Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft
File: XatFagUdSpN4i-9PrA0HvcDJ8M8.mft (raw, json)
Hash identifier: +97j3Fc9Zw8zTYz4UxYccPOSzG0FN6EoxEDAvzjs+Us=
Subject key identifier: BB:DA:6F:C7:1B:68:35:FE:0B:8A:D0:05:CC:05:99:0B:F8:24:44:65
Authority key identifier: 5D:AB:45:6A:05:1D:4A:93:78:8B:EF:4F:AC:0D:07:BD:C0:C9:F0:CF
Certificate issuer: /CN=5dab456a051d4a93788bef4fac0d07bdc0c9f0cf
Certificate serial: 019D2B4F079FB283A21E7946306B6A799C86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XatFagUdSpN4i-9PrA0HvcDJ8M8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft
Manifest number: 1892
Signing time: Thu 26 Mar 2026 18:01:32 +0000
Manifest this update: Thu 26 Mar 2026 18:01:32 +0000
Manifest next update: Fri 27 Mar 2026 18:01:32 +0000
Files and hashes: 1: CbUjr1UvlkF8n-aSwRMeoAKRr08.roa (hash: uLotTSOrlblRssB3pzAzK8VGcBOkdwWIKgpcVkQ5HL8=)
2: XatFagUdSpN4i-9PrA0HvcDJ8M8.crl (hash: Y6w+1/psi2yn//bBBs3P+7tL8JoLiIVW+SdQDXtooOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XatFagUdSpN4i-9PrA0HvcDJ8M8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4f:07:9f:b2:83:a2:1e:79:46:30:6b:6a:79:9c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dab456a051d4a93788bef4fac0d07bdc0c9f0cf
Validity
Not Before: Mar 26 18:01:32 2026 GMT
Not After : Mar 27 18:01:32 2026 GMT
Subject: CN=bbda6fc71b6835fe0b8ad005cc05990bf8244465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e4:d2:22:55:be:05:ef:d0:bf:f0:24:99:ca:
d0:2e:e1:f2:a5:f2:02:11:7a:6b:eb:44:b1:33:e7:
09:70:6f:fe:54:a2:83:6c:a4:95:ec:ab:3c:ec:2e:
da:96:e5:a3:c8:df:b7:64:10:fc:e9:8f:d6:8c:17:
92:31:58:2b:30:04:e3:e9:4a:62:4b:c1:68:21:3f:
7e:54:27:61:11:3f:e5:2d:96:4c:4b:88:5b:4a:a7:
44:b6:98:d3:81:f0:c9:ae:4f:25:09:ad:ca:54:5a:
ee:95:65:a7:6f:38:22:51:e2:34:e8:e4:b0:48:75:
c4:d0:bf:cc:40:96:ba:07:82:7c:c9:d2:ad:81:1c:
0c:3a:8b:0f:b2:20:bf:2b:c2:4b:be:04:6a:48:76:
ad:b7:9b:81:de:6c:20:97:27:d2:29:8a:a7:24:6a:
d7:dc:b1:64:88:03:8e:5d:fc:cb:a5:19:a9:dc:42:
17:65:7e:ef:ac:e6:e1:72:2b:48:f0:25:40:8e:ae:
61:4b:82:30:d6:5f:c1:89:80:43:38:24:02:47:f2:
ac:f2:2d:c3:86:20:b4:44:02:d7:84:af:dd:f5:8b:
81:6e:c6:7e:e6:7c:90:ae:7c:7d:70:6c:74:ab:42:
45:b7:e4:b7:0c:be:16:95:20:28:36:ad:4c:5f:ba:
d4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:DA:6F:C7:1B:68:35:FE:0B:8A:D0:05:CC:05:99:0B:F8:24:44:65
X509v3 Authority Key Identifier:
keyid:5D:AB:45:6A:05:1D:4A:93:78:8B:EF:4F:AC:0D:07:BD:C0:C9:F0:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XatFagUdSpN4i-9PrA0HvcDJ8M8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:7a:88:b8:29:4d:ce:75:31:0b:2e:b7:82:b1:d0:af:ad:0b:
80:6a:22:26:c9:9a:b9:35:a3:87:39:24:b0:a6:ad:63:f0:e5:
a0:ff:66:72:15:a7:94:f6:1b:b6:8e:57:f1:d7:fc:49:d3:e7:
02:50:9f:84:8a:f6:40:d4:e4:ae:04:ce:c4:7d:ba:6b:86:d4:
64:23:32:25:56:a2:9f:b1:f6:e3:b6:d2:84:1f:a3:11:1d:51:
ff:5e:f8:b6:22:4a:aa:0a:01:3f:a5:e2:03:ac:d6:ea:60:0d:
d8:c0:fd:58:ed:21:9d:7d:03:ad:c9:4b:cc:35:0a:d1:11:75:
8a:ca:70:ff:bb:7e:5a:39:50:07:44:49:12:29:82:b7:16:31:
17:29:9c:dd:ca:1a:b4:23:53:a8:93:52:61:e9:8f:dc:19:44:
d6:1d:ba:93:af:57:a7:db:e7:07:ab:58:6d:1c:b9:18:75:40:
be:8c:09:05:6d:5d:26:df:27:87:db:79:cf:35:c8:e1:0a:4a:
4c:26:db:c0:a4:0d:7c:34:98:f6:59:30:bd:f4:e0:c2:f0:8c:
c5:d5:0f:f4:a3:c1:5f:7c:a1:5d:52:d1:41:fb:98:19:92:0f:
bd:d0:00:37:9e:8f:af:d0:d0:98:c0:6a:09:4b:68:67:78:a9:
84:8a:5b:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0rTwefsoOiHnlGMGtqeZyGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkYWI0NTZhMDUxZDRhOTM3ODhiZWY0ZmFjMGQwN2JkYzBj
OWYwY2YwHhcNMjYwMzI2MTgwMTMyWhcNMjYwMzI3MTgwMTMyWjAzMTEwLwYDVQQD
EyhiYmRhNmZjNzFiNjgzNWZlMGI4YWQwMDVjYzA1OTkwYmY4MjQ0NDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5OTSIlW+Be/Qv/AkmcrQLuHypfIC
EXpr60SxM+cJcG/+VKKDbKSV7Ks87C7aluWjyN+3ZBD86Y/WjBeSMVgrMATj6Upi
S8FoIT9+VCdhET/lLZZMS4hbSqdEtpjTgfDJrk8lCa3KVFrulWWnbzgiUeI06OSw
SHXE0L/MQJa6B4J8ydKtgRwMOosPsiC/K8JLvgRqSHatt5uB3mwglyfSKYqnJGrX
3LFkiAOOXfzLpRmp3EIXZX7vrObhcitI8CVAjq5hS4Iw1l/BiYBDOCQCR/Ks8i3D
hiC0RALXhK/d9YuBbsZ+5nyQrnx9cGx0q0JFt+S3DL4WlSAoNq1MX7rU+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLvab8cbaDX+C4rQBcwFmQv4JERlMB8GA1UdIwQY
MBaAFF2rRWoFHUqTeIvvT6wNB73AyfDPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGF0RmFnVWRTcE40aS05UHJBMEh2Y0RKOE04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi84ZDM4OTUtNjVjMi00YjhlLWE1NDct
OGFkNzRjYzZhNmI5LzEvWGF0RmFnVWRTcE40aS05UHJBMEh2Y0RKOE04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi84ZDM4OTUtNjVjMi00YjhlLWE1NDctOGFkNzRjYzZhNmI5
LzEvWGF0RmFnVWRTcE40aS05UHJBMEh2Y0RKOE04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALHqIuClN
znUxCy63grHQr60LgGoiJsmauTWjhzkksKatY/DloP9mchWnlPYbto5X8df8SdPn
AlCfhIr2QNTkrgTOxH26a4bUZCMyJVain7H247bShB+jER1R/174tiJKqgoBP6Xi
A6zW6mAN2MD9WO0hnX0DrclLzDUK0RF1ispw/7t+WjlQB0RJEimCtxYxFymc3coa
tCNTqJNSYemP3BlE1h26k69Xp9vnB6tYbRy5GHVAvowJBW1dJt8nh9t5zzXI4QpK
TCbbwKQNfDSY9lkwvfTgwvCMxdUP9KPBX3yhXVLRQfuYGZIPvdAAN56Pr9DQmMBq
CUtoZ3iphIpbEg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:15:01 2026 by rpki-client