Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
File: XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft (raw, json)
Hash identifier: kr0Aj6DLRup6tEj+EpJMOqR5PX+TiFOSi3tVNy7Dkf4=
Subject key identifier: C2:D8:1F:3C:BC:E1:13:FE:B8:94:C9:E3:66:BC:D5:D5:79:4F:9C:92
Authority key identifier: 5D:F5:ED:04:0E:FE:2E:58:17:54:DE:B5:C3:CD:82:D9:9D:FE:E8:D9
Certificate issuer: /CN=5df5ed040efe2e581754deb5c3cd82d99dfee8d9
Certificate serial: 019CE0D970CD67CAF406AA6077D749B1BD9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
Manifest number: 1867
Signing time: Thu 12 Mar 2026 07:01:12 +0000
Manifest this update: Thu 12 Mar 2026 07:01:12 +0000
Manifest next update: Fri 13 Mar 2026 07:01:12 +0000
Files and hashes: 1: Npw06d3i6OT6W1cbnDgGuSW4ge4.roa (hash: XuYzx4X8wj26HqV6SxCe8B8EhqEndYSd+I3KwtxjVxU=)
2: XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl (hash: vXxcR1lFsbpNeHT1D25RnJzUx6sMnPlyYhrjI9t8ol0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 07:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e0:d9:70:cd:67:ca:f4:06:aa:60:77:d7:49:b1:bd:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df5ed040efe2e581754deb5c3cd82d99dfee8d9
Validity
Not Before: Mar 12 07:01:12 2026 GMT
Not After : Mar 13 07:01:12 2026 GMT
Subject: CN=c2d81f3cbce113feb894c9e366bcd5d5794f9c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c3:20:af:60:eb:9b:e2:0d:6b:46:34:a8:48:
27:cc:65:88:51:c7:e8:a7:de:81:0e:8d:de:37:c0:
fb:6d:3b:85:31:40:35:61:8d:ff:54:a5:c3:39:10:
5f:a5:04:43:d0:0d:37:f1:88:7f:93:51:f7:9a:55:
e2:76:f4:d8:a3:eb:3e:5e:21:85:41:cc:ba:63:42:
50:2c:25:cd:fe:1e:93:cf:3f:e7:e0:1f:6a:12:b1:
56:4a:c4:40:3e:bf:b9:8f:4d:41:1c:96:30:6f:15:
e1:94:74:47:89:ce:d9:35:bb:72:81:7b:d8:dd:80:
86:59:9a:46:b0:d7:25:90:c5:b7:20:27:51:ff:e3:
0a:5c:b6:2f:12:35:c1:f1:79:7a:22:4c:71:fc:8b:
a6:4c:d0:09:4a:b9:7f:1b:15:09:1d:a3:3f:b9:08:
92:42:0b:2e:b6:01:ea:a5:f6:21:f9:ec:b1:3f:9d:
72:5d:c5:ab:59:83:ac:51:d0:a9:2d:62:1b:87:aa:
d3:12:64:62:62:b8:16:97:26:87:a5:69:0a:87:a6:
4a:8e:7e:77:2b:44:a5:a5:79:4b:54:7d:9e:d0:57:
75:e2:84:79:82:27:10:6e:ea:e0:2f:aa:af:e8:cb:
10:81:b7:97:56:46:f2:ce:1c:b0:54:59:22:b2:3a:
4c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D8:1F:3C:BC:E1:13:FE:B8:94:C9:E3:66:BC:D5:D5:79:4F:9C:92
X509v3 Authority Key Identifier:
keyid:5D:F5:ED:04:0E:FE:2E:58:17:54:DE:B5:C3:CD:82:D9:9D:FE:E8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:00:31:8f:d8:2d:14:52:23:c2:52:15:fc:84:33:1e:1d:49:
6f:c1:49:d9:30:e5:88:d5:ea:7b:76:60:2a:86:bf:ee:8b:cd:
be:c9:06:98:4a:69:54:70:6d:f1:bb:60:d1:0f:dd:47:44:99:
bb:f0:70:d5:4f:e4:23:47:36:1a:c2:0b:cb:83:30:1d:1e:39:
b4:20:89:f4:38:ae:d7:95:97:ce:c7:ca:0c:b9:cc:76:be:e3:
f5:65:c1:ae:34:37:3e:99:fa:23:3b:9f:27:36:55:54:ed:b2:
87:41:2b:5d:45:04:86:54:2e:6c:67:e1:58:95:57:1e:73:01:
dc:f1:16:a0:e7:61:7d:c4:b8:74:77:70:6a:25:cc:b3:eb:90:
58:44:db:c3:21:fd:3c:c5:68:b6:ca:79:8b:20:df:fe:1b:37:
bd:18:92:7d:25:f9:85:ff:9d:ba:b0:6e:59:f5:3b:99:fe:8a:
99:bc:0f:82:be:fc:ba:fe:af:db:0b:6c:24:fe:72:2f:a6:da:
01:6c:6c:c9:8a:7b:d3:a1:b4:92:d6:b2:82:7f:19:66:90:6a:
01:8a:0f:b7:50:95:8c:b6:7b:f1:83:d3:ed:81:9e:fe:14:80:
a9:ff:93:d7:19:aa:e5:18:5d:e2:8b:99:40:69:c2:65:79:4e:
9a:e7:9d:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzg2XDNZ8r0Bqpgd9dJsb2dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZjVlZDA0MGVmZTJlNTgxNzU0ZGViNWMzY2Q4MmQ5OWRm
ZWU4ZDkwHhcNMjYwMzEyMDcwMTEyWhcNMjYwMzEzMDcwMTEyWjAzMTEwLwYDVQQD
EyhjMmQ4MWYzY2JjZTExM2ZlYjg5NGM5ZTM2NmJjZDVkNTc5NGY5YzkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5MMgr2Drm+INa0Y0qEgnzGWIUcfo
p96BDo3eN8D7bTuFMUA1YY3/VKXDORBfpQRD0A038Yh/k1H3mlXidvTYo+s+XiGF
Qcy6Y0JQLCXN/h6Tzz/n4B9qErFWSsRAPr+5j01BHJYwbxXhlHRHic7ZNbtygXvY
3YCGWZpGsNclkMW3ICdR/+MKXLYvEjXB8Xl6Ikxx/IumTNAJSrl/GxUJHaM/uQiS
QgsutgHqpfYh+eyxP51yXcWrWYOsUdCpLWIbh6rTEmRiYrgWlyaHpWkKh6ZKjn53
K0SlpXlLVH2e0Fd14oR5gicQburgL6qv6MsQgbeXVkbyzhywVFkisjpMvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMLYHzy84RP+uJTJ42a81dV5T5ySMB8GA1UdIwQY
MBaAFF317QQO/i5YF1TetcPNgtmd/ujZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGZYdEJBNy1MbGdYVk42MXc4MkMyWjMtNk5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9iM2Q3NmYtNmVmOS00YzRhLTgxMmMt
YmVmZTRiMzRjNmYwLzEvWGZYdEJBNy1MbGdYVk42MXc4MkMyWjMtNk5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9iM2Q3NmYtNmVmOS00YzRhLTgxMmMtYmVmZTRiMzRjNmYw
LzEvWGZYdEJBNy1MbGdYVk42MXc4MkMyWjMtNk5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABwAxj9gt
FFIjwlIV/IQzHh1Jb8FJ2TDliNXqe3ZgKoa/7ovNvskGmEppVHBt8btg0Q/dR0SZ
u/Bw1U/kI0c2GsILy4MwHR45tCCJ9Diu15WXzsfKDLnMdr7j9WXBrjQ3Ppn6Izuf
JzZVVO2yh0ErXUUEhlQubGfhWJVXHnMB3PEWoOdhfcS4dHdwaiXMs+uQWETbwyH9
PMVotsp5iyDf/hs3vRiSfSX5hf+durBuWfU7mf6KmbwPgr78uv6v2wtsJP5yL6ba
AWxsyYp706G0ktaygn8ZZpBqAYoPt1CVjLZ78YPT7YGe/hSAqf+T1xmq5Rhd4ouZ
QGnCZXlOmuedTg==
-----END CERTIFICATE-----
Generated at Thu Mar 12 16:52:43 2026 by rpki-client