Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft
File: Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft (raw, json)
Hash identifier: NyUK2m8i/P+DNEDU/SySeOCv+Lm8lAOznlrmg+7xQA0=
Subject key identifier: 33:83:1E:03:B5:8E:72:E0:0A:1B:11:23:23:EC:60:38:F3:5F:90:4B
Authority key identifier: 5E:FF:F2:57:8A:0E:62:15:DC:60:E2:DA:94:6F:30:D2:5C:63:CD:6A
Certificate issuer: /CN=5efff2578a0e6215dc60e2da946f30d25c63cd6a
Certificate serial: 019D2A7280AC4DB3DEB9C392C06080BB0678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xv_yV4oOYhXcYOLalG8w0lxjzWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 14:00:40 +0000
Manifest this update: Thu 26 Mar 2026 14:00:40 +0000
Manifest next update: Fri 27 Mar 2026 14:00:40 +0000
Files and hashes: 1: Xv_yV4oOYhXcYOLalG8w0lxjzWo.crl (hash: 6abb4/uvhHD+ryxDXLYp+5hyK5tnBC2fw53DFikFQNU=)
2: yGB3G9JvJrN2ebP00_hjVPvgDtg.roa (hash: bHuIB6ZCObrwj4J53cKXr7Vc20aEn6p9E11VTiZdX7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xv_yV4oOYhXcYOLalG8w0lxjzWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:80:ac:4d:b3:de:b9:c3:92:c0:60:80:bb:06:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5efff2578a0e6215dc60e2da946f30d25c63cd6a
Validity
Not Before: Mar 26 14:00:40 2026 GMT
Not After : Mar 27 14:00:40 2026 GMT
Subject: CN=33831e03b58e72e00a1b112323ec6038f35f904b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c8:84:ae:3c:6e:07:af:a2:a4:ba:cc:9e:4f:
a8:b6:6c:41:51:e1:d0:c2:19:b1:fb:7a:8e:0c:2d:
4d:b5:8b:bf:05:00:4c:ab:53:ce:44:f6:ab:5f:f8:
df:32:63:a1:3f:58:4e:6f:01:d8:54:ed:4a:ca:e9:
6a:ae:06:f9:1b:5e:dd:12:d9:aa:d2:fc:eb:aa:d7:
42:fa:72:8f:0a:fe:37:c9:87:54:95:f5:b9:bf:13:
23:45:0c:3d:b5:e2:0c:34:2d:60:b5:b2:69:72:1d:
86:6b:49:d5:6b:10:16:8e:1c:2f:76:4c:de:13:16:
48:72:92:98:af:16:38:2d:6f:76:22:3b:71:61:73:
ab:11:d6:c0:7e:46:61:69:9b:38:06:00:ff:ed:88:
9c:83:cf:5e:b8:0e:4e:0c:71:0a:11:91:e7:7f:51:
1f:92:ec:d6:ba:44:43:b9:11:8d:be:f8:d3:7b:17:
a6:00:52:92:8f:5e:f4:66:70:46:ee:b1:07:4a:6e:
fc:c7:77:f6:30:fb:ac:c0:04:69:ba:1b:c4:b7:59:
eb:9d:2d:0e:aa:a2:30:da:64:60:df:22:04:b9:43:
e9:6f:95:ec:0f:eb:c7:40:85:63:4c:57:f1:f4:24:
fe:41:ce:90:01:86:80:4f:a3:c0:a4:ec:8b:75:bb:
27:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:83:1E:03:B5:8E:72:E0:0A:1B:11:23:23:EC:60:38:F3:5F:90:4B
X509v3 Authority Key Identifier:
keyid:5E:FF:F2:57:8A:0E:62:15:DC:60:E2:DA:94:6F:30:D2:5C:63:CD:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xv_yV4oOYhXcYOLalG8w0lxjzWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:62:61:f6:9b:9e:78:46:af:9c:ab:e9:6c:f1:26:d3:4d:71:
22:ce:74:65:f8:a5:26:de:be:c4:53:39:ec:91:a7:1c:ef:9d:
08:80:73:3c:13:41:f3:2c:c1:91:c5:13:d2:54:75:fc:a2:cf:
09:e1:9c:f4:9d:ee:ed:4d:9f:a2:8d:43:c0:58:c9:21:33:64:
2a:73:83:63:39:69:05:f5:49:86:df:6f:00:96:fb:11:87:52:
4b:6e:54:07:af:e8:2f:e2:95:e8:49:af:11:1d:16:bc:e6:79:
07:d6:c3:93:90:02:99:73:37:a3:33:05:a2:7b:f7:65:24:9e:
ae:ea:1b:dc:49:da:b2:1a:d1:cf:0d:a8:47:3f:a8:b7:25:02:
31:2e:34:74:98:20:63:f8:ea:92:64:b5:d7:93:f8:e2:ae:3f:
0f:1c:8b:eb:8d:74:0c:6c:0c:37:d3:47:24:51:d6:46:9b:3f:
34:b2:c5:50:22:e0:4d:5e:4b:64:5f:46:48:94:7c:d9:b9:e4:
3f:8b:33:8e:b2:52:f0:6b:a9:94:37:ff:dd:b9:f6:42:c0:45:
39:ef:71:61:71:a7:db:2a:54:9c:e5:6e:82:20:a8:94:4f:9b:
14:ba:5b:fb:d4:01:ff:47:6e:42:8b:ff:91:ef:84:c7:91:39:
37:07:d9:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qcoCsTbPeucOSwGCAuwZ4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZmZmMjU3OGEwZTYyMTVkYzYwZTJkYTk0NmYzMGQyNWM2
M2NkNmEwHhcNMjYwMzI2MTQwMDQwWhcNMjYwMzI3MTQwMDQwWjAzMTEwLwYDVQQD
EygzMzgzMWUwM2I1OGU3MmUwMGExYjExMjMyM2VjNjAzOGYzNWY5MDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsiErjxuB6+ipLrMnk+otmxBUeHQ
whmx+3qODC1NtYu/BQBMq1PORParX/jfMmOhP1hObwHYVO1Kyulqrgb5G17dEtmq
0vzrqtdC+nKPCv43yYdUlfW5vxMjRQw9teIMNC1gtbJpch2Ga0nVaxAWjhwvdkze
ExZIcpKYrxY4LW92IjtxYXOrEdbAfkZhaZs4BgD/7Yicg89euA5ODHEKEZHnf1Ef
kuzWukRDuRGNvvjTexemAFKSj170ZnBG7rEHSm78x3f2MPuswARpuhvEt1nrnS0O
qqIw2mRg3yIEuUPpb5XsD+vHQIVjTFfx9CT+Qc6QAYaAT6PApOyLdbsnhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDODHgO1jnLgChsRIyPsYDjzX5BLMB8GA1UdIwQY
MBaAFF7/8leKDmIV3GDi2pRvMNJcY81qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHZfeVY0b09ZaFhjWU9MYWxHOHcwbHhqeldvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC83OWQxYTEtMDkxYy00MDM5LTg3Nzgt
YjY5NzkwN2ZmZGM4LzEvWHZfeVY0b09ZaFhjWU9MYWxHOHcwbHhqeldvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC83OWQxYTEtMDkxYy00MDM5LTg3NzgtYjY5NzkwN2ZmZGM4
LzEvWHZfeVY0b09ZaFhjWU9MYWxHOHcwbHhqeldvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACmJh9pue
eEavnKvpbPEm001xIs50ZfilJt6+xFM57JGnHO+dCIBzPBNB8yzBkcUT0lR1/KLP
CeGc9J3u7U2foo1DwFjJITNkKnODYzlpBfVJht9vAJb7EYdSS25UB6/oL+KV6Emv
ER0WvOZ5B9bDk5ACmXM3ozMFonv3ZSSeruob3EnashrRzw2oRz+otyUCMS40dJgg
Y/jqkmS115P44q4/DxyL6410DGwMN9NHJFHWRps/NLLFUCLgTV5LZF9GSJR82bnk
P4szjrJS8GuplDf/3bn2QsBFOe9xYXGn2ypUnOVugiColE+bFLpb+9QB/0duQov/
ke+Ex5E5NwfZpQ==
-----END CERTIFICATE-----
Generated at Fri Mar 27 00:11:16 2026 by rpki-client