Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.mft
File: xjvnU3RnjbOgSfaj7yr6tw1Pbyc.mft (raw, json)
Hash identifier: sX6FJdzU5qSfyXx3l5cTYwr51M4EEV72XafMPTidkRI=
Subject key identifier: 6D:5B:96:14:67:90:A9:3A:84:C9:FC:0C:F3:A1:A0:BD:7C:90:1D:6B
Authority key identifier: C6:3B:E7:53:74:67:8D:B3:A0:49:F6:A3:EF:2A:FA:B7:0D:4F:6F:27
Certificate issuer: /CN=c63be75374678db3a049f6a3ef2afab70d4f6f27
Certificate serial: 019D3A8AF2A1599DE519ED8216047FA840D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.mft
Manifest number: 07FC
Signing time: Sun 29 Mar 2026 17:01:17 +0000
Manifest this update: Sun 29 Mar 2026 17:01:17 +0000
Manifest next update: Mon 30 Mar 2026 17:01:17 +0000
Files and hashes: 1: mI2eJ7owlng-a2RTBGJSB2dC0xc.roa (hash: Mtyhcf44MGwkMCoMpod+PD8wPTtDOMEI8pvJgEO7E5k=)
2: xjvnU3RnjbOgSfaj7yr6tw1Pbyc.crl (hash: HcaAiw7Im6xMaIQKpIQwobjFKSmUb0ZzVilEBTXqvak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8a:f2:a1:59:9d:e5:19:ed:82:16:04:7f:a8:40:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c63be75374678db3a049f6a3ef2afab70d4f6f27
Validity
Not Before: Mar 29 17:01:17 2026 GMT
Not After : Mar 30 17:01:17 2026 GMT
Subject: CN=6d5b96146790a93a84c9fc0cf3a1a0bd7c901d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2e:7c:23:05:30:aa:85:2b:80:3b:10:af:fd:
56:30:df:6f:58:3c:d9:63:35:a8:bc:c5:0e:08:89:
d5:a2:e9:85:a4:7b:7e:b9:d9:e0:f0:65:e9:21:8c:
5f:61:2c:09:98:ae:27:d0:50:0e:d5:e3:de:59:49:
e4:2e:27:0f:71:2e:60:a6:0d:17:59:4b:4d:2f:86:
a7:a4:b2:ac:a4:44:77:8e:f4:2b:43:d4:53:b4:65:
52:55:0b:b9:4c:8f:6b:8f:20:46:f0:28:54:37:03:
f3:5e:78:fe:e9:2f:c3:65:c3:2d:6a:bb:4b:06:2e:
30:89:d0:5b:87:2c:bf:ee:01:aa:01:8d:78:73:17:
b2:22:66:29:65:47:0c:93:15:e9:49:fa:c5:bb:be:
2c:02:f8:5e:e5:df:07:f3:d7:56:9f:a6:80:a7:a5:
3f:57:09:4d:46:db:43:4d:2d:6c:d9:c1:1b:ed:90:
d1:65:31:e7:67:cb:0f:40:5e:86:dd:3c:2a:3a:57:
de:93:44:fa:61:ca:db:64:13:83:0e:80:f8:1d:f8:
48:9f:05:dc:7c:d5:1b:ff:42:88:7b:00:bd:95:8c:
60:58:41:ef:4d:1d:a6:43:9f:f2:6f:3e:cc:c7:33:
20:0b:5e:83:02:41:ad:d0:95:02:b1:ff:8c:ee:7b:
36:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:5B:96:14:67:90:A9:3A:84:C9:FC:0C:F3:A1:A0:BD:7C:90:1D:6B
X509v3 Authority Key Identifier:
keyid:C6:3B:E7:53:74:67:8D:B3:A0:49:F6:A3:EF:2A:FA:B7:0D:4F:6F:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:f3:6c:c7:87:0f:5d:71:b0:86:95:54:a7:84:fa:73:92:2e:
61:4c:51:21:76:28:93:4e:d6:f4:00:1b:0b:f4:c0:3d:9e:19:
bc:84:ec:4c:e8:a3:e6:49:3e:b7:49:89:4c:09:2c:ac:94:73:
3c:79:97:e8:b3:54:12:05:7b:7e:80:fd:ba:e3:f9:d6:88:36:
45:f0:7d:a5:dc:e9:9d:b7:7a:02:75:82:92:60:6c:4d:bd:32:
78:48:5d:7c:54:fc:28:c6:3e:61:97:c5:5a:0a:e6:8a:ae:6b:
0b:3d:c6:a3:b3:63:b6:eb:b5:c6:8e:2e:39:d9:88:4b:8d:2a:
85:ca:9e:2a:c2:14:98:31:89:e4:e9:ab:9d:05:f4:de:12:6e:
40:e7:ed:ac:a0:fc:f8:d4:b0:39:3c:bf:2f:7a:cc:ee:b9:37:
7d:d3:ee:8c:42:da:23:72:8e:3c:e9:b1:0b:84:54:18:23:8a:
b8:ad:e9:10:fe:fe:05:e3:e2:7c:05:70:cc:c4:65:54:0b:ca:
ed:46:83:b0:b7:80:b1:fe:06:9a:0e:50:b1:c3:8c:d2:7b:d4:
da:7a:cb:4f:c7:56:28:0c:94:81:ca:cd:03:e8:3c:d2:9b:66:
aa:5c:b4:9c:b4:a7:4e:90:bd:7c:2f:44:5c:9a:41:4e:44:6a:
57:aa:8f:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06ivKhWZ3lGe2CFgR/qEDTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2M2JlNzUzNzQ2NzhkYjNhMDQ5ZjZhM2VmMmFmYWI3MGQ0
ZjZmMjcwHhcNMjYwMzI5MTcwMTE3WhcNMjYwMzMwMTcwMTE3WjAzMTEwLwYDVQQD
Eyg2ZDViOTYxNDY3OTBhOTNhODRjOWZjMGNmM2ExYTBiZDdjOTAxZDZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsS58IwUwqoUrgDsQr/1WMN9vWDzZ
YzWovMUOCInVoumFpHt+udng8GXpIYxfYSwJmK4n0FAO1ePeWUnkLicPcS5gpg0X
WUtNL4anpLKspER3jvQrQ9RTtGVSVQu5TI9rjyBG8ChUNwPzXnj+6S/DZcMtartL
Bi4widBbhyy/7gGqAY14cxeyImYpZUcMkxXpSfrFu74sAvhe5d8H89dWn6aAp6U/
VwlNRttDTS1s2cEb7ZDRZTHnZ8sPQF6G3TwqOlfek0T6YcrbZBODDoD4HfhInwXc
fNUb/0KIewC9lYxgWEHvTR2mQ5/ybz7MxzMgC16DAkGt0JUCsf+M7ns2bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG1blhRnkKk6hMn8DPOhoL18kB1rMB8GA1UdIwQY
MBaAFMY751N0Z42zoEn2o+8q+rcNT28nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGp2blUzUm5qYk9nU2Zhajd5cjZ0dzFQYnljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8wNTY2NzctMWE0YS00OGE2LWE5MmQt
NmIzYjg2N2JkMjMyLzEveGp2blUzUm5qYk9nU2Zhajd5cjZ0dzFQYnljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8wNTY2NzctMWE0YS00OGE2LWE5MmQtNmIzYjg2N2JkMjMy
LzEveGp2blUzUm5qYk9nU2Zhajd5cjZ0dzFQYnljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQfNsx4cP
XXGwhpVUp4T6c5IuYUxRIXYok07W9AAbC/TAPZ4ZvITsTOij5kk+t0mJTAksrJRz
PHmX6LNUEgV7foD9uuP51og2RfB9pdzpnbd6AnWCkmBsTb0yeEhdfFT8KMY+YZfF
Wgrmiq5rCz3Go7Njtuu1xo4uOdmIS40qhcqeKsIUmDGJ5OmrnQX03hJuQOftrKD8
+NSwOTy/L3rM7rk3fdPujELaI3KOPOmxC4RUGCOKuK3pEP7+BePifAVwzMRlVAvK
7UaDsLeAsf4Gmg5QscOM0nvU2nrLT8dWKAyUgcrNA+g80ptmqly0nLSnTpC9fC9E
XJpBTkRqV6qPQg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 21:11:17 2026 by rpki-client