Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft
File: pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft (raw, json)
Hash identifier: Y/opi8YsSJDAWFu8jim5I7I86cELY4CHPb84wlDOi8M=
Subject key identifier: 43:70:11:E0:C0:79:B2:06:79:D7:44:20:1D:3D:23:7D:17:E0:5F:F4
Authority key identifier: A5:70:89:C4:5C:55:08:8F:E9:0E:B6:10:02:F0:7F:0F:95:86:26:72
Certificate issuer: /CN=a57089c45c55088fe90eb61002f07f0f95862672
Certificate serial: 019D28F31E9B0D3BF7162C334030F78318F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXCJxFxVCI_pDrYQAvB_D5WGJnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 07:01:54 +0000
Manifest this update: Thu 26 Mar 2026 07:01:54 +0000
Manifest next update: Fri 27 Mar 2026 07:01:54 +0000
Files and hashes: 1: 2Vs036RIRQoTV2qAx1ertXDI75Q.roa (hash: 3fM+Aj1+OVjee08EOwpC46t8Bux0tVGCFsexo6Rt54s=)
2: pXCJxFxVCI_pDrYQAvB_D5WGJnI.crl (hash: iXiHWEIkIirQDuKkjRPvkGNN3BNbT0XeaIQWUCU+lI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXCJxFxVCI_pDrYQAvB_D5WGJnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:1e:9b:0d:3b:f7:16:2c:33:40:30:f7:83:18:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57089c45c55088fe90eb61002f07f0f95862672
Validity
Not Before: Mar 26 07:01:54 2026 GMT
Not After : Mar 27 07:01:54 2026 GMT
Subject: CN=437011e0c079b20679d744201d3d237d17e05ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2b:40:76:4c:2f:6c:f0:dd:40:78:82:eb:0f:
33:3e:f5:ec:0e:24:bd:07:b5:a4:f7:2c:5a:e2:13:
bd:8a:8a:03:fd:ec:70:59:20:58:44:52:65:59:b1:
5a:e1:a1:57:c1:c2:e1:d1:be:96:e3:da:05:5f:25:
fe:d2:bd:d7:75:bd:85:94:0a:de:84:74:9f:bf:1a:
40:87:44:b0:eb:5a:59:5f:ca:5b:09:3c:b0:5e:f9:
b7:b3:5e:17:16:cd:d7:81:ef:a4:7a:e1:58:cb:3f:
25:93:9e:23:85:9f:ad:63:7c:13:2b:30:80:06:b6:
19:45:4d:05:39:b3:98:c1:5c:2e:b8:1b:ea:0c:1d:
05:e2:65:c0:f5:e6:12:d6:0c:9b:e7:29:9b:35:68:
4b:1c:1c:03:b7:09:d1:62:8e:93:e9:5f:43:1d:12:
58:2f:39:26:e4:d9:b2:22:8d:b9:dc:0d:fe:d8:f4:
41:de:4c:95:55:c5:b1:3b:9c:8c:86:c2:cf:13:44:
79:38:04:a1:1e:57:3a:bd:48:25:90:fc:70:16:f4:
46:c0:b1:c7:66:b4:5f:8c:e1:34:71:5d:13:e3:7c:
fe:e5:8b:e8:c4:9d:21:79:ba:ed:4c:48:8b:5d:58:
6d:92:d3:97:c4:6d:35:1e:49:58:63:7b:20:22:39:
17:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:70:11:E0:C0:79:B2:06:79:D7:44:20:1D:3D:23:7D:17:E0:5F:F4
X509v3 Authority Key Identifier:
keyid:A5:70:89:C4:5C:55:08:8F:E9:0E:B6:10:02:F0:7F:0F:95:86:26:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXCJxFxVCI_pDrYQAvB_D5WGJnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:e4:95:0c:64:d4:ed:82:f9:94:1a:96:58:cb:0c:f9:48:a5:
9d:24:3a:ed:bc:3e:a5:98:e9:9d:8a:67:eb:57:cd:76:f4:8a:
44:5c:e4:91:5b:ac:43:a4:7b:3e:cf:b0:b1:c2:ef:0d:06:e8:
6e:9a:73:34:e1:72:67:04:41:d3:c6:b2:53:41:38:9c:1f:62:
70:1b:fc:e1:76:2b:05:78:79:dd:44:67:50:5f:92:20:3b:f7:
86:42:52:35:62:d2:b9:a8:a2:8c:3b:18:fd:fa:8f:09:f2:5d:
59:17:90:b3:36:be:7b:9a:2a:28:05:b3:b8:89:6e:73:bf:66:
c1:45:44:18:09:86:e5:7e:ea:ec:da:17:2b:23:ce:94:53:9f:
b3:74:63:5d:9d:35:64:b2:39:1a:79:83:af:d9:d1:18:d3:e0:
2d:17:e0:29:bc:0a:f4:a9:d7:a9:2f:48:ca:b3:8a:cb:00:6c:
15:f8:0a:80:50:02:09:9b:28:61:eb:0d:64:fa:e5:c5:c7:ce:
7f:bb:ed:96:04:98:e7:35:7b:da:65:b6:8e:bf:ed:b9:38:f1:
3a:2e:2c:2c:f9:47:c9:da:c9:39:60:59:46:95:4a:74:88:ba:
e1:29:ac:5a:2a:bd:3f:ab:9d:95:88:d2:a6:79:59:c0:c3:34:
f0:fd:2f:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8x6bDTv3FiwzQDD3gxj1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NzA4OWM0NWM1NTA4OGZlOTBlYjYxMDAyZjA3ZjBmOTU4
NjI2NzIwHhcNMjYwMzI2MDcwMTU0WhcNMjYwMzI3MDcwMTU0WjAzMTEwLwYDVQQD
Eyg0MzcwMTFlMGMwNzliMjA2NzlkNzQ0MjAxZDNkMjM3ZDE3ZTA1ZmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzStAdkwvbPDdQHiC6w8zPvXsDiS9
B7Wk9yxa4hO9iooD/exwWSBYRFJlWbFa4aFXwcLh0b6W49oFXyX+0r3Xdb2FlAre
hHSfvxpAh0Sw61pZX8pbCTywXvm3s14XFs3Xge+keuFYyz8lk54jhZ+tY3wTKzCA
BrYZRU0FObOYwVwuuBvqDB0F4mXA9eYS1gyb5ymbNWhLHBwDtwnRYo6T6V9DHRJY
Lzkm5NmyIo253A3+2PRB3kyVVcWxO5yMhsLPE0R5OAShHlc6vUglkPxwFvRGwLHH
ZrRfjOE0cV0T43z+5YvoxJ0hebrtTEiLXVhtktOXxG01HklYY3sgIjkXdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFENwEeDAebIGeddEIB09I30X4F/0MB8GA1UdIwQY
MBaAFKVwicRcVQiP6Q62EALwfw+VhiZyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFhDSnhGeFZDSV9wRHJZUUF2Ql9ENVdHSm5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9jM2Y0YTItOGI4ZS00OWEzLWFhOWYt
ZDkyZDY0YjlmODAxLzEvcFhDSnhGeFZDSV9wRHJZUUF2Ql9ENVdHSm5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9jM2Y0YTItOGI4ZS00OWEzLWFhOWYtZDkyZDY0YjlmODAx
LzEvcFhDSnhGeFZDSV9wRHJZUUF2Ql9ENVdHSm5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj+SVDGTU
7YL5lBqWWMsM+UilnSQ67bw+pZjpnYpn61fNdvSKRFzkkVusQ6R7Ps+wscLvDQbo
bppzNOFyZwRB08ayU0E4nB9icBv84XYrBXh53URnUF+SIDv3hkJSNWLSuaiijDsY
/fqPCfJdWReQsza+e5oqKAWzuIluc79mwUVEGAmG5X7q7NoXKyPOlFOfs3RjXZ01
ZLI5GnmDr9nRGNPgLRfgKbwK9KnXqS9IyrOKywBsFfgKgFACCZsoYesNZPrlxcfO
f7vtlgSY5zV72mW2jr/tuTjxOi4sLPlHydrJOWBZRpVKdIi64SmsWiq9P6udlYjS
pnlZwMM08P0v/w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:12:14 2026 by rpki-client