Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
File: xr--8nm_ne1uNlHgYo05unkpT3g.mft (raw, json)
Hash identifier: kHOcTkEZZNwD6zez7ohUaT/81iIol+IaUjrhX1D7HGo=
Subject key identifier: BE:4B:3B:1E:7B:97:71:43:5C:29:AB:79:97:ED:B5:85:B1:EC:60:E5
Authority key identifier: C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78
Certificate issuer: /CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78
Certificate serial: 019D3977D41B56BECB7D09A28C2B5FC54238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 12:00:47 +0000
Manifest this update: Sun 29 Mar 2026 12:00:47 +0000
Manifest next update: Mon 30 Mar 2026 12:00:47 +0000
Files and hashes: 1: E8RgfAnRQ_MkPzEQzExnrRGS9bk.roa (hash: Uscjfda3vNy/cunwHUUok4ph0ZEvFOV3pV/NuXcyZJ4=)
2: jQxMjcdrhmgG348-FC6ZQ2XBhWA.roa (hash: zzN6qYWykA9k6vddc6gAA5bY2rFVt0NTvTAU0BcNrqQ=)
3: xr--8nm_ne1uNlHgYo05unkpT3g.crl (hash: iTUk8Y7X8vfEwVutnqxB1IfVSESGdE7A4yt/08zK+pA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:d4:1b:56:be:cb:7d:09:a2:8c:2b:5f:c5:42:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78
Validity
Not Before: Mar 29 12:00:47 2026 GMT
Not After : Mar 30 12:00:47 2026 GMT
Subject: CN=be4b3b1e7b9771435c29ab7997edb585b1ec60e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d9:2c:ae:0a:77:c6:9c:07:a1:ef:45:b5:fe:
04:8c:fb:57:3d:fe:45:38:d3:9f:a7:c2:45:f7:f1:
fc:a4:31:e0:8f:97:d6:6c:c9:29:28:43:09:a6:bc:
57:4e:1f:7b:7b:49:a6:f1:e0:71:cb:1c:6a:77:45:
27:a0:63:97:43:16:40:b7:3c:68:93:02:d4:46:9e:
84:6b:53:b0:76:ae:b0:d0:ee:7b:ee:80:c7:fc:9d:
60:b9:b0:81:eb:89:1a:38:82:52:90:e1:2c:bf:d5:
56:b6:85:c8:86:23:cf:fb:4c:1b:1a:82:91:0f:f8:
39:10:ac:e1:04:93:48:d0:18:eb:ce:b3:e6:bb:fb:
84:59:d3:51:7c:a0:5a:b0:49:20:84:97:dd:62:0d:
ec:b5:ca:9e:9c:1a:83:c7:69:12:82:72:3a:2c:a2:
0c:bd:11:31:98:e7:0f:b5:ec:6a:c7:cb:b4:1b:de:
d6:cd:40:0a:f6:ee:a9:2f:8f:77:ee:e0:16:27:03:
b7:50:f1:46:06:ff:76:c9:40:5f:34:fd:4c:86:ca:
85:c5:27:69:5a:9f:97:1f:36:40:5d:8c:a2:b7:d0:
28:eb:e3:4a:5e:37:75:2f:13:81:6e:8a:54:51:94:
96:b2:58:f1:e4:d1:04:d6:ef:28:3c:fa:84:13:f8:
20:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:4B:3B:1E:7B:97:71:43:5C:29:AB:79:97:ED:B5:85:B1:EC:60:E5
X509v3 Authority Key Identifier:
keyid:C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:75:7c:80:26:b5:87:d6:51:42:d0:dc:2a:ad:62:e4:07:8e:
99:7f:27:b8:8b:ea:5e:6c:b3:e4:a3:5d:06:c4:31:a2:38:91:
96:0e:4f:ee:59:5b:e1:86:18:1c:c1:5c:1c:05:b4:46:95:ab:
40:3a:ab:d5:17:d5:af:b1:24:4a:76:90:95:72:6a:4c:f5:44:
c2:a3:1b:d7:cc:02:62:dd:97:e9:60:c2:45:f5:5b:21:f2:af:
c3:5b:e7:6a:84:c0:9b:aa:3d:28:c4:05:d2:ed:62:e7:ac:c8:
5f:38:97:17:71:38:80:c8:7c:00:d0:4c:f5:62:3e:49:56:cd:
a7:78:68:0b:22:c4:cb:27:a4:97:2a:93:42:72:e5:63:c2:6c:
f4:0d:c0:28:af:c6:98:5e:af:a7:f9:2d:60:92:f9:33:ea:55:
a0:e6:6d:c6:b3:5f:d7:ed:6f:6a:b1:22:3a:00:02:52:47:71:
c2:1d:7f:69:18:e9:4c:fb:ba:d3:08:2e:58:e7:81:4c:2d:8c:
75:80:9a:e2:99:97:fd:ca:65:66:df:0b:42:d9:04:a4:54:d1:
00:ed:e0:f1:c4:24:5e:0d:fa:ab:1b:89:39:04:25:2f:ee:d0:
6a:23:ed:c4:df:c0:68:62:5c:35:aa:77:92:cc:29:12:19:50:
96:92:7a:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05d9QbVr7LfQmijCtfxUI4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YmZiZWYyNzliZjlkZWQ2ZTM2NTFlMDYyOGQzOWJhNzky
OTRmNzgwHhcNMjYwMzI5MTIwMDQ3WhcNMjYwMzMwMTIwMDQ3WjAzMTEwLwYDVQQD
EyhiZTRiM2IxZTdiOTc3MTQzNWMyOWFiNzk5N2VkYjU4NWIxZWM2MGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9ksrgp3xpwHoe9Ftf4EjPtXPf5F
ONOfp8JF9/H8pDHgj5fWbMkpKEMJprxXTh97e0mm8eBxyxxqd0UnoGOXQxZAtzxo
kwLURp6Ea1Owdq6w0O577oDH/J1gubCB64kaOIJSkOEsv9VWtoXIhiPP+0wbGoKR
D/g5EKzhBJNI0BjrzrPmu/uEWdNRfKBasEkghJfdYg3stcqenBqDx2kSgnI6LKIM
vRExmOcPtexqx8u0G97WzUAK9u6pL4937uAWJwO3UPFGBv92yUBfNP1MhsqFxSdp
Wp+XHzZAXYyit9Ao6+NKXjd1LxOBbopUUZSWsljx5NEE1u8oPPqEE/ggcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL5LOx57l3FDXCmreZfttYWx7GDlMB8GA1UdIwQY
MBaAFMa/vvJ5v53tbjZR4GKNObp5KU94MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHItLThubV9uZTF1TmxIZ1lvMDV1bmtwVDNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8yODQ2MmMtMmMyMy00Zjk1LThlOGQt
YWRlNTMwZDdjNDFiLzEveHItLThubV9uZTF1TmxIZ1lvMDV1bmtwVDNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC8yODQ2MmMtMmMyMy00Zjk1LThlOGQtYWRlNTMwZDdjNDFi
LzEveHItLThubV9uZTF1TmxIZ1lvMDV1bmtwVDNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlnV8gCa1
h9ZRQtDcKq1i5AeOmX8nuIvqXmyz5KNdBsQxojiRlg5P7llb4YYYHMFcHAW0RpWr
QDqr1RfVr7EkSnaQlXJqTPVEwqMb18wCYt2X6WDCRfVbIfKvw1vnaoTAm6o9KMQF
0u1i56zIXziXF3E4gMh8ANBM9WI+SVbNp3hoCyLEyyeklyqTQnLlY8Js9A3AKK/G
mF6vp/ktYJL5M+pVoOZtxrNf1+1varEiOgACUkdxwh1/aRjpTPu60wguWOeBTC2M
dYCa4pmX/cplZt8LQtkEpFTRAO3g8cQkXg36qxuJOQQlL+7QaiPtxN/AaGJcNap3
kswpEhlQlpJ6ZQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:52:26 2026 by rpki-client