Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
File: xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft (raw, json)
Hash identifier: 09ic8aCGLHjmnwnAizMseX9hVHLfPL+HEQbLuvxcEfw=
Subject key identifier: 8D:FD:59:12:17:35:4E:55:1F:75:FB:44:0A:CC:F8:4B:B5:C4:41:29
Authority key identifier: C6:3D:96:AE:FC:54:80:24:FA:36:FA:5C:E8:04:A4:8B:F7:CA:3A:40
Certificate issuer: /CN=c63d96aefc548024fa36fa5ce804a48bf7ca3a40
Certificate serial: 019D2AE04D66FD91618D5245EB8173435AD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 16:00:36 +0000
Manifest this update: Thu 26 Mar 2026 16:00:36 +0000
Manifest next update: Fri 27 Mar 2026 16:00:36 +0000
Files and hashes: 1: Z4BDlr57O_FweazPHma0rDQN-Eg.roa (hash: RRUvm/U5FkAyaYrRTEjgZo8457PWupRX0eiUbSuUq0U=)
2: xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl (hash: m1N2PLuDABemlnWlbynMsi50RdApkAu4742J6B1LyHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:4d:66:fd:91:61:8d:52:45:eb:81:73:43:5a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c63d96aefc548024fa36fa5ce804a48bf7ca3a40
Validity
Not Before: Mar 26 16:00:36 2026 GMT
Not After : Mar 27 16:00:36 2026 GMT
Subject: CN=8dfd591217354e551f75fb440accf84bb5c44129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a3:3a:22:ad:66:d7:4a:36:18:35:bf:29:ed:
79:0f:95:f1:11:45:60:5b:f3:17:de:65:dc:32:1f:
3d:ec:67:69:30:fb:93:f6:4e:44:1c:75:23:e5:54:
37:1e:3a:61:4c:81:94:ba:8d:e4:16:2a:3e:1b:46:
2f:83:80:89:f9:ab:6b:1a:4f:1b:87:ae:71:a6:32:
75:4b:b5:1c:66:d6:50:94:a3:81:fa:f3:58:d7:5b:
30:f2:91:44:69:ba:97:ea:8e:95:a7:45:8a:0e:74:
20:a7:b2:e7:f1:63:d8:d9:62:50:28:ce:e6:46:35:
30:f3:fb:ba:d7:b6:cd:8b:4d:25:e9:84:a7:3b:b5:
bc:07:72:86:9b:a0:16:bf:ed:85:38:ed:91:a5:77:
13:b4:d9:d2:24:d4:bf:17:9d:e6:60:a0:30:90:61:
44:dc:13:93:93:a0:15:d5:a7:fa:fa:f7:fb:b9:81:
4d:a7:3b:b2:3a:74:80:77:ba:f6:05:9b:34:7d:64:
9d:ef:ab:d1:fd:8b:99:3e:7b:1d:f0:e9:14:51:50:
c5:b1:a8:91:95:ed:fe:71:c9:14:ff:35:f9:6c:45:
3e:77:dd:e7:f5:b1:81:82:59:7c:6a:57:3f:24:3b:
28:3e:c3:05:9f:b8:5c:d1:3a:2a:eb:94:aa:40:dc:
8c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:FD:59:12:17:35:4E:55:1F:75:FB:44:0A:CC:F8:4B:B5:C4:41:29
X509v3 Authority Key Identifier:
keyid:C6:3D:96:AE:FC:54:80:24:FA:36:FA:5C:E8:04:A4:8B:F7:CA:3A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:c8:11:d7:2b:cd:92:b6:06:53:71:c2:cb:f5:0c:d9:78:9a:
bf:cb:0b:02:bb:22:8d:99:ec:82:ed:5c:bc:97:80:80:06:c7:
d0:30:85:64:7e:7e:bf:81:73:a4:7f:a9:ad:9e:e3:22:10:4e:
15:a0:d8:f5:af:bc:0b:71:51:4c:0f:b3:58:7d:7a:c5:d5:05:
47:3d:0f:ad:0d:47:e6:27:9c:9c:03:7c:2a:69:0b:42:6e:88:
ed:15:19:09:3a:98:5f:b9:52:30:f0:a7:25:a3:07:62:ee:fe:
e5:35:2f:0a:56:35:9b:77:85:bc:3b:ac:01:a7:bd:d3:11:c1:
f8:21:88:4d:ab:90:8c:3c:a2:ee:86:56:90:0a:08:77:38:32:
81:42:8e:9e:a5:57:90:19:84:13:a9:83:fc:ea:cc:d8:9a:c1:
44:86:6e:67:4d:d1:84:b4:3c:4f:1c:32:60:72:9e:10:b2:64:
e6:19:d2:e2:d9:f7:50:bd:bc:f0:36:07:a4:75:0e:d2:45:ea:
db:b6:03:ee:58:68:e9:27:a9:f3:f8:6c:44:c2:33:4f:ef:ba:
7d:27:76:3c:94:80:3c:7e:bb:12:d1:95:36:22:c6:e6:65:d7:
df:7e:68:09:d0:63:fc:e7:33:b0:58:34:05:b3:ae:be:7f:3a:
ea:b2:3c:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0q4E1m/ZFhjVJF64FzQ1rYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2M2Q5NmFlZmM1NDgwMjRmYTM2ZmE1Y2U4MDRhNDhiZjdj
YTNhNDAwHhcNMjYwMzI2MTYwMDM2WhcNMjYwMzI3MTYwMDM2WjAzMTEwLwYDVQQD
Eyg4ZGZkNTkxMjE3MzU0ZTU1MWY3NWZiNDQwYWNjZjg0YmI1YzQ0MTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqM6Iq1m10o2GDW/Ke15D5XxEUVg
W/MX3mXcMh897GdpMPuT9k5EHHUj5VQ3HjphTIGUuo3kFio+G0Yvg4CJ+atrGk8b
h65xpjJ1S7UcZtZQlKOB+vNY11sw8pFEabqX6o6Vp0WKDnQgp7Ln8WPY2WJQKM7m
RjUw8/u617bNi00l6YSnO7W8B3KGm6AWv+2FOO2RpXcTtNnSJNS/F53mYKAwkGFE
3BOTk6AV1af6+vf7uYFNpzuyOnSAd7r2BZs0fWSd76vR/YuZPnsd8OkUUVDFsaiR
le3+cckU/zX5bEU+d93n9bGBgll8alc/JDsoPsMFn7hc0Toq65SqQNyMJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI39WRIXNU5VH3X7RArM+Eu1xEEpMB8GA1UdIwQY
MBaAFMY9lq78VIAk+jb6XOgEpIv3yjpAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGoyV3J2eFVnQ1Q2TnZwYzZBU2tpX2ZLT2tBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9lZGQ2YjgtYWJiZC00YjgxLTk3MDct
OTcxZDI4ZDQzYzE0LzEveGoyV3J2eFVnQ1Q2TnZwYzZBU2tpX2ZLT2tBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9lZGQ2YjgtYWJiZC00YjgxLTk3MDctOTcxZDI4ZDQzYzE0
LzEveGoyV3J2eFVnQ1Q2TnZwYzZBU2tpX2ZLT2tBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACMgR1yvN
krYGU3HCy/UM2Xiav8sLArsijZnsgu1cvJeAgAbH0DCFZH5+v4FzpH+prZ7jIhBO
FaDY9a+8C3FRTA+zWH16xdUFRz0PrQ1H5iecnAN8KmkLQm6I7RUZCTqYX7lSMPCn
JaMHYu7+5TUvClY1m3eFvDusAae90xHB+CGITauQjDyi7oZWkAoIdzgygUKOnqVX
kBmEE6mD/OrM2JrBRIZuZ03RhLQ8TxwyYHKeELJk5hnS4tn3UL288DYHpHUO0kXq
27YD7lho6Sep8/hsRMIzT++6fSd2PJSAPH67EtGVNiLG5mXX335oCdBj/OczsFg0
BbOuvn866rI8Bg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:17:20 2026 by rpki-client