Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft
File: Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft (raw, json)
Hash identifier: 3D1DYQ34Wbc2JlkEJHXzDigeDln54VBoMhjnuVnTVNo=
Subject key identifier: 24:9B:43:69:36:EB:6A:85:AC:ED:7B:60:84:EE:17:87:E1:D6:1D:CA
Authority key identifier: 5E:7F:D9:58:6F:9C:CB:0F:B4:48:7B:20:8C:DF:46:75:E5:BB:F3:30
Certificate issuer: /CN=5e7fd9586f9ccb0fb4487b208cdf4675e5bbf330
Certificate serial: 019CE4EC39CD3E054BC3103431063D961363
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft
Manifest number: 1519
Signing time: Fri 13 Mar 2026 02:00:12 +0000
Manifest this update: Fri 13 Mar 2026 02:00:12 +0000
Manifest next update: Sat 14 Mar 2026 02:00:12 +0000
Files and hashes: 1: 7iD4K1gccNErcwUL56fdA_X6dFo.roa (hash: im8taFI4fIVJ8hCEmSfog0Wq6myLmqj/L7AJRggXUII=)
2: Xn_ZWG-cyw-0SHsgjN9GdeW78zA.crl (hash: mlZ/ool/Wm/KjSQ6HFkUjljWhb6EtB801b6uuhm4y8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:ec:39:cd:3e:05:4b:c3:10:34:31:06:3d:96:13:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7fd9586f9ccb0fb4487b208cdf4675e5bbf330
Validity
Not Before: Mar 13 02:00:12 2026 GMT
Not After : Mar 14 02:00:12 2026 GMT
Subject: CN=249b436936eb6a85aced7b6084ee1787e1d61dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0c:f6:2f:cc:a0:cd:3e:bc:e5:66:fd:2e:54:
f8:4a:86:01:20:7d:08:da:c7:ee:98:e0:ea:76:30:
f8:7a:b7:88:d0:2a:05:a5:a9:c2:57:e3:94:a0:44:
eb:89:2a:b1:66:d3:09:c6:ff:41:fc:2f:6d:f3:0b:
f6:af:64:22:85:6e:de:8a:05:4d:df:22:cd:90:ec:
be:d1:c0:1b:50:ce:5c:ba:98:17:47:19:d4:8f:16:
14:7c:3b:c6:6e:e1:9b:85:d8:1e:bf:fd:3c:d2:c0:
12:9e:8a:b7:eb:36:fa:0c:c8:3e:e8:90:73:d4:f0:
66:d2:04:14:96:54:87:a8:ed:91:89:1e:51:9e:1e:
27:3d:de:fa:66:39:85:e0:47:20:48:a7:46:82:7a:
7d:01:ca:29:c6:c6:d3:f5:9b:51:57:a4:b6:15:59:
40:7d:cf:20:1a:29:b7:25:3b:ed:d9:6f:4a:d7:bf:
72:0b:df:fa:21:5a:d5:1d:51:24:8d:65:97:4a:12:
80:f5:58:63:05:04:2f:00:41:bd:83:dc:fe:e2:77:
48:f1:52:3e:b2:3b:37:e6:3b:c7:a8:08:04:29:29:
8d:1d:1e:92:26:57:9f:70:b9:b7:e6:89:05:a8:3c:
41:1c:3f:0e:54:8b:8f:1c:3c:b4:6d:41:30:41:36:
6d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:9B:43:69:36:EB:6A:85:AC:ED:7B:60:84:EE:17:87:E1:D6:1D:CA
X509v3 Authority Key Identifier:
keyid:5E:7F:D9:58:6F:9C:CB:0F:B4:48:7B:20:8C:DF:46:75:E5:BB:F3:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:25:b6:d7:27:f6:3e:98:fd:e2:d5:45:f0:b1:b9:9d:4e:32:
5f:6d:0e:5b:d2:63:46:c2:30:cf:a7:00:8c:55:5d:8c:29:43:
92:46:f6:dc:9c:d3:3c:1e:0c:9f:cf:6d:a3:f6:4f:af:76:bb:
da:d7:86:6e:c3:9b:26:cd:c4:73:40:cb:2f:56:ab:2a:92:24:
46:69:fb:29:a1:6f:2a:13:8f:56:34:93:e8:cb:67:14:b5:97:
ff:6c:9a:b5:43:03:52:70:cd:2c:79:f8:6b:65:5e:d3:96:ab:
cc:11:35:bf:c5:11:4f:f7:96:df:22:f6:4e:f8:6a:f2:45:42:
e6:b7:7f:81:68:91:0e:1a:0a:fc:81:5a:c5:23:bc:9d:01:2e:
d3:4b:b0:89:db:40:59:40:b1:a1:ea:99:31:a2:d6:0f:e4:19:
6a:28:bc:17:88:8b:97:a7:71:6b:77:aa:91:e4:95:40:5c:3b:
bb:fe:f1:aa:59:e3:0e:dc:e2:7f:c0:31:bb:17:18:a8:d9:77:
e1:06:c3:5e:0a:a3:ed:8f:e0:31:7e:5a:3b:61:2c:66:43:d3:
42:b1:55:fa:01:82:b5:a0:b1:be:f5:f1:da:e9:7f:8f:18:f8:
e9:28:a7:b8:40:e6:8a:16:09:e3:ac:d5:bc:72:11:75:ea:e0:
24:5c:ef:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzk7DnNPgVLwxA0MQY9lhNjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlN2ZkOTU4NmY5Y2NiMGZiNDQ4N2IyMDhjZGY0Njc1ZTVi
YmYzMzAwHhcNMjYwMzEzMDIwMDEyWhcNMjYwMzE0MDIwMDEyWjAzMTEwLwYDVQQD
EygyNDliNDM2OTM2ZWI2YTg1YWNlZDdiNjA4NGVlMTc4N2UxZDYxZGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAz2L8ygzT685Wb9LlT4SoYBIH0I
2sfumODqdjD4ereI0CoFpanCV+OUoETriSqxZtMJxv9B/C9t8wv2r2QihW7eigVN
3yLNkOy+0cAbUM5cupgXRxnUjxYUfDvGbuGbhdgev/080sASnoq36zb6DMg+6JBz
1PBm0gQUllSHqO2RiR5Rnh4nPd76ZjmF4EcgSKdGgnp9AcopxsbT9ZtRV6S2FVlA
fc8gGim3JTvt2W9K179yC9/6IVrVHVEkjWWXShKA9VhjBQQvAEG9g9z+4ndI8VI+
sjs35jvHqAgEKSmNHR6SJlefcLm35okFqDxBHD8OVIuPHDy0bUEwQTZtjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCSbQ2k262qFrO17YITuF4fh1h3KMB8GA1UdIwQY
MBaAFF5/2VhvnMsPtEh7IIzfRnXlu/MwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG5fWldHLWN5dy0wU0hzZ2pOOUdkZVc3OHpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8xNWU1M2QtNzBiMC00MjY4LTkxMjQt
NGIwMWQ2M2U3OTVjLzEvWG5fWldHLWN5dy0wU0hzZ2pOOUdkZVc3OHpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC8xNWU1M2QtNzBiMC00MjY4LTkxMjQtNGIwMWQ2M2U3OTVj
LzEvWG5fWldHLWN5dy0wU0hzZ2pOOUdkZVc3OHpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXCW21yf2
Ppj94tVF8LG5nU4yX20OW9JjRsIwz6cAjFVdjClDkkb23JzTPB4Mn89to/ZPr3a7
2teGbsObJs3Ec0DLL1arKpIkRmn7KaFvKhOPVjST6MtnFLWX/2yatUMDUnDNLHn4
a2Ve05arzBE1v8URT/eW3yL2Tvhq8kVC5rd/gWiRDhoK/IFaxSO8nQEu00uwidtA
WUCxoeqZMaLWD+QZaii8F4iLl6dxa3eqkeSVQFw7u/7xqlnjDtzif8AxuxcYqNl3
4QbDXgqj7Y/gMX5aO2EsZkPTQrFV+gGCtaCxvvXx2ul/jxj46SinuEDmihYJ46zV
vHIRdergJFzvsw==
-----END CERTIFICATE-----
Generated at Fri Mar 13 10:55:25 2026 by rpki-client