Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
File: Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft (raw, json)
Hash identifier: MmsRSI8FH574LJxnHULNdFP1hFWHHZ5qrGLEs5Cg2BA=
Subject key identifier: 38:5D:4A:E7:25:DC:55:65:F9:5B:8E:5A:EE:61:B7:0E:84:77:57:85
Authority key identifier: 5E:9B:9B:ED:8F:8D:3D:57:9B:B0:55:2E:4F:C4:B8:19:86:86:1E:64
Certificate issuer: /CN=5e9b9bed8f8d3d579bb0552e4fc4b81986861e64
Certificate serial: 019D3909CB81EB4119B27F3BC6CAF7E11BBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
Manifest number: 134D
Signing time: Sun 29 Mar 2026 10:00:36 +0000
Manifest this update: Sun 29 Mar 2026 10:00:36 +0000
Manifest next update: Mon 30 Mar 2026 10:00:36 +0000
Files and hashes: 1: Q2eq3vQ27LdqIhXEwPYKtKFxrj8.roa (hash: w/CxsU35XsDW4qiiMK3VW7xr1QGFT3WBU9iNjApYbmk=)
2: Xpub7Y-NPVebsFUuT8S4GYaGHmQ.crl (hash: v75ymG+xAupG7Rao2gGCPCwuV37cvCptY77Onl7kAtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:cb:81:eb:41:19:b2:7f:3b:c6:ca:f7:e1:1b:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9b9bed8f8d3d579bb0552e4fc4b81986861e64
Validity
Not Before: Mar 29 10:00:36 2026 GMT
Not After : Mar 30 10:00:36 2026 GMT
Subject: CN=385d4ae725dc5565f95b8e5aee61b70e84775785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:08:f3:29:1d:2e:fa:5f:1b:c5:49:7a:c1:bb:
e4:7b:73:76:bd:5f:cf:02:2e:8c:fd:f8:f1:cf:ae:
aa:c2:bd:e9:50:5c:9a:61:7f:1e:8d:1b:38:31:45:
ee:e9:3a:6b:7f:8b:76:85:7a:db:03:20:ef:28:2e:
ae:ba:b3:3b:9d:61:a2:50:1d:00:2c:fd:0b:71:c6:
c6:9b:cc:ae:2b:89:ea:07:04:ab:a2:02:32:d0:34:
c6:b7:f2:53:b3:f9:b7:dd:85:ef:cb:f2:0d:de:9a:
b1:41:0a:e5:25:52:63:6f:e1:33:64:65:31:b9:34:
a1:f7:82:a8:e0:27:b7:4a:92:ca:18:7d:d0:47:6b:
bc:fc:33:c4:ff:90:ff:50:08:0d:53:90:9a:44:bd:
7c:0e:88:91:e6:9b:43:6a:bd:78:5f:d9:4f:a9:fa:
72:95:39:e9:cf:3f:75:48:83:f5:6b:32:72:74:d5:
8b:2f:ae:d9:4d:6d:29:c3:f5:ab:94:19:b4:72:c2:
6e:ed:db:6f:a5:2f:a1:3a:83:a4:c5:5b:b7:01:f2:
03:99:10:de:9d:7c:7e:3e:09:a8:fc:24:20:ad:98:
4a:a8:b8:b1:77:b1:eb:c0:68:61:16:c9:cd:5a:87:
fe:bb:33:56:6c:5d:1e:6e:bc:52:73:80:fa:7a:9c:
5d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:5D:4A:E7:25:DC:55:65:F9:5B:8E:5A:EE:61:B7:0E:84:77:57:85
X509v3 Authority Key Identifier:
keyid:5E:9B:9B:ED:8F:8D:3D:57:9B:B0:55:2E:4F:C4:B8:19:86:86:1E:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:c4:cd:6f:9d:f4:f1:c4:52:3a:cf:8c:e3:d5:54:d5:ca:37:
33:6f:e9:46:49:3a:cf:7e:b8:67:a1:b4:05:dd:18:fc:d9:aa:
20:92:34:32:7e:2b:17:f4:14:f4:e0:8c:05:9e:86:8a:6e:fc:
8b:48:39:cd:ae:a5:f3:73:6c:db:f4:56:1a:56:ff:68:c9:26:
51:a5:ed:cd:e5:32:c8:bf:bd:83:e5:ab:ff:5e:39:72:a7:93:
99:b9:1f:c8:9c:b8:c2:0d:2b:0b:71:16:7d:00:fb:15:91:d3:
7b:c3:a2:22:44:99:41:3a:ca:17:9f:5f:66:33:37:a8:78:ad:
a4:06:9f:7e:c0:f5:8f:14:a4:d2:28:39:5c:62:f6:6c:fa:45:
bb:a9:ef:1f:8f:49:62:17:e6:40:59:35:34:00:13:15:20:0a:
03:b1:80:9b:84:a0:a6:ce:b0:97:86:3a:27:66:d9:fe:d9:c9:
8e:68:a2:9d:f0:c8:a5:38:b9:05:a0:2a:29:87:44:08:7a:fd:
fe:ae:36:c9:28:d1:57:2e:dc:bc:d0:12:49:ad:c1:90:09:aa:
2a:b1:46:b1:68:c6:48:d8:04:b4:6d:a5:36:95:63:60:df:87:
64:ea:b6:d7:93:94:2b:ad:ad:9c:ef:c2:fa:9b:9b:8d:6b:a2:
58:f2:b3:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CcuB60EZsn87xsr34Ru/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlOWI5YmVkOGY4ZDNkNTc5YmIwNTUyZTRmYzRiODE5ODY4
NjFlNjQwHhcNMjYwMzI5MTAwMDM2WhcNMjYwMzMwMTAwMDM2WjAzMTEwLwYDVQQD
EygzODVkNGFlNzI1ZGM1NTY1Zjk1YjhlNWFlZTYxYjcwZTg0Nzc1Nzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgjzKR0u+l8bxUl6wbvke3N2vV/P
Ai6M/fjxz66qwr3pUFyaYX8ejRs4MUXu6Tprf4t2hXrbAyDvKC6uurM7nWGiUB0A
LP0LccbGm8yuK4nqBwSrogIy0DTGt/JTs/m33YXvy/IN3pqxQQrlJVJjb+EzZGUx
uTSh94Ko4Ce3SpLKGH3QR2u8/DPE/5D/UAgNU5CaRL18DoiR5ptDar14X9lPqfpy
lTnpzz91SIP1azJydNWLL67ZTW0pw/WrlBm0csJu7dtvpS+hOoOkxVu3AfIDmRDe
nXx+Pgmo/CQgrZhKqLixd7HrwGhhFsnNWof+uzNWbF0ebrxSc4D6epxdUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDhdSucl3FVl+VuOWu5htw6Ed1eFMB8GA1UdIwQY
MBaAFF6bm+2PjT1Xm7BVLk/EuBmGhh5kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHB1YjdZLU5QVmVic0ZVdVQ4UzRHWWFHSG1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC80NDhjODUtYTk2Ni00ZGYyLTk4ZTQt
YTVhNWFkMDZlYjQzLzEvWHB1YjdZLU5QVmVic0ZVdVQ4UzRHWWFHSG1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC80NDhjODUtYTk2Ni00ZGYyLTk4ZTQtYTVhNWFkMDZlYjQz
LzEvWHB1YjdZLU5QVmVic0ZVdVQ4UzRHWWFHSG1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFMTNb530
8cRSOs+M49VU1co3M2/pRkk6z364Z6G0Bd0Y/NmqIJI0Mn4rF/QU9OCMBZ6Gim78
i0g5za6l83Ns2/RWGlb/aMkmUaXtzeUyyL+9g+Wr/145cqeTmbkfyJy4wg0rC3EW
fQD7FZHTe8OiIkSZQTrKF59fZjM3qHitpAaffsD1jxSk0ig5XGL2bPpFu6nvH49J
YhfmQFk1NAATFSAKA7GAm4Sgps6wl4Y6J2bZ/tnJjmiinfDIpTi5BaAqKYdECHr9
/q42ySjRVy7cvNASSa3BkAmqKrFGsWjGSNgEtG2lNpVjYN+HZOq215OUK62tnO/C
+pubjWuiWPKzow==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:01 2026 by rpki-client