Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
File: XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft (raw, json)
Hash identifier: TAi9jh9oKganmWkJIbyp0cf4Qtvnzf2rv3gYw1mFPAg=
Subject key identifier: 79:12:41:82:29:FA:62:3B:35:2C:FD:47:3D:1E:BE:6F:BA:13:C0:29
Authority key identifier: 5E:05:CB:67:20:9B:BD:19:83:F4:32:77:16:52:3E:B1:77:7F:D4:FA
Certificate issuer: /CN=5e05cb67209bbd1983f4327716523eb1777fd4fa
Certificate serial: 019D382E128A901DE98ACDF6752EFFBD7CD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 06:00:36 +0000
Manifest this update: Sun 29 Mar 2026 06:00:36 +0000
Manifest next update: Mon 30 Mar 2026 06:00:36 +0000
Files and hashes: 1: 4PuIVLEIj4zZmZW-uUpD3PaA49w.roa (hash: ywwR6jVCoJoX2GD3atJ7KKAi8JK9J3yhYoAwj8Jfgz4=)
2: XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl (hash: IexCBjQW059WgoiMBlkPnEypvITS3NNMfj/DfpfBS8w=)
3: rVLmDTrtM8fRD2YrBcUhwt9PtiE.roa (hash: qzKX309DgizvFnW/1CNilCV4HRwfLRrE8VOSlsECFro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:12:8a:90:1d:e9:8a:cd:f6:75:2e:ff:bd:7c:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e05cb67209bbd1983f4327716523eb1777fd4fa
Validity
Not Before: Mar 29 06:00:36 2026 GMT
Not After : Mar 30 06:00:36 2026 GMT
Subject: CN=7912418229fa623b352cfd473d1ebe6fba13c029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:68:87:e2:74:7b:5a:77:8c:56:72:7b:29:10:
77:72:cb:0e:cc:88:17:d3:ae:c5:43:ce:2d:3e:e0:
88:c2:ab:49:95:ea:46:28:6e:a2:c4:e2:0a:3b:e0:
8a:1b:0b:37:e5:6e:3f:08:36:01:f9:d3:5c:48:5b:
ef:18:6b:64:c6:af:c3:0b:47:d8:6f:66:66:c0:fa:
28:66:d3:f9:25:1c:7e:fe:b0:a8:0e:09:23:8f:7e:
c2:eb:7a:32:2c:ce:65:5e:e1:2f:ae:75:3a:42:ab:
3a:4b:81:88:36:f7:d9:c5:a2:8b:76:3a:dd:56:4e:
2a:cb:23:33:da:ca:04:1f:b2:34:0c:58:35:69:f4:
1e:8d:59:9b:f3:63:12:f5:0b:44:a1:da:9d:18:c8:
57:10:a9:ed:b7:ef:14:d6:e5:2f:6a:79:46:e5:4c:
5b:e3:61:2b:bb:40:3b:b1:c4:62:38:f8:2a:6d:4d:
a2:ec:2d:d0:0f:91:c3:f0:40:5b:89:2c:04:2e:b0:
c3:b6:d7:4c:2c:ea:ce:1e:ab:90:e7:f9:84:a9:bb:
fa:22:3d:81:19:5d:d1:8e:97:fd:ea:e0:37:d2:76:
c9:6a:61:98:37:22:c5:7f:ec:80:c3:73:03:d3:97:
71:76:92:d4:53:48:0c:41:e1:1a:3a:a9:70:2a:01:
6b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:12:41:82:29:FA:62:3B:35:2C:FD:47:3D:1E:BE:6F:BA:13:C0:29
X509v3 Authority Key Identifier:
keyid:5E:05:CB:67:20:9B:BD:19:83:F4:32:77:16:52:3E:B1:77:7F:D4:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:62:2a:98:c8:17:ab:4d:c6:dd:d9:99:71:73:5f:0e:4a:88:
be:1a:f2:df:3e:44:c7:5a:cd:d8:92:e2:8d:e5:22:80:34:ea:
c1:ce:00:79:c5:19:25:02:2e:65:f8:71:f1:75:30:51:10:bd:
35:45:b5:16:3d:60:9f:ce:2b:b5:3f:7e:d2:f6:6e:07:f6:df:
61:f8:d6:e6:28:fe:a3:64:51:1f:64:84:b4:4c:66:ac:94:5a:
4b:25:41:7d:05:c0:b0:80:21:30:ec:6c:93:0d:5b:4c:af:dc:
c1:2d:12:26:37:41:1b:5f:57:7d:5a:08:f6:e8:06:46:8d:12:
81:8a:dd:90:33:d0:38:88:28:7f:20:db:82:97:4f:84:2f:81:
50:70:a8:f6:0d:de:c8:a6:5d:49:ca:4a:70:4a:fb:26:b6:b8:
5c:16:7c:13:a0:fc:d3:28:87:bd:98:3b:23:22:ef:68:37:01:
0e:06:89:3c:56:01:9f:95:fd:4e:06:fc:91:4e:ea:82:b5:8f:
3d:39:55:e4:63:78:a0:48:5e:50:b6:dc:fe:ad:2c:cc:f1:b8:
51:81:49:91:47:53:08:42:08:8a:7b:14:bf:a8:37:52:43:d7:
ad:29:95:89:1c:90:a3:18:c3:e9:f9:ce:81:44:ce:66:cf:50:
bd:0b:8c:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LhKKkB3pis32dS7/vXzRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMDVjYjY3MjA5YmJkMTk4M2Y0MzI3NzE2NTIzZWIxNzc3
ZmQ0ZmEwHhcNMjYwMzI5MDYwMDM2WhcNMjYwMzMwMDYwMDM2WjAzMTEwLwYDVQQD
Eyg3OTEyNDE4MjI5ZmE2MjNiMzUyY2ZkNDczZDFlYmU2ZmJhMTNjMDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2iH4nR7WneMVnJ7KRB3cssOzIgX
067FQ84tPuCIwqtJlepGKG6ixOIKO+CKGws35W4/CDYB+dNcSFvvGGtkxq/DC0fY
b2ZmwPooZtP5JRx+/rCoDgkjj37C63oyLM5lXuEvrnU6Qqs6S4GINvfZxaKLdjrd
Vk4qyyMz2soEH7I0DFg1afQejVmb82MS9QtEodqdGMhXEKntt+8U1uUvanlG5Uxb
42Eru0A7scRiOPgqbU2i7C3QD5HD8EBbiSwELrDDttdMLOrOHquQ5/mEqbv6Ij2B
GV3Rjpf96uA30nbJamGYNyLFf+yAw3MD05dxdpLUU0gMQeEaOqlwKgFrHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHkSQYIp+mI7NSz9Rz0evm+6E8ApMB8GA1UdIwQY
MBaAFF4Fy2cgm70Zg/QydxZSPrF3f9T6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGdYTFp5Q2J2Um1EOURKM0ZsSS1zWGRfMVBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS85Y2EwZGYtZDQ3NC00MGNkLTg2ODgt
MTcxNTkxOTU2N2M5LzEvWGdYTFp5Q2J2Um1EOURKM0ZsSS1zWGRfMVBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS85Y2EwZGYtZDQ3NC00MGNkLTg2ODgtMTcxNTkxOTU2N2M5
LzEvWGdYTFp5Q2J2Um1EOURKM0ZsSS1zWGRfMVBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJGIqmMgX
q03G3dmZcXNfDkqIvhry3z5Ex1rN2JLijeUigDTqwc4AecUZJQIuZfhx8XUwURC9
NUW1Fj1gn84rtT9+0vZuB/bfYfjW5ij+o2RRH2SEtExmrJRaSyVBfQXAsIAhMOxs
kw1bTK/cwS0SJjdBG19XfVoI9ugGRo0SgYrdkDPQOIgofyDbgpdPhC+BUHCo9g3e
yKZdScpKcEr7Jra4XBZ8E6D80yiHvZg7IyLvaDcBDgaJPFYBn5X9Tgb8kU7qgrWP
PTlV5GN4oEheULbc/q0szPG4UYFJkUdTCEIIinsUv6g3UkPXrSmViRyQoxjD6fnO
gUTOZs9QvQuMAw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:02:14 2026 by rpki-client