Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.mft
File: XfQO50ielcV_EEJxkZ2iaLxRP5s.mft (raw, json)
Hash identifier: OPVnHucF+M2sAGyEj9nGyIq8b9O33FKXb7QgwxYyftA=
Subject key identifier: E1:2F:2B:80:44:07:40:45:D9:BD:BD:67:9B:F2:74:11:0D:6D:4B:4F
Authority key identifier: 5D:F4:0E:E7:48:9E:95:C5:7F:10:42:71:91:9D:A2:68:BC:51:3F:9B
Certificate issuer: /CN=5df40ee7489e95c57f104271919da268bc513f9b
Certificate serial: 019D38665CA813DD482E7552863C6D46E08F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfQO50ielcV_EEJxkZ2iaLxRP5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.mft
Manifest number: 1168
Signing time: Sun 29 Mar 2026 07:02:05 +0000
Manifest this update: Sun 29 Mar 2026 07:02:05 +0000
Manifest next update: Mon 30 Mar 2026 07:02:05 +0000
Files and hashes: 1: K35Qk63t7ia59ZiyjBPd0aONq6w.roa (hash: RSMZMIxkJ+qSFhNJD5N1wDzv0Dfcy2i+GoGDC38UiF4=)
2: XfQO50ielcV_EEJxkZ2iaLxRP5s.crl (hash: 7Lr+J7mjygIkx1yu5nyCsyohdc8iWS6ifah2+WgLnMA=)
3: w64U2JVyJqPP2rvHkE8stE6IvUw.roa (hash: zV7R8amjUZNnFr9X6KjTQkvlAu8o3fOcCNG2KYhv44I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfQO50ielcV_EEJxkZ2iaLxRP5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:5c:a8:13:dd:48:2e:75:52:86:3c:6d:46:e0:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df40ee7489e95c57f104271919da268bc513f9b
Validity
Not Before: Mar 29 07:02:05 2026 GMT
Not After : Mar 30 07:02:05 2026 GMT
Subject: CN=e12f2b8044074045d9bdbd679bf274110d6d4b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:37:d4:10:8d:66:5a:7f:66:c5:6f:35:ac:cf:
9e:02:76:01:0f:78:d6:22:c0:8f:13:be:08:e9:6a:
f0:27:2c:a4:7f:3a:f3:44:ea:3c:5f:a5:33:3f:4f:
2b:fc:27:60:63:b0:49:ff:dc:d3:7f:f7:e8:5c:fe:
7f:41:2b:c8:3f:64:2b:60:c9:dd:45:90:ed:f7:c4:
d3:9e:7e:f4:c1:cf:f2:42:21:58:3e:fd:c8:9f:07:
93:84:ac:9a:a8:32:bd:61:db:be:cd:bd:d2:2e:6e:
a5:12:27:0b:d0:4a:54:27:8b:63:9d:75:7d:89:9b:
cd:ef:16:85:c9:ec:0e:1c:77:a0:15:d0:94:8f:37:
c1:5c:14:42:c8:a7:47:b8:b9:41:bf:13:03:ad:a5:
47:bf:1a:02:a5:cb:2c:6c:4a:c8:f7:54:3d:6d:21:
5d:2a:27:6f:91:9a:a6:2b:6d:e4:38:e9:dc:71:25:
84:6f:e1:59:8b:fd:70:58:3f:79:5d:70:f6:05:d7:
e3:29:27:d8:9a:a3:39:26:be:d4:85:44:00:f6:2f:
8b:8a:45:ff:24:0c:7a:84:83:24:c9:78:88:49:44:
78:4c:0c:36:69:8c:8c:92:e4:18:03:05:1d:d1:2a:
bb:bb:f7:65:81:de:d6:f3:4c:4d:1e:08:93:a0:f8:
0f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:2F:2B:80:44:07:40:45:D9:BD:BD:67:9B:F2:74:11:0D:6D:4B:4F
X509v3 Authority Key Identifier:
keyid:5D:F4:0E:E7:48:9E:95:C5:7F:10:42:71:91:9D:A2:68:BC:51:3F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfQO50ielcV_EEJxkZ2iaLxRP5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ad:93:77:43:03:96:2d:e4:77:da:f3:f5:ba:05:62:af:a9:
ac:67:49:56:83:50:31:07:95:28:e3:69:62:ea:0d:5d:d1:cc:
e0:58:b2:cd:bf:10:97:56:77:d1:9e:4b:c7:33:48:fa:57:93:
e8:44:dd:80:1b:93:84:8a:89:b5:36:29:85:f9:8b:43:0c:7e:
e0:49:6c:7f:c4:5f:b6:1f:42:db:7c:6c:d2:41:5c:c3:c1:d4:
98:8f:2b:6d:67:39:49:eb:53:51:b3:85:58:8f:4b:5a:db:f2:
3d:82:09:00:82:55:ad:bf:9d:36:16:e2:2e:f8:25:b4:db:91:
25:69:b6:06:f5:3c:c1:5d:e7:01:e9:bd:20:87:aa:c6:3c:77:
e2:1d:a1:47:0e:15:6b:1d:a1:e3:b3:87:22:1c:f0:78:65:ff:
89:45:a4:1d:f1:93:a1:94:13:32:cd:e8:f4:4a:7f:b7:81:33:
b0:c7:af:50:13:06:d4:2f:ea:e1:1c:7d:4e:31:a1:39:63:58:
81:95:44:55:68:81:10:bf:b8:4f:42:6a:13:ee:80:99:96:80:
c2:c6:84:2f:e7:db:56:13:46:a8:1f:b5:e4:0f:50:56:29:ef:
3d:9a:06:10:57:b4:b9:c8:aa:d9:48:34:4e:5b:16:24:1d:a1:
5c:04:8a:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZlyoE91ILnVShjxtRuCPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZjQwZWU3NDg5ZTk1YzU3ZjEwNDI3MTkxOWRhMjY4YmM1
MTNmOWIwHhcNMjYwMzI5MDcwMjA1WhcNMjYwMzMwMDcwMjA1WjAzMTEwLwYDVQQD
EyhlMTJmMmI4MDQ0MDc0MDQ1ZDliZGJkNjc5YmYyNzQxMTBkNmQ0YjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDfUEI1mWn9mxW81rM+eAnYBD3jW
IsCPE74I6WrwJyykfzrzROo8X6UzP08r/CdgY7BJ/9zTf/foXP5/QSvIP2QrYMnd
RZDt98TTnn70wc/yQiFYPv3InweThKyaqDK9Ydu+zb3SLm6lEicL0EpUJ4tjnXV9
iZvN7xaFyewOHHegFdCUjzfBXBRCyKdHuLlBvxMDraVHvxoCpcssbErI91Q9bSFd
KidvkZqmK23kOOnccSWEb+FZi/1wWD95XXD2BdfjKSfYmqM5Jr7UhUQA9i+LikX/
JAx6hIMkyXiISUR4TAw2aYyMkuQYAwUd0Sq7u/dlgd7W80xNHgiToPgPawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOEvK4BEB0BF2b29Z5vydBENbUtPMB8GA1UdIwQY
MBaAFF30DudInpXFfxBCcZGdomi8UT+bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGZRTzUwaWVsY1ZfRUVKeGtaMmlhTHhSUDVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9hN2U4NTAtMDBiZS00ZGMyLThjNDEt
Mzg2NmI5NWY0ODVmLzEvWGZRTzUwaWVsY1ZfRUVKeGtaMmlhTHhSUDVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9hN2U4NTAtMDBiZS00ZGMyLThjNDEtMzg2NmI5NWY0ODVm
LzEvWGZRTzUwaWVsY1ZfRUVKeGtaMmlhTHhSUDVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVa2Td0MD
li3kd9rz9boFYq+prGdJVoNQMQeVKONpYuoNXdHM4Fiyzb8Ql1Z30Z5LxzNI+leT
6ETdgBuThIqJtTYphfmLQwx+4Elsf8Rfth9C23xs0kFcw8HUmI8rbWc5SetTUbOF
WI9LWtvyPYIJAIJVrb+dNhbiLvgltNuRJWm2BvU8wV3nAem9IIeqxjx34h2hRw4V
ax2h47OHIhzweGX/iUWkHfGToZQTMs3o9Ep/t4EzsMevUBMG1C/q4Rx9TjGhOWNY
gZVEVWiBEL+4T0JqE+6AmZaAwsaEL+fbVhNGqB+15A9QVinvPZoGEFe0uciq2Ug0
TlsWJB2hXASKsw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:53 2026 by rpki-client