Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
File: xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft (raw, json)
Hash identifier: p7T2Zk+dWtnegX+uSUVgUkKTe3RLcwBIdQxT2F4CQkM=
Subject key identifier: 48:9F:90:62:9A:63:EE:7D:F9:EC:6A:67:74:72:34:45:89:9C:5F:E1
Authority key identifier: C6:56:13:D5:99:9F:36:32:98:5E:D8:9A:02:EF:AA:BD:18:90:BA:09
Certificate issuer: /CN=c65613d5999f3632985ed89a02efaabd1890ba09
Certificate serial: 019D1044D5AF025A1C32BA9A6A01A470655C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
Manifest number: 0498
Signing time: Sat 21 Mar 2026 12:00:39 +0000
Manifest this update: Sat 21 Mar 2026 12:00:39 +0000
Manifest next update: Sun 22 Mar 2026 12:00:39 +0000
Files and hashes: 1: MWnPy89PH_1TfAr-2f04R8v5sE4.roa (hash: lLx6SLjmp2bg19wDs+FyMt7/MMn+v1mjyT18ZnGU1Mk=)
2: _InFEIoYoBff0XPi6Qu-BDtEOeA.roa (hash: 1FQgWq9bmnmW/hqAWc6TQBl0/lSLnU+yUMWdU6LEwbc=)
3: m2sCh5HkLxEE1VASi8B7f5_IGDo.asa (hash: 4Epl+7kUup5rqY+UK4i3mas67nTsku/KVZ8PPtRd/NQ=)
4: xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl (hash: stGRzgNbKJ1OXUWVA0K0f4lO7WBQftF6GYKEy0YpxHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:10:44:d5:af:02:5a:1c:32:ba:9a:6a:01:a4:70:65:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65613d5999f3632985ed89a02efaabd1890ba09
Validity
Not Before: Mar 21 12:00:39 2026 GMT
Not After : Mar 22 12:00:39 2026 GMT
Subject: CN=489f90629a63ee7df9ec6a6774723445899c5fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:22:c0:d1:07:14:ff:2b:3a:d5:d0:fa:66:99:
2d:86:bc:81:e1:ae:72:35:c6:07:a9:44:61:db:31:
24:b1:c7:96:9c:11:85:81:e2:78:0b:56:f3:72:b3:
48:4d:71:20:40:74:d4:ef:5c:a4:5f:26:18:c5:7e:
7d:a7:e0:7d:0a:1e:2c:77:0f:3e:0d:71:ee:ae:a1:
54:14:ab:d8:f1:fe:4f:ed:6b:77:f2:2e:d4:f6:a1:
c2:42:5e:18:97:63:10:9b:c7:49:7a:0d:ea:1d:68:
8e:bf:32:96:18:6d:02:dc:7c:24:bc:61:0e:79:14:
8c:ce:50:06:6f:2a:e0:ba:82:e3:c4:fd:a5:b1:63:
6e:2a:71:00:3c:96:9e:c7:b2:b2:6c:28:d7:e3:99:
ce:8c:40:99:85:a0:e5:14:c7:34:c7:0d:4e:a4:8e:
0e:13:7e:dd:21:5d:21:91:bb:7d:09:da:2d:7d:df:
3a:e8:b2:16:f8:43:c8:a8:36:58:33:d0:2e:b1:ce:
d3:64:7b:82:d1:a6:ca:94:33:97:de:2c:98:b3:9f:
15:f2:37:af:b7:bd:ec:1a:28:ec:c8:bd:1b:1d:09:
10:f6:ba:96:48:c4:91:99:f5:78:26:43:d5:45:07:
50:9f:d2:30:e9:20:21:12:6c:74:61:c7:a3:23:7c:
f7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:9F:90:62:9A:63:EE:7D:F9:EC:6A:67:74:72:34:45:89:9C:5F:E1
X509v3 Authority Key Identifier:
keyid:C6:56:13:D5:99:9F:36:32:98:5E:D8:9A:02:EF:AA:BD:18:90:BA:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:56:6e:e6:d0:bb:7d:0a:62:15:48:3f:7d:0e:82:f4:6c:58:
60:c5:43:45:75:3e:08:11:37:57:56:ba:c6:e0:25:74:80:e9:
89:57:45:e4:74:60:b5:4b:85:95:cb:a7:9b:78:9e:cd:cb:d7:
60:23:be:ce:d1:46:f5:98:1f:fc:e8:ab:05:13:95:c7:8c:a1:
84:74:1b:e9:9a:46:fa:54:cc:4b:31:48:56:57:99:c8:48:d5:
e9:32:81:f6:bf:5f:e6:51:44:3a:97:bc:f6:8e:39:d8:d0:1b:
25:f3:df:a2:20:62:96:50:74:e1:81:44:00:e2:5d:d9:6a:d9:
7a:82:bd:e7:ea:86:45:23:5c:c8:67:88:c1:6a:4b:6b:1d:dd:
1f:e0:4e:74:9e:7a:9f:1a:61:93:6c:02:ea:12:d9:1b:c7:d0:
41:d9:da:81:6a:98:96:c5:9e:2b:37:44:59:13:88:56:75:45:
26:9f:71:9a:61:c8:a1:93:0e:69:6c:b1:f9:c1:82:e4:92:9e:
be:69:df:0b:09:f4:43:88:ae:98:66:c7:52:fc:0e:60:bb:14:
de:3e:62:c9:3a:3d:9a:19:2b:00:29:7c:4c:a9:8a:c2:65:54:
be:41:23:b6:74:21:33:e6:41:12:fe:3a:95:a0:45:d6:82:d6:
e6:e6:c2:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0QRNWvAlocMrqaagGkcGVcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NTYxM2Q1OTk5ZjM2MzI5ODVlZDg5YTAyZWZhYWJkMTg5
MGJhMDkwHhcNMjYwMzIxMTIwMDM5WhcNMjYwMzIyMTIwMDM5WjAzMTEwLwYDVQQD
Eyg0ODlmOTA2MjlhNjNlZTdkZjllYzZhNjc3NDcyMzQ0NTg5OWM1ZmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyLA0QcU/ys61dD6ZpkthryB4a5y
NcYHqURh2zEksceWnBGFgeJ4C1bzcrNITXEgQHTU71ykXyYYxX59p+B9Ch4sdw8+
DXHurqFUFKvY8f5P7Wt38i7U9qHCQl4Yl2MQm8dJeg3qHWiOvzKWGG0C3HwkvGEO
eRSMzlAGbyrguoLjxP2lsWNuKnEAPJaex7KybCjX45nOjECZhaDlFMc0xw1OpI4O
E37dIV0hkbt9Cdotfd866LIW+EPIqDZYM9Ausc7TZHuC0abKlDOX3iyYs58V8jev
t73sGijsyL0bHQkQ9rqWSMSRmfV4JkPVRQdQn9Iw6SAhEmx0YcejI3z3vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEifkGKaY+59+exqZ3RyNEWJnF/hMB8GA1UdIwQY
MBaAFMZWE9WZnzYymF7YmgLvqr0YkLoJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGxZVDFabWZOaktZWHRpYUF1LXF2UmlRdWdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8zZDhhYWMtZDM5OC00M2FiLTljM2Ut
NjUwOTkyZjJhMTc0LzEveGxZVDFabWZOaktZWHRpYUF1LXF2UmlRdWdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8zZDhhYWMtZDM5OC00M2FiLTljM2UtNjUwOTkyZjJhMTc0
LzEveGxZVDFabWZOaktZWHRpYUF1LXF2UmlRdWdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPVZu5tC7
fQpiFUg/fQ6C9GxYYMVDRXU+CBE3V1a6xuAldIDpiVdF5HRgtUuFlcunm3iezcvX
YCO+ztFG9Zgf/OirBROVx4yhhHQb6ZpG+lTMSzFIVleZyEjV6TKB9r9f5lFEOpe8
9o452NAbJfPfoiBillB04YFEAOJd2WrZeoK95+qGRSNcyGeIwWpLax3dH+BOdJ56
nxphk2wC6hLZG8fQQdnagWqYlsWeKzdEWROIVnVFJp9xmmHIoZMOaWyx+cGC5JKe
vmnfCwn0Q4iumGbHUvwOYLsU3j5iyTo9mhkrACl8TKmKwmVUvkEjtnQhM+ZBEv46
laBF1oLW5ubCgw==
-----END CERTIFICATE-----
Generated at Sat Mar 21 22:08:39 2026 by rpki-client