Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
File: XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft (raw, json)
Hash identifier: hGnY13xsqkR3t2xf494NxcAJ2QGQNI04Aft9vFXYFBg=
Subject key identifier: B3:93:D6:B6:83:F1:59:D2:42:87:C0:7F:03:9D:4C:A8:FE:35:8C:A6
Authority key identifier: 5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03
Certificate issuer: /CN=5c61dcd3eb50c83d68060bcba4af152204193503
Certificate serial: 019D10B37D3305F502A3CB4F80E0CB6E9853
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
Manifest number: 1038
Signing time: Sat 21 Mar 2026 14:01:31 +0000
Manifest this update: Sat 21 Mar 2026 14:01:31 +0000
Manifest next update: Sun 22 Mar 2026 14:01:31 +0000
Files and hashes: 1: 2LxanPXEt-Ah2tA9EYIfUY7a7ZY.roa (hash: Uywc9u8hm/WxjQy7SxAxxYIxsP7UM6R3hTnst6UR3yE=)
2: XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl (hash: OlljcMC2qzHePv5EuFj/hgUWiBQJFs4TIOE0uJ/Yafo=)
3: XN_BGWEzxZjhg6iXlmQqSDhpeZU.roa (hash: nt1Dqzzch0xHlTVsHiqUIJZJJ7P5OL+fpAG1RALu8GE=)
4: cDTj5s606sVgmgpZ3n6Z3dU4zwA.roa (hash: Tz/Xa89Xe7rgKjUL5hIFqnaSfDilwgGaKsizO4oAEvI=)
5: pwg2Pcu7xQM-Nr6mzrIBgEt_XFI.roa (hash: lF7Ckm/bTHOWi8Xtom4+V7QF19TxeutNBXq6gqp0Yv8=)
6: te3FBz79GYifGb3qq-rDfAn5q7I.roa (hash: 8JJ8Rj+5NIqp3neVi3adeudGuIpzTz7arVf+MmH6wks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:10:b3:7d:33:05:f5:02:a3:cb:4f:80:e0:cb:6e:98:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c61dcd3eb50c83d68060bcba4af152204193503
Validity
Not Before: Mar 21 14:01:31 2026 GMT
Not After : Mar 22 14:01:31 2026 GMT
Subject: CN=b393d6b683f159d24287c07f039d4ca8fe358ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:34:93:8f:ac:1f:a8:5d:e4:7a:d1:b9:65:1a:
68:c2:ee:8d:bd:bd:5d:ea:a4:90:c3:ce:f3:15:70:
b2:22:9c:a6:aa:56:dc:31:22:12:d3:15:3c:89:e3:
3f:89:89:94:3d:40:9b:3a:41:c7:5f:cd:c3:dd:8d:
e7:c6:b2:9c:2f:26:3d:bb:bd:fb:ed:d6:54:6a:f9:
39:89:13:9b:6d:4c:4e:5b:36:41:84:a6:d2:80:12:
f9:b5:1d:7b:d1:f1:c2:a1:28:91:95:c4:74:cd:76:
6a:e3:f2:57:b0:01:66:e7:6d:28:d3:51:e6:09:cb:
87:70:62:53:d4:70:69:94:36:20:e4:99:c7:79:a8:
9d:e8:17:18:fb:60:01:ba:c6:4d:0a:9d:ef:7e:3d:
41:6c:df:5a:5e:10:4c:d3:cb:8d:08:a8:71:59:6f:
16:c6:e3:65:17:db:94:55:df:84:35:52:f9:2f:0d:
8c:12:af:18:da:1b:f9:3f:b8:2c:46:af:dd:34:37:
c1:ed:85:e1:fd:b8:d2:aa:8d:69:df:0a:81:a4:c4:
6a:86:e5:0b:0e:a6:e7:b2:a8:d3:a5:48:2f:57:80:
41:14:f5:9b:f7:3e:95:6e:2b:e1:a5:4f:5c:4c:48:
4a:16:7c:06:aa:59:f8:45:6d:b6:b1:63:b7:4e:79:
41:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:93:D6:B6:83:F1:59:D2:42:87:C0:7F:03:9D:4C:A8:FE:35:8C:A6
X509v3 Authority Key Identifier:
keyid:5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:f4:0f:8b:6c:b7:ab:63:fd:39:94:44:ae:f3:46:7f:d3:2e:
20:6f:31:ae:2a:31:7e:ff:15:67:88:2c:d9:43:ba:42:cf:e1:
ca:df:78:a3:f7:4b:02:bc:02:56:d6:c3:06:c2:bc:f1:ed:f5:
33:9d:c6:00:d6:6a:c6:ba:6f:fb:1e:6b:31:ae:c7:98:57:34:
2a:49:6b:d2:4e:13:56:b8:5d:64:0b:6c:a6:a9:15:cf:62:84:
94:82:ea:c6:fb:e9:0e:94:4a:b6:d0:cf:39:a4:29:66:d2:48:
38:b4:27:f3:18:3d:44:28:dd:16:ef:f3:6b:5a:43:89:1f:60:
7f:4b:c0:72:7f:75:56:ad:db:d6:29:72:2f:c2:ff:ca:84:68:
69:0d:6a:62:ed:b4:eb:77:1e:a3:74:2d:14:13:d9:f1:4b:59:
56:d3:7a:cc:1a:bc:68:c7:4e:23:20:ab:a9:4d:82:a3:f7:5a:
25:00:1d:21:7b:23:38:dc:1d:3b:f3:e1:88:58:c2:2d:2b:45:
1d:51:6c:5a:c8:7e:16:f8:0f:a9:5f:df:8a:1a:c5:98:1a:e3:
f5:c0:5d:8a:92:14:45:9b:9b:28:3b:06:47:50:e6:39:6b:27:
18:52:ea:de:2a:4f:1b:c4:b7:3c:48:5d:15:10:de:d7:54:b3:
0d:89:7c:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0Qs30zBfUCo8tPgODLbphTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNjFkY2QzZWI1MGM4M2Q2ODA2MGJjYmE0YWYxNTIyMDQx
OTM1MDMwHhcNMjYwMzIxMTQwMTMxWhcNMjYwMzIyMTQwMTMxWjAzMTEwLwYDVQQD
EyhiMzkzZDZiNjgzZjE1OWQyNDI4N2MwN2YwMzlkNGNhOGZlMzU4Y2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDSTj6wfqF3ketG5ZRpowu6Nvb1d
6qSQw87zFXCyIpymqlbcMSIS0xU8ieM/iYmUPUCbOkHHX83D3Y3nxrKcLyY9u737
7dZUavk5iRObbUxOWzZBhKbSgBL5tR170fHCoSiRlcR0zXZq4/JXsAFm520o01Hm
CcuHcGJT1HBplDYg5JnHeaid6BcY+2ABusZNCp3vfj1BbN9aXhBM08uNCKhxWW8W
xuNlF9uUVd+ENVL5Lw2MEq8Y2hv5P7gsRq/dNDfB7YXh/bjSqo1p3wqBpMRqhuUL
DqbnsqjTpUgvV4BBFPWb9z6VbivhpU9cTEhKFnwGqln4RW22sWO3TnlBbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLOT1raD8VnSQofAfwOdTKj+NYymMB8GA1UdIwQY
MBaAFFxh3NPrUMg9aAYLy6SvFSIEGTUDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEdIYzAtdFF5RDFvQmd2THBLOFZJZ1FaTlFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80NGExNTUtNGQwMi00MDAyLThmM2Qt
YzM2ZDFjNDYwZTJmLzEvWEdIYzAtdFF5RDFvQmd2THBLOFZJZ1FaTlFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS80NGExNTUtNGQwMi00MDAyLThmM2QtYzM2ZDFjNDYwZTJm
LzEvWEdIYzAtdFF5RDFvQmd2THBLOFZJZ1FaTlFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkfQPi2y3
q2P9OZRErvNGf9MuIG8xrioxfv8VZ4gs2UO6Qs/hyt94o/dLArwCVtbDBsK88e31
M53GANZqxrpv+x5rMa7HmFc0Kklr0k4TVrhdZAtspqkVz2KElILqxvvpDpRKttDP
OaQpZtJIOLQn8xg9RCjdFu/za1pDiR9gf0vAcn91Vq3b1ilyL8L/yoRoaQ1qYu20
63ceo3QtFBPZ8UtZVtN6zBq8aMdOIyCrqU2Co/daJQAdIXsjONwdO/PhiFjCLStF
HVFsWsh+FvgPqV/fihrFmBrj9cBdipIURZubKDsGR1DmOWsnGFLq3ipPG8S3PEhd
FRDe11SzDYl82A==
-----END CERTIFICATE-----
Generated at Sun Mar 22 00:09:48 2026 by rpki-client