Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
File: XU1jEWbo7t54curYq5qBrch31NE.mft (raw, json)
Hash identifier: 8LGXAttucgpeXWmdj/buFrlq9N9t0UpY6PeQzA62WzQ=
Subject key identifier: 34:48:07:38:59:AB:5A:D1:A5:10:F1:5E:DC:DD:1C:1E:39:44:EA:A7
Authority key identifier: 5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1
Certificate issuer: /CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1
Certificate serial: 019D375215099A1246343F849E181344C6CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
Manifest number: 0BB1
Signing time: Sun 29 Mar 2026 02:00:19 +0000
Manifest this update: Sun 29 Mar 2026 02:00:19 +0000
Manifest next update: Mon 30 Mar 2026 02:00:19 +0000
Files and hashes: 1: 6KBg76wO49ZTNeUZLEQvdfuAEnc.roa (hash: C78F4tRrcjaUZ0tkRMKZ6DDDl8hmlq6D1hHs1hdNls0=)
2: XU1jEWbo7t54curYq5qBrch31NE.crl (hash: tNajqEDD9ueBezCHMh5Uz30Q9xXtny7YPboOYziUpZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:15:09:9a:12:46:34:3f:84:9e:18:13:44:c6:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1
Validity
Not Before: Mar 29 02:00:19 2026 GMT
Not After : Mar 30 02:00:19 2026 GMT
Subject: CN=3448073859ab5ad1a510f15edcdd1c1e3944eaa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:45:a9:5a:b9:e1:2f:44:29:b9:bc:7e:9e:02:
02:b7:f4:71:3e:68:fb:e4:b7:14:f7:b9:87:09:ff:
f7:a8:e7:e4:ab:c1:c3:5e:97:76:07:66:4a:53:2a:
0b:8a:ff:a3:82:8d:d1:8c:e2:ed:d0:21:9a:ec:37:
49:b5:a2:7d:35:f0:1b:54:5b:90:71:88:80:2d:f6:
c0:a7:66:07:37:74:55:85:f2:78:71:8f:7d:e8:ee:
ee:0e:77:c6:76:8e:ec:1a:54:9a:8c:11:cd:eb:e6:
bd:75:93:ac:39:a8:34:4f:42:ec:e2:b0:1e:a1:e1:
69:2f:e3:1d:89:3c:37:ad:1c:f3:6b:5c:b1:9d:51:
fb:10:40:1f:77:7d:f4:b9:e5:05:bd:8d:d5:fc:66:
fc:50:56:d1:d1:cb:cf:1f:ea:55:17:8f:8b:98:58:
de:42:91:45:28:d4:d1:45:7d:e6:1d:df:e7:26:26:
62:a0:a5:5a:df:c8:b8:d9:e8:b4:d2:49:7a:32:43:
a4:02:e7:fd:66:e1:3a:23:83:3f:08:86:1a:81:71:
57:14:f9:6e:81:b6:92:12:ff:95:22:98:4f:70:c5:
e2:9a:ea:c5:74:3f:15:c5:22:8d:14:09:78:db:96:
70:75:7c:22:b4:c6:bf:12:f0:d3:e0:b8:63:ba:d9:
e8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:48:07:38:59:AB:5A:D1:A5:10:F1:5E:DC:DD:1C:1E:39:44:EA:A7
X509v3 Authority Key Identifier:
keyid:5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:df:48:17:59:98:ef:73:cf:2e:0f:bd:15:4a:7b:e1:98:2e:
7d:30:3f:e4:84:8d:4d:bb:40:58:ab:4b:b9:b3:78:c5:5c:ce:
cd:23:39:9f:59:cd:50:6d:66:b6:6a:a7:13:77:f4:6c:f5:54:
11:2a:db:26:3a:70:8d:5e:9d:a9:e8:9a:9a:d7:83:39:8e:35:
04:1b:ae:ec:63:50:54:0e:ab:d1:09:16:78:b3:00:e0:6e:a6:
9e:48:66:96:c2:f6:e7:74:af:ce:7a:21:3d:59:29:5e:68:50:
9e:9c:37:39:3e:e3:ad:89:95:b3:3a:73:6d:c9:c5:25:88:84:
61:1e:41:c3:be:02:d9:5f:51:5d:e8:43:e3:e6:66:0c:b7:00:
8f:23:f5:4b:4d:32:d4:98:70:d3:f3:fa:1f:0d:df:81:44:f4:
54:19:bb:b7:ae:1a:e9:f3:06:20:8a:8c:fa:73:d5:36:17:84:
1e:37:5c:4f:6f:1e:46:75:71:7b:68:48:78:30:10:fd:84:e1:
8c:09:a8:71:65:34:8f:4e:31:9e:63:bd:96:59:e4:ab:12:5d:
26:61:db:7f:ef:3f:a2:a5:52:11:51:6a:ae:5a:6b:ee:a5:d8:
d7:af:bc:ca:2b:4d:b8:4c:b8:42:d1:d2:23:ef:9a:e8:86:d5:
89:cc:e7:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UhUJmhJGND+EnhgTRMbMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkNGQ2MzExNjZlOGVlZGU3ODcyZWFkOGFiOWE4MWFkYzg3
N2Q0ZDEwHhcNMjYwMzI5MDIwMDE5WhcNMjYwMzMwMDIwMDE5WjAzMTEwLwYDVQQD
EygzNDQ4MDczODU5YWI1YWQxYTUxMGYxNWVkY2RkMWMxZTM5NDRlYWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0WpWrnhL0Qpubx+ngICt/RxPmj7
5LcU97mHCf/3qOfkq8HDXpd2B2ZKUyoLiv+jgo3RjOLt0CGa7DdJtaJ9NfAbVFuQ
cYiALfbAp2YHN3RVhfJ4cY996O7uDnfGdo7sGlSajBHN6+a9dZOsOag0T0Ls4rAe
oeFpL+MdiTw3rRzza1yxnVH7EEAfd330ueUFvY3V/Gb8UFbR0cvPH+pVF4+LmFje
QpFFKNTRRX3mHd/nJiZioKVa38i42ei00kl6MkOkAuf9ZuE6I4M/CIYagXFXFPlu
gbaSEv+VIphPcMXimurFdD8VxSKNFAl425ZwdXwitMa/EvDT4LhjutnoVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDRIBzhZq1rRpRDxXtzdHB45ROqnMB8GA1UdIwQY
MBaAFF1NYxFm6O7eeHLq2Kuaga3Id9TRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFUxakVXYm83dDU0Y3VyWXE1cUJyY2gzMU5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS80M2I3OGMtNDUzOS00MTEyLWI3NTct
ZmEzNmZjM2I3Mzc2LzEvWFUxakVXYm83dDU0Y3VyWXE1cUJyY2gzMU5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS80M2I3OGMtNDUzOS00MTEyLWI3NTctZmEzNmZjM2I3Mzc2
LzEvWFUxakVXYm83dDU0Y3VyWXE1cUJyY2gzMU5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHN9IF1mY
73PPLg+9FUp74ZgufTA/5ISNTbtAWKtLubN4xVzOzSM5n1nNUG1mtmqnE3f0bPVU
ESrbJjpwjV6dqeiamteDOY41BBuu7GNQVA6r0QkWeLMA4G6mnkhmlsL253Svznoh
PVkpXmhQnpw3OT7jrYmVszpzbcnFJYiEYR5Bw74C2V9RXehD4+ZmDLcAjyP1S00y
1Jhw0/P6Hw3fgUT0VBm7t64a6fMGIIqM+nPVNheEHjdcT28eRnVxe2hIeDAQ/YTh
jAmocWU0j04xnmO9llnkqxJdJmHbf+8/oqVSEVFqrlpr7qXY16+8yitNuEy4QtHS
I++a6IbVicznTw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:01 2026 by rpki-client