Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
File: X99RbJXdbrLR2d1ODgMobBkR9uE.mft (raw, json)
Hash identifier: y5piqfnDpZJPxSuHOcorbIvWVUvavT5tSqcIgEaJJnc=
Subject key identifier: 14:A1:3E:B4:D2:C9:20:13:65:50:F2:C7:29:72:BD:A9:26:07:73:31
Authority key identifier: 5F:DF:51:6C:95:DD:6E:B2:D1:D9:DD:4E:0E:03:28:6C:19:11:F6:E1
Certificate issuer: /CN=5fdf516c95dd6eb2d1d9dd4e0e03286c1911f6e1
Certificate serial: 019D29298330327BA7EDF0F23256FB4D8DC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 08:01:19 +0000
Manifest this update: Thu 26 Mar 2026 08:01:19 +0000
Manifest next update: Fri 27 Mar 2026 08:01:19 +0000
Files and hashes: 1: O58aCTrbE5lgm64c310ntztX4Wk.roa (hash: 0T3h+C9Xr6EOTPtS+HVLjRGd+kBq9kMPTWwsY3303pg=)
2: X99RbJXdbrLR2d1ODgMobBkR9uE.crl (hash: C6BLtOCXWuocD8qkwXg0Njoxsg/5uvAcEqE1MyRzVcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:83:30:32:7b:a7:ed:f0:f2:32:56:fb:4d:8d:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fdf516c95dd6eb2d1d9dd4e0e03286c1911f6e1
Validity
Not Before: Mar 26 08:01:19 2026 GMT
Not After : Mar 27 08:01:19 2026 GMT
Subject: CN=14a13eb4d2c920136550f2c72972bda926077331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4f:a5:b6:c3:a6:51:c2:48:fe:eb:5d:02:b9:
2e:39:6a:08:01:57:0b:b8:cd:b8:0a:35:5f:34:35:
44:c2:f9:5b:9a:4a:26:a1:ea:fd:62:fa:0b:92:3b:
43:65:f4:7e:39:b3:fc:ee:45:40:24:e6:7f:06:8e:
cd:18:07:5a:3d:50:56:67:64:ef:95:38:9f:95:70:
2c:0d:10:a1:07:34:83:2e:9d:ab:1c:cf:5b:da:ef:
bd:69:50:e4:f3:2b:44:87:0c:d2:6d:b9:15:f5:d3:
5b:a3:10:a7:32:1a:6e:3e:c8:fd:72:c7:8e:77:42:
75:c9:73:9d:1a:22:3c:ff:39:e5:6e:2f:d2:ec:95:
a9:42:2e:86:c6:3c:88:40:28:12:a3:0b:da:38:2f:
d4:ec:27:e4:85:6d:67:01:d4:c8:bb:7d:54:9b:f6:
10:89:5a:ab:e8:3d:00:f6:18:6c:e8:ec:58:72:fa:
8f:d8:34:48:54:ff:f4:5e:0d:81:a2:f2:9e:25:77:
ce:01:cd:c6:20:d3:ac:2f:53:51:a4:a9:ad:30:a9:
4d:30:16:c7:e4:d6:4e:4b:e1:4b:d9:84:2b:db:d9:
aa:d9:dd:13:2a:2d:fe:a7:2b:8d:ad:85:79:1b:e4:
3e:b7:ab:e9:b0:64:40:b8:00:67:a0:de:41:c9:d5:
db:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A1:3E:B4:D2:C9:20:13:65:50:F2:C7:29:72:BD:A9:26:07:73:31
X509v3 Authority Key Identifier:
keyid:5F:DF:51:6C:95:DD:6E:B2:D1:D9:DD:4E:0E:03:28:6C:19:11:F6:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:b7:01:ee:79:12:f8:8d:df:6f:53:49:d9:f5:e6:23:01:a0:
0b:30:77:95:b7:99:c2:9d:a1:e0:14:e2:de:12:70:7f:ee:59:
4a:50:fa:ca:fd:27:ce:49:3c:29:87:35:cd:d9:8a:56:13:35:
9f:7d:d1:d1:99:e6:b2:1a:83:31:fe:4f:1f:ab:97:7e:4c:bf:
b9:a6:3b:9c:de:e9:bf:04:a3:03:64:7e:47:2a:8b:b3:ed:e3:
50:ac:68:31:b1:7e:ff:1b:77:b1:17:17:b9:6e:7f:b4:1c:ca:
3e:7c:9b:74:4a:2a:38:7a:84:c6:88:b3:ca:43:e0:a7:bb:e7:
08:83:cb:31:f3:bc:a6:f2:dd:79:a6:2c:83:06:c5:f3:76:86:
e4:42:f2:d7:93:9f:20:a7:bd:f1:a2:ad:6b:05:29:86:0c:b8:
d9:64:1a:5c:cd:22:01:75:f5:9a:4d:c8:e3:5c:aa:56:58:c1:
35:4c:59:dc:35:be:74:33:1f:10:ba:56:92:3b:93:20:97:d8:
a9:2c:5a:62:41:99:33:cf:c8:33:34:a6:d9:a1:02:9d:6c:60:
d1:d4:16:9c:ad:df:c9:62:14:0e:f6:d7:94:47:cf:bc:40:f4:
b5:7c:33:d8:8a:24:8c:02:30:9f:f2:e1:23:2a:98:65:bc:59:
cb:38:a9:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKYMwMnun7fDyMlb7TY3IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmZGY1MTZjOTVkZDZlYjJkMWQ5ZGQ0ZTBlMDMyODZjMTkx
MWY2ZTEwHhcNMjYwMzI2MDgwMTE5WhcNMjYwMzI3MDgwMTE5WjAzMTEwLwYDVQQD
EygxNGExM2ViNGQyYzkyMDEzNjU1MGYyYzcyOTcyYmRhOTI2MDc3MzMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2U+ltsOmUcJI/utdArkuOWoIAVcL
uM24CjVfNDVEwvlbmkomoer9YvoLkjtDZfR+ObP87kVAJOZ/Bo7NGAdaPVBWZ2Tv
lTiflXAsDRChBzSDLp2rHM9b2u+9aVDk8ytEhwzSbbkV9dNboxCnMhpuPsj9cseO
d0J1yXOdGiI8/znlbi/S7JWpQi6GxjyIQCgSowvaOC/U7CfkhW1nAdTIu31Um/YQ
iVqr6D0A9hhs6OxYcvqP2DRIVP/0Xg2BovKeJXfOAc3GINOsL1NRpKmtMKlNMBbH
5NZOS+FL2YQr29mq2d0TKi3+pyuNrYV5G+Q+t6vpsGRAuABnoN5BydXbswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBShPrTSySATZVDyxylyvakmB3MxMB8GA1UdIwQY
MBaAFF/fUWyV3W6y0dndTg4DKGwZEfbhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDk5UmJKWGRickxSMmQxT0RnTW9iQmtSOXVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy82NjVkN2QtZDE3MC00ZGY3LWFjYzct
YmYzZjc5NTFjNWVhLzEvWDk5UmJKWGRickxSMmQxT0RnTW9iQmtSOXVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy82NjVkN2QtZDE3MC00ZGY3LWFjYzctYmYzZjc5NTFjNWVh
LzEvWDk5UmJKWGRickxSMmQxT0RnTW9iQmtSOXVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADLcB7nkS
+I3fb1NJ2fXmIwGgCzB3lbeZwp2h4BTi3hJwf+5ZSlD6yv0nzkk8KYc1zdmKVhM1
n33R0ZnmshqDMf5PH6uXfky/uaY7nN7pvwSjA2R+RyqLs+3jUKxoMbF+/xt3sRcX
uW5/tBzKPnybdEoqOHqExoizykPgp7vnCIPLMfO8pvLdeaYsgwbF83aG5ELy15Of
IKe98aKtawUphgy42WQaXM0iAXX1mk3I41yqVljBNUxZ3DW+dDMfELpWkjuTIJfY
qSxaYkGZM8/IMzSm2aECnWxg0dQWnK3fyWIUDvbXlEfPvED0tXwz2IokjAIwn/Lh
IyqYZbxZyzipMQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:55:56 2026 by rpki-client