Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/1d00ff-3264-4619-990b-90d30dc56b3c/1/XU74K4IEWvnTUQYV7QM3a2MU_e4.mft
File: XU74K4IEWvnTUQYV7QM3a2MU_e4.mft (raw, json)
Hash identifier: /MDOB41hVqn9zz5EphRJPtxZaCYIag1FexDTnvVTLn8=
Subject key identifier: 4A:14:3C:90:13:82:5C:67:6C:BC:28:FB:1B:FC:72:91:16:CF:3D:EF
Authority key identifier: 5D:4E:F8:2B:82:04:5A:F9:D3:51:06:15:ED:03:37:6B:63:14:FD:EE
Certificate issuer: /CN=5d4ef82b82045af9d3510615ed03376b6314fdee
Certificate serial: 019D32630B0DE714844E1E4110A282D7C1D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XU74K4IEWvnTUQYV7QM3a2MU_e4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/1d00ff-3264-4619-990b-90d30dc56b3c/1/XU74K4IEWvnTUQYV7QM3a2MU_e4.mft
Manifest number: 51
Signing time: Sat 28 Mar 2026 03:00:44 +0000
Manifest this update: Sat 28 Mar 2026 03:00:44 +0000
Manifest next update: Sun 29 Mar 2026 03:00:44 +0000
Files and hashes: 1: QmWp_GTIS7liHO5m8L9fWsVQbys.roa (hash: weLuZVN3GIVtGzx5X3Yqda+dDcKXiyNzRhBD++gYWIk=)
2: XU74K4IEWvnTUQYV7QM3a2MU_e4.crl (hash: jxmIrwPtL31ZUdErO5P3ziv95OW+aBBNaUI3YFGn3nM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/1d00ff-3264-4619-990b-90d30dc56b3c/1/XU74K4IEWvnTUQYV7QM3a2MU_e4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/1d00ff-3264-4619-990b-90d30dc56b3c/1/XU74K4IEWvnTUQYV7QM3a2MU_e4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XU74K4IEWvnTUQYV7QM3a2MU_e4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 03:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:63:0b:0d:e7:14:84:4e:1e:41:10:a2:82:d7:c1:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d4ef82b82045af9d3510615ed03376b6314fdee
Validity
Not Before: Mar 28 03:00:44 2026 GMT
Not After : Mar 29 03:00:44 2026 GMT
Subject: CN=4a143c9013825c676cbc28fb1bfc729116cf3def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:08:a3:fc:a6:50:b8:ec:34:af:d6:6c:19:6a:
2b:e5:84:b3:e3:b0:b0:c9:f6:e4:42:e4:03:7b:e1:
8c:31:aa:a9:0b:c5:a8:00:42:8f:7d:e3:39:18:53:
d2:f1:a2:0f:c8:b6:63:4e:13:fd:bf:83:0e:a4:bc:
ce:38:78:13:ac:8e:e6:b3:d5:fb:8b:e0:39:51:9a:
51:4f:a0:70:05:13:89:67:46:74:33:94:b8:65:af:
d7:4c:c4:39:36:bd:a7:57:9b:e1:f1:aa:c1:39:aa:
08:d2:b2:d5:d3:04:ff:75:8a:1c:58:f6:d0:60:cf:
75:3d:b9:66:79:a6:be:fb:a1:eb:7a:df:e1:8c:0c:
29:79:cf:52:be:0b:e9:22:6e:6a:a5:0c:6b:34:a5:
f9:5e:61:b5:b3:aa:42:b5:3f:7f:b5:4f:97:4a:4d:
8d:34:b2:0b:b5:3e:55:5c:ff:e0:98:74:dd:c1:c7:
74:e7:45:6f:19:ef:ca:8f:92:87:d4:ee:d5:72:bc:
53:8e:17:0f:36:1d:f7:91:d7:41:c1:eb:17:9f:61:
e6:23:96:65:ba:86:95:0b:08:30:5a:7f:3e:19:4a:
2a:14:b5:c7:a8:a6:14:82:10:8c:4e:8e:f6:c3:d2:
8e:ce:35:d5:bc:a9:d1:e1:5c:41:3c:65:a5:69:b5:
b2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:14:3C:90:13:82:5C:67:6C:BC:28:FB:1B:FC:72:91:16:CF:3D:EF
X509v3 Authority Key Identifier:
keyid:5D:4E:F8:2B:82:04:5A:F9:D3:51:06:15:ED:03:37:6B:63:14:FD:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XU74K4IEWvnTUQYV7QM3a2MU_e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/1d00ff-3264-4619-990b-90d30dc56b3c/1/XU74K4IEWvnTUQYV7QM3a2MU_e4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/1d00ff-3264-4619-990b-90d30dc56b3c/1/XU74K4IEWvnTUQYV7QM3a2MU_e4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:30:00:c5:3b:cb:a3:47:4c:76:b9:5b:20:e5:87:28:0f:83:
b3:bc:fb:91:1e:76:88:d4:bc:2f:56:d5:d5:e1:f9:97:26:af:
d3:2b:c8:94:ce:f9:00:7d:89:ab:38:20:a5:d3:c4:bb:e6:e1:
d1:54:86:5d:8c:75:2f:0f:7f:eb:bf:a0:a2:8b:81:62:b6:77:
be:b2:45:6e:da:23:ee:ed:88:54:76:2f:0e:33:45:cb:d6:3b:
dc:15:80:3b:64:26:2e:84:a3:50:b6:28:48:67:e2:a6:e8:ba:
20:ad:61:54:7c:54:43:5e:53:a8:f1:df:34:5c:90:0d:03:f2:
b4:00:2d:b4:ac:b6:51:a0:63:85:4d:26:8a:11:20:de:e9:6a:
75:dc:9c:04:f4:96:61:e2:39:2d:7f:59:08:06:b6:4f:03:b6:
d4:15:c3:bb:38:65:db:37:59:a0:a6:31:e5:0a:d1:71:33:3f:
bc:12:14:c6:59:28:ea:3c:13:ca:76:c5:83:29:7c:15:c5:25:
f6:10:5b:92:59:b4:04:8f:49:47:fd:f0:8d:5e:8b:77:27:be:
5e:79:6a:6f:b9:67:7a:9e:af:6b:97:0a:76:1f:38:eb:39:ce:
b2:21:99:34:5b:f9:b5:a7:1d:86:fb:ae:86:71:d2:b7:4a:6d:
e6:94:10:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0yYwsN5xSETh5BEKKC18HYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkNGVmODJiODIwNDVhZjlkMzUxMDYxNWVkMDMzNzZiNjMx
NGZkZWUwHhcNMjYwMzI4MDMwMDQ0WhcNMjYwMzI5MDMwMDQ0WjAzMTEwLwYDVQQD
Eyg0YTE0M2M5MDEzODI1YzY3NmNiYzI4ZmIxYmZjNzI5MTE2Y2YzZGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgij/KZQuOw0r9ZsGWor5YSz47Cw
yfbkQuQDe+GMMaqpC8WoAEKPfeM5GFPS8aIPyLZjThP9v4MOpLzOOHgTrI7ms9X7
i+A5UZpRT6BwBROJZ0Z0M5S4Za/XTMQ5Nr2nV5vh8arBOaoI0rLV0wT/dYocWPbQ
YM91Pblmeaa++6Hret/hjAwpec9SvgvpIm5qpQxrNKX5XmG1s6pCtT9/tU+XSk2N
NLILtT5VXP/gmHTdwcd050VvGe/Kj5KH1O7VcrxTjhcPNh33kddBwesXn2HmI5Zl
uoaVCwgwWn8+GUoqFLXHqKYUghCMTo72w9KOzjXVvKnR4VxBPGWlabWy2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEoUPJATglxnbLwo+xv8cpEWzz3vMB8GA1UdIwQY
MBaAFF1O+CuCBFr501EGFe0DN2tjFP3uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFU3NEs0SUVXdm5UVVFZVjdRTTNhMk1VX2U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8xZDAwZmYtMzI2NC00NjE5LTk5MGIt
OTBkMzBkYzU2YjNjLzEvWFU3NEs0SUVXdm5UVVFZVjdRTTNhMk1VX2U0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8xZDAwZmYtMzI2NC00NjE5LTk5MGItOTBkMzBkYzU2YjNj
LzEvWFU3NEs0SUVXdm5UVVFZVjdRTTNhMk1VX2U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApDAAxTvL
o0dMdrlbIOWHKA+Ds7z7kR52iNS8L1bV1eH5lyav0yvIlM75AH2JqzggpdPEu+bh
0VSGXYx1Lw9/67+goouBYrZ3vrJFbtoj7u2IVHYvDjNFy9Y73BWAO2QmLoSjULYo
SGfipui6IK1hVHxUQ15TqPHfNFyQDQPytAAttKy2UaBjhU0mihEg3ulqddycBPSW
YeI5LX9ZCAa2TwO21BXDuzhl2zdZoKYx5QrRcTM/vBIUxlko6jwTynbFgyl8FcUl
9hBbklm0BI9JR/3wjV6Ldye+Xnlqb7lnep6va5cKdh846znOsiGZNFv5tacdhvuu
hnHSt0pt5pQQeg==
-----END CERTIFICATE-----
Generated at Sat Mar 28 11:46:47 2026 by rpki-client