Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.mft
File: xcWsx_fsK0W0PSVHyWRkwAiTPVI.mft (raw, json)
Hash identifier: /qNB66ZnJRSASlXjz+VwwVn186Gk3wIgCsAI51dZ1L0=
Subject key identifier: 52:F3:8E:08:77:5C:DB:15:C5:F8:CE:46:BB:9E:7F:68:92:C5:D5:DE
Authority key identifier: C5:C5:AC:C7:F7:EC:2B:45:B4:3D:25:47:C9:64:64:C0:08:93:3D:52
Certificate issuer: /CN=c5c5acc7f7ec2b45b43d2547c96464c008933d52
Certificate serial: 019D389C521C328C6F09EF4453AD59FA3C3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xcWsx_fsK0W0PSVHyWRkwAiTPVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 08:01:01 +0000
Manifest this update: Sun 29 Mar 2026 08:01:01 +0000
Manifest next update: Mon 30 Mar 2026 08:01:01 +0000
Files and hashes: 1: hbtaOvEFCXtoUrdAHECiUoig7xU.roa (hash: O68z7xb4iBIuS0t0SJsBOxoH1aeWdrmSjVIjONruRgY=)
2: xcWsx_fsK0W0PSVHyWRkwAiTPVI.crl (hash: YiMHmXzWadHeMweMd5WcfZGW8i6sWd/f1Ru83OQpiX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xcWsx_fsK0W0PSVHyWRkwAiTPVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:52:1c:32:8c:6f:09:ef:44:53:ad:59:fa:3c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5c5acc7f7ec2b45b43d2547c96464c008933d52
Validity
Not Before: Mar 29 08:01:01 2026 GMT
Not After : Mar 30 08:01:01 2026 GMT
Subject: CN=52f38e08775cdb15c5f8ce46bb9e7f6892c5d5de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2e:fa:bd:f5:10:d8:87:44:ec:c6:d4:94:e3:
8d:df:44:03:92:a2:84:0e:58:f6:4f:62:aa:bf:13:
31:90:84:7a:de:e8:d3:82:f2:69:16:f5:8a:ff:b9:
b5:fb:c2:24:f8:a0:91:82:74:31:17:bd:23:ac:e2:
d2:99:fa:ba:9a:6d:f3:e8:b6:39:d5:79:61:be:1a:
15:34:7f:f3:b7:c7:6c:8f:d2:a0:36:09:5f:af:ef:
6e:f5:1e:f9:92:af:b6:de:65:95:65:a2:89:91:44:
a0:f3:5c:b5:9c:63:c9:38:33:92:a2:f6:64:c1:6c:
9b:ca:55:51:15:1a:b8:89:cd:82:7e:57:bb:a5:c5:
44:9c:11:af:77:f5:a3:83:bc:54:ba:14:86:7e:ff:
1f:df:e0:d8:45:de:6c:72:a9:b2:0a:bb:e0:9b:40:
ff:c7:5e:0f:21:0f:96:cf:6b:32:38:7d:27:c1:e1:
62:86:52:4e:7c:67:1c:db:4c:6c:63:bc:68:36:5b:
d8:a7:f9:c1:a2:c1:28:ea:aa:1d:41:1a:63:7e:0b:
2d:33:34:0a:dd:92:20:a8:eb:a3:6e:e8:e9:4d:0e:
56:a6:d2:8e:d8:59:b7:bd:b2:83:24:6a:02:15:4c:
4b:e3:8c:aa:9a:d1:44:46:8d:8c:42:34:34:77:aa:
cd:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F3:8E:08:77:5C:DB:15:C5:F8:CE:46:BB:9E:7F:68:92:C5:D5:DE
X509v3 Authority Key Identifier:
keyid:C5:C5:AC:C7:F7:EC:2B:45:B4:3D:25:47:C9:64:64:C0:08:93:3D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcWsx_fsK0W0PSVHyWRkwAiTPVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:c8:93:4b:58:0c:64:64:7a:68:5c:8e:37:85:e5:44:79:73:
4b:a8:21:d1:e1:fc:97:79:c3:8f:df:5e:98:02:68:51:41:e5:
00:39:01:f2:6d:12:85:3a:c7:c9:fc:bc:8f:7e:72:40:8a:82:
26:64:f5:48:29:2b:00:02:da:7f:7c:4b:8f:3f:0e:00:30:57:
6b:75:ef:91:b0:2c:94:12:ea:aa:0f:fc:b3:5d:8d:0f:2d:91:
04:06:72:d7:6d:ba:d6:85:06:6f:16:52:8d:04:05:e8:97:40:
bb:85:1f:3c:65:d9:3f:af:2b:58:56:d7:c9:6a:55:e9:82:54:
cf:0f:00:93:6d:2f:10:bd:08:16:1d:33:8d:9b:c1:e9:fc:7b:
15:67:3d:af:bd:81:e8:4c:ba:31:75:96:a5:5b:17:d0:2e:36:
ed:6f:fe:ec:aa:15:1b:53:67:ed:c4:de:0f:23:df:f3:2a:ef:
fb:7e:0d:82:15:12:46:13:70:69:8a:39:d6:88:5b:14:63:3c:
cc:bb:86:55:ad:ab:10:ad:e9:41:46:2b:1c:4c:81:41:8f:09:
c4:fb:fa:15:de:49:a0:33:8c:93:bb:0c:8c:55:51:bb:ec:12:
aa:98:be:ab:3e:f0:2d:a3:44:2a:0e:75:e3:49:de:37:90:09:
bd:b2:47:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nFIcMoxvCe9EU61Z+jw+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1YzVhY2M3ZjdlYzJiNDViNDNkMjU0N2M5NjQ2NGMwMDg5
MzNkNTIwHhcNMjYwMzI5MDgwMTAxWhcNMjYwMzMwMDgwMTAxWjAzMTEwLwYDVQQD
Eyg1MmYzOGUwODc3NWNkYjE1YzVmOGNlNDZiYjllN2Y2ODkyYzVkNWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqy76vfUQ2IdE7MbUlOON30QDkqKE
Dlj2T2KqvxMxkIR63ujTgvJpFvWK/7m1+8Ik+KCRgnQxF70jrOLSmfq6mm3z6LY5
1XlhvhoVNH/zt8dsj9KgNglfr+9u9R75kq+23mWVZaKJkUSg81y1nGPJODOSovZk
wWybylVRFRq4ic2Cfle7pcVEnBGvd/Wjg7xUuhSGfv8f3+DYRd5scqmyCrvgm0D/
x14PIQ+Wz2syOH0nweFihlJOfGcc20xsY7xoNlvYp/nBosEo6qodQRpjfgstMzQK
3ZIgqOujbujpTQ5WptKO2Fm3vbKDJGoCFUxL44yqmtFERo2MQjQ0d6rNNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFLzjgh3XNsVxfjORruef2iSxdXeMB8GA1UdIwQY
MBaAFMXFrMf37CtFtD0lR8lkZMAIkz1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGNXc3hfZnNLMFcwUFNWSHlXUmt3QWlUUFZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My85ZjUzNmQtMGRkNi00M2VhLWE5MTQt
OWMwODhjMzQ1YWU2LzEveGNXc3hfZnNLMFcwUFNWSHlXUmt3QWlUUFZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My85ZjUzNmQtMGRkNi00M2VhLWE5MTQtOWMwODhjMzQ1YWU2
LzEveGNXc3hfZnNLMFcwUFNWSHlXUmt3QWlUUFZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA8iTS1gM
ZGR6aFyON4XlRHlzS6gh0eH8l3nDj99emAJoUUHlADkB8m0ShTrHyfy8j35yQIqC
JmT1SCkrAALaf3xLjz8OADBXa3XvkbAslBLqqg/8s12NDy2RBAZy12261oUGbxZS
jQQF6JdAu4UfPGXZP68rWFbXyWpV6YJUzw8Ak20vEL0IFh0zjZvB6fx7FWc9r72B
6Ey6MXWWpVsX0C427W/+7KoVG1Nn7cTeDyPf8yrv+34NghUSRhNwaYo51ohbFGM8
zLuGVa2rEK3pQUYrHEyBQY8JxPv6Fd5JoDOMk7sMjFVRu+wSqpi+qz7wLaNEKg51
40neN5AJvbJHmg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:32 2026 by rpki-client