Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/XLkP1ivMD-kp2uUwNvxV5RHFS0U.mft
File: XLkP1ivMD-kp2uUwNvxV5RHFS0U.mft (raw, json)
Hash identifier: BK2gcnbUzf5yTiSIXJzguKW2W2pfLbdB9ul16BiZk8s=
Subject key identifier: 87:5D:1D:52:82:31:CE:CA:48:34:0E:5A:5C:6D:84:B5:04:5E:21:1F
Authority key identifier: 5C:B9:0F:D6:2B:CC:0F:E9:29:DA:E5:30:36:FC:55:E5:11:C5:4B:45
Certificate issuer: /CN=5cb90fd62bcc0fe929dae53036fc55e511c54b45
Certificate serial: 019D39AEBF84947052FBBDA2971474106D3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLkP1ivMD-kp2uUwNvxV5RHFS0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/XLkP1ivMD-kp2uUwNvxV5RHFS0U.mft
Manifest number: 0E4B
Signing time: Sun 29 Mar 2026 13:00:46 +0000
Manifest this update: Sun 29 Mar 2026 13:00:46 +0000
Manifest next update: Mon 30 Mar 2026 13:00:46 +0000
Files and hashes: 1: JjBO1amjFaXKhp_BY_wamVGillY.roa (hash: EPoONpabQiLm+XMuLyPiJhdjDRYBEoJAyi19e3SuWu8=)
2: XLkP1ivMD-kp2uUwNvxV5RHFS0U.crl (hash: B7RACi0kO4ZA0OVkP2rWvGC9nDaXwAwtm+r2nCqYJqg=)
3: lskIdwRbHzMZEWLGTNl2U0zpcVc.roa (hash: KELAneudQMw0Lv1CUTTdAguNyi2AXca3YtUqnwbLd4U=)
4: s1w-A0JQ7-GP22Qs9TMP-YC29-g.roa (hash: UbNWOkKqq7RPWPwsnO7EB9cjjZaqtck3tiM3zDy2/V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/XLkP1ivMD-kp2uUwNvxV5RHFS0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/XLkP1ivMD-kp2uUwNvxV5RHFS0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/XLkP1ivMD-kp2uUwNvxV5RHFS0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:bf:84:94:70:52:fb:bd:a2:97:14:74:10:6d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cb90fd62bcc0fe929dae53036fc55e511c54b45
Validity
Not Before: Mar 29 13:00:46 2026 GMT
Not After : Mar 30 13:00:46 2026 GMT
Subject: CN=875d1d528231ceca48340e5a5c6d84b5045e211f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:96:a1:ef:9d:66:96:cc:3f:ed:06:74:c7:ed:
1d:40:4d:f3:77:e5:87:08:0e:0c:8a:09:db:66:5c:
07:4b:e8:4d:c0:68:72:85:9b:44:67:11:75:96:3b:
e8:17:8c:0f:0b:c4:da:6d:f0:b5:b0:b1:9d:92:31:
a0:1c:aa:ed:45:b6:5d:4c:4f:25:f2:39:84:4c:16:
f3:66:d3:11:f5:70:a0:8f:44:b1:b4:78:be:64:ee:
49:ca:32:da:bf:79:e2:7b:0e:83:79:3e:c1:61:67:
f2:7b:d8:ef:0d:19:04:11:ab:6b:83:1f:ca:61:e4:
fa:2f:aa:31:81:78:ef:50:77:88:50:e5:69:da:b9:
82:3e:2b:4b:9e:3b:a9:1e:df:c5:27:eb:c1:64:42:
3d:75:1f:de:87:15:e5:ea:f4:68:6b:b0:b5:07:fe:
36:2e:0c:cd:d4:1a:e2:16:7b:ce:cb:b2:55:35:e5:
f8:1f:2e:75:1a:81:4c:e0:66:e0:64:68:df:51:0b:
8b:8a:e9:19:e3:aa:96:8b:ec:18:df:1b:a5:0f:b6:
38:27:81:3f:00:61:9a:5a:90:cf:8e:7e:f3:8b:d3:
c7:3f:ea:a8:b1:da:66:bd:0a:fb:02:c4:48:d3:9a:
aa:52:c3:14:cb:77:2c:8f:11:5f:1a:f5:dc:9c:35:
dd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:5D:1D:52:82:31:CE:CA:48:34:0E:5A:5C:6D:84:B5:04:5E:21:1F
X509v3 Authority Key Identifier:
keyid:5C:B9:0F:D6:2B:CC:0F:E9:29:DA:E5:30:36:FC:55:E5:11:C5:4B:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLkP1ivMD-kp2uUwNvxV5RHFS0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/XLkP1ivMD-kp2uUwNvxV5RHFS0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/XLkP1ivMD-kp2uUwNvxV5RHFS0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:93:98:11:5d:84:a7:de:8f:88:9f:bb:26:f6:a4:d9:d5:c8:
65:c0:87:39:c1:20:d3:37:5e:00:eb:78:78:20:64:8b:90:95:
73:8d:3f:fe:aa:27:91:cd:ae:43:26:d5:e8:6f:22:9e:2a:54:
06:84:ca:ce:79:c6:e7:1e:34:7a:e6:e5:71:7b:d3:ba:50:1c:
bc:94:21:e9:60:c1:dc:72:4c:61:fa:98:02:c6:1c:5b:23:69:
75:a7:ca:12:4a:e3:72:c2:84:e0:6e:bd:fd:ca:c3:ec:f3:91:
08:74:db:13:17:9c:02:c6:a2:b4:a0:cc:a6:d5:5b:92:5c:83:
79:ce:53:50:03:75:36:8e:bd:49:21:05:0a:25:42:38:bb:2a:
6f:e9:bd:1e:88:69:b9:b1:44:8b:38:98:91:94:49:82:07:da:
26:e8:0e:18:ce:8a:3a:66:e0:20:1d:94:9b:b5:cd:77:65:74:
c5:0e:58:42:13:22:08:22:75:ac:08:14:9e:c3:1d:87:86:e2:
7d:01:98:9c:2b:35:c5:75:1d:85:3e:e6:05:40:67:be:8a:00:
21:e1:57:d9:7e:d7:d8:c3:8e:79:ef:0a:72:b8:f6:68:60:c7:
2a:a6:8c:97:91:0a:19:26:ea:37:4e:c6:c0:c3:03:2b:a8:65:
55:a2:78:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rr+ElHBS+72ilxR0EG07MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjYjkwZmQ2MmJjYzBmZTkyOWRhZTUzMDM2ZmM1NWU1MTFj
NTRiNDUwHhcNMjYwMzI5MTMwMDQ2WhcNMjYwMzMwMTMwMDQ2WjAzMTEwLwYDVQQD
Eyg4NzVkMWQ1MjgyMzFjZWNhNDgzNDBlNWE1YzZkODRiNTA0NWUyMTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5ah751mlsw/7QZ0x+0dQE3zd+WH
CA4MignbZlwHS+hNwGhyhZtEZxF1ljvoF4wPC8TabfC1sLGdkjGgHKrtRbZdTE8l
8jmETBbzZtMR9XCgj0SxtHi+ZO5JyjLav3niew6DeT7BYWfye9jvDRkEEatrgx/K
YeT6L6oxgXjvUHeIUOVp2rmCPitLnjupHt/FJ+vBZEI9dR/ehxXl6vRoa7C1B/42
LgzN1BriFnvOy7JVNeX4Hy51GoFM4GbgZGjfUQuLiukZ46qWi+wY3xulD7Y4J4E/
AGGaWpDPjn7zi9PHP+qosdpmvQr7AsRI05qqUsMUy3csjxFfGvXcnDXdfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIddHVKCMc7KSDQOWlxthLUEXiEfMB8GA1UdIwQY
MBaAFFy5D9YrzA/pKdrlMDb8VeURxUtFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWExrUDFpdk1ELWtwMnVVd052eFY1UkhGUzBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8zZGFjNzMtZDdjNy00MGJiLWFiNTUt
OTUxMzVkYWY1MTQ3LzEvWExrUDFpdk1ELWtwMnVVd052eFY1UkhGUzBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi8zZGFjNzMtZDdjNy00MGJiLWFiNTUtOTUxMzVkYWY1MTQ3
LzEvWExrUDFpdk1ELWtwMnVVd052eFY1UkhGUzBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANpOYEV2E
p96PiJ+7Jvak2dXIZcCHOcEg0zdeAOt4eCBki5CVc40//qonkc2uQybV6G8inipU
BoTKznnG5x40eublcXvTulAcvJQh6WDB3HJMYfqYAsYcWyNpdafKEkrjcsKE4G69
/crD7PORCHTbExecAsaitKDMptVbklyDec5TUAN1No69SSEFCiVCOLsqb+m9Hohp
ubFEiziYkZRJggfaJugOGM6KOmbgIB2Um7XNd2V0xQ5YQhMiCCJ1rAgUnsMdh4bi
fQGYnCs1xXUdhT7mBUBnvooAIeFX2X7X2MOOee8Kcrj2aGDHKqaMl5EKGSbqN07G
wMMDK6hlVaJ44w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:24 2026 by rpki-client