Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/454f03-0877-445d-bfb1-7703250bfbab/1/xvYePrPLRHrKbZpDVs11cXp7fGg.mft
File: xvYePrPLRHrKbZpDVs11cXp7fGg.mft (raw, json)
Hash identifier: XMOSUFngOzojgvwMMIKPtiNKVWE3PovQhcU70ATxd4Y=
Subject key identifier: CD:76:45:F8:2B:E1:13:B5:01:FC:AC:E1:36:89:9C:63:47:04:B0:85
Authority key identifier: C6:F6:1E:3E:B3:CB:44:7A:CA:6D:9A:43:56:CD:75:71:7A:7B:7C:68
Certificate issuer: /CN=c6f61e3eb3cb447aca6d9a4356cd75717a7b7c68
Certificate serial: 019D39AE79A4E744CF29DDFD985EA528917D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xvYePrPLRHrKbZpDVs11cXp7fGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/454f03-0877-445d-bfb1-7703250bfbab/1/xvYePrPLRHrKbZpDVs11cXp7fGg.mft
Manifest number: 0241
Signing time: Sun 29 Mar 2026 13:00:28 +0000
Manifest this update: Sun 29 Mar 2026 13:00:28 +0000
Manifest next update: Mon 30 Mar 2026 13:00:28 +0000
Files and hashes: 1: A69snNPiFFp-ZJHhhhFBxkLfqjc.roa (hash: VH0DEovfxx+abP3tX81hidYcbrd76YLHMgGtB2rBB34=)
2: xvYePrPLRHrKbZpDVs11cXp7fGg.crl (hash: lX1eC+W5qb6TzBsEi8uaYuHVfSm+6xtGgYGOawXz1mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/454f03-0877-445d-bfb1-7703250bfbab/1/xvYePrPLRHrKbZpDVs11cXp7fGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/454f03-0877-445d-bfb1-7703250bfbab/1/xvYePrPLRHrKbZpDVs11cXp7fGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xvYePrPLRHrKbZpDVs11cXp7fGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:79:a4:e7:44:cf:29:dd:fd:98:5e:a5:28:91:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6f61e3eb3cb447aca6d9a4356cd75717a7b7c68
Validity
Not Before: Mar 29 13:00:28 2026 GMT
Not After : Mar 30 13:00:28 2026 GMT
Subject: CN=cd7645f82be113b501fcace136899c634704b085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a1:ba:11:5c:fb:61:c9:03:17:08:33:22:1f:
91:a3:7b:bd:c0:7a:a6:3f:64:44:da:ce:e6:85:35:
d5:eb:e8:0d:2c:0a:68:c3:ca:e1:e3:37:d9:a2:0b:
58:2f:9c:69:80:da:dc:7b:eb:97:e6:77:ba:d7:2a:
f4:3c:36:a5:f0:70:11:be:4c:95:16:29:90:90:38:
7a:fd:8e:24:98:ac:00:07:ec:2a:e2:27:1e:6a:45:
44:19:91:ff:f1:59:b8:a7:d1:48:9b:2b:7c:b7:dc:
ed:9d:50:97:d8:b5:75:79:f7:f1:1d:6d:eb:6c:75:
38:a8:a3:5d:a0:de:40:7f:52:ba:08:e3:a0:29:92:
60:28:c8:37:a4:ca:ad:9d:9d:9c:1f:ad:89:4e:8c:
fb:8e:a7:97:2c:26:57:0f:54:c2:e5:66:0a:b5:5e:
25:5a:bf:16:9a:d3:92:d4:e2:2d:9d:1b:ef:d9:99:
29:cf:35:68:74:2e:e5:f8:db:e0:be:3b:69:50:26:
47:51:eb:7e:50:8b:a8:8a:e6:6e:10:2f:c9:ba:5c:
4b:99:50:6a:6b:e2:51:4a:c6:ae:a9:75:c9:04:10:
ea:78:ad:9e:df:ba:8a:fd:93:aa:49:7a:3c:60:83:
9d:e0:6b:7b:8b:ca:86:33:ad:81:99:c5:23:66:4f:
32:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:76:45:F8:2B:E1:13:B5:01:FC:AC:E1:36:89:9C:63:47:04:B0:85
X509v3 Authority Key Identifier:
keyid:C6:F6:1E:3E:B3:CB:44:7A:CA:6D:9A:43:56:CD:75:71:7A:7B:7C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvYePrPLRHrKbZpDVs11cXp7fGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/454f03-0877-445d-bfb1-7703250bfbab/1/xvYePrPLRHrKbZpDVs11cXp7fGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/454f03-0877-445d-bfb1-7703250bfbab/1/xvYePrPLRHrKbZpDVs11cXp7fGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:53:ae:26:b3:1e:2b:c7:f7:96:17:7c:05:d6:d8:9f:61:89:
bc:3f:0a:89:ba:52:b2:b0:70:5b:f4:0e:4f:db:6f:33:2b:80:
1d:a5:93:8b:23:a9:93:ec:ee:4d:02:0e:85:ae:97:f0:df:7d:
d5:e3:cd:6d:95:09:a1:65:a0:3f:10:3e:d6:11:e7:b7:0d:31:
c8:11:56:ac:62:3f:fb:7b:de:dc:37:9a:13:8c:a4:29:ea:83:
ae:0d:0a:32:63:e5:bc:37:0f:a6:5a:a9:ff:f4:4e:3f:ae:35:
06:4f:1f:35:1f:aa:2c:8f:db:58:c5:c4:6c:8d:a8:97:ba:fd:
3d:4e:d9:19:a1:bd:e4:62:0a:ce:fc:2f:c8:8f:4e:c0:49:e2:
30:74:2c:72:cf:35:00:c2:22:b6:43:c1:8d:45:6c:0a:6d:85:
59:9e:29:9e:45:43:dc:92:a6:d9:10:5d:af:ed:71:12:90:1e:
e4:fe:98:e5:55:36:57:65:cb:0c:c7:4e:fd:96:86:37:d5:51:
c3:80:22:85:6c:0a:85:c7:2e:f5:30:5c:11:31:ab:61:52:af:
15:16:97:4f:e7:00:52:fd:83:72:7b:6e:76:8c:37:d5:b0:45:
25:b4:29:12:dd:a9:42:f4:10:73:b1:83:d1:ed:94:08:15:cd:
3f:d2:3c:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rnmk50TPKd39mF6lKJF9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2ZjYxZTNlYjNjYjQ0N2FjYTZkOWE0MzU2Y2Q3NTcxN2E3
YjdjNjgwHhcNMjYwMzI5MTMwMDI4WhcNMjYwMzMwMTMwMDI4WjAzMTEwLwYDVQQD
EyhjZDc2NDVmODJiZTExM2I1MDFmY2FjZTEzNjg5OWM2MzQ3MDRiMDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKG6EVz7YckDFwgzIh+Ro3u9wHqm
P2RE2s7mhTXV6+gNLApow8rh4zfZogtYL5xpgNrce+uX5ne61yr0PDal8HARvkyV
FimQkDh6/Y4kmKwAB+wq4iceakVEGZH/8Vm4p9FImyt8t9ztnVCX2LV1effxHW3r
bHU4qKNdoN5Af1K6COOgKZJgKMg3pMqtnZ2cH62JToz7jqeXLCZXD1TC5WYKtV4l
Wr8WmtOS1OItnRvv2ZkpzzVodC7l+NvgvjtpUCZHUet+UIuoiuZuEC/JulxLmVBq
a+JRSsauqXXJBBDqeK2e37qK/ZOqSXo8YIOd4Gt7i8qGM62BmcUjZk8y5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM12Rfgr4RO1Afys4TaJnGNHBLCFMB8GA1UdIwQY
MBaAFMb2Hj6zy0R6ym2aQ1bNdXF6e3xoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHZZZVByUExSSHJLYlpwRFZzMTFjWHA3ZkdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny80NTRmMDMtMDg3Ny00NDVkLWJmYjEt
NzcwMzI1MGJmYmFiLzEveHZZZVByUExSSHJLYlpwRFZzMTFjWHA3ZkdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny80NTRmMDMtMDg3Ny00NDVkLWJmYjEtNzcwMzI1MGJmYmFi
LzEveHZZZVByUExSSHJLYlpwRFZzMTFjWHA3ZkdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGlOuJrMe
K8f3lhd8BdbYn2GJvD8KibpSsrBwW/QOT9tvMyuAHaWTiyOpk+zuTQIOha6X8N99
1ePNbZUJoWWgPxA+1hHntw0xyBFWrGI/+3ve3DeaE4ykKeqDrg0KMmPlvDcPplqp
//ROP641Bk8fNR+qLI/bWMXEbI2ol7r9PU7ZGaG95GIKzvwvyI9OwEniMHQscs81
AMIitkPBjUVsCm2FWZ4pnkVD3JKm2RBdr+1xEpAe5P6Y5VU2V2XLDMdO/ZaGN9VR
w4AihWwKhccu9TBcETGrYVKvFRaXT+cAUv2Dcntudow31bBFJbQpEt2pQvQQc7GD
0e2UCBXNP9I8lg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 21:10:39 2026 by rpki-client