Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.mft
File: XD6sD3atIc1SRFk-TBe6Zxtejuk.mft (raw, json)
Hash identifier: Thjh+AncZDdo8FGTuQx4OvfSnAt4sGAL+cR/YdN/keQ=
Subject key identifier: 24:B6:08:5F:9B:87:61:90:88:BA:D0:68:F1:01:84:D2:C5:D2:69:5D
Authority key identifier: 5C:3E:AC:0F:76:AD:21:CD:52:44:59:3E:4C:17:BA:67:1B:5E:8E:E9
Certificate issuer: /CN=5c3eac0f76ad21cd5244593e4c17ba671b5e8ee9
Certificate serial: 019D29297346FA347C6A3FE2A64844F21AD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XD6sD3atIc1SRFk-TBe6Zxtejuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.mft
Manifest number: 14E9
Signing time: Thu 26 Mar 2026 08:01:15 +0000
Manifest this update: Thu 26 Mar 2026 08:01:15 +0000
Manifest next update: Fri 27 Mar 2026 08:01:15 +0000
Files and hashes: 1: OYjgMWkjKaEMtbV_nb35OjQOnnM.roa (hash: 4FAzuL6Z6T7gxvrY/V+QfrcfNWPFbfpBrhFxavGaqkg=)
2: XD6sD3atIc1SRFk-TBe6Zxtejuk.crl (hash: bsbKQiFPzJ56K/lAA3wteWrDkYY+cZ8GwdMC6vrx9VU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XD6sD3atIc1SRFk-TBe6Zxtejuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:73:46:fa:34:7c:6a:3f:e2:a6:48:44:f2:1a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c3eac0f76ad21cd5244593e4c17ba671b5e8ee9
Validity
Not Before: Mar 26 08:01:15 2026 GMT
Not After : Mar 27 08:01:15 2026 GMT
Subject: CN=24b6085f9b87619088bad068f10184d2c5d2695d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b6:66:4a:f9:58:22:c3:d2:18:fe:0c:04:16:
3c:ac:2b:1d:85:84:7d:7c:82:51:c1:b3:1e:d0:4f:
e7:11:64:de:7f:8b:11:46:b5:80:02:f2:1c:58:18:
57:20:5c:20:fb:54:34:1f:5f:b7:ed:c6:11:b5:7c:
f4:b0:c7:56:59:9d:e5:d1:88:04:8a:d2:e9:e8:e0:
35:c8:1f:43:8d:50:6c:d1:89:55:30:bb:a6:27:67:
6d:c6:65:13:4a:3a:5b:b4:19:ac:84:06:20:82:d5:
31:e7:d5:0f:1c:7b:77:b5:ae:5d:cf:01:63:44:61:
46:fc:07:c4:58:7e:45:c5:0f:90:55:4b:b9:0b:49:
b1:2c:52:8a:d3:52:3f:2e:7f:e6:74:ef:f0:4a:42:
a8:ab:33:6d:a3:95:f6:13:ce:48:d8:58:f8:1a:21:
bc:3b:3b:4f:2e:cd:6b:4e:08:6b:8c:28:8e:8c:7e:
18:51:f6:f9:f6:b2:a7:61:fc:d2:d1:93:59:b6:94:
ec:93:7a:5d:ae:66:05:3e:15:16:50:b7:80:51:ab:
62:4b:ab:b9:ad:0d:8f:6e:af:23:f6:eb:6f:f2:17:
4a:95:54:28:ea:c5:22:20:fe:e1:20:ec:11:df:59:
a3:e7:80:d9:3e:91:61:65:b5:08:d9:0e:b8:6e:bc:
bc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B6:08:5F:9B:87:61:90:88:BA:D0:68:F1:01:84:D2:C5:D2:69:5D
X509v3 Authority Key Identifier:
keyid:5C:3E:AC:0F:76:AD:21:CD:52:44:59:3E:4C:17:BA:67:1B:5E:8E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XD6sD3atIc1SRFk-TBe6Zxtejuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e6:2b:22:1d:91:73:6e:66:7e:25:a7:47:fc:93:97:bf:36:57:
2e:f2:8a:16:ab:7f:b7:d5:b2:14:ae:e8:21:7c:58:3b:9e:65:
94:41:c1:6e:ab:46:ca:0a:3c:45:04:bc:3c:ab:6b:9c:48:b2:
0b:e3:85:84:62:95:8e:4d:75:74:00:64:d4:ca:18:60:f8:a0:
d7:0f:1d:55:16:ed:65:9c:79:c0:4e:33:2c:2f:93:99:46:ed:
3f:a7:af:d2:28:54:03:9e:4a:10:4b:f6:1c:4f:ff:dd:d2:ea:
63:ab:63:ab:b6:52:4d:c7:08:b5:bc:14:aa:c3:dc:e6:e8:66:
41:a6:50:47:d4:ee:87:a7:f6:eb:46:06:13:1c:6f:60:c7:07:
d2:da:a1:31:ad:13:bc:2f:55:da:a8:f4:a4:e3:33:75:ce:f4:
2a:e5:f9:d0:e2:c8:07:b2:1f:70:48:87:b2:60:8b:64:d1:4f:
53:f3:d7:b4:30:ad:89:9f:52:b0:1b:21:08:93:e9:13:18:0b:
34:cb:7e:55:24:63:d8:00:72:ae:fb:ad:a9:c2:55:63:4e:d0:
1c:ae:af:6a:af:59:55:3d:7e:f9:92:7c:40:81:1c:34:cf:43:
37:cf:a9:c3:fd:69:0a:7c:c4:aa:ed:b4:f6:40:c3:82:07:dc:
b7:42:34:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKXNG+jR8aj/ipkhE8hrQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjM2VhYzBmNzZhZDIxY2Q1MjQ0NTkzZTRjMTdiYTY3MWI1
ZThlZTkwHhcNMjYwMzI2MDgwMTE1WhcNMjYwMzI3MDgwMTE1WjAzMTEwLwYDVQQD
EygyNGI2MDg1ZjliODc2MTkwODhiYWQwNjhmMTAxODRkMmM1ZDI2OTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLZmSvlYIsPSGP4MBBY8rCsdhYR9
fIJRwbMe0E/nEWTef4sRRrWAAvIcWBhXIFwg+1Q0H1+37cYRtXz0sMdWWZ3l0YgE
itLp6OA1yB9DjVBs0YlVMLumJ2dtxmUTSjpbtBmshAYggtUx59UPHHt3ta5dzwFj
RGFG/AfEWH5FxQ+QVUu5C0mxLFKK01I/Ln/mdO/wSkKoqzNto5X2E85I2Fj4GiG8
OztPLs1rTghrjCiOjH4YUfb59rKnYfzS0ZNZtpTsk3pdrmYFPhUWULeAUatiS6u5
rQ2Pbq8j9utv8hdKlVQo6sUiIP7hIOwR31mj54DZPpFhZbUI2Q64bry8QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCS2CF+bh2GQiLrQaPEBhNLF0mldMB8GA1UdIwQY
MBaAFFw+rA92rSHNUkRZPkwXumcbXo7pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEQ2c0QzYXRJYzFTUkZrLVRCZTZaeHRlanVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni85NjQwODgtOGFiZC00NTRjLTk5Mjct
NDQ2NGExM2JmMWEwLzEvWEQ2c0QzYXRJYzFTUkZrLVRCZTZaeHRlanVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni85NjQwODgtOGFiZC00NTRjLTk5MjctNDQ2NGExM2JmMWEw
LzEvWEQ2c0QzYXRJYzFTUkZrLVRCZTZaeHRlanVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5isiHZFz
bmZ+JadH/JOXvzZXLvKKFqt/t9WyFK7oIXxYO55llEHBbqtGygo8RQS8PKtrnEiy
C+OFhGKVjk11dABk1MoYYPig1w8dVRbtZZx5wE4zLC+TmUbtP6ev0ihUA55KEEv2
HE//3dLqY6tjq7ZSTccItbwUqsPc5uhmQaZQR9Tuh6f260YGExxvYMcH0tqhMa0T
vC9V2qj0pOMzdc70KuX50OLIB7IfcEiHsmCLZNFPU/PXtDCtiZ9SsBshCJPpExgL
NMt+VSRj2AByrvutqcJVY07QHK6vaq9ZVT1++ZJ8QIEcNM9DN8+pw/1pCnzEqu20
9kDDggfct0I0hQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:06:32 2026 by rpki-client