Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
File: XmFA8XMSeE72KuO-AwwMLMZhpwI.mft (raw, json)
Hash identifier: dvri1HW/PpbXSLb95xbM3m1mq604rr372wxrJQyt90M=
Subject key identifier: A1:0A:3B:ED:D1:5B:F2:CD:31:67:A8:12:20:73:60:D4:FD:4F:B3:80
Authority key identifier: 5E:61:40:F1:73:12:78:4E:F6:2A:E3:BE:03:0C:0C:2C:C6:61:A7:02
Certificate issuer: /CN=5e6140f17312784ef62ae3be030c0c2cc661a702
Certificate serial: 019D27A897D4598263730D68315C28A9D1F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
Manifest number: 0D70
Signing time: Thu 26 Mar 2026 01:00:53 +0000
Manifest this update: Thu 26 Mar 2026 01:00:53 +0000
Manifest next update: Fri 27 Mar 2026 01:00:53 +0000
Files and hashes: 1: XmFA8XMSeE72KuO-AwwMLMZhpwI.crl (hash: fhrClkP7x55Nby2YeK1azST/h6BmVKz5r9IXUTsWdkk=)
2: vSKxJft-YrfZTgTcPvrZEBw-s-o.roa (hash: fXlVBWLEGWm5OQD/WI5lmOPHwN/6Yh6slPhBeiX8hgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:97:d4:59:82:63:73:0d:68:31:5c:28:a9:d1:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6140f17312784ef62ae3be030c0c2cc661a702
Validity
Not Before: Mar 26 01:00:53 2026 GMT
Not After : Mar 27 01:00:53 2026 GMT
Subject: CN=a10a3bedd15bf2cd3167a812207360d4fd4fb380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5c:52:e1:08:c7:1b:df:64:ea:2d:e9:95:4b:
7c:af:b4:ba:b1:49:70:07:5a:48:0f:36:bb:5b:77:
bb:00:1f:fa:29:93:4f:80:49:4b:32:0f:0d:5b:15:
1e:5c:fa:1b:5e:40:82:a9:02:5f:43:01:b9:59:84:
c1:b2:cd:67:14:c0:41:cc:4a:25:6a:ab:36:8c:7a:
e7:a1:4f:44:c2:26:2d:d2:ca:0e:bd:46:f1:98:69:
47:57:de:21:fd:bc:69:05:8c:68:09:6e:7d:27:15:
27:76:ea:6d:83:7e:a2:84:0c:5c:ab:bc:99:92:1f:
f3:bf:aa:4a:0c:af:35:bf:2b:ec:7a:1d:96:2a:b6:
58:58:38:16:39:8f:f6:ce:c5:0d:e0:5f:3d:ec:7c:
d0:54:a8:89:cd:62:e0:d0:bc:94:71:b7:a1:19:52:
7f:cc:52:fc:7b:2a:02:9f:83:34:50:35:21:c4:01:
e0:21:c2:08:85:43:91:db:d6:20:ab:1c:5b:95:c3:
7c:e1:4b:8f:06:5c:5c:06:fd:d0:4d:ed:82:a6:ed:
27:fb:12:d1:8b:d9:a5:31:ae:64:ad:04:8d:8f:c4:
fe:de:cc:85:03:85:79:a7:4b:a4:6a:58:e3:ed:bd:
be:3b:46:af:ca:9f:47:ef:aa:4b:33:76:7d:0f:3a:
ca:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:0A:3B:ED:D1:5B:F2:CD:31:67:A8:12:20:73:60:D4:FD:4F:B3:80
X509v3 Authority Key Identifier:
keyid:5E:61:40:F1:73:12:78:4E:F6:2A:E3:BE:03:0C:0C:2C:C6:61:A7:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:9c:bc:b6:29:ae:77:7a:14:c4:8c:a2:c3:94:85:92:1a:e1:
5b:6e:3c:62:5a:fe:24:d3:21:27:26:6d:36:aa:30:68:80:97:
b4:9b:21:4d:c3:a8:77:08:b4:69:dc:2b:f5:ab:d6:c2:e4:84:
de:8a:2b:f8:43:c9:ae:b7:d4:96:ad:7b:85:fc:91:e8:33:93:
53:d8:55:89:f0:b5:15:7f:a5:b5:5b:83:5c:1d:77:f9:6b:20:
e3:30:74:d3:56:3c:04:72:30:3e:2d:cf:fd:be:33:80:91:5b:
3b:92:82:8b:5a:73:82:97:bf:35:e5:ff:e1:54:f3:d2:a3:0d:
ce:d9:d9:54:1e:1e:63:de:4f:7d:36:b3:ad:d2:74:0f:e2:52:
53:9f:66:8b:56:f2:4f:bf:4b:6f:15:81:21:f9:63:37:64:6e:
d9:84:49:50:a9:36:3f:b1:6b:68:ac:7c:9b:e1:01:d4:c3:ca:
f4:e6:54:27:1f:f3:27:78:f2:d9:e1:58:46:83:d6:22:82:bc:
b1:33:ca:44:91:a4:07:84:d4:a4:cc:2d:9d:d5:ac:f3:28:6d:
4d:23:a5:0d:65:1d:20:9c:55:ea:f0:8c:c7:b2:f6:00:1e:28:
aa:be:5f:26:3b:c3:61:a0:67:5b:9f:88:b2:45:25:58:09:70:
26:44:2b:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqJfUWYJjcw1oMVwoqdH4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNjE0MGYxNzMxMjc4NGVmNjJhZTNiZTAzMGMwYzJjYzY2
MWE3MDIwHhcNMjYwMzI2MDEwMDUzWhcNMjYwMzI3MDEwMDUzWjAzMTEwLwYDVQQD
EyhhMTBhM2JlZGQxNWJmMmNkMzE2N2E4MTIyMDczNjBkNGZkNGZiMzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FxS4QjHG99k6i3plUt8r7S6sUlw
B1pIDza7W3e7AB/6KZNPgElLMg8NWxUeXPobXkCCqQJfQwG5WYTBss1nFMBBzEol
aqs2jHrnoU9EwiYt0soOvUbxmGlHV94h/bxpBYxoCW59JxUnduptg36ihAxcq7yZ
kh/zv6pKDK81vyvseh2WKrZYWDgWOY/2zsUN4F897HzQVKiJzWLg0LyUcbehGVJ/
zFL8eyoCn4M0UDUhxAHgIcIIhUOR29YgqxxblcN84UuPBlxcBv3QTe2Cpu0n+xLR
i9mlMa5krQSNj8T+3syFA4V5p0ukaljj7b2+O0avyp9H76pLM3Z9DzrKUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKEKO+3RW/LNMWeoEiBzYNT9T7OAMB8GA1UdIwQY
MBaAFF5hQPFzEnhO9irjvgMMDCzGYacCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG1GQThYTVNlRTcyS3VPLUF3d01MTVpocHdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9jNGNlMzItYzIyMC00MGM5LThiZTgt
MGRiY2JhMjc1NDE3LzEvWG1GQThYTVNlRTcyS3VPLUF3d01MTVpocHdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9jNGNlMzItYzIyMC00MGM5LThiZTgtMGRiY2JhMjc1NDE3
LzEvWG1GQThYTVNlRTcyS3VPLUF3d01MTVpocHdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWZy8timu
d3oUxIyiw5SFkhrhW248Ylr+JNMhJyZtNqowaICXtJshTcOodwi0adwr9avWwuSE
3oor+EPJrrfUlq17hfyR6DOTU9hVifC1FX+ltVuDXB13+Wsg4zB001Y8BHIwPi3P
/b4zgJFbO5KCi1pzgpe/NeX/4VTz0qMNztnZVB4eY95PfTazrdJ0D+JSU59mi1by
T79LbxWBIfljN2Ru2YRJUKk2P7FraKx8m+EB1MPK9OZUJx/zJ3jy2eFYRoPWIoK8
sTPKRJGkB4TUpMwtndWs8yhtTSOlDWUdIJxV6vCMx7L2AB4oqr5fJjvDYaBnW5+I
skUlWAlwJkQrzQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:57 2026 by rpki-client