Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/e155ea-88cd-4414-aab6-23ab58d6415a/1/XeRY8h1AZGa99oJA9QXu_Rl7qTY.mft
File: XeRY8h1AZGa99oJA9QXu_Rl7qTY.mft (raw, json)
Hash identifier: 5QVfTsTEfaWpV6vTOwZCVM1liNW58c04vWUMjLZ/sTM=
Subject key identifier: 43:BA:BA:94:C0:EC:EF:C9:F8:DA:83:BF:0A:F5:2D:1E:29:9A:77:D8
Authority key identifier: 5D:E4:58:F2:1D:40:64:66:BD:F6:82:40:F5:05:EE:FD:19:7B:A9:36
Certificate issuer: /CN=5de458f21d406466bdf68240f505eefd197ba936
Certificate serial: 019D38663E9CE9D86579966800317469B74B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XeRY8h1AZGa99oJA9QXu_Rl7qTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/e155ea-88cd-4414-aab6-23ab58d6415a/1/XeRY8h1AZGa99oJA9QXu_Rl7qTY.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 07:01:57 +0000
Manifest this update: Sun 29 Mar 2026 07:01:57 +0000
Manifest next update: Mon 30 Mar 2026 07:01:57 +0000
Files and hashes: 1: XeRY8h1AZGa99oJA9QXu_Rl7qTY.crl (hash: 4L9e2569LFcNHYZqdfYCFzSDNwRk2hLDaS7Jawc99ug=)
2: i4eEi_MJmmYfUqfd7JjdOwAtBfc.roa (hash: GUYHjtH4qDoS+nBA7gPOzvHqwLi2k+v4VmAAo9jm4uA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/e155ea-88cd-4414-aab6-23ab58d6415a/1/XeRY8h1AZGa99oJA9QXu_Rl7qTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/e155ea-88cd-4414-aab6-23ab58d6415a/1/XeRY8h1AZGa99oJA9QXu_Rl7qTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XeRY8h1AZGa99oJA9QXu_Rl7qTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:3e:9c:e9:d8:65:79:96:68:00:31:74:69:b7:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5de458f21d406466bdf68240f505eefd197ba936
Validity
Not Before: Mar 29 07:01:57 2026 GMT
Not After : Mar 30 07:01:57 2026 GMT
Subject: CN=43baba94c0ecefc9f8da83bf0af52d1e299a77d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:da:7a:20:fe:e0:d6:78:58:6c:b1:7e:1b:48:
83:56:16:c2:0c:47:87:96:0b:8c:2b:33:7f:2b:bb:
1f:5b:ce:21:dc:96:a6:00:1c:c8:eb:11:e3:60:8d:
4f:93:68:19:51:a2:a9:5a:3f:80:ec:25:20:7a:c7:
73:c8:15:35:72:ff:2b:9e:b9:d6:0a:ac:40:c1:33:
01:be:9b:ac:52:b4:44:41:c6:ac:64:78:fd:74:be:
9f:f3:c3:9f:19:17:af:00:05:eb:7c:de:9d:cb:3c:
6d:ae:99:5c:53:97:a0:19:f0:fa:6e:56:23:1c:f9:
44:f4:e5:ee:0d:2e:35:be:0e:50:8c:ec:fc:fa:60:
d1:75:e7:f0:2d:26:5e:82:58:58:f7:d2:e8:34:e1:
6d:3f:6f:15:1f:b7:e6:b3:35:c6:69:bf:4c:16:05:
6b:23:f0:78:1d:b0:8f:c0:9e:39:30:13:2e:6e:1d:
89:22:6e:9b:c3:84:91:5d:32:65:c6:3c:9a:44:11:
40:77:b3:1a:32:f2:4d:50:dc:fa:40:b2:e5:d6:f5:
23:c5:90:85:2e:07:6d:9d:87:88:73:1b:a1:2a:a5:
46:cf:70:bd:24:1a:a3:52:da:77:1d:8e:46:d2:9b:
77:4d:0d:32:7e:21:0e:41:36:8c:06:f5:47:56:7c:
5b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:BA:BA:94:C0:EC:EF:C9:F8:DA:83:BF:0A:F5:2D:1E:29:9A:77:D8
X509v3 Authority Key Identifier:
keyid:5D:E4:58:F2:1D:40:64:66:BD:F6:82:40:F5:05:EE:FD:19:7B:A9:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XeRY8h1AZGa99oJA9QXu_Rl7qTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/e155ea-88cd-4414-aab6-23ab58d6415a/1/XeRY8h1AZGa99oJA9QXu_Rl7qTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/e155ea-88cd-4414-aab6-23ab58d6415a/1/XeRY8h1AZGa99oJA9QXu_Rl7qTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:f1:68:f5:4d:f2:3b:42:be:a0:5e:61:76:7a:37:7f:12:47:
15:5f:62:c3:83:b1:f5:e3:2b:c1:87:31:07:5c:6d:12:8f:95:
17:6f:8b:48:5a:d1:c6:7b:f2:96:35:71:f5:4e:fd:ce:98:fc:
47:73:77:40:79:0c:13:ff:08:f2:d8:3e:7b:dd:80:00:79:b1:
a9:d8:a1:cf:97:fc:f8:11:91:ce:82:1e:ac:a7:e9:b2:58:42:
f0:de:3c:9b:ea:66:7f:22:5a:8b:27:39:b5:85:d2:9e:10:de:
b6:a8:3f:51:2a:1e:e9:9b:38:9b:8c:6b:41:27:fa:21:d2:6f:
9e:1c:10:1e:21:fd:ab:0d:59:14:9d:92:d4:be:ad:e7:68:2f:
37:04:f8:2a:b1:22:4c:36:13:ed:e7:8e:be:ec:0e:97:37:04:
06:1b:88:c7:73:1c:53:2b:0e:b1:ad:0f:e6:50:83:84:1c:71:
69:02:84:72:0d:66:d1:e5:03:fa:31:87:c4:df:a7:0a:9a:8c:
8d:c5:33:aa:ec:92:ce:7e:8a:df:5f:7c:ea:65:90:e8:c9:0b:
18:79:1e:24:58:a4:93:a5:3e:28:17:7a:7e:57:60:a8:99:9b:
e2:44:67:15:82:80:3b:26:73:e0:d1:93:c8:bb:51:57:85:9a:
ff:f8:e6:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Zj6c6dhleZZoADF0abdLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZTQ1OGYyMWQ0MDY0NjZiZGY2ODI0MGY1MDVlZWZkMTk3
YmE5MzYwHhcNMjYwMzI5MDcwMTU3WhcNMjYwMzMwMDcwMTU3WjAzMTEwLwYDVQQD
Eyg0M2JhYmE5NGMwZWNlZmM5ZjhkYTgzYmYwYWY1MmQxZTI5OWE3N2Q4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNp6IP7g1nhYbLF+G0iDVhbCDEeH
lguMKzN/K7sfW84h3JamABzI6xHjYI1Pk2gZUaKpWj+A7CUgesdzyBU1cv8rnrnW
CqxAwTMBvpusUrREQcasZHj9dL6f88OfGRevAAXrfN6dyzxtrplcU5egGfD6blYj
HPlE9OXuDS41vg5QjOz8+mDRdefwLSZeglhY99LoNOFtP28VH7fmszXGab9MFgVr
I/B4HbCPwJ45MBMubh2JIm6bw4SRXTJlxjyaRBFAd7MaMvJNUNz6QLLl1vUjxZCF
LgdtnYeIcxuhKqVGz3C9JBqjUtp3HY5G0pt3TQ0yfiEOQTaMBvVHVnxbpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEO6upTA7O/J+NqDvwr1LR4pmnfYMB8GA1UdIwQY
MBaAFF3kWPIdQGRmvfaCQPUF7v0Ze6k2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGVSWThoMUFaR2E5OW9KQTlRWHVfUmw3cVRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9lMTU1ZWEtODhjZC00NDE0LWFhYjYt
MjNhYjU4ZDY0MTVhLzEvWGVSWThoMUFaR2E5OW9KQTlRWHVfUmw3cVRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9lMTU1ZWEtODhjZC00NDE0LWFhYjYtMjNhYjU4ZDY0MTVh
LzEvWGVSWThoMUFaR2E5OW9KQTlRWHVfUmw3cVRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtvFo9U3y
O0K+oF5hdno3fxJHFV9iw4Ox9eMrwYcxB1xtEo+VF2+LSFrRxnvyljVx9U79zpj8
R3N3QHkME/8I8tg+e92AAHmxqdihz5f8+BGRzoIerKfpslhC8N48m+pmfyJaiyc5
tYXSnhDetqg/USoe6Zs4m4xrQSf6IdJvnhwQHiH9qw1ZFJ2S1L6t52gvNwT4KrEi
TDYT7eeOvuwOlzcEBhuIx3McUysOsa0P5lCDhBxxaQKEcg1m0eUD+jGHxN+nCpqM
jcUzquySzn6K31986mWQ6MkLGHkeJFikk6U+KBd6fldgqJmb4kRnFYKAOyZz4NGT
yLtRV4Wa//jmxg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:48 2026 by rpki-client