Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.mft
File: XcYkXKggiZ1-tBQDAsIQQbXbygY.mft (raw, json)
Hash identifier: 5mt8VvsQLUOHNZXG8nqzd7ZU6VeUk/nwdaAC3g3YhF4=
Subject key identifier: 43:55:B8:C0:0D:11:3E:30:CF:8D:B1:97:A5:C0:C5:2D:E2:8E:D6:0C
Authority key identifier: 5D:C6:24:5C:A8:20:89:9D:7E:B4:14:03:02:C2:10:41:B5:DB:CA:06
Certificate issuer: /CN=5dc6245ca820899d7eb4140302c21041b5dbca06
Certificate serial: 019D2996E177341956C500AEC85BFC0A6CB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcYkXKggiZ1-tBQDAsIQQbXbygY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.mft
Manifest number: 0872
Signing time: Thu 26 Mar 2026 10:00:47 +0000
Manifest this update: Thu 26 Mar 2026 10:00:47 +0000
Manifest next update: Fri 27 Mar 2026 10:00:47 +0000
Files and hashes: 1: XcYkXKggiZ1-tBQDAsIQQbXbygY.crl (hash: DycHnvy1OxSar4bK93Wk3Eu3KfwP8rW2BWUqj+Plq2o=)
2: iDrTmSYQpvy7vo3KT85M4NqZ4jY.roa (hash: +0AgLX/1nLHcInEl5vkO9SuWGWou8jccVXQFvcHqqjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XcYkXKggiZ1-tBQDAsIQQbXbygY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:e1:77:34:19:56:c5:00:ae:c8:5b:fc:0a:6c:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc6245ca820899d7eb4140302c21041b5dbca06
Validity
Not Before: Mar 26 10:00:47 2026 GMT
Not After : Mar 27 10:00:47 2026 GMT
Subject: CN=4355b8c00d113e30cf8db197a5c0c52de28ed60c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:93:29:03:15:4f:e8:16:27:22:b9:eb:b3:0d:
5b:f9:96:dd:34:7a:ba:49:6c:67:25:36:59:12:39:
44:99:a6:d8:73:65:ec:68:f4:16:25:e7:59:38:f0:
12:8a:a4:15:b4:d5:ab:28:6e:fb:ce:53:46:a2:d8:
81:b4:17:16:b0:7b:19:e9:d2:a1:3f:f5:bb:33:d0:
a0:bb:5e:dd:ab:99:33:6a:a7:2a:7b:15:c9:df:1b:
c0:a5:a9:5b:3d:bd:fa:11:7a:1e:82:20:1a:c1:b6:
38:1b:ce:5a:e4:0d:a3:c5:fe:ac:10:bc:fa:fc:c0:
86:69:64:58:0e:55:8f:b6:6e:69:af:0a:67:4d:19:
0f:2b:bf:db:f6:3f:fc:10:96:8e:b9:9c:e7:a8:95:
84:0a:ef:5b:3a:e0:2e:ba:15:b1:45:76:ff:12:56:
c3:e8:81:14:a1:c8:12:7a:2e:a1:2b:81:fa:ee:b5:
1b:0e:88:07:eb:26:f1:ea:9d:1a:57:e5:4a:44:4d:
b1:f6:a1:30:1f:4d:ca:13:83:30:d3:a2:b2:a5:01:
4c:23:ab:25:6c:3f:8d:42:49:53:4b:31:b6:b7:51:
c8:3f:c7:69:b5:6e:f6:39:79:07:51:a5:50:6c:fe:
31:e7:67:82:17:03:f2:f2:58:f4:fc:7b:ea:86:68:
ba:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:55:B8:C0:0D:11:3E:30:CF:8D:B1:97:A5:C0:C5:2D:E2:8E:D6:0C
X509v3 Authority Key Identifier:
keyid:5D:C6:24:5C:A8:20:89:9D:7E:B4:14:03:02:C2:10:41:B5:DB:CA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcYkXKggiZ1-tBQDAsIQQbXbygY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:e8:d3:89:a4:25:0a:1c:8d:1b:8b:49:d9:8c:9d:87:34:65:
74:56:ea:f6:d8:46:f8:8a:db:21:4c:e5:f8:40:1d:bf:12:4b:
98:10:21:c9:42:28:ba:26:46:59:15:ca:51:b5:bf:04:ab:ff:
18:73:e6:d7:d8:2d:a8:7b:91:65:40:a0:d9:46:6a:ae:76:8c:
e7:47:8f:a5:48:6e:0a:05:de:07:42:d5:f8:5a:33:d7:1a:47:
0e:af:12:df:7b:8d:95:41:26:6c:08:f4:b6:7a:d0:10:93:0b:
91:97:7b:52:4a:75:fc:78:bd:a6:27:1d:38:9a:b4:d7:bc:6e:
50:42:eb:2d:dc:0c:f3:ca:cf:fa:3b:33:7c:c7:e8:90:15:22:
7e:c2:6e:53:7d:1f:75:52:bd:7e:af:0b:d7:e4:de:b2:db:3f:
12:78:5f:39:3d:cc:c1:a2:00:e6:50:79:67:77:37:20:66:7c:
b8:71:dd:ae:38:5d:8f:c0:56:46:de:49:09:f3:5d:7b:27:05:
2b:ae:cf:66:6c:1c:6f:e3:2f:24:4a:e3:6f:be:cd:e7:e9:48:
29:a5:45:78:34:22:6c:fc:0f:bf:34:bb:87:fe:d5:2b:03:22:
0c:53:84:6b:70:82:8e:27:0f:c3:89:f8:ac:51:63:82:e9:1a:
5e:f4:fd:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pluF3NBlWxQCuyFv8Cmy2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkYzYyNDVjYTgyMDg5OWQ3ZWI0MTQwMzAyYzIxMDQxYjVk
YmNhMDYwHhcNMjYwMzI2MTAwMDQ3WhcNMjYwMzI3MTAwMDQ3WjAzMTEwLwYDVQQD
Eyg0MzU1YjhjMDBkMTEzZTMwY2Y4ZGIxOTdhNWMwYzUyZGUyOGVkNjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZMpAxVP6BYnIrnrsw1b+ZbdNHq6
SWxnJTZZEjlEmabYc2XsaPQWJedZOPASiqQVtNWrKG77zlNGotiBtBcWsHsZ6dKh
P/W7M9Cgu17dq5kzaqcqexXJ3xvApalbPb36EXoegiAawbY4G85a5A2jxf6sELz6
/MCGaWRYDlWPtm5prwpnTRkPK7/b9j/8EJaOuZznqJWECu9bOuAuuhWxRXb/ElbD
6IEUocgSei6hK4H67rUbDogH6ybx6p0aV+VKRE2x9qEwH03KE4Mw06KypQFMI6sl
bD+NQklTSzG2t1HIP8dptW72OXkHUaVQbP4x52eCFwPy8lj0/Hvqhmi6jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFENVuMANET4wz42xl6XAxS3ijtYMMB8GA1UdIwQY
MBaAFF3GJFyoIImdfrQUAwLCEEG128oGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGNZa1hLZ2dpWjEtdEJRREFzSVFRYlhieWdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84YTQzMGYtNDBjNS00NzRiLThmZDkt
MDc0ZWQ3MGI0NjczLzEvWGNZa1hLZ2dpWjEtdEJRREFzSVFRYlhieWdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi84YTQzMGYtNDBjNS00NzRiLThmZDktMDc0ZWQ3MGI0Njcz
LzEvWGNZa1hLZ2dpWjEtdEJRREFzSVFRYlhieWdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATujTiaQl
ChyNG4tJ2YydhzRldFbq9thG+IrbIUzl+EAdvxJLmBAhyUIouiZGWRXKUbW/BKv/
GHPm19gtqHuRZUCg2UZqrnaM50ePpUhuCgXeB0LV+Foz1xpHDq8S33uNlUEmbAj0
tnrQEJMLkZd7Ukp1/Hi9picdOJq017xuUELrLdwM88rP+jszfMfokBUifsJuU30f
dVK9fq8L1+Tests/EnhfOT3MwaIA5lB5Z3c3IGZ8uHHdrjhdj8BWRt5JCfNdeycF
K67PZmwcb+MvJErjb77N5+lIKaVFeDQibPwPvzS7h/7VKwMiDFOEa3CCjicPw4n4
rFFjgukaXvT9jg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:56:30 2026 by rpki-client