Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
File: XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft (raw, json)
Hash identifier: qJFqHTaaCj7TzXfuEoISevkXWyWybYzz+Ege3WVz3fE=
Subject key identifier: C2:1C:3B:EC:04:DA:A6:41:0D:36:4D:EF:1B:FA:B0:AD:3D:6E:D0:A1
Authority key identifier: 5F:02:11:C9:1E:9E:0D:35:CB:51:33:45:91:3E:0A:1A:61:BF:D2:49
Certificate issuer: /CN=5f0211c91e9e0d35cb513345913e0a1a61bfd249
Certificate serial: 019D2515F3919553D695AE0229D8B968F42F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
Manifest number: 0384
Signing time: Wed 25 Mar 2026 13:01:28 +0000
Manifest this update: Wed 25 Mar 2026 13:01:28 +0000
Manifest next update: Thu 26 Mar 2026 13:01:28 +0000
Files and hashes: 1: 9t-kj9KSgE_mtJrGu_vF73d0l6Y.roa (hash: 51rv5VaG8OxclhZBSDZarO+xxvZazg5aJ0EVnW1xLb4=)
2: Cp2g6yP8AZxNfoA9Wugu4JCgHtU.roa (hash: dD5+5+i7pHxfaDCaP1GC9Pk/dDoxKx8XSPEPjuWP/AY=)
3: LFwn43xTYGqoLZrK3ArerlmBrjQ.asa (hash: AxTumCJIWLYkfNBVRk61fjyr7ogt1SGEuY0CQ+zm9dQ=)
4: Nc1LVsFzrH3eQcfHMAmDYgj_p64.asa (hash: /m2FPHvyf0O1/JM/QcuY6SFVqTD2GvTjahW6Zjqr3lE=)
5: XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl (hash: UrED4fq79iwZQu0kpNX8oIr3C5jXYedzQWJKRliXnKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 13:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:15:f3:91:95:53:d6:95:ae:02:29:d8:b9:68:f4:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0211c91e9e0d35cb513345913e0a1a61bfd249
Validity
Not Before: Mar 25 13:01:28 2026 GMT
Not After : Mar 26 13:01:28 2026 GMT
Subject: CN=c21c3bec04daa6410d364def1bfab0ad3d6ed0a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:85:3f:ce:6b:ba:6c:0a:90:c6:70:c1:34:5a:
9a:0d:0e:00:15:bc:8c:a0:f5:13:ab:c8:6e:55:86:
29:d7:c7:f5:cc:7d:14:61:e8:d0:82:d0:9a:06:5f:
74:2f:68:12:14:05:0c:f7:20:13:28:c9:67:a3:a2:
91:d4:f9:fa:92:67:4e:76:03:46:06:3a:73:a8:c0:
cf:83:18:68:4c:cd:bf:22:c7:45:2c:1a:ce:95:d2:
a4:2b:cc:67:28:7e:88:ce:03:ef:1b:af:62:27:c6:
fc:df:82:b9:e1:77:00:05:df:e6:79:df:6c:9b:15:
bb:af:ee:72:8e:fc:ea:f2:e7:cf:34:56:fa:e7:c0:
e2:bc:fc:3b:ee:11:8d:59:14:71:f4:0c:69:5c:5d:
8e:0d:fe:22:5a:c6:90:3c:b6:f7:df:ed:11:1a:a8:
30:5a:19:79:ab:b7:b6:ed:f2:1f:bb:e2:d9:6b:9f:
b0:ee:6c:14:e8:49:1c:f5:fb:1f:b9:74:8f:3c:ae:
14:0c:8b:b0:e6:d9:c3:db:e7:cf:ff:68:fb:41:18:
cb:9d:c7:e8:45:ca:7b:2f:e4:52:31:df:87:18:c8:
14:a8:c1:64:40:dd:f2:69:33:00:74:92:65:b3:9f:
27:56:67:79:1b:ab:65:3c:47:7e:e8:59:f1:6b:af:
9a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1C:3B:EC:04:DA:A6:41:0D:36:4D:EF:1B:FA:B0:AD:3D:6E:D0:A1
X509v3 Authority Key Identifier:
keyid:5F:02:11:C9:1E:9E:0D:35:CB:51:33:45:91:3E:0A:1A:61:BF:D2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:f1:b7:e0:0c:87:87:89:7a:91:88:60:ff:01:b2:0b:47:df:
16:a1:58:0e:65:94:fb:62:2d:a7:80:02:86:f6:e4:0f:be:48:
a7:22:cb:d3:5e:26:be:6a:a9:71:36:08:c5:3d:ef:ff:1b:e1:
dd:64:d8:ae:fe:3e:e3:98:a4:3d:a9:72:be:76:e6:d3:05:b0:
c6:04:b1:05:d1:aa:73:da:19:d8:84:e7:53:ca:e7:1d:50:e4:
c6:1e:15:2d:a4:5c:77:fe:5f:88:ca:dc:5f:58:b6:08:3a:94:
ae:39:40:db:fb:12:ac:d7:3a:86:98:d6:ac:1e:f9:66:c1:ad:
b6:b6:15:b6:90:bd:6b:b5:fa:32:37:62:e4:13:c8:e3:c1:81:
23:c4:c4:9a:91:20:e0:b8:a7:1c:5c:bd:4b:dc:05:ed:5d:1f:
22:eb:95:43:16:24:dd:9d:7b:89:60:a9:07:63:c7:8d:1d:2c:
90:af:dd:7d:f6:46:40:a9:ae:e7:87:6f:70:f6:72:dd:88:53:
11:af:49:7b:2b:42:92:48:5c:37:c9:7a:28:09:06:74:22:1b:
f3:31:1d:c4:f5:61:74:e9:03:d0:d9:57:6d:94:5b:b8:fd:a8:
df:88:c0:53:8c:55:35:73:33:bc:f0:98:29:96:a2:4c:a7:3a:
b1:bc:89:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lFfORlVPWla4CKdi5aPQvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMDIxMWM5MWU5ZTBkMzVjYjUxMzM0NTkxM2UwYTFhNjFi
ZmQyNDkwHhcNMjYwMzI1MTMwMTI4WhcNMjYwMzI2MTMwMTI4WjAzMTEwLwYDVQQD
EyhjMjFjM2JlYzA0ZGFhNjQxMGQzNjRkZWYxYmZhYjBhZDNkNmVkMGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IU/zmu6bAqQxnDBNFqaDQ4AFbyM
oPUTq8huVYYp18f1zH0UYejQgtCaBl90L2gSFAUM9yATKMlno6KR1Pn6kmdOdgNG
BjpzqMDPgxhoTM2/IsdFLBrOldKkK8xnKH6IzgPvG69iJ8b834K54XcABd/med9s
mxW7r+5yjvzq8ufPNFb658DivPw77hGNWRRx9AxpXF2ODf4iWsaQPLb33+0RGqgw
Whl5q7e27fIfu+LZa5+w7mwU6Ekc9fsfuXSPPK4UDIuw5tnD2+fP/2j7QRjLncfo
Rcp7L+RSMd+HGMgUqMFkQN3yaTMAdJJls58nVmd5G6tlPEd+6Fnxa6+aeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMIcO+wE2qZBDTZN7xv6sK09btChMB8GA1UdIwQY
MBaAFF8CEckeng01y1EzRZE+Chphv9JJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHdJUnlSNmVEVFhMVVRORmtUNEtHbUdfMGtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny82NmQwNTctNzdlNS00MjQxLTgwYWEt
MjFmZDM1Y2Y0YmI5LzEvWHdJUnlSNmVEVFhMVVRORmtUNEtHbUdfMGtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny82NmQwNTctNzdlNS00MjQxLTgwYWEtMjFmZDM1Y2Y0YmI5
LzEvWHdJUnlSNmVEVFhMVVRORmtUNEtHbUdfMGtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXfG34AyH
h4l6kYhg/wGyC0ffFqFYDmWU+2Itp4AChvbkD75IpyLL014mvmqpcTYIxT3v/xvh
3WTYrv4+45ikPalyvnbm0wWwxgSxBdGqc9oZ2ITnU8rnHVDkxh4VLaRcd/5fiMrc
X1i2CDqUrjlA2/sSrNc6hpjWrB75ZsGttrYVtpC9a7X6Mjdi5BPI48GBI8TEmpEg
4LinHFy9S9wF7V0fIuuVQxYk3Z17iWCpB2PHjR0skK/dffZGQKmu54dvcPZy3YhT
Ea9JeytCkkhcN8l6KAkGdCIb8zEdxPVhdOkD0NlXbZRbuP2o34jAU4xVNXMzvPCY
KZaiTKc6sbyJKw==
-----END CERTIFICATE-----
Generated at Wed Mar 25 21:19:29 2026 by rpki-client