Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.mft
File: xVfBn2xy2JAMTYnsers11PqSEUs.mft (raw, json)
Hash identifier: RyBoG8VnymG1A7BjY4HYDCURjS+ZHla9GdYSi1VpK50=
Subject key identifier: FE:BF:A2:1B:B9:41:D7:B4:A5:41:A4:D9:00:C8:15:B0:4C:C2:26:9C
Authority key identifier: C5:57:C1:9F:6C:72:D8:90:0C:4D:89:EC:7A:BB:35:D4:FA:92:11:4B
Certificate issuer: /CN=c557c19f6c72d8900c4d89ec7abb35d4fa92114b
Certificate serial: 019D28841C41882D3BC913060F864A2457F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVfBn2xy2JAMTYnsers11PqSEUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 05:00:39 +0000
Manifest this update: Thu 26 Mar 2026 05:00:39 +0000
Manifest next update: Fri 27 Mar 2026 05:00:39 +0000
Files and hashes: 1: UHPJaWl80QM_ZyHpNl4B0tVvbT0.roa (hash: aDJ3tJRmYftllAauT3ZEK2YDL9vFANpr/wdc/+xRph4=)
2: xVfBn2xy2JAMTYnsers11PqSEUs.crl (hash: 7KS4ZcUOfwNY94MhYMoPDoNF5kkYeFW6HrWlmW9vVFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVfBn2xy2JAMTYnsers11PqSEUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:1c:41:88:2d:3b:c9:13:06:0f:86:4a:24:57:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c557c19f6c72d8900c4d89ec7abb35d4fa92114b
Validity
Not Before: Mar 26 05:00:39 2026 GMT
Not After : Mar 27 05:00:39 2026 GMT
Subject: CN=febfa21bb941d7b4a541a4d900c815b04cc2269c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c0:5d:98:91:06:2d:de:f3:53:73:4e:47:8a:
da:2d:a3:cd:1a:0a:1a:41:9a:74:e2:01:7a:3f:78:
ac:e9:46:6f:e0:94:dd:a5:f3:8d:17:b2:9d:9d:a0:
e6:31:23:3b:b5:ad:a7:2b:d7:89:f9:ca:30:0f:d8:
33:70:6e:38:96:6f:8e:3a:e4:46:c4:26:dc:ae:e6:
1a:00:02:dc:47:f7:c8:b2:75:51:cc:19:7c:d2:46:
e6:2b:6b:cd:97:9b:ac:73:c2:7e:64:5f:26:65:4d:
b4:b6:dd:31:69:4b:23:b6:b6:22:41:e6:bd:f5:c9:
69:89:e8:64:1f:ca:c7:64:a4:16:89:a8:f2:8f:fd:
61:6a:fb:0c:c7:70:a5:cf:50:3f:10:b8:db:fc:9c:
c3:62:85:1d:8a:39:88:d2:42:1e:af:9b:af:df:14:
4a:96:f6:e8:ef:4f:ba:b7:d3:b5:c6:48:7b:38:37:
b8:5b:c4:c1:3e:c9:39:06:d8:49:32:d8:65:47:fa:
c1:fa:c6:39:59:46:9f:9c:70:dd:f5:45:b7:3b:91:
25:78:68:9d:8d:38:be:ca:3b:7f:6c:e2:0e:04:cd:
e2:e5:6f:91:26:c5:89:cc:a9:13:40:33:2a:5e:65:
7c:d8:9b:16:6e:8f:38:80:a6:5e:28:bb:1a:88:58:
50:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:BF:A2:1B:B9:41:D7:B4:A5:41:A4:D9:00:C8:15:B0:4C:C2:26:9C
X509v3 Authority Key Identifier:
keyid:C5:57:C1:9F:6C:72:D8:90:0C:4D:89:EC:7A:BB:35:D4:FA:92:11:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVfBn2xy2JAMTYnsers11PqSEUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:1b:76:3a:52:42:10:a9:25:f6:e1:00:71:36:77:8c:39:f0:
a6:35:17:00:14:ec:9a:9f:a1:8c:5b:3d:80:62:24:ab:06:17:
19:13:96:16:a4:75:d1:c3:d1:dd:50:80:e8:b6:b9:b0:db:ec:
e5:29:6e:63:24:c7:d9:5a:e2:61:22:1d:98:13:de:2f:84:45:
52:ed:63:44:e8:a3:ae:a7:0a:4c:09:8a:12:67:85:dc:88:55:
df:4e:20:47:c2:dd:b1:f2:4a:22:e6:81:8e:64:23:59:b1:1a:
0e:53:b9:32:d9:e5:76:d7:db:d9:9c:de:e1:73:57:f7:09:cc:
b5:4d:2c:64:15:8b:76:04:54:4c:6e:ae:dc:e9:99:14:a9:ea:
80:4a:21:30:94:b4:dc:dc:c8:de:af:93:90:19:00:32:76:63:
75:c0:b2:b3:7e:de:76:f5:90:aa:14:2d:e1:a2:99:20:94:aa:
de:d1:0c:1d:48:44:a7:74:13:35:57:3d:c1:1c:00:a5:c2:00:
4b:67:17:8b:e9:b1:2d:ac:ef:b8:fe:d9:81:72:ee:1c:a3:2a:
2f:85:0a:23:e2:45:76:dc:f1:bc:00:74:c4:8d:a5:19:07:e9:
06:99:0c:b4:17:c1:2b:ff:56:a2:c3:98:26:ee:a7:26:02:4f:
ef:28:8b:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohBxBiC07yRMGD4ZKJFfyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NTdjMTlmNmM3MmQ4OTAwYzRkODllYzdhYmIzNWQ0ZmE5
MjExNGIwHhcNMjYwMzI2MDUwMDM5WhcNMjYwMzI3MDUwMDM5WjAzMTEwLwYDVQQD
EyhmZWJmYTIxYmI5NDFkN2I0YTU0MWE0ZDkwMGM4MTViMDRjYzIyNjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsBdmJEGLd7zU3NOR4raLaPNGgoa
QZp04gF6P3is6UZv4JTdpfONF7KdnaDmMSM7ta2nK9eJ+cowD9gzcG44lm+OOuRG
xCbcruYaAALcR/fIsnVRzBl80kbmK2vNl5usc8J+ZF8mZU20tt0xaUsjtrYiQea9
9clpiehkH8rHZKQWiajyj/1havsMx3Clz1A/ELjb/JzDYoUdijmI0kIer5uv3xRK
lvbo70+6t9O1xkh7ODe4W8TBPsk5BthJMthlR/rB+sY5WUafnHDd9UW3O5EleGid
jTi+yjt/bOIOBM3i5W+RJsWJzKkTQDMqXmV82JsWbo84gKZeKLsaiFhQbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP6/ohu5Qde0pUGk2QDIFbBMwiacMB8GA1UdIwQY
MBaAFMVXwZ9sctiQDE2J7Hq7NdT6khFLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFZmQm4yeHkySkFNVFluc2VyczExUHFTRVVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9lNzM5ODgtYzFjMi00MDhmLWI3Mzgt
MzkwNDZiNGE5MTcwLzEveFZmQm4yeHkySkFNVFluc2VyczExUHFTRVVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9lNzM5ODgtYzFjMi00MDhmLWI3MzgtMzkwNDZiNGE5MTcw
LzEveFZmQm4yeHkySkFNVFluc2VyczExUHFTRVVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFRt2OlJC
EKkl9uEAcTZ3jDnwpjUXABTsmp+hjFs9gGIkqwYXGROWFqR10cPR3VCA6La5sNvs
5SluYyTH2VriYSIdmBPeL4RFUu1jROijrqcKTAmKEmeF3IhV304gR8LdsfJKIuaB
jmQjWbEaDlO5Mtnldtfb2Zze4XNX9wnMtU0sZBWLdgRUTG6u3OmZFKnqgEohMJS0
3NzI3q+TkBkAMnZjdcCys37edvWQqhQt4aKZIJSq3tEMHUhEp3QTNVc9wRwApcIA
S2cXi+mxLazvuP7ZgXLuHKMqL4UKI+JFdtzxvAB0xI2lGQfpBpkMtBfBK/9WosOY
Ju6nJgJP7yiL2A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:30:42 2026 by rpki-client