Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft
File: XyxxJryPOQVnRN4hOyzia3a8mSM.mft (raw, json)
Hash identifier: cs0feNRjJkxsBg6n3tgdLBCUJiNd4n9+CES232ysfKE=
Subject key identifier: 47:B6:DF:EF:10:C4:80:1D:A3:C9:29:45:8D:F9:A8:8F:29:D1:23:B8
Authority key identifier: 5F:2C:71:26:BC:8F:39:05:67:44:DE:21:3B:2C:E2:6B:76:BC:99:23
Certificate issuer: /CN=5f2c7126bc8f39056744de213b2ce26b76bc9923
Certificate serial: 019D389BAA43AC16D0EED5C2A10147306464
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 08:00:18 +0000
Manifest this update: Sun 29 Mar 2026 08:00:18 +0000
Manifest next update: Mon 30 Mar 2026 08:00:18 +0000
Files and hashes: 1: XyxxJryPOQVnRN4hOyzia3a8mSM.crl (hash: SQS62YSqqSjluJzCuG9vmWscEbh3pGVZ7O61RtEPzz4=)
2: rUpXn5OLFWI8Nb4opFx-ZMazNF4.roa (hash: CyKHZsof9BroFMJ4kJHFaNGpd7KJ3UUKrH85vt5M3yM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:aa:43:ac:16:d0:ee:d5:c2:a1:01:47:30:64:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f2c7126bc8f39056744de213b2ce26b76bc9923
Validity
Not Before: Mar 29 08:00:18 2026 GMT
Not After : Mar 30 08:00:18 2026 GMT
Subject: CN=47b6dfef10c4801da3c929458df9a88f29d123b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:97:92:20:3b:30:74:c9:42:df:a3:a8:ee:61:
c2:c4:17:4f:ca:00:e6:92:c1:0e:e2:d1:78:e1:55:
1c:7a:f8:de:80:d0:6d:c4:08:5b:6c:e9:81:9e:f8:
3c:8f:09:53:fc:85:f7:c3:42:03:ed:01:98:35:04:
5c:62:76:e9:f8:e5:a9:f6:2e:1e:f1:51:65:a0:97:
24:d0:4d:0c:85:e8:2f:8e:2d:5a:51:d1:ae:17:f1:
5c:1f:31:60:ee:45:7b:10:2e:be:5c:11:0c:c5:92:
f9:c5:6b:57:1e:7c:1e:48:64:a1:28:8f:8e:3a:eb:
cf:fa:f6:c5:57:2e:86:6a:16:0d:a2:9a:92:ce:e8:
2e:92:ac:eb:a9:ea:35:a1:ad:bf:93:1e:0e:bc:09:
92:ac:52:d1:ac:4f:da:9c:69:04:8e:5c:fd:29:15:
c8:61:d1:dc:76:18:25:20:61:d6:8f:26:f3:96:8e:
37:9a:c4:dc:4c:ca:22:1d:43:50:95:b7:ee:2b:6e:
9d:65:20:c6:96:f3:61:55:f7:07:34:e6:61:ea:54:
dd:6c:65:1f:be:86:a3:53:e7:05:60:22:65:8d:f8:
93:4f:59:b0:12:f1:81:10:d2:c0:c9:15:96:fe:8c:
f3:83:59:c3:37:bc:95:79:59:ca:f9:86:1d:0e:ac:
1f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B6:DF:EF:10:C4:80:1D:A3:C9:29:45:8D:F9:A8:8F:29:D1:23:B8
X509v3 Authority Key Identifier:
keyid:5F:2C:71:26:BC:8F:39:05:67:44:DE:21:3B:2C:E2:6B:76:BC:99:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:b7:21:6d:a1:8a:f8:86:2a:9a:38:fe:3b:38:04:11:9b:4c:
c3:3c:6b:f0:99:77:cc:2e:61:75:cd:50:79:84:0f:1c:6d:5d:
f6:cd:e1:3f:61:21:c1:82:9a:d6:c1:85:d2:55:6b:9c:8e:4f:
c0:a2:6a:a8:ba:99:88:72:0b:3f:11:74:8b:84:1a:79:eb:c1:
ba:fa:49:47:5c:91:0a:41:99:c8:6f:22:74:e5:63:de:5c:f3:
04:87:bd:62:cb:a1:0c:1e:01:ab:bb:61:56:a6:c3:ec:cb:ea:
cf:45:99:e5:77:85:4d:60:1b:0b:75:3a:11:e5:06:65:ea:35:
5a:df:01:b7:d5:8d:ee:17:95:43:84:67:98:e7:ad:53:45:41:
7b:85:67:5a:7c:81:e0:52:3d:c4:85:93:5e:f1:59:5c:eb:96:
03:3c:74:03:fa:fd:c6:45:40:63:3f:2e:71:e6:56:de:e4:a5:
4c:df:30:94:8c:5a:0a:cf:86:a5:d6:84:7c:13:88:92:f8:24:
5e:55:3e:a4:34:da:18:55:c0:2b:cd:c4:d8:8f:3e:77:f1:30:
1c:8c:3c:df:df:66:53:a3:cb:d4:6b:24:d2:81:29:60:fd:ca:
9d:5a:4f:af:d4:e6:32:03:42:43:94:c9:13:77:51:04:a9:12:
9b:b5:ec:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04m6pDrBbQ7tXCoQFHMGRkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMmM3MTI2YmM4ZjM5MDU2NzQ0ZGUyMTNiMmNlMjZiNzZi
Yzk5MjMwHhcNMjYwMzI5MDgwMDE4WhcNMjYwMzMwMDgwMDE4WjAzMTEwLwYDVQQD
Eyg0N2I2ZGZlZjEwYzQ4MDFkYTNjOTI5NDU4ZGY5YTg4ZjI5ZDEyM2I4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJeSIDswdMlC36Oo7mHCxBdPygDm
ksEO4tF44VUcevjegNBtxAhbbOmBnvg8jwlT/IX3w0ID7QGYNQRcYnbp+OWp9i4e
8VFloJck0E0Mhegvji1aUdGuF/FcHzFg7kV7EC6+XBEMxZL5xWtXHnweSGShKI+O
OuvP+vbFVy6GahYNopqSzugukqzrqeo1oa2/kx4OvAmSrFLRrE/anGkEjlz9KRXI
YdHcdhglIGHWjybzlo43msTcTMoiHUNQlbfuK26dZSDGlvNhVfcHNOZh6lTdbGUf
voajU+cFYCJljfiTT1mwEvGBENLAyRWW/ozzg1nDN7yVeVnK+YYdDqwfTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEe23+8QxIAdo8kpRY35qI8p0SO4MB8GA1UdIwQY
MBaAFF8scSa8jzkFZ0TeITss4mt2vJkjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHl4eEpyeVBPUVZuUk40aE95emlhM2E4bVNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9mNzZiMWQtNDhjYi00YWIxLTkwZWMt
ZTYxNWY1NmY3OGIxLzEvWHl4eEpyeVBPUVZuUk40aE95emlhM2E4bVNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9mNzZiMWQtNDhjYi00YWIxLTkwZWMtZTYxNWY1NmY3OGIx
LzEvWHl4eEpyeVBPUVZuUk40aE95emlhM2E4bVNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAibchbaGK
+IYqmjj+OzgEEZtMwzxr8Jl3zC5hdc1QeYQPHG1d9s3hP2EhwYKa1sGF0lVrnI5P
wKJqqLqZiHILPxF0i4QaeevBuvpJR1yRCkGZyG8idOVj3lzzBIe9YsuhDB4Bq7th
VqbD7Mvqz0WZ5XeFTWAbC3U6EeUGZeo1Wt8Bt9WN7heVQ4RnmOetU0VBe4VnWnyB
4FI9xIWTXvFZXOuWAzx0A/r9xkVAYz8uceZW3uSlTN8wlIxaCs+GpdaEfBOIkvgk
XlU+pDTaGFXAK83E2I8+d/EwHIw8399mU6PL1Gsk0oEpYP3KnVpPr9TmMgNCQ5TJ
E3dRBKkSm7Xs1w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:01 2026 by rpki-client