Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.mft
File: XWMX9pNua1eLOMPfsZgCVJj8rqE.mft (raw, json)
Hash identifier: uVwNXCLT2RNIEWbhB9m7GZYSqqNib3QEjZpM+KNkMtc=
Subject key identifier: 56:08:0B:18:68:4E:4B:BC:81:0E:5C:4E:08:BF:78:E5:15:12:A1:16
Authority key identifier: 5D:63:17:F6:93:6E:6B:57:8B:38:C3:DF:B1:98:02:54:98:FC:AE:A1
Certificate issuer: /CN=5d6317f6936e6b578b38c3dfb198025498fcaea1
Certificate serial: 019D371BBC7DFB611827C033FE5B0CF2EAA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWMX9pNua1eLOMPfsZgCVJj8rqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.mft
Manifest number: 07DF
Signing time: Sun 29 Mar 2026 01:00:57 +0000
Manifest this update: Sun 29 Mar 2026 01:00:57 +0000
Manifest next update: Mon 30 Mar 2026 01:00:57 +0000
Files and hashes: 1: XWMX9pNua1eLOMPfsZgCVJj8rqE.crl (hash: /SWdiZ99M44d2hnKU/+xPXJbUkE7/KXBcSYoAIFrVyY=)
2: ap-hePAObGM0xD9pl1yT2LqZzQg.roa (hash: mxBd1kBKjM1E0LiaQSAHHf7cP2igd3O8Gy2yRTKiPCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWMX9pNua1eLOMPfsZgCVJj8rqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:bc:7d:fb:61:18:27:c0:33:fe:5b:0c:f2:ea:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6317f6936e6b578b38c3dfb198025498fcaea1
Validity
Not Before: Mar 29 01:00:57 2026 GMT
Not After : Mar 30 01:00:57 2026 GMT
Subject: CN=56080b18684e4bbc810e5c4e08bf78e51512a116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ae:05:28:13:25:06:cf:b6:c6:75:1f:d6:df:
eb:94:1a:bd:3e:89:c5:a3:92:d8:d2:37:a8:30:6e:
a2:0e:63:d3:fb:64:70:41:e4:bd:19:4f:c4:36:4c:
7c:3e:06:76:63:b0:bd:0d:9a:32:fd:22:d5:72:d4:
fa:6e:59:e2:b6:c8:61:5b:43:aa:5d:47:de:96:f3:
0d:2c:f8:58:12:c4:e1:af:b1:63:f6:65:34:9c:df:
7e:29:bc:10:61:7a:ca:32:05:18:a9:f0:79:03:53:
a3:57:eb:ce:84:d1:d8:38:4c:84:3d:62:08:63:24:
36:68:7d:ad:a3:23:a1:ff:61:03:8f:e6:3b:ad:69:
98:cf:75:57:c2:dc:40:c5:93:56:70:b5:fc:26:ee:
ae:7e:14:76:54:3c:12:63:2b:38:a9:c0:b5:25:b0:
79:85:68:67:25:07:66:2f:54:0a:fb:f1:6b:0c:1a:
61:be:8e:6c:36:c6:5e:92:5f:07:6f:ac:f3:75:0f:
02:ef:32:0b:e4:5b:ed:7b:d8:1a:53:ab:5e:91:9b:
95:da:52:24:57:85:ff:54:c0:4a:da:fe:84:7a:ae:
c5:04:56:d4:13:87:28:b5:03:11:b8:bd:26:69:e4:
b3:a0:4d:5b:81:25:c7:78:53:1d:62:6a:7f:5d:22:
99:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:08:0B:18:68:4E:4B:BC:81:0E:5C:4E:08:BF:78:E5:15:12:A1:16
X509v3 Authority Key Identifier:
keyid:5D:63:17:F6:93:6E:6B:57:8B:38:C3:DF:B1:98:02:54:98:FC:AE:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWMX9pNua1eLOMPfsZgCVJj8rqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:44:c7:70:6d:c1:cb:68:72:14:ce:c2:b9:d5:4f:36:90:ad:
53:72:11:69:2c:08:6b:6e:5e:ed:44:c0:9d:b2:df:7c:fe:d0:
a2:d5:6b:e4:91:88:a9:61:40:e5:c3:b4:65:33:31:a3:df:96:
3d:7c:61:35:7a:09:36:76:2b:1a:ea:78:46:ff:70:67:dd:ea:
e7:f3:51:07:81:1f:a6:55:39:66:1b:e5:8b:96:51:c5:fa:13:
cf:5c:30:88:96:95:95:1c:11:d4:09:fb:06:4c:fb:34:63:88:
8b:72:32:0f:ca:25:59:bf:3e:29:da:e7:d1:41:60:2f:07:71:
a8:65:83:79:1b:29:a2:cb:db:fc:81:f0:1b:64:78:ba:5c:bf:
59:a6:38:59:2c:eb:2d:37:03:8c:64:73:77:e5:3e:3f:58:66:
18:b1:4f:ab:8a:a4:ec:db:f7:7c:d1:70:ad:a4:11:cc:20:f9:
cd:87:e5:8c:f9:44:cb:af:0e:9e:d3:cd:e4:40:b9:dc:ed:cf:
93:66:4e:d5:5b:4f:97:15:72:28:09:f2:11:37:ac:f9:98:94:
5f:e0:7f:a2:cb:4a:ab:df:2f:13:e4:25:13:0c:1e:62:c7:62:
67:1b:77:8e:49:eb:b2:f1:22:12:de:fb:04:15:48:88:a7:e8:
df:88:ba:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03G7x9+2EYJ8Az/lsM8uqjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkNjMxN2Y2OTM2ZTZiNTc4YjM4YzNkZmIxOTgwMjU0OThm
Y2FlYTEwHhcNMjYwMzI5MDEwMDU3WhcNMjYwMzMwMDEwMDU3WjAzMTEwLwYDVQQD
Eyg1NjA4MGIxODY4NGU0YmJjODEwZTVjNGUwOGJmNzhlNTE1MTJhMTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA464FKBMlBs+2xnUf1t/rlBq9PonF
o5LY0jeoMG6iDmPT+2RwQeS9GU/ENkx8PgZ2Y7C9DZoy/SLVctT6blnitshhW0Oq
XUfelvMNLPhYEsThr7Fj9mU0nN9+KbwQYXrKMgUYqfB5A1OjV+vOhNHYOEyEPWII
YyQ2aH2toyOh/2EDj+Y7rWmYz3VXwtxAxZNWcLX8Ju6ufhR2VDwSYys4qcC1JbB5
hWhnJQdmL1QK+/FrDBphvo5sNsZekl8Hb6zzdQ8C7zIL5Fvte9gaU6tekZuV2lIk
V4X/VMBK2v6Eeq7FBFbUE4cotQMRuL0maeSzoE1bgSXHeFMdYmp/XSKZ+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFYICxhoTku8gQ5cTgi/eOUVEqEWMB8GA1UdIwQY
MBaAFF1jF/aTbmtXizjD37GYAlSY/K6hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFdNWDlwTnVhMWVMT01QZnNaZ0NWSmo4cnFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8wMzQ5MGMtZWE0Ny00MDJhLThiYjAt
ZDU2NThkMGYzMjkyLzEvWFdNWDlwTnVhMWVMT01QZnNaZ0NWSmo4cnFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi8wMzQ5MGMtZWE0Ny00MDJhLThiYjAtZDU2NThkMGYzMjky
LzEvWFdNWDlwTnVhMWVMT01QZnNaZ0NWSmo4cnFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy0THcG3B
y2hyFM7CudVPNpCtU3IRaSwIa25e7UTAnbLffP7QotVr5JGIqWFA5cO0ZTMxo9+W
PXxhNXoJNnYrGup4Rv9wZ93q5/NRB4EfplU5Zhvli5ZRxfoTz1wwiJaVlRwR1An7
Bkz7NGOIi3IyD8olWb8+Kdrn0UFgLwdxqGWDeRsposvb/IHwG2R4uly/WaY4WSzr
LTcDjGRzd+U+P1hmGLFPq4qk7Nv3fNFwraQRzCD5zYfljPlEy68OntPN5EC53O3P
k2ZO1VtPlxVyKAnyETes+ZiUX+B/ostKq98vE+QlEwweYsdiZxt3jknrsvEiEt77
BBVIiKfo34i6TA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:41 2026 by rpki-client