Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft
File: XQoNOW92k2k2XyuYPFMa_sqXEKc.mft (raw, json)
Hash identifier: TGH5S2O3+A0xitKoTGzLmXFJNE+0PCzcTZlZyOADboI=
Subject key identifier: EB:CC:D9:4F:81:55:BD:7A:2F:CC:06:2C:49:A2:F4:77:C4:17:53:AC
Authority key identifier: 5D:0A:0D:39:6F:76:93:69:36:5F:2B:98:3C:53:1A:FE:CA:97:10:A7
Certificate issuer: /CN=5d0a0d396f769369365f2b983c531afeca9710a7
Certificate serial: 019D2997AB2BC4889BC6D33597AC922E7129
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XQoNOW92k2k2XyuYPFMa_sqXEKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft
Manifest number: 0750
Signing time: Thu 26 Mar 2026 10:01:38 +0000
Manifest this update: Thu 26 Mar 2026 10:01:38 +0000
Manifest next update: Fri 27 Mar 2026 10:01:38 +0000
Files and hashes: 1: XQoNOW92k2k2XyuYPFMa_sqXEKc.crl (hash: xxBLlrOftMctwrVhFC8FSoJZ0ui6B1hImU7mL0N+L6I=)
2: fbgFYZOUj66PVAQpKUGgeHpzr24.roa (hash: SB3DJT334kxLqXYnE2DumDnn0I2NFlsBAqoFvdcBUgQ=)
3: uvHSWAI-yPchOFqjOVqKQlz8aVo.roa (hash: cnbvGF8AmLyRmJzV1rqVqz51KAWpBPpAaC9YvKK6e5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XQoNOW92k2k2XyuYPFMa_sqXEKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:ab:2b:c4:88:9b:c6:d3:35:97:ac:92:2e:71:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d0a0d396f769369365f2b983c531afeca9710a7
Validity
Not Before: Mar 26 10:01:38 2026 GMT
Not After : Mar 27 10:01:38 2026 GMT
Subject: CN=ebccd94f8155bd7a2fcc062c49a2f477c41753ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:54:90:b0:c7:18:d7:21:37:40:48:db:fe:7b:
3a:f5:53:96:bb:f9:98:9c:a2:7f:02:a0:29:40:04:
a1:98:4c:e0:3c:85:67:8b:7c:67:01:56:1a:61:ac:
4e:4c:47:47:ec:a3:5e:9a:a5:97:84:bb:41:d3:2e:
d2:85:20:4c:cc:d4:ef:2c:5d:e9:90:18:44:75:cf:
a6:da:f3:c7:2d:62:06:7b:aa:68:2c:25:7d:37:95:
73:85:06:99:b0:0e:c3:1f:bf:7a:a2:31:3d:96:c1:
82:43:c3:0d:a1:e3:58:19:92:e8:01:21:d5:7d:2f:
9e:2d:81:4f:50:2e:a7:ad:eb:c3:6e:42:a1:dd:2c:
af:40:8b:90:ae:a1:5a:d1:f1:87:79:e5:64:40:5d:
3c:50:39:61:e4:da:ce:98:92:f4:16:ee:08:a7:2b:
44:86:1c:bd:7c:7a:34:ca:5c:f8:92:2d:67:3a:af:
8e:87:34:f5:6b:96:7b:2a:60:15:fa:69:89:db:bc:
2c:09:86:cd:b7:fc:d7:59:59:de:76:23:01:56:17:
9d:ac:d1:8a:9a:02:21:9e:77:54:1c:ba:df:1c:ec:
08:71:18:3c:af:59:02:fd:8f:f3:4b:27:f6:69:58:
91:29:47:ee:6e:19:7e:72:2d:38:d9:16:70:c6:8d:
12:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:CC:D9:4F:81:55:BD:7A:2F:CC:06:2C:49:A2:F4:77:C4:17:53:AC
X509v3 Authority Key Identifier:
keyid:5D:0A:0D:39:6F:76:93:69:36:5F:2B:98:3C:53:1A:FE:CA:97:10:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XQoNOW92k2k2XyuYPFMa_sqXEKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:d0:3d:63:1e:ce:7f:42:63:52:9f:ed:52:25:6b:c9:94:05:
52:37:22:14:ed:be:4c:c2:5d:d0:02:99:3c:58:09:e0:39:c8:
30:ff:04:07:66:3c:2b:37:0a:0e:39:0d:e2:da:a6:a1:a0:3f:
c8:87:5f:cc:28:82:a1:71:92:70:20:d0:ae:aa:b8:cc:3e:d8:
67:05:09:1e:9b:cd:b6:3f:e0:c9:cf:c3:2f:ab:11:0e:30:ba:
f8:65:63:20:af:96:9c:51:11:b1:75:ac:3b:2d:09:2e:1b:93:
b5:87:4b:0d:22:71:84:39:ca:b7:8a:fc:c9:16:38:7b:a7:ee:
0b:0c:a0:4e:8d:a3:12:d4:02:26:39:c9:9f:20:02:b4:1e:9e:
2a:f8:7f:f8:85:bd:7b:10:0a:04:b5:5f:86:17:40:fc:f9:b2:
72:a3:7c:cb:86:8b:65:51:78:c0:6d:f0:d2:28:92:ec:cf:01:
2d:5c:ea:1c:98:3a:37:bf:d9:80:c4:fa:fa:6b:93:fe:08:f6:
cc:da:bd:16:19:7c:f5:00:52:8e:8c:a2:80:95:11:40:29:c6:
77:c2:ff:ba:fc:fa:bb:c8:25:4d:04:98:9b:5a:65:9e:1f:6e:
fd:4c:86:3f:8b:57:fb:42:59:b6:55:f1:b0:e1:36:57:e4:e9:
52:93:d2:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pl6srxIibxtM1l6ySLnEpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkMGEwZDM5NmY3NjkzNjkzNjVmMmI5ODNjNTMxYWZlY2E5
NzEwYTcwHhcNMjYwMzI2MTAwMTM4WhcNMjYwMzI3MTAwMTM4WjAzMTEwLwYDVQQD
EyhlYmNjZDk0ZjgxNTViZDdhMmZjYzA2MmM0OWEyZjQ3N2M0MTc1M2FjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFSQsMcY1yE3QEjb/ns69VOWu/mY
nKJ/AqApQAShmEzgPIVni3xnAVYaYaxOTEdH7KNemqWXhLtB0y7ShSBMzNTvLF3p
kBhEdc+m2vPHLWIGe6poLCV9N5VzhQaZsA7DH796ojE9lsGCQ8MNoeNYGZLoASHV
fS+eLYFPUC6nrevDbkKh3SyvQIuQrqFa0fGHeeVkQF08UDlh5NrOmJL0Fu4IpytE
hhy9fHo0ylz4ki1nOq+OhzT1a5Z7KmAV+mmJ27wsCYbNt/zXWVnediMBVhedrNGK
mgIhnndUHLrfHOwIcRg8r1kC/Y/zSyf2aViRKUfubhl+ci042RZwxo0SawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOvM2U+BVb16L8wGLEmi9HfEF1OsMB8GA1UdIwQY
MBaAFF0KDTlvdpNpNl8rmDxTGv7KlxCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFFvTk9XOTJrMmsyWHl1WVBGTWFfc3FYRUtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yMjNkOGYtNThhYy00ZGY3LWJmMWUt
NDQyMDEwYjU3OWVmLzEvWFFvTk9XOTJrMmsyWHl1WVBGTWFfc3FYRUtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yMjNkOGYtNThhYy00ZGY3LWJmMWUtNDQyMDEwYjU3OWVm
LzEvWFFvTk9XOTJrMmsyWHl1WVBGTWFfc3FYRUtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAndA9Yx7O
f0JjUp/tUiVryZQFUjciFO2+TMJd0AKZPFgJ4DnIMP8EB2Y8KzcKDjkN4tqmoaA/
yIdfzCiCoXGScCDQrqq4zD7YZwUJHpvNtj/gyc/DL6sRDjC6+GVjIK+WnFERsXWs
Oy0JLhuTtYdLDSJxhDnKt4r8yRY4e6fuCwygTo2jEtQCJjnJnyACtB6eKvh/+IW9
exAKBLVfhhdA/PmycqN8y4aLZVF4wG3w0iiS7M8BLVzqHJg6N7/ZgMT6+muT/gj2
zNq9Fhl89QBSjoyigJURQCnGd8L/uvz6u8glTQSYm1plnh9u/UyGP4tX+0JZtlXx
sOE2V+TpUpPSMw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:07:03 2026 by rpki-client