Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft
File: XNTi_CtB6FbbpbpiI1umQaDYG0g.mft (raw, json)
Hash identifier: Y7Yk/s4xvRL8ZOGo2xskYcrDwhGaOtKRso2YrWLbJKc=
Subject key identifier: BE:31:16:C7:38:96:0C:E9:B7:62:6E:3F:E0:7B:07:1F:69:56:13:E7
Authority key identifier: 5C:D4:E2:FC:2B:41:E8:56:DB:A5:BA:62:23:5B:A6:41:A0:D8:1B:48
Certificate issuer: /CN=5cd4e2fc2b41e856dba5ba62235ba641a0d81b48
Certificate serial: 019D27E05CFD5201AFFE94597CE7905643B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNTi_CtB6FbbpbpiI1umQaDYG0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft
Manifest number: 181A
Signing time: Thu 26 Mar 2026 02:01:48 +0000
Manifest this update: Thu 26 Mar 2026 02:01:48 +0000
Manifest next update: Fri 27 Mar 2026 02:01:48 +0000
Files and hashes: 1: V8ZoCsWD9muj8NjFFgc6JWYGaJQ.roa (hash: ry1QmNgsoyY18ZwPnwsZ1kzSR5GRuG7sj4PvQ3AErOM=)
2: XNTi_CtB6FbbpbpiI1umQaDYG0g.crl (hash: AEBQzngIzTMdjVDgNWrzkw3Jx1uiM54ojsBcoek4zFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNTi_CtB6FbbpbpiI1umQaDYG0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:5c:fd:52:01:af:fe:94:59:7c:e7:90:56:43:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd4e2fc2b41e856dba5ba62235ba641a0d81b48
Validity
Not Before: Mar 26 02:01:48 2026 GMT
Not After : Mar 27 02:01:48 2026 GMT
Subject: CN=be3116c738960ce9b7626e3fe07b071f695613e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c2:d8:d8:fc:b5:71:60:df:3f:74:bb:34:b1:
1e:35:8d:d4:f9:e8:b0:9b:a5:26:10:1b:ca:cd:02:
40:2b:cf:75:89:b3:c7:ac:c7:4e:a2:c6:b3:e8:6e:
57:8e:8f:87:bf:a8:45:8e:7b:01:e3:d8:d5:7c:b3:
9c:60:62:f9:e9:49:34:11:1b:ed:ff:df:97:20:ca:
d9:81:27:d5:03:04:2a:cf:c6:51:44:8b:39:c8:55:
dc:b0:26:f4:26:3d:06:59:73:13:4f:da:af:78:4f:
32:60:f6:9b:54:b7:07:c3:a5:ef:f2:73:a1:8c:82:
42:8a:45:6f:71:de:a6:9c:74:1b:f7:ad:4f:88:8f:
68:cf:07:d6:17:1b:d7:e8:76:b6:6c:2b:96:78:3a:
2a:82:99:59:54:3e:21:29:2e:19:85:8d:73:a7:08:
f7:cc:8d:fa:e8:6b:d5:01:3b:9a:89:42:47:5a:9a:
21:5d:59:16:bf:7a:c8:31:95:2d:a3:fd:d0:fa:1c:
cc:ed:3b:f1:ed:79:a8:a6:65:a8:32:ba:dc:ed:8a:
62:52:02:98:65:84:09:13:c7:bd:a4:59:2a:0d:6d:
a2:ed:42:ab:71:0b:50:7b:86:da:f2:2f:95:f7:a4:
55:12:72:a7:0b:ec:db:c4:59:31:e1:6b:62:c1:71:
77:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:31:16:C7:38:96:0C:E9:B7:62:6E:3F:E0:7B:07:1F:69:56:13:E7
X509v3 Authority Key Identifier:
keyid:5C:D4:E2:FC:2B:41:E8:56:DB:A5:BA:62:23:5B:A6:41:A0:D8:1B:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNTi_CtB6FbbpbpiI1umQaDYG0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:27:b8:99:1c:73:9c:c4:0d:51:0d:12:86:9c:37:a9:d4:33:
e3:69:71:5f:9f:a4:8e:64:45:80:07:25:86:e9:ed:75:9f:27:
1a:9c:36:58:a3:13:21:ba:69:86:0a:5c:62:59:7d:4c:c6:da:
1f:67:07:ab:71:d0:85:84:bd:a5:40:5b:4f:83:99:9d:94:2c:
5f:e6:30:6b:c0:9a:8a:6a:d9:08:70:e7:52:c4:dd:0d:20:6d:
07:b7:4f:21:af:b4:c1:e7:05:58:81:64:7a:ed:75:34:37:b0:
3b:92:99:85:2f:0a:4f:e4:82:6d:a9:49:65:68:8c:cb:a0:fc:
68:0f:ea:93:80:0a:9d:f1:0b:03:8b:de:02:fb:07:dc:4e:90:
c7:3c:c4:7c:0f:7a:39:0a:74:f4:d9:21:54:1c:e2:40:d2:3a:
9e:80:11:ab:b6:41:52:20:9b:7e:b7:b8:ec:37:6d:a8:15:83:
f9:c5:0a:83:fa:d1:ff:ce:2a:68:f5:dd:2d:1f:c7:17:d0:46:
be:88:61:10:a1:c0:b0:11:9a:6e:32:e4:26:ec:93:3a:23:94:
de:ec:22:2b:54:ff:c2:8b:ac:1d:c6:12:98:4f:e3:13:78:44:
d2:8b:63:01:70:a6:74:48:73:b1:65:79:4c:ae:f1:81:dc:7b:
95:b9:49:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4Fz9UgGv/pRZfOeQVkOxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZDRlMmZjMmI0MWU4NTZkYmE1YmE2MjIzNWJhNjQxYTBk
ODFiNDgwHhcNMjYwMzI2MDIwMTQ4WhcNMjYwMzI3MDIwMTQ4WjAzMTEwLwYDVQQD
EyhiZTMxMTZjNzM4OTYwY2U5Yjc2MjZlM2ZlMDdiMDcxZjY5NTYxM2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMLY2Py1cWDfP3S7NLEeNY3U+eiw
m6UmEBvKzQJAK891ibPHrMdOosaz6G5Xjo+Hv6hFjnsB49jVfLOcYGL56Uk0ERvt
/9+XIMrZgSfVAwQqz8ZRRIs5yFXcsCb0Jj0GWXMTT9qveE8yYPabVLcHw6Xv8nOh
jIJCikVvcd6mnHQb961PiI9ozwfWFxvX6Ha2bCuWeDoqgplZVD4hKS4ZhY1zpwj3
zI366GvVATuaiUJHWpohXVkWv3rIMZUto/3Q+hzM7Tvx7XmopmWoMrrc7YpiUgKY
ZYQJE8e9pFkqDW2i7UKrcQtQe4ba8i+V96RVEnKnC+zbxFkx4WtiwXF3AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL4xFsc4lgzpt2JuP+B7Bx9pVhPnMB8GA1UdIwQY
MBaAFFzU4vwrQehW26W6YiNbpkGg2BtIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWE5UaV9DdEI2RmJicGJwaUkxdW1RYURZRzBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8yMzY5YjgtOGQ4Mi00MTU3LWI2NWYt
MTYzY2Q4YmJmNDMxLzEvWE5UaV9DdEI2RmJicGJwaUkxdW1RYURZRzBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8yMzY5YjgtOGQ4Mi00MTU3LWI2NWYtMTYzY2Q4YmJmNDMx
LzEvWE5UaV9DdEI2RmJicGJwaUkxdW1RYURZRzBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFCe4mRxz
nMQNUQ0Shpw3qdQz42lxX5+kjmRFgAclhuntdZ8nGpw2WKMTIbpphgpcYll9TMba
H2cHq3HQhYS9pUBbT4OZnZQsX+Ywa8CaimrZCHDnUsTdDSBtB7dPIa+0wecFWIFk
eu11NDewO5KZhS8KT+SCbalJZWiMy6D8aA/qk4AKnfELA4veAvsH3E6QxzzEfA96
OQp09NkhVBziQNI6noARq7ZBUiCbfre47DdtqBWD+cUKg/rR/84qaPXdLR/HF9BG
vohhEKHAsBGabjLkJuyTOiOU3uwiK1T/wousHcYSmE/jE3hE0otjAXCmdEhzsWV5
TK7xgdx7lblJZg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:40:24 2026 by rpki-client