Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.mft
File: xseGdZEgDB9fn9DMPemVTcE5hi4.mft (raw, json)
Hash identifier: EHPAEO8DO9SYC7Jc4qT7rHdVMq9OoWit4gMTkqFCBMU=
Subject key identifier: 67:40:94:61:DE:AD:BE:B3:F5:33:4C:DC:57:9E:8F:2A:5C:D7:4A:7B
Authority key identifier: C6:C7:86:75:91:20:0C:1F:5F:9F:D0:CC:3D:E9:95:4D:C1:39:86:2E
Certificate issuer: /CN=c6c7867591200c1f5f9fd0cc3de9954dc139862e
Certificate serial: 019D273AFF1EA168AFBC8DC736D4E1672DF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xseGdZEgDB9fn9DMPemVTcE5hi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.mft
Manifest number: 07DC
Signing time: Wed 25 Mar 2026 23:01:10 +0000
Manifest this update: Wed 25 Mar 2026 23:01:10 +0000
Manifest next update: Thu 26 Mar 2026 23:01:10 +0000
Files and hashes: 1: EU0I3QnoCAXFVY2YnHa5pt1MRtg.roa (hash: KZLLvvp27GcbrvLH6ITu2gaasm7oI7TbJiyGjo0GMBg=)
2: xseGdZEgDB9fn9DMPemVTcE5hi4.crl (hash: 1ltv4nzjteuC6HLELYGa1knWt4YfaGcVsFP8obRtf1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xseGdZEgDB9fn9DMPemVTcE5hi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:ff:1e:a1:68:af:bc:8d:c7:36:d4:e1:67:2d:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c7867591200c1f5f9fd0cc3de9954dc139862e
Validity
Not Before: Mar 25 23:01:10 2026 GMT
Not After : Mar 26 23:01:10 2026 GMT
Subject: CN=67409461deadbeb3f5334cdc579e8f2a5cd74a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:53:53:fd:8c:bb:90:66:11:38:8f:1a:5c:10:
2e:2f:b6:d3:f7:09:6b:11:29:5e:29:98:b8:f3:ec:
1a:2a:07:62:f8:be:dd:a8:90:7b:34:e3:b8:31:0b:
20:cb:a5:5e:97:da:8a:fe:46:ff:0a:1e:d9:dc:9e:
16:0d:f0:a1:39:51:fb:f3:d1:61:b3:79:c5:f8:2c:
80:a2:02:b6:35:e0:65:e8:1d:65:54:0b:16:6f:6b:
0a:0e:48:d0:44:e9:08:39:0e:b1:c0:f4:f2:99:c1:
51:39:01:10:18:11:ff:35:75:08:fb:e0:c3:b3:79:
05:5b:a8:0b:c1:1f:c4:86:92:4d:41:f2:6b:1a:42:
3a:1e:be:aa:85:55:7a:53:93:ad:2c:f6:64:30:49:
05:b2:05:96:cb:35:47:f8:22:1f:c7:10:c0:0d:47:
25:f1:42:f6:0c:29:38:78:e5:f5:25:d1:28:3f:49:
81:c7:b7:ce:fe:e6:23:64:04:d0:2f:b0:5d:e4:4f:
0b:1a:02:ae:46:e0:a4:39:20:8b:e5:3b:5b:56:cb:
5c:36:98:40:db:ba:15:9a:7a:b1:e2:42:e1:a2:23:
a9:5a:ec:53:ed:36:83:4b:45:6c:f5:3d:9c:f3:84:
78:32:96:42:72:ad:00:6f:fc:ad:85:30:9f:53:54:
03:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:40:94:61:DE:AD:BE:B3:F5:33:4C:DC:57:9E:8F:2A:5C:D7:4A:7B
X509v3 Authority Key Identifier:
keyid:C6:C7:86:75:91:20:0C:1F:5F:9F:D0:CC:3D:E9:95:4D:C1:39:86:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xseGdZEgDB9fn9DMPemVTcE5hi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:d9:77:0d:7b:5e:75:9a:4b:91:e0:c2:e2:76:45:f2:d6:2e:
69:6e:45:25:a3:db:0b:4b:77:68:1d:80:ff:8e:f8:06:58:44:
7b:39:bd:08:15:87:db:4f:d2:8d:ba:6d:55:1e:eb:e3:45:9b:
ae:a3:b1:8e:f7:3a:5b:f0:f9:5f:46:a2:78:93:3f:19:75:b3:
1e:05:17:c8:8f:04:04:28:43:3a:22:4a:0d:b4:b6:34:b8:b6:
23:68:05:76:d3:46:8d:9b:dc:f3:c0:b7:dd:4c:12:b9:f2:9d:
b9:c1:3b:21:d0:31:09:8f:d4:b6:56:63:c5:f6:52:e4:3a:78:
21:bb:cc:3e:52:14:3f:cb:13:3a:e6:dc:16:ff:4c:b5:58:11:
40:91:de:ab:f7:e3:ff:e6:66:bb:5f:8e:b0:71:20:70:02:96:
69:36:f1:05:ab:53:4e:fa:13:27:fc:c1:3c:5a:61:67:a9:79:
a8:bb:8b:5b:81:9f:ae:27:8f:c6:5a:27:b0:aa:dc:2f:3f:11:
e6:65:26:39:3c:a4:15:fb:37:80:98:c7:27:c0:1e:a1:33:bd:
b4:a2:d1:84:5c:29:18:66:7f:4f:7f:8e:fa:9e:7d:32:02:74:
ca:42:99:3c:2d:1b:3a:4d:90:40:f2:84:4b:1e:47:ca:54:c5:
bf:ae:5a:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOv8eoWivvI3HNtThZy3zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2Yzc4Njc1OTEyMDBjMWY1ZjlmZDBjYzNkZTk5NTRkYzEz
OTg2MmUwHhcNMjYwMzI1MjMwMTEwWhcNMjYwMzI2MjMwMTEwWjAzMTEwLwYDVQQD
Eyg2NzQwOTQ2MWRlYWRiZWIzZjUzMzRjZGM1NzllOGYyYTVjZDc0YTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFNT/Yy7kGYROI8aXBAuL7bT9wlr
ESleKZi48+waKgdi+L7dqJB7NOO4MQsgy6Vel9qK/kb/Ch7Z3J4WDfChOVH789Fh
s3nF+CyAogK2NeBl6B1lVAsWb2sKDkjQROkIOQ6xwPTymcFROQEQGBH/NXUI++DD
s3kFW6gLwR/EhpJNQfJrGkI6Hr6qhVV6U5OtLPZkMEkFsgWWyzVH+CIfxxDADUcl
8UL2DCk4eOX1JdEoP0mBx7fO/uYjZATQL7Bd5E8LGgKuRuCkOSCL5TtbVstcNphA
27oVmnqx4kLhoiOpWuxT7TaDS0Vs9T2c84R4MpZCcq0Ab/ythTCfU1QDlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGdAlGHerb6z9TNM3Feejypc10p7MB8GA1UdIwQY
MBaAFMbHhnWRIAwfX5/QzD3plU3BOYYuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHNlR2RaRWdEQjlmbjlETVBlbVZUY0U1aGk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9hNWFkNTAtNzFmZC00MThmLWE0MzUt
ODAzYzliNDFiOGU5LzEveHNlR2RaRWdEQjlmbjlETVBlbVZUY0U1aGk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9hNWFkNTAtNzFmZC00MThmLWE0MzUtODAzYzliNDFiOGU5
LzEveHNlR2RaRWdEQjlmbjlETVBlbVZUY0U1aGk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgtl3DXte
dZpLkeDC4nZF8tYuaW5FJaPbC0t3aB2A/474BlhEezm9CBWH20/SjbptVR7r40Wb
rqOxjvc6W/D5X0aieJM/GXWzHgUXyI8EBChDOiJKDbS2NLi2I2gFdtNGjZvc88C3
3UwSufKducE7IdAxCY/UtlZjxfZS5Dp4IbvMPlIUP8sTOubcFv9MtVgRQJHeq/fj
/+Zmu1+OsHEgcAKWaTbxBatTTvoTJ/zBPFphZ6l5qLuLW4GfriePxlonsKrcLz8R
5mUmOTykFfs3gJjHJ8AeoTO9tKLRhFwpGGZ/T3+O+p59MgJ0ykKZPC0bOk2QQPKE
Sx5HylTFv65aFg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:12 2026 by rpki-client