Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
File: XP6NclJuTnOjtX2TYPOlG-tZpF8.mft (raw, json)
Hash identifier: d/7MOmIE/B03IwezOpVzVu/lJvs7O9JUAmCvqoUbh2s=
Subject key identifier: F8:F5:D0:06:20:BB:90:23:8B:89:EE:87:D6:D2:7B:F7:5B:07:2C:87
Authority key identifier: 5C:FE:8D:72:52:6E:4E:73:A3:B5:7D:93:60:F3:A5:1B:EB:59:A4:5F
Certificate issuer: /CN=5cfe8d72526e4e73a3b57d9360f3a51beb59a45f
Certificate serial: 019D265F35543059B76713F1FEC56A4A714D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 19:01:06 +0000
Manifest this update: Wed 25 Mar 2026 19:01:06 +0000
Manifest next update: Thu 26 Mar 2026 19:01:06 +0000
Files and hashes: 1: XAYcuxsajA5hLrmscRs4oynzyUg.roa (hash: AvPY1r1vk0ST8v3sz0+K9LIFAxv9kmWL/J2CaIlXu0s=)
2: XP6NclJuTnOjtX2TYPOlG-tZpF8.crl (hash: zIDmiWMhmzoOPAjuFKRv/jWxRIXgV+vpYuuENZ3U+8c=)
3: mjMQEKksicvgZzYu86cOaUikq_o.roa (hash: 7g64PoLicqxVLeKtHUopkjJGRzw3GYF64nr8YZ5vEEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:35:54:30:59:b7:67:13:f1:fe:c5:6a:4a:71:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfe8d72526e4e73a3b57d9360f3a51beb59a45f
Validity
Not Before: Mar 25 19:01:06 2026 GMT
Not After : Mar 26 19:01:06 2026 GMT
Subject: CN=f8f5d00620bb90238b89ee87d6d27bf75b072c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:af:19:f5:c3:47:44:21:3f:30:e1:97:b4:08:
1f:4e:99:69:12:d7:70:45:10:c4:d0:ff:f0:37:6b:
ec:bd:cb:07:19:cf:81:98:23:78:fa:0e:c2:9e:cc:
ce:c7:b2:5b:07:44:cb:fe:69:ae:3b:ea:9c:fb:9e:
8d:d9:83:5c:41:de:07:55:36:9d:d3:a9:0e:e9:88:
41:0e:4b:e2:60:de:dc:78:6e:c0:99:0e:db:b5:65:
8b:ce:d9:04:1a:64:e8:57:71:02:4f:07:5a:37:96:
1d:95:e6:6c:12:32:1e:cc:84:29:a5:a1:7c:de:30:
b4:e7:cb:ab:a3:40:86:d1:5e:31:4c:f7:bd:39:a7:
87:ed:41:f1:1d:5d:0f:3d:c1:42:e5:4b:ce:1c:b2:
b3:98:75:13:71:5f:49:0f:c2:91:c1:a8:a8:b3:9d:
2d:5a:aa:c4:c5:3c:36:d4:c2:44:50:cd:43:9d:fb:
a4:67:53:16:c2:e1:5a:40:e7:a7:6f:d3:b6:d4:11:
1c:c7:29:6d:c9:47:3b:56:d0:73:64:be:32:89:3e:
ca:64:a1:45:a6:74:6f:16:22:dc:f3:37:b1:3c:10:
38:a5:2b:7f:1e:48:bf:4c:06:5a:95:26:8b:b6:5b:
5c:03:51:06:08:1a:b6:23:b5:20:b9:04:a0:f1:b7:
3c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F5:D0:06:20:BB:90:23:8B:89:EE:87:D6:D2:7B:F7:5B:07:2C:87
X509v3 Authority Key Identifier:
keyid:5C:FE:8D:72:52:6E:4E:73:A3:B5:7D:93:60:F3:A5:1B:EB:59:A4:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:74:a6:f8:92:3f:cf:d7:ec:a8:8d:7f:20:cb:22:30:1a:f6:
a2:7b:1e:f4:b7:cb:ca:b2:c0:48:db:92:49:3a:a5:44:73:69:
6d:92:76:36:6f:88:14:a0:08:c7:dc:cf:63:65:bb:ab:8c:6a:
1e:46:4a:70:66:fe:ea:bc:32:4f:33:ad:4c:8b:8b:30:6f:ef:
64:9b:a2:a2:57:2c:d0:aa:9a:c7:80:ac:48:f7:44:1e:a6:3d:
13:a6:01:b2:00:a4:41:4d:7b:9c:37:e3:ac:16:43:a4:70:e4:
24:66:d0:4a:e1:d4:b7:16:53:b1:c5:49:91:aa:e2:ae:78:4c:
bb:a8:83:4f:5e:a5:e3:9a:d0:23:5e:e8:c2:dc:0d:13:3a:72:
c8:2c:40:ea:5a:55:c8:e0:7b:95:a9:34:e4:82:07:a3:71:7a:
dd:4a:85:9e:14:4d:72:dd:af:10:1d:2a:20:55:fa:8b:0c:80:
fd:21:06:7b:b5:8f:c3:fb:81:68:ed:61:d0:dd:67:2e:fd:26:
2f:fe:56:e9:f8:ef:ad:16:aa:51:73:23:aa:20:49:ef:bb:76:
be:a4:dc:06:29:ff:b9:35:11:9d:72:a3:d3:bf:e6:c6:4b:00:
2e:4f:dc:65:03:a2:13:22:07:a5:3f:b0:c3:15:85:ee:97:e6:
c9:13:4f:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mXzVUMFm3ZxPx/sVqSnFNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZmU4ZDcyNTI2ZTRlNzNhM2I1N2Q5MzYwZjNhNTFiZWI1
OWE0NWYwHhcNMjYwMzI1MTkwMTA2WhcNMjYwMzI2MTkwMTA2WjAzMTEwLwYDVQQD
EyhmOGY1ZDAwNjIwYmI5MDIzOGI4OWVlODdkNmQyN2JmNzViMDcyYzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAla8Z9cNHRCE/MOGXtAgfTplpEtdw
RRDE0P/wN2vsvcsHGc+BmCN4+g7CnszOx7JbB0TL/mmuO+qc+56N2YNcQd4HVTad
06kO6YhBDkviYN7ceG7AmQ7btWWLztkEGmToV3ECTwdaN5YdleZsEjIezIQppaF8
3jC058uro0CG0V4xTPe9OaeH7UHxHV0PPcFC5UvOHLKzmHUTcV9JD8KRwaios50t
WqrExTw21MJEUM1DnfukZ1MWwuFaQOenb9O21BEcxyltyUc7VtBzZL4yiT7KZKFF
pnRvFiLc8zexPBA4pSt/Hki/TAZalSaLtltcA1EGCBq2I7UguQSg8bc89wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPj10AYgu5Aji4nuh9bSe/dbByyHMB8GA1UdIwQY
MBaAFFz+jXJSbk5zo7V9k2DzpRvrWaRfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFA2TmNsSnVUbk9qdFgyVFlQT2xHLXRacEY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84NGJmNTQtMDljMy00MzI0LWExMWMt
ZTRkZGZhMzJlNTJlLzEvWFA2TmNsSnVUbk9qdFgyVFlQT2xHLXRacEY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC84NGJmNTQtMDljMy00MzI0LWExMWMtZTRkZGZhMzJlNTJl
LzEvWFA2TmNsSnVUbk9qdFgyVFlQT2xHLXRacEY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR3Sm+JI/
z9fsqI1/IMsiMBr2onse9LfLyrLASNuSSTqlRHNpbZJ2Nm+IFKAIx9zPY2W7q4xq
HkZKcGb+6rwyTzOtTIuLMG/vZJuiolcs0Kqax4CsSPdEHqY9E6YBsgCkQU17nDfj
rBZDpHDkJGbQSuHUtxZTscVJkarirnhMu6iDT16l45rQI17owtwNEzpyyCxA6lpV
yOB7lak05IIHo3F63UqFnhRNct2vEB0qIFX6iwyA/SEGe7WPw/uBaO1h0N1nLv0m
L/5W6fjvrRaqUXMjqiBJ77t2vqTcBin/uTURnXKj07/mxksALk/cZQOiEyIHpT+w
wxWF7pfmyRNP5Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:13 2026 by rpki-client