Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
File: X_n07MXQUHYsVWmEQPheqW9zMPI.mft (raw, json)
Hash identifier: XImKmbEWjZcNStuq80IKe3zafeQWO4OgcPj+BhmDjQ4=
Subject key identifier: B8:0E:BE:4D:E5:DE:DA:5A:83:11:D6:84:DF:64:86:49:E2:C8:0C:16
Authority key identifier: 5F:F9:F4:EC:C5:D0:50:76:2C:55:69:84:40:F8:5E:A9:6F:73:30:F2
Certificate issuer: /CN=5ff9f4ecc5d050762c55698440f85ea96f7330f2
Certificate serial: 019D37F765B1EE98919C60DD6241031CC885
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 05:00:53 +0000
Manifest this update: Sun 29 Mar 2026 05:00:53 +0000
Manifest next update: Mon 30 Mar 2026 05:00:53 +0000
Files and hashes: 1: X_n07MXQUHYsVWmEQPheqW9zMPI.crl (hash: WyMDADpL9iKSGVe/3KWvMhmJTeh1JP0LnG8mafZyWEs=)
2: cF9T-jxoP9kV3otKbs6wprWqe14.roa (hash: By9z72uPVXpGvtlPCEnMJBu0BtKh3WPCweFaBQSyntA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:65:b1:ee:98:91:9c:60:dd:62:41:03:1c:c8:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff9f4ecc5d050762c55698440f85ea96f7330f2
Validity
Not Before: Mar 29 05:00:53 2026 GMT
Not After : Mar 30 05:00:53 2026 GMT
Subject: CN=b80ebe4de5deda5a8311d684df648649e2c80c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1e:ab:98:5b:4d:38:3f:fc:60:ec:8a:27:7b:
25:6c:44:4d:ce:53:73:11:5c:55:52:6d:de:ff:17:
e1:21:f5:26:b6:6f:c1:d0:5a:e5:1d:32:33:c2:fb:
ce:c4:cd:6c:fe:1e:06:61:ab:82:94:d3:c7:30:49:
0b:0c:26:07:5c:bd:3b:1b:8f:c4:e1:62:e1:4a:2b:
57:53:e8:87:6a:d3:72:4a:fe:84:7b:c2:f8:11:95:
a8:69:3a:76:f6:05:e9:b0:c6:76:5d:e7:2e:20:38:
ad:a9:1a:a5:d8:45:32:f6:6f:8d:ce:c5:38:6b:1b:
59:af:9f:75:2c:b6:3f:22:f7:e5:3a:0e:72:c1:e1:
40:9d:c6:81:2d:8e:b7:f8:dd:4b:fe:dd:0c:cc:ec:
4c:18:ef:4d:54:af:9e:f7:60:88:51:4b:7b:fd:ea:
7b:9c:1e:77:1d:ad:4d:e5:78:ae:da:a4:0b:84:fe:
59:48:70:4f:fc:9b:07:dc:0b:c8:05:04:9e:57:c3:
b2:b1:6e:26:a8:9d:fb:a3:3d:a4:b1:d6:73:1b:ef:
2e:9c:32:77:98:6d:46:cc:55:22:8b:c7:4d:ca:f8:
1d:69:74:49:2f:0c:d1:d5:80:7f:d7:5c:e0:d0:06:
55:5f:88:e3:12:a4:0c:46:2e:0f:23:ae:25:1a:7c:
1d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:0E:BE:4D:E5:DE:DA:5A:83:11:D6:84:DF:64:86:49:E2:C8:0C:16
X509v3 Authority Key Identifier:
keyid:5F:F9:F4:EC:C5:D0:50:76:2C:55:69:84:40:F8:5E:A9:6F:73:30:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:40:54:d2:89:40:82:23:88:9c:bc:f1:e5:11:66:35:de:50:
53:74:7a:b2:39:f9:cb:28:a2:cd:17:a9:84:28:b4:a6:70:5c:
00:98:fc:54:d4:a0:8b:33:c0:0a:36:00:4e:c1:9e:95:64:eb:
0d:15:e3:fb:2f:d1:04:f7:f7:a5:fc:07:55:3a:17:97:61:ab:
b5:40:92:f8:1a:07:fd:ca:4f:25:67:6c:64:32:dd:e1:92:c4:
58:ac:fc:e3:94:26:35:32:21:57:37:10:55:90:40:b9:96:c4:
9a:7b:bc:7a:02:cd:39:bf:f6:a4:de:df:aa:f8:f6:4d:47:66:
0f:3c:e0:80:09:e4:58:a8:b0:92:b8:cf:03:94:7d:3a:5c:54:
27:6c:ce:8b:34:90:56:3b:71:c4:9e:0e:05:33:ec:a3:7e:06:
7d:1c:dc:3f:96:b3:59:05:b2:eb:fb:31:32:f2:7b:a9:76:a3:
94:7c:bb:7d:ee:f5:ca:4a:3e:d2:a0:71:ee:18:55:5d:22:e8:
2f:60:11:f7:b1:49:b4:f2:d6:27:c2:d0:f9:2d:0f:1c:f9:5f:
aa:3c:fd:96:e7:05:c3:36:35:7b:47:cd:7e:08:39:95:45:07:
c7:e0:cc:09:7b:a2:aa:45:ff:71:42:4a:9d:e0:4e:29:8d:ab:
fe:05:43:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0392Wx7piRnGDdYkEDHMiFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmZjlmNGVjYzVkMDUwNzYyYzU1Njk4NDQwZjg1ZWE5NmY3
MzMwZjIwHhcNMjYwMzI5MDUwMDUzWhcNMjYwMzMwMDUwMDUzWjAzMTEwLwYDVQQD
EyhiODBlYmU0ZGU1ZGVkYTVhODMxMWQ2ODRkZjY0ODY0OWUyYzgwYzE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxR6rmFtNOD/8YOyKJ3slbERNzlNz
EVxVUm3e/xfhIfUmtm/B0FrlHTIzwvvOxM1s/h4GYauClNPHMEkLDCYHXL07G4/E
4WLhSitXU+iHatNySv6Ee8L4EZWoaTp29gXpsMZ2XecuIDitqRql2EUy9m+NzsU4
axtZr591LLY/IvflOg5yweFAncaBLY63+N1L/t0MzOxMGO9NVK+e92CIUUt7/ep7
nB53Ha1N5Xiu2qQLhP5ZSHBP/JsH3AvIBQSeV8OysW4mqJ37oz2ksdZzG+8unDJ3
mG1GzFUii8dNyvgdaXRJLwzR1YB/11zg0AZVX4jjEqQMRi4PI64lGnwdDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLgOvk3l3tpagxHWhN9khkniyAwWMB8GA1UdIwQY
MBaAFF/59OzF0FB2LFVphED4XqlvczDyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWF9uMDdNWFFVSFlzVldtRVFQaGVxVzl6TVBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83N2M2NjAtZjgyYy00MTA2LWFiYzkt
NGMxZTQ5ZWM4ZjE2LzEvWF9uMDdNWFFVSFlzVldtRVFQaGVxVzl6TVBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS83N2M2NjAtZjgyYy00MTA2LWFiYzktNGMxZTQ5ZWM4ZjE2
LzEvWF9uMDdNWFFVSFlzVldtRVFQaGVxVzl6TVBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXUBU0olA
giOInLzx5RFmNd5QU3R6sjn5yyiizRephCi0pnBcAJj8VNSgizPACjYATsGelWTr
DRXj+y/RBPf3pfwHVToXl2GrtUCS+BoH/cpPJWdsZDLd4ZLEWKz845QmNTIhVzcQ
VZBAuZbEmnu8egLNOb/2pN7fqvj2TUdmDzzggAnkWKiwkrjPA5R9OlxUJ2zOizSQ
VjtxxJ4OBTPso34GfRzcP5azWQWy6/sxMvJ7qXajlHy7fe71yko+0qBx7hhVXSLo
L2AR97FJtPLWJ8LQ+S0PHPlfqjz9lucFwzY1e0fNfgg5lUUHx+DMCXuiqkX/cUJK
neBOKY2r/gVDbw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:51 2026 by rpki-client