Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft
File: XDDZUEYzG9zjAYt__g8T2_n8cY0.mft (raw, json)
Hash identifier: KPRwfLxoVE4GH1+Nbo58qOs1viYkNSn4BCllGSbD4+M=
Subject key identifier: 42:2E:2D:E2:70:E4:E1:0F:73:3D:C7:22:72:05:BB:B4:23:EE:CB:86
Authority key identifier: 5C:30:D9:50:46:33:1B:DC:E3:01:8B:7F:FE:0F:13:DB:F9:FC:71:8D
Certificate issuer: /CN=5c30d95046331bdce3018b7ffe0f13dbf9fc718d
Certificate serial: 019D3865D4914DF7B29C9D7B94B092DCCBF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDDZUEYzG9zjAYt__g8T2_n8cY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 07:01:30 +0000
Manifest this update: Sun 29 Mar 2026 07:01:30 +0000
Manifest next update: Mon 30 Mar 2026 07:01:30 +0000
Files and hashes: 1: XDDZUEYzG9zjAYt__g8T2_n8cY0.crl (hash: zNer32JJKMklMljG4/AqRBoC44MAS3BFcrZ+LypnHs4=)
2: i7ahmmzCoN5G9N5UQomOHHe69RA.roa (hash: GGCZiPMQLo6nn63tOlWXS7/n5qwIMxP1oeej8rFYFvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDDZUEYzG9zjAYt__g8T2_n8cY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:d4:91:4d:f7:b2:9c:9d:7b:94:b0:92:dc:cb:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c30d95046331bdce3018b7ffe0f13dbf9fc718d
Validity
Not Before: Mar 29 07:01:30 2026 GMT
Not After : Mar 30 07:01:30 2026 GMT
Subject: CN=422e2de270e4e10f733dc7227205bbb423eecb86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:08:b2:e6:06:58:f6:67:0b:df:fd:b5:41:4a:
7f:7c:71:84:27:40:b5:0d:e0:31:89:9e:73:18:01:
e2:3d:99:47:5e:cd:7b:8a:51:57:14:0d:b7:fe:0f:
60:33:81:4f:57:60:e0:33:88:53:65:d4:64:07:54:
b3:29:44:f8:f3:83:f3:dc:ec:07:10:73:d4:d7:b2:
64:20:03:d7:22:03:54:cb:eb:23:58:60:3a:c1:50:
28:97:55:8f:59:05:03:b5:5a:cf:a3:a1:59:54:6b:
f1:d8:7c:07:83:37:8a:d5:58:54:ab:48:36:98:50:
d5:d7:a7:a7:01:d4:25:fc:57:b9:a5:4a:30:88:f4:
44:bd:99:33:56:5b:71:92:f9:a5:b5:d7:ea:d5:f1:
d0:16:3d:c8:51:8a:a0:eb:b2:a2:79:dd:97:1a:6c:
2e:e0:66:88:2b:6a:2e:dd:74:c1:52:3a:d2:06:31:
a6:be:d7:1e:4f:16:44:76:38:36:8f:04:6c:ed:83:
02:5a:e4:91:26:fb:04:f3:bc:53:4e:ea:40:77:af:
b2:b2:0a:ab:a2:59:fa:38:44:d6:1d:d9:a1:cd:ac:
38:01:22:6f:85:18:45:b3:42:ce:ff:3e:cb:f0:34:
5f:0c:7c:19:12:d9:0f:11:2a:b9:b6:0d:2b:f4:eb:
9b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2E:2D:E2:70:E4:E1:0F:73:3D:C7:22:72:05:BB:B4:23:EE:CB:86
X509v3 Authority Key Identifier:
keyid:5C:30:D9:50:46:33:1B:DC:E3:01:8B:7F:FE:0F:13:DB:F9:FC:71:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDDZUEYzG9zjAYt__g8T2_n8cY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:f5:a2:08:c1:5d:51:8c:50:05:2b:3f:63:ea:15:19:63:2b:
47:90:c2:60:a6:4a:8c:85:f5:d5:ed:d5:f8:d1:10:1d:92:b1:
0c:83:58:a0:d3:2b:48:89:18:8a:76:72:a3:9b:13:1a:8b:d3:
b4:1b:f4:26:3d:2b:86:d8:ef:2e:22:e9:1e:7c:1a:a2:fd:ef:
f5:3c:d0:58:4e:89:9e:d7:66:4a:a7:64:d1:1c:f3:cc:ea:10:
46:ec:80:5a:f6:25:97:1c:93:2c:cb:3f:a2:34:49:7c:55:7d:
15:23:46:9c:8e:ed:72:57:a3:21:da:73:51:18:92:0e:f1:20:
ce:04:61:8f:c7:ce:af:47:03:4c:e9:2a:c5:ee:65:37:f7:0e:
d9:22:81:9b:dc:fb:99:fa:92:69:46:3c:25:68:51:1f:de:09:
96:ba:9e:b2:d7:7c:02:25:7a:88:d6:28:88:75:2d:13:d6:01:
0c:4a:f7:cf:aa:7c:dc:0a:c3:3d:8c:be:33:d4:2e:f1:7d:1d:
84:08:1a:09:a4:4c:5e:2e:a3:df:1f:71:14:c8:05:a8:5c:23:
01:24:13:d0:fc:06:b8:26:9f:3a:55:cd:04:02:c2:b7:80:95:
a8:4a:6a:7e:f2:54:a0:fe:93:b8:95:99:99:fc:ae:4c:82:fb:
a6:4d:f7:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZdSRTfeynJ17lLCS3MvyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjMzBkOTUwNDYzMzFiZGNlMzAxOGI3ZmZlMGYxM2RiZjlm
YzcxOGQwHhcNMjYwMzI5MDcwMTMwWhcNMjYwMzMwMDcwMTMwWjAzMTEwLwYDVQQD
Eyg0MjJlMmRlMjcwZTRlMTBmNzMzZGM3MjI3MjA1YmJiNDIzZWVjYjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgiy5gZY9mcL3/21QUp/fHGEJ0C1
DeAxiZ5zGAHiPZlHXs17ilFXFA23/g9gM4FPV2DgM4hTZdRkB1SzKUT484Pz3OwH
EHPU17JkIAPXIgNUy+sjWGA6wVAol1WPWQUDtVrPo6FZVGvx2HwHgzeK1VhUq0g2
mFDV16enAdQl/Fe5pUowiPREvZkzVltxkvmltdfq1fHQFj3IUYqg67Kied2XGmwu
4GaIK2ou3XTBUjrSBjGmvtceTxZEdjg2jwRs7YMCWuSRJvsE87xTTupAd6+ysgqr
oln6OETWHdmhzaw4ASJvhRhFs0LO/z7L8DRfDHwZEtkPESq5tg0r9Oub4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEIuLeJw5OEPcz3HInIFu7Qj7suGMB8GA1UdIwQY
MBaAFFww2VBGMxvc4wGLf/4PE9v5/HGNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEREWlVFWXpHOXpqQVl0X19nOFQyX244Y1kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC84OTgzYWYtNWMxOC00YmM4LWEzZjUt
MDc1MDkxOTFmOTUzLzEvWEREWlVFWXpHOXpqQVl0X19nOFQyX244Y1kwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC84OTgzYWYtNWMxOC00YmM4LWEzZjUtMDc1MDkxOTFmOTUz
LzEvWEREWlVFWXpHOXpqQVl0X19nOFQyX244Y1kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALfWiCMFd
UYxQBSs/Y+oVGWMrR5DCYKZKjIX11e3V+NEQHZKxDINYoNMrSIkYinZyo5sTGovT
tBv0Jj0rhtjvLiLpHnwaov3v9TzQWE6JntdmSqdk0RzzzOoQRuyAWvYllxyTLMs/
ojRJfFV9FSNGnI7tclejIdpzURiSDvEgzgRhj8fOr0cDTOkqxe5lN/cO2SKBm9z7
mfqSaUY8JWhRH94Jlrqestd8AiV6iNYoiHUtE9YBDEr3z6p83ArDPYy+M9Qu8X0d
hAgaCaRMXi6j3x9xFMgFqFwjASQT0PwGuCafOlXNBALCt4CVqEpqfvJUoP6TuJWZ
mfyuTIL7pk33zA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:26 2026 by rpki-client