Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.mft
File: XE_B5N78Rxyf23_a25iVVj2vmZw.mft (raw, json)
Hash identifier: MvnxMf1qBtlvkV30W3BCpEmhRljfWyH6wCNIApMe/po=
Subject key identifier: 36:4B:E8:75:05:A9:2D:D9:64:C7:59:B3:5D:D0:80:CD:FE:61:A3:85
Authority key identifier: 5C:4F:C1:E4:DE:FC:47:1C:9F:DB:7F:DA:DB:98:95:56:3D:AF:99:9C
Certificate issuer: /CN=5c4fc1e4defc471c9fdb7fdadb9895563daf999c
Certificate serial: 019D37C0EE4DAD85AF66A7B5FFF436417380
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XE_B5N78Rxyf23_a25iVVj2vmZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.mft
Manifest number: 14AE
Signing time: Sun 29 Mar 2026 04:01:23 +0000
Manifest this update: Sun 29 Mar 2026 04:01:23 +0000
Manifest next update: Mon 30 Mar 2026 04:01:23 +0000
Files and hashes: 1: XE_B5N78Rxyf23_a25iVVj2vmZw.crl (hash: 1/vi5b5NhO4ih/AqTAVaheQB7nIIDEOi1UNlEuxC6vw=)
2: z3YhbfGJKz0n1N9-q-WqwEE57pE.roa (hash: HPGr92xFtSHh/56bmu7RXnry6DCCpjl7s7L94VoQwsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XE_B5N78Rxyf23_a25iVVj2vmZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:ee:4d:ad:85:af:66:a7:b5:ff:f4:36:41:73:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c4fc1e4defc471c9fdb7fdadb9895563daf999c
Validity
Not Before: Mar 29 04:01:23 2026 GMT
Not After : Mar 30 04:01:23 2026 GMT
Subject: CN=364be87505a92dd964c759b35dd080cdfe61a385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6a:97:d6:b6:3f:8a:3e:ac:c4:e8:25:cc:04:
e1:15:f9:ab:a9:7b:67:4c:b0:83:11:34:6d:40:05:
e2:f9:9d:2c:56:46:a1:9e:08:78:31:33:03:da:a0:
de:e8:0b:b6:0e:88:e4:26:1d:b3:a2:6f:14:8a:1b:
c7:90:66:15:cf:ac:2e:f7:fe:b4:f1:2d:8c:f2:6f:
a2:39:9e:af:ec:97:c3:96:56:45:73:1a:0b:e6:d7:
6f:f3:fb:40:9d:4a:19:ef:99:70:98:d8:eb:69:5a:
01:21:20:2f:0a:75:53:23:e6:a9:f2:aa:76:de:ea:
3e:6d:46:cb:cf:1e:03:d4:78:ed:a3:1f:91:d7:ca:
c1:43:81:0b:3b:c2:5c:8a:02:df:17:10:96:97:2d:
28:7d:f1:bd:60:73:84:5f:33:7d:e9:2c:f1:22:96:
3c:a6:9a:6f:2e:1d:3d:68:22:86:77:67:6e:a7:59:
fc:2b:92:a9:4a:a7:37:9e:db:f3:c1:2f:7c:97:5d:
51:f8:02:de:3a:50:d9:77:6d:69:68:52:1a:13:b0:
d3:ab:99:46:35:01:30:e8:7a:96:8e:66:e2:e8:2b:
4f:76:74:48:6f:b6:2c:df:8b:7a:83:13:d8:db:3a:
00:31:f1:94:f2:3b:7f:1c:65:23:a8:bc:f9:b2:d6:
5f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:4B:E8:75:05:A9:2D:D9:64:C7:59:B3:5D:D0:80:CD:FE:61:A3:85
X509v3 Authority Key Identifier:
keyid:5C:4F:C1:E4:DE:FC:47:1C:9F:DB:7F:DA:DB:98:95:56:3D:AF:99:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XE_B5N78Rxyf23_a25iVVj2vmZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:82:d9:9c:23:32:0e:f0:4a:60:e8:44:08:40:26:ad:94:5a:
58:95:da:28:7e:1b:92:07:57:19:d2:c5:b0:74:e3:ed:b7:f6:
c2:4d:da:e3:a2:24:9b:e4:a9:a2:11:ff:d1:9f:9d:75:f9:c5:
a1:62:33:99:41:89:a0:ef:34:0c:be:5c:67:46:1e:ff:d6:e1:
ea:31:53:6d:fe:d6:ad:48:4c:fa:5d:82:2d:fa:4a:7b:c5:d8:
09:59:f8:fa:ee:ff:eb:1f:7b:7c:fe:8f:e3:55:f2:1b:44:1f:
a9:f8:7b:f1:89:28:1b:b2:b1:a6:17:7a:42:45:c3:69:72:b3:
79:70:66:39:02:f3:33:09:eb:7f:05:a7:2a:6e:e5:72:1b:f5:
03:15:13:4b:60:a1:b9:fa:09:26:98:65:02:f0:fd:21:1f:19:
f2:0f:72:6e:f8:5c:30:4b:ca:fe:2c:b7:a1:f0:45:1c:06:2c:
07:cc:a8:69:a8:d2:9e:67:b3:4b:81:20:32:e4:d7:fd:9a:78:
21:6a:d8:aa:2d:91:a7:83:65:bc:51:d6:6c:17:8a:76:03:7c:
54:60:5e:8f:56:0c:62:da:4c:fa:d6:10:f5:05:3e:00:6f:bc:
a3:7f:e9:8c:dd:86:5b:ff:63:12:92:a5:79:bc:98:98:ca:3e:
0b:3e:1f:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wO5NrYWvZqe1//Q2QXOAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNGZjMWU0ZGVmYzQ3MWM5ZmRiN2ZkYWRiOTg5NTU2M2Rh
Zjk5OWMwHhcNMjYwMzI5MDQwMTIzWhcNMjYwMzMwMDQwMTIzWjAzMTEwLwYDVQQD
EygzNjRiZTg3NTA1YTkyZGQ5NjRjNzU5YjM1ZGQwODBjZGZlNjFhMzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWqX1rY/ij6sxOglzAThFfmrqXtn
TLCDETRtQAXi+Z0sVkahngh4MTMD2qDe6Au2DojkJh2zom8UihvHkGYVz6wu9/60
8S2M8m+iOZ6v7JfDllZFcxoL5tdv8/tAnUoZ75lwmNjraVoBISAvCnVTI+ap8qp2
3uo+bUbLzx4D1Hjtox+R18rBQ4ELO8JcigLfFxCWly0offG9YHOEXzN96SzxIpY8
pppvLh09aCKGd2dup1n8K5KpSqc3ntvzwS98l11R+ALeOlDZd21paFIaE7DTq5lG
NQEw6HqWjmbi6CtPdnRIb7Ys34t6gxPY2zoAMfGU8jt/HGUjqLz5stZfqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDZL6HUFqS3ZZMdZs13QgM3+YaOFMB8GA1UdIwQY
MBaAFFxPweTe/Eccn9t/2tuYlVY9r5mcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEVfQjVONzhSeHlmMjNfYTI1aVZWajJ2bVp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy85Y2ZhNWYtNWQyZC00YmU0LWE4MGQt
N2QwZWUyZTk5MGY1LzEvWEVfQjVONzhSeHlmMjNfYTI1aVZWajJ2bVp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy85Y2ZhNWYtNWQyZC00YmU0LWE4MGQtN2QwZWUyZTk5MGY1
LzEvWEVfQjVONzhSeHlmMjNfYTI1aVZWajJ2bVp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApILZnCMy
DvBKYOhECEAmrZRaWJXaKH4bkgdXGdLFsHTj7bf2wk3a46Ikm+SpohH/0Z+ddfnF
oWIzmUGJoO80DL5cZ0Ye/9bh6jFTbf7WrUhM+l2CLfpKe8XYCVn4+u7/6x97fP6P
41XyG0Qfqfh78YkoG7Kxphd6QkXDaXKzeXBmOQLzMwnrfwWnKm7lchv1AxUTS2Ch
ufoJJphlAvD9IR8Z8g9ybvhcMEvK/iy3ofBFHAYsB8yoaajSnmezS4EgMuTX/Zp4
IWrYqi2Rp4NlvFHWbBeKdgN8VGBej1YMYtpM+tYQ9QU+AG+8o3/pjN2GW/9jEpKl
ebyYmMo+Cz4fbw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:03:26 2026 by rpki-client