Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft
File: Xh1AYP1QHrrpPtRNprennmZwWy8.mft (raw, json)
Hash identifier: 1DLdQtCVfcBbTiK15Sfy5ujii44CB1YsR1KLtHJcP4s=
Subject key identifier: E3:84:E0:F9:4F:DD:DB:25:24:CF:CE:A5:21:54:38:A6:DF:FF:18:8D
Authority key identifier: 5E:1D:40:60:FD:50:1E:BA:E9:3E:D4:4D:A6:B7:A7:9E:66:70:5B:2F
Certificate issuer: /CN=5e1d4060fd501ebae93ed44da6b7a79e66705b2f
Certificate serial: 019D3A54975C400D47B0F715D6AC02911784
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xh1AYP1QHrrpPtRNprennmZwWy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 16:01:55 +0000
Manifest this update: Sun 29 Mar 2026 16:01:55 +0000
Manifest next update: Mon 30 Mar 2026 16:01:55 +0000
Files and hashes: 1: JQHrdWqlz2UqGKCLzlTiY4SvfH4.roa (hash: bwaVBJc44mNBjusS1vQzeOwmOeBHHl10XyVb8yiVdpw=)
2: Xh1AYP1QHrrpPtRNprennmZwWy8.crl (hash: S2drChpEW5BTNXV5XQKDp4v5wxfmbXL13mvxwUQHYW4=)
3: ZjTRqjLbUrNz2NUC-0NUb8hGxVI.roa (hash: lNRVW6GevA3klBK1hehDwbl+8Dt78Jzm0k/Uol69mug=)
4: euXoJUWr3F0_dXowhJbULwFHFkA.roa (hash: cczTixdHtcVBoqBRLYhdFy/dK3Tmrb19hmQ27lh4fQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xh1AYP1QHrrpPtRNprennmZwWy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:97:5c:40:0d:47:b0:f7:15:d6:ac:02:91:17:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e1d4060fd501ebae93ed44da6b7a79e66705b2f
Validity
Not Before: Mar 29 16:01:55 2026 GMT
Not After : Mar 30 16:01:55 2026 GMT
Subject: CN=e384e0f94fdddb2524cfcea5215438a6dfff188d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:15:33:d6:de:b2:e4:3a:a8:26:04:73:cc:69:
77:bd:b1:41:f6:78:91:38:13:6e:24:d3:7d:a0:2e:
e0:86:d2:22:03:1a:2f:be:02:c1:b0:3e:90:78:0e:
54:96:f8:17:31:25:a0:12:08:95:90:7f:fa:d3:35:
d3:4b:f3:5b:55:1d:a0:33:a7:56:7a:f8:56:de:8a:
3a:9b:3d:d1:61:fc:43:c7:3a:91:03:d9:bf:8a:c3:
40:ff:c0:46:b2:39:43:44:a4:5a:ce:2d:c4:0d:30:
7b:d3:a3:b2:7c:f1:48:26:5f:4c:be:c1:c8:bb:a4:
df:5f:d5:91:eb:2d:fc:61:a9:9e:d7:ee:27:d8:cb:
de:02:02:7c:d7:ee:89:7a:7c:5d:d4:d9:37:0f:67:
ff:cf:03:4d:6b:dc:13:3c:7c:06:7f:99:68:65:22:
a6:95:35:0c:88:bf:5c:e3:61:4e:b8:ef:8c:42:b2:
cf:c3:5a:37:93:8e:5d:d2:ea:7e:53:54:8e:cd:11:
82:e3:2d:14:8e:ab:6f:9d:da:db:9b:f4:6b:92:8f:
59:ad:c6:53:01:89:f8:d2:7e:5b:ae:7e:11:1f:c1:
93:a0:a6:80:52:35:20:e9:a7:94:0e:1a:65:b9:9a:
68:ba:ef:9b:70:43:1c:78:97:c2:59:7b:c5:d5:9b:
01:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:84:E0:F9:4F:DD:DB:25:24:CF:CE:A5:21:54:38:A6:DF:FF:18:8D
X509v3 Authority Key Identifier:
keyid:5E:1D:40:60:FD:50:1E:BA:E9:3E:D4:4D:A6:B7:A7:9E:66:70:5B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xh1AYP1QHrrpPtRNprennmZwWy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:ee:bf:bf:70:0b:e7:42:d5:bb:02:b5:5e:e4:e9:ae:1b:11:
77:fe:27:b9:2f:48:df:75:6a:f1:47:f0:d2:56:db:9d:c9:b0:
96:7a:0c:e3:d2:fe:16:5a:93:2a:72:72:31:11:e5:af:ff:09:
fb:ce:dd:88:e2:cc:bb:58:cc:02:15:e1:2f:f4:cd:93:b3:47:
c1:5f:93:c7:dc:87:6e:cf:0f:35:48:0d:89:bc:94:c6:54:7f:
16:7c:d9:4a:37:3f:41:ce:11:34:ff:3c:4e:cd:a7:3a:bf:40:
f3:ad:7a:71:c2:51:20:fa:c1:81:05:5f:54:c3:82:50:e4:02:
c1:3a:65:40:92:86:99:a0:c0:9b:00:73:52:39:b0:eb:80:07:
d9:14:cd:52:7b:a8:2c:8e:c9:f5:47:22:62:f6:f2:1c:95:20:
a5:f7:13:ff:53:3a:7e:e2:28:6a:60:47:57:77:e2:d7:ab:65:
4e:ff:85:e9:a2:e3:f8:5c:35:b2:10:c0:36:29:e4:6b:99:62:
46:b1:20:b3:a4:cb:ea:84:ff:d2:c5:7f:a9:99:33:9e:1b:36:
1e:cd:66:17:db:16:70:bb:7f:5d:35:16:fd:21:26:c3:b2:c9:
2b:c8:8b:4c:9d:00:e1:41:4a:c6:fd:6c:59:21:d6:5f:62:74:
87:6e:21:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06VJdcQA1HsPcV1qwCkReEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMWQ0MDYwZmQ1MDFlYmFlOTNlZDQ0ZGE2YjdhNzllNjY3
MDViMmYwHhcNMjYwMzI5MTYwMTU1WhcNMjYwMzMwMTYwMTU1WjAzMTEwLwYDVQQD
EyhlMzg0ZTBmOTRmZGRkYjI1MjRjZmNlYTUyMTU0MzhhNmRmZmYxODhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxUz1t6y5DqoJgRzzGl3vbFB9niR
OBNuJNN9oC7ghtIiAxovvgLBsD6QeA5UlvgXMSWgEgiVkH/60zXTS/NbVR2gM6dW
evhW3oo6mz3RYfxDxzqRA9m/isNA/8BGsjlDRKRazi3EDTB706OyfPFIJl9MvsHI
u6TfX9WR6y38Yame1+4n2MveAgJ81+6Jenxd1Nk3D2f/zwNNa9wTPHwGf5loZSKm
lTUMiL9c42FOuO+MQrLPw1o3k45d0up+U1SOzRGC4y0Ujqtvndrbm/Rrko9ZrcZT
AYn40n5brn4RH8GToKaAUjUg6aeUDhpluZpouu+bcEMceJfCWXvF1ZsBFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOOE4PlP3dslJM/OpSFUOKbf/xiNMB8GA1UdIwQY
MBaAFF4dQGD9UB666T7UTaa3p55mcFsvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGgxQVlQMVFIcnJwUHRSTnByZW5ubVp3V3k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9hNzBhODQtZjU1Mi00MzU0LWExMDQt
MGUxZGI5OGFkMjMxLzEvWGgxQVlQMVFIcnJwUHRSTnByZW5ubVp3V3k4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9hNzBhODQtZjU1Mi00MzU0LWExMDQtMGUxZGI5OGFkMjMx
LzEvWGgxQVlQMVFIcnJwUHRSTnByZW5ubVp3V3k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc+6/v3AL
50LVuwK1XuTprhsRd/4nuS9I33Vq8Ufw0lbbncmwlnoM49L+FlqTKnJyMRHlr/8J
+87diOLMu1jMAhXhL/TNk7NHwV+Tx9yHbs8PNUgNibyUxlR/FnzZSjc/Qc4RNP88
Ts2nOr9A8616ccJRIPrBgQVfVMOCUOQCwTplQJKGmaDAmwBzUjmw64AH2RTNUnuo
LI7J9UciYvbyHJUgpfcT/1M6fuIoamBHV3fi16tlTv+F6aLj+Fw1shDANinka5li
RrEgs6TL6oT/0sV/qZkznhs2Hs1mF9sWcLt/XTUW/SEmw7LJK8iLTJ0A4UFKxv1s
WSHWX2J0h24hsQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:11 2026 by rpki-client