Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
File: XzpsIZQcHhO__E1E1hvSWV_dj-g.mft (raw, json)
Hash identifier: PGK6TVWGwGIjPcu+bTWqkIi37hLvuVzq05Qc8ugN+J8=
Subject key identifier: DB:E1:C0:37:1A:28:02:55:53:35:E9:54:E9:B3:EA:D7:6F:62:FF:46
Authority key identifier: 5F:3A:6C:21:94:1C:1E:13:BF:FC:4D:44:D6:1B:D2:59:5F:DD:8F:E8
Certificate issuer: /CN=5f3a6c21941c1e13bffc4d44d61bd2595fdd8fe8
Certificate serial: 019D39E5A67DF2B48CE14C192DAE291D31A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
Manifest number: 076E
Signing time: Sun 29 Mar 2026 14:00:44 +0000
Manifest this update: Sun 29 Mar 2026 14:00:44 +0000
Manifest next update: Mon 30 Mar 2026 14:00:44 +0000
Files and hashes: 1: TYmQbCMoT4fS2qLD8XTST39V7ao.roa (hash: AGtO8iqNaCFj7ECH8S64l5TD2JUqi3IXF+NQdgnWnfk=)
2: XzpsIZQcHhO__E1E1hvSWV_dj-g.crl (hash: t1AiA47Q26JmWB4aUIEGeJzA8S9zAWx8gfUjCvQBog4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:a6:7d:f2:b4:8c:e1:4c:19:2d:ae:29:1d:31:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f3a6c21941c1e13bffc4d44d61bd2595fdd8fe8
Validity
Not Before: Mar 29 14:00:44 2026 GMT
Not After : Mar 30 14:00:44 2026 GMT
Subject: CN=dbe1c0371a2802555335e954e9b3ead76f62ff46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:74:67:6f:cb:52:73:ee:84:67:5d:ab:79:92:
db:cc:37:90:6b:b7:f9:a5:c8:42:ea:ba:d0:e8:f7:
ee:ab:6d:9d:d3:5b:cb:e5:49:89:79:9f:17:43:4d:
43:6f:02:eb:66:f2:18:1b:01:5e:e5:8f:16:e5:3f:
63:bf:9d:dc:81:08:a3:c8:9b:49:ea:b4:89:4a:b1:
44:62:68:27:d9:28:b8:84:f2:7c:9f:d3:4d:3b:f1:
a8:8b:40:b7:f4:fe:fe:da:38:bf:11:7e:44:f1:ac:
09:2f:f8:f3:96:22:cb:f4:bf:08:5c:34:35:f8:f9:
8b:81:ae:64:43:d9:38:25:43:20:b0:35:0a:24:28:
2e:6c:3c:06:28:07:7e:f3:37:cd:1d:fc:e0:7b:82:
92:40:05:80:83:b0:4e:05:a2:8a:50:2d:90:be:dc:
c9:38:63:34:34:f4:7e:ab:08:23:98:88:b7:00:9f:
e2:33:91:f6:14:9e:32:38:56:3a:dd:51:e4:f6:c6:
a9:51:4c:36:e9:01:d2:15:42:28:80:f2:a3:7d:3a:
71:55:a5:21:15:10:b1:76:35:dc:a6:ef:96:b7:a0:
36:d0:d6:b4:f3:19:ad:d6:56:cf:cc:13:64:eb:4f:
29:fd:7f:75:06:24:18:42:04:ab:b8:ef:9e:e4:3f:
e8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E1:C0:37:1A:28:02:55:53:35:E9:54:E9:B3:EA:D7:6F:62:FF:46
X509v3 Authority Key Identifier:
keyid:5F:3A:6C:21:94:1C:1E:13:BF:FC:4D:44:D6:1B:D2:59:5F:DD:8F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:15:60:d4:ce:80:7d:e1:1b:36:ab:34:52:a2:7b:07:46:68:
46:e0:e4:d9:d1:bb:0a:0a:be:02:b2:08:60:d9:09:82:bc:21:
37:48:a0:37:73:24:56:2e:b3:77:70:4c:15:45:c8:04:3c:32:
76:05:8a:ff:55:63:52:fd:f5:2e:e7:bf:7e:22:d3:0e:67:22:
03:89:4a:50:07:e9:ae:e5:bc:f9:ed:f5:c8:6e:08:1e:98:cd:
3d:a8:a0:45:88:f5:b2:75:65:52:3e:ea:af:83:55:af:0b:aa:
cd:cb:83:74:ce:6f:3c:8c:2d:46:f9:91:b6:a5:81:65:ba:db:
16:3d:27:66:5b:19:28:37:e7:1b:fe:63:8f:59:46:af:5c:d3:
27:d5:ee:6e:0d:ce:04:1d:ac:fb:51:35:28:0f:15:70:38:26:
ee:c4:4f:df:1b:de:c0:eb:d2:9d:e7:ee:f3:aa:23:23:99:ef:
fc:b0:f7:39:16:aa:e1:43:1e:40:98:48:0d:99:92:76:b6:40:
79:65:3f:8d:aa:1f:51:39:1f:3a:5c:b3:60:10:3f:e9:c0:7e:
ac:60:1d:5b:7b:d6:2d:57:06:99:d1:11:07:28:80:4f:a6:17:
b1:e9:36:6d:19:7b:5c:61:2d:a1:4d:93:73:bd:5d:21:07:a8:
0d:23:88:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ055aZ98rSM4UwZLa4pHTGpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmM2E2YzIxOTQxYzFlMTNiZmZjNGQ0NGQ2MWJkMjU5NWZk
ZDhmZTgwHhcNMjYwMzI5MTQwMDQ0WhcNMjYwMzMwMTQwMDQ0WjAzMTEwLwYDVQQD
EyhkYmUxYzAzNzFhMjgwMjU1NTMzNWU5NTRlOWIzZWFkNzZmNjJmZjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4XRnb8tSc+6EZ12reZLbzDeQa7f5
pchC6rrQ6Pfuq22d01vL5UmJeZ8XQ01DbwLrZvIYGwFe5Y8W5T9jv53cgQijyJtJ
6rSJSrFEYmgn2Si4hPJ8n9NNO/Goi0C39P7+2ji/EX5E8awJL/jzliLL9L8IXDQ1
+PmLga5kQ9k4JUMgsDUKJCgubDwGKAd+8zfNHfzge4KSQAWAg7BOBaKKUC2QvtzJ
OGM0NPR+qwgjmIi3AJ/iM5H2FJ4yOFY63VHk9sapUUw26QHSFUIogPKjfTpxVaUh
FRCxdjXcpu+Wt6A20Na08xmt1lbPzBNk608p/X91BiQYQgSruO+e5D/o5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNvhwDcaKAJVUzXpVOmz6tdvYv9GMB8GA1UdIwQY
MBaAFF86bCGUHB4Tv/xNRNYb0llf3Y/oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHpwc0laUWNIaE9fX0UxRTFodlNXVl9kai1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9iYTMwYmItYWMwYi00NWEwLTlmMGMt
Y2Y4Njk4NzU3ZDM3LzEvWHpwc0laUWNIaE9fX0UxRTFodlNXVl9kai1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9iYTMwYmItYWMwYi00NWEwLTlmMGMtY2Y4Njk4NzU3ZDM3
LzEvWHpwc0laUWNIaE9fX0UxRTFodlNXVl9kai1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaBVg1M6A
feEbNqs0UqJ7B0ZoRuDk2dG7Cgq+ArIIYNkJgrwhN0igN3MkVi6zd3BMFUXIBDwy
dgWK/1VjUv31Lue/fiLTDmciA4lKUAfpruW8+e31yG4IHpjNPaigRYj1snVlUj7q
r4NVrwuqzcuDdM5vPIwtRvmRtqWBZbrbFj0nZlsZKDfnG/5jj1lGr1zTJ9Xubg3O
BB2s+1E1KA8VcDgm7sRP3xvewOvSnefu86ojI5nv/LD3ORaq4UMeQJhIDZmSdrZA
eWU/jaofUTkfOlyzYBA/6cB+rGAdW3vWLVcGmdERByiAT6YXsek2bRl7XGEtoU2T
c71dIQeoDSOIeQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:58:52 2026 by rpki-client