Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.mft
File: xW0hVO1TtinYcrKjjZzQQb20sSg.mft (raw, json)
Hash identifier: +vEU6IMyxjuQXDQWCOGLUNvrL0iRakL1CPInKSpGC6w=
Subject key identifier: B4:9E:29:31:3F:81:CA:9B:48:BE:C1:5B:72:96:8B:81:4F:8A:05:CC
Authority key identifier: C5:6D:21:54:ED:53:B6:29:D8:72:B2:A3:8D:9C:D0:41:BD:B4:B1:28
Certificate issuer: /CN=c56d2154ed53b629d872b2a38d9cd041bdb4b128
Certificate serial: 019D3909B345731C584CEA0472BEDED05BE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xW0hVO1TtinYcrKjjZzQQb20sSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.mft
Manifest number: 0C04
Signing time: Sun 29 Mar 2026 10:00:30 +0000
Manifest this update: Sun 29 Mar 2026 10:00:30 +0000
Manifest next update: Mon 30 Mar 2026 10:00:30 +0000
Files and hashes: 1: X88KGnsSuMt-1S71eY9zQ3RZ6tU.asa (hash: 7i3IVTiIuvLVvc+83Pz8wtd/lc6dgYITJMUxdSIn8Do=)
2: nVIGqqg1fXe0JSkAFeMlHeHVwU8.roa (hash: xrVagJd5a+kWUDCIbPyPE6cdcRfUEt1we1ew6ErH7ek=)
3: xL3RFgVCSYkC5SVoN-v-4LOaIV0.roa (hash: qCzcRwtjUOKAd+dvykGvkNnkTv7HJHG7XD6ZjU3R0R0=)
4: xW0hVO1TtinYcrKjjZzQQb20sSg.crl (hash: YgvaAqZyMgcqJGuR4wRETWMfh4ldiH7XpfpFTzWimsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xW0hVO1TtinYcrKjjZzQQb20sSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:b3:45:73:1c:58:4c:ea:04:72:be:de:d0:5b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c56d2154ed53b629d872b2a38d9cd041bdb4b128
Validity
Not Before: Mar 29 10:00:30 2026 GMT
Not After : Mar 30 10:00:30 2026 GMT
Subject: CN=b49e29313f81ca9b48bec15b72968b814f8a05cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4f:58:c0:68:95:71:ae:f5:3a:b7:b9:6c:22:
41:b2:20:73:fd:ae:37:a9:88:89:25:55:e7:ee:9d:
9d:cf:1c:ba:bb:c7:fd:92:04:44:87:ab:96:dc:f6:
5d:37:25:09:87:10:dd:de:9b:22:4b:77:cd:b9:1b:
d5:7c:0e:6e:43:76:78:f9:ad:95:3b:c9:f5:50:95:
38:97:68:59:72:43:a8:b9:11:29:e1:e4:7d:2a:fb:
29:dc:32:10:1a:35:2d:b5:62:9f:fb:67:5a:46:d6:
cc:cf:cc:0c:94:22:15:f1:21:f5:90:f4:1c:38:a5:
b5:c4:f2:dd:c2:37:b1:e8:9f:9a:8d:18:c6:a4:26:
c3:16:70:3c:77:cf:f5:78:b8:9a:80:8a:72:7d:19:
37:a7:10:40:3a:0e:34:be:f3:35:cd:c6:1e:4c:b1:
3e:25:aa:ef:09:7e:d2:62:bb:eb:64:9d:ff:58:be:
46:4d:e0:9e:67:23:72:8e:3d:54:be:c5:d7:77:8a:
7a:b2:95:93:5e:dd:31:a1:ea:71:ec:20:67:f5:21:
66:74:4e:17:2c:eb:c6:cc:9b:8f:57:19:84:0f:01:
c8:2e:7c:cc:e2:45:cc:6f:f2:da:cb:f8:05:d7:eb:
a9:69:3d:68:8f:18:21:30:34:e2:99:fc:1f:c9:65:
6a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9E:29:31:3F:81:CA:9B:48:BE:C1:5B:72:96:8B:81:4F:8A:05:CC
X509v3 Authority Key Identifier:
keyid:C5:6D:21:54:ED:53:B6:29:D8:72:B2:A3:8D:9C:D0:41:BD:B4:B1:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xW0hVO1TtinYcrKjjZzQQb20sSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:a3:6b:f9:78:7d:c6:ee:77:bd:d0:9a:76:6a:b9:39:a7:b3:
24:cd:35:b6:5f:2a:17:71:7c:4d:de:ca:77:1e:43:f6:8b:2a:
8b:aa:0a:28:57:e4:4f:9c:29:bf:ca:46:49:62:0c:df:0e:7a:
4b:1d:fc:58:c4:84:6f:83:51:cc:f2:5e:8e:a0:f2:85:3f:fd:
3c:0a:cf:b9:35:9f:f1:28:69:d1:b6:8b:36:df:85:41:8a:38:
9e:cb:6a:99:c7:fb:e8:c5:ea:da:01:b6:33:96:19:f0:b9:53:
03:75:98:e8:06:96:0c:b3:d4:8a:57:f8:fa:17:41:3a:88:d1:
e0:df:da:96:f3:42:a7:50:98:41:55:2d:47:d8:58:53:fa:75:
51:1b:60:b4:e7:d9:b4:58:e7:a2:56:7e:a0:82:3c:50:ce:79:
75:e0:3b:06:7d:cf:fb:47:ba:fe:c7:c6:e8:7c:e5:3f:9e:02:
04:24:0a:29:49:dc:98:73:ce:e8:d9:db:64:d4:42:2b:c8:e4:
0d:82:fd:98:32:59:a1:16:42:f3:1a:bf:05:4f:55:78:62:00:
0d:e1:8c:40:69:32:76:e0:3d:5d:85:e4:d0:6d:5f:c3:10:bb:
df:2e:b5:33:4f:5b:ba:db:63:ba:d3:a4:89:22:c7:84:46:88:
d7:06:10:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CbNFcxxYTOoEcr7e0FvnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NmQyMTU0ZWQ1M2I2MjlkODcyYjJhMzhkOWNkMDQxYmRi
NGIxMjgwHhcNMjYwMzI5MTAwMDMwWhcNMjYwMzMwMTAwMDMwWjAzMTEwLwYDVQQD
EyhiNDllMjkzMTNmODFjYTliNDhiZWMxNWI3Mjk2OGI4MTRmOGEwNWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiE9YwGiVca71Ore5bCJBsiBz/a43
qYiJJVXn7p2dzxy6u8f9kgREh6uW3PZdNyUJhxDd3psiS3fNuRvVfA5uQ3Z4+a2V
O8n1UJU4l2hZckOouREp4eR9Kvsp3DIQGjUttWKf+2daRtbMz8wMlCIV8SH1kPQc
OKW1xPLdwjex6J+ajRjGpCbDFnA8d8/1eLiagIpyfRk3pxBAOg40vvM1zcYeTLE+
JarvCX7SYrvrZJ3/WL5GTeCeZyNyjj1UvsXXd4p6spWTXt0xoepx7CBn9SFmdE4X
LOvGzJuPVxmEDwHILnzM4kXMb/Lay/gF1+upaT1ojxghMDTimfwfyWVqfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLSeKTE/gcqbSL7BW3KWi4FPigXMMB8GA1UdIwQY
MBaAFMVtIVTtU7Yp2HKyo42c0EG9tLEoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFcwaFZPMVR0aW5ZY3JLampaelFRYjIwc1NnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9iMjQxMjctODFkZC00ZmExLTgzZjAt
N2I0MTBiNzgxZGVmLzEveFcwaFZPMVR0aW5ZY3JLampaelFRYjIwc1NnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9iMjQxMjctODFkZC00ZmExLTgzZjAtN2I0MTBiNzgxZGVm
LzEveFcwaFZPMVR0aW5ZY3JLampaelFRYjIwc1NnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKKNr+Xh9
xu53vdCadmq5OaezJM01tl8qF3F8Td7Kdx5D9osqi6oKKFfkT5wpv8pGSWIM3w56
Sx38WMSEb4NRzPJejqDyhT/9PArPuTWf8Shp0baLNt+FQYo4nstqmcf76MXq2gG2
M5YZ8LlTA3WY6AaWDLPUilf4+hdBOojR4N/alvNCp1CYQVUtR9hYU/p1URtgtOfZ
tFjnolZ+oII8UM55deA7Bn3P+0e6/sfG6HzlP54CBCQKKUncmHPO6NnbZNRCK8jk
DYL9mDJZoRZC8xq/BU9VeGIADeGMQGkyduA9XYXk0G1fwxC73y61M09buttjutOk
iSLHhEaI1wYQbQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:36 2026 by rpki-client