1LZ0FJbzJ4OVpNTzVtNW5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS82NWFlYTUtZmZlZi00Mjc4LTk4MmUt
YTdhNzMxOTQwMjhlLzEvWEhWd0I2Nl9BQW1LZ0FJbzJ4OVpNTzVtNW5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS82NWFlYTUtZmZlZi00Mjc4LTk4MmUtYTdhNzMxOTQwMjhl
LzEvWEhWd0I2Nl9BQW1LZ0FJbzJ4OVpNTzVtNW5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlqZlP/p4
KMbHjpYpONXVbpRmd6Fv5j5SYWRxxeCuwpnPBrvP+k4WGSDS4cwIO3cLO/BUkvaN
0Bf+vyuXmQviMXimSS/N7MWtPOcLwVrmn4cPx+RBM53oy9Uv2IT+Gmecs5iU2IaP
+aRknKAnTkqdUoaqRGo6eiqiFVB7cgteiw9uzsMUkVU4/LkqMmMvs/FtnWAqyOuk
DlIsY04yDwOhGkwCVGtRs4m5lT95pIHDbBXY6HDTd7tM0cnmQwOtAqaCruJxvT8r
gftQh4ioMrEgedbvGdryMTfCXzGzw/UGFP/rh9GHbJWR1nEKhIR11WdLjbWuPaRn
G52Sd2kUkepb5A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:18:13 2026 by rpki-client