Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
File: XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft (raw, json)
Hash identifier: rABezFYUFRmgEm5fFAoAy9UNeuSffKPGYCDPZ18MRjM=
Subject key identifier: 5F:DF:6C:ED:81:11:39:F5:94:89:51:01:F2:C8:2D:A5:59:5D:BD:C2
Authority key identifier: 5F:02:11:C9:1E:9E:0D:35:CB:51:33:45:91:3E:0A:1A:61:BF:D2:49
Certificate issuer: /CN=5f0211c91e9e0d35cb513345913e0a1a61bfd249
Certificate serial: 019D38657AFA067DAEAE7D3B288536763705
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
Manifest number: 038E
Signing time: Sun 29 Mar 2026 07:01:07 +0000
Manifest this update: Sun 29 Mar 2026 07:01:07 +0000
Manifest next update: Mon 30 Mar 2026 07:01:07 +0000
Files and hashes: 1: 9t-kj9KSgE_mtJrGu_vF73d0l6Y.roa (hash: 51rv5VaG8OxclhZBSDZarO+xxvZazg5aJ0EVnW1xLb4=)
2: Cp2g6yP8AZxNfoA9Wugu4JCgHtU.roa (hash: dD5+5+i7pHxfaDCaP1GC9Pk/dDoxKx8XSPEPjuWP/AY=)
3: LFwn43xTYGqoLZrK3ArerlmBrjQ.asa (hash: AxTumCJIWLYkfNBVRk61fjyr7ogt1SGEuY0CQ+zm9dQ=)
4: Nc1LVsFzrH3eQcfHMAmDYgj_p64.asa (hash: /m2FPHvyf0O1/JM/QcuY6SFVqTD2GvTjahW6Zjqr3lE=)
5: XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl (hash: ZA8yXV8SuRQIocDoFSDzu981cDisLcoDhaLlg/TLT4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:7a:fa:06:7d:ae:ae:7d:3b:28:85:36:76:37:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0211c91e9e0d35cb513345913e0a1a61bfd249
Validity
Not Before: Mar 29 07:01:07 2026 GMT
Not After : Mar 30 07:01:07 2026 GMT
Subject: CN=5fdf6ced811139f594895101f2c82da5595dbdc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:d4:df:96:8a:3d:0b:73:bc:c1:75:8b:e6:c8:
9a:8f:c4:6d:25:02:6f:67:95:35:32:e5:2a:4d:61:
33:d7:02:61:69:ed:9b:bf:7f:96:c5:fe:3d:ca:84:
cb:80:b1:6d:72:fd:0e:19:f8:6c:ed:8b:7a:cd:a8:
35:a9:e2:4e:50:6e:1b:b8:94:c9:03:b6:d9:89:9a:
5c:1e:7e:28:dc:7b:84:d0:be:a7:24:87:df:05:be:
11:c8:42:64:e4:8e:a6:fa:a6:69:2d:a6:a0:96:81:
5f:dc:42:c2:20:0a:57:4e:a1:c0:1c:74:52:09:41:
49:0a:b6:af:d2:aa:9b:a1:d9:1c:17:9e:03:90:41:
6f:5e:d2:26:67:9d:e5:e3:ea:3c:bb:25:8e:10:59:
31:9f:78:7f:c6:99:64:e5:4c:ea:a0:6f:5b:27:f3:
88:3e:ea:f0:df:c1:97:55:52:d0:fd:e1:b3:72:e6:
cd:9e:f5:51:2e:76:8a:08:02:c4:65:87:6a:e2:5e:
55:5e:f5:a2:3b:65:6b:22:36:b8:2c:75:8e:9e:fb:
29:0b:d1:ac:e2:23:0b:ee:57:8a:5b:5d:0b:21:74:
fa:cb:dd:16:ff:f9:b0:fb:bd:6f:8f:97:3c:b4:ea:
61:1e:cd:69:48:43:ab:ad:ec:62:90:79:39:09:96:
db:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:DF:6C:ED:81:11:39:F5:94:89:51:01:F2:C8:2D:A5:59:5D:BD:C2
X509v3 Authority Key Identifier:
keyid:5F:02:11:C9:1E:9E:0D:35:CB:51:33:45:91:3E:0A:1A:61:BF:D2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:66:37:fd:09:40:38:c7:19:0b:30:f3:7b:40:33:fe:dc:69:
2c:91:90:34:30:f9:6c:8d:18:82:3c:98:6b:8b:c4:46:4f:3f:
9b:fc:35:70:45:c0:d5:e8:60:43:66:3f:ba:a7:55:be:61:46:
ad:a4:d9:60:8d:5b:e5:42:05:f4:40:3d:bc:28:ff:22:cb:0b:
21:a1:e7:bd:29:fd:80:9b:b4:49:4b:3e:14:fa:20:81:51:aa:
d7:14:96:93:f4:5f:a9:be:a3:8e:cf:42:4f:0b:60:da:cd:96:
d4:51:80:4f:da:1e:8c:ff:68:93:ff:00:63:83:a4:c7:ea:c4:
35:13:be:88:a1:f6:1b:3e:dd:25:a7:73:a2:df:c9:e1:0e:a7:
71:76:10:ea:2f:ce:52:c7:6b:ab:b1:bf:94:5a:49:d4:a9:d1:
7b:f6:61:d5:73:27:83:29:c9:44:55:7c:69:35:2c:bc:f2:dc:
86:57:68:e9:8e:a6:87:b0:e0:a1:ea:8f:32:e9:82:95:56:68:
e2:a5:0d:0c:03:ae:17:77:04:00:03:bb:d8:31:63:e3:a4:ab:
85:79:d2:ef:ba:85:ee:57:1e:fe:5a:93:ea:dc:5a:90:3b:f9:
27:ff:65:c9:02:56:e7:25:6b:eb:26:0d:ac:81:9e:81:04:ef:
51:ab:ed:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZXr6Bn2urn07KIU2djcFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMDIxMWM5MWU5ZTBkMzVjYjUxMzM0NTkxM2UwYTFhNjFi
ZmQyNDkwHhcNMjYwMzI5MDcwMTA3WhcNMjYwMzMwMDcwMTA3WjAzMTEwLwYDVQQD
Eyg1ZmRmNmNlZDgxMTEzOWY1OTQ4OTUxMDFmMmM4MmRhNTU5NWRiZGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9NTfloo9C3O8wXWL5siaj8RtJQJv
Z5U1MuUqTWEz1wJhae2bv3+Wxf49yoTLgLFtcv0OGfhs7Yt6zag1qeJOUG4buJTJ
A7bZiZpcHn4o3HuE0L6nJIffBb4RyEJk5I6m+qZpLaagloFf3ELCIApXTqHAHHRS
CUFJCrav0qqbodkcF54DkEFvXtImZ53l4+o8uyWOEFkxn3h/xplk5UzqoG9bJ/OI
Purw38GXVVLQ/eGzcubNnvVRLnaKCALEZYdq4l5VXvWiO2VrIja4LHWOnvspC9Gs
4iML7leKW10LIXT6y90W//mw+71vj5c8tOphHs1pSEOrrexikHk5CZbbqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF/fbO2BETn1lIlRAfLILaVZXb3CMB8GA1UdIwQY
MBaAFF8CEckeng01y1EzRZE+Chphv9JJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHdJUnlSNmVEVFhMVVRORmtUNEtHbUdfMGtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny82NmQwNTctNzdlNS00MjQxLTgwYWEt
MjFmZDM1Y2Y0YmI5LzEvWHdJUnlSNmVEVFhMVVRORmtUNEtHbUdfMGtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny82NmQwNTctNzdlNS00MjQxLTgwYWEtMjFmZDM1Y2Y0YmI5
LzEvWHdJUnlSNmVEVFhMVVRORmtUNEtHbUdfMGtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbmY3/QlA
OMcZCzDze0Az/txpLJGQNDD5bI0YgjyYa4vERk8/m/w1cEXA1ehgQ2Y/uqdVvmFG
raTZYI1b5UIF9EA9vCj/IssLIaHnvSn9gJu0SUs+FPoggVGq1xSWk/Rfqb6jjs9C
Twtg2s2W1FGAT9oejP9ok/8AY4Okx+rENRO+iKH2Gz7dJadzot/J4Q6ncXYQ6i/O
Usdrq7G/lFpJ1KnRe/Zh1XMngynJRFV8aTUsvPLchldo6Y6mh7DgoeqPMumClVZo
4qUNDAOuF3cEAAO72DFj46SrhXnS77qF7lce/lqT6txakDv5J/9lyQJW5yVr6yYN
rIGegQTvUavtOg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:39 2026 by rpki-client