Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
File: xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft (raw, json)
Hash identifier: uWnmqMVw5K1StYjlfNMHBbemMg1hnz84DvGdfAqTPbg=
Subject key identifier: F5:A2:14:C9:55:A6:F0:05:14:E2:EF:79:65:18:86:BD:E2:09:62:5A
Authority key identifier: C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
Certificate issuer: /CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Certificate serial: 019D382E4A65DDF4B07DE05C0B110F34F6AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
Manifest number: 189A
Signing time: Sun 29 Mar 2026 06:00:50 +0000
Manifest this update: Sun 29 Mar 2026 06:00:50 +0000
Manifest next update: Mon 30 Mar 2026 06:00:50 +0000
Files and hashes: 1: EbX7N4kHuDXm0ug317aboa-Elyk.roa (hash: T2hYz7BsiNZAW/oKFsyjXx5vn7Ad21wTFDpKdq1SP6Q=)
2: Kd-PJMG0I6gP3eU-IVUAKt_gccg.roa (hash: guDscC6GtnjjQhv/AcT64xIdqM0iuOGm1U4WIDOTt8E=)
3: xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl (hash: 8g/FDLUA810AhKRcmzIJzWIjXFC2UkQBWgm9g/d3mi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:4a:65:dd:f4:b0:7d:e0:5c:0b:11:0f:34:f6:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Validity
Not Before: Mar 29 06:00:50 2026 GMT
Not After : Mar 30 06:00:50 2026 GMT
Subject: CN=f5a214c955a6f00514e2ef79651886bde209625a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:62:f4:0e:cf:15:83:fa:92:a8:20:60:5d:3f:
a7:5f:00:52:bb:20:60:de:59:8d:0b:b6:6e:d9:01:
e2:44:2c:bd:e3:dc:1f:64:6f:45:9b:f1:db:6e:1c:
83:77:81:ba:4a:15:35:45:e7:52:42:1b:fb:c0:a1:
ac:a7:94:42:c4:87:3e:74:13:7c:a9:cf:e4:93:cd:
9c:96:bf:b5:8d:0d:e7:8b:17:67:df:f7:b4:85:bc:
ca:d4:b4:6c:78:a1:4d:db:a3:0e:fa:95:07:94:c4:
26:ab:58:e7:4a:a4:f7:32:79:8c:96:5f:a8:10:4f:
5c:4d:32:4e:2c:21:ac:4f:fd:73:4e:88:3a:da:33:
07:ef:f6:99:63:ba:28:03:1e:86:67:df:34:03:9c:
f6:74:a7:7e:b0:3d:e2:27:98:38:24:db:f9:61:0e:
39:32:c8:92:23:70:c4:53:7f:b0:db:83:cc:a6:0e:
9a:fa:30:b0:0f:58:41:6a:99:41:3a:c5:d0:84:2a:
02:62:6e:ea:1d:82:ce:dd:7d:5c:36:f6:21:55:98:
ab:4c:c5:31:71:f6:88:20:19:34:60:8a:83:f7:51:
39:7c:ac:4a:78:7b:7e:2b:11:9b:69:3d:22:2f:f0:
db:c4:6b:1c:48:62:cd:df:aa:3f:2d:96:53:55:0b:
b3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A2:14:C9:55:A6:F0:05:14:E2:EF:79:65:18:86:BD:E2:09:62:5A
X509v3 Authority Key Identifier:
keyid:C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ec:51:6b:1c:98:2a:83:20:da:d5:2a:3f:c1:00:3b:59:0d:
b7:d1:57:9f:f1:c3:21:e1:87:95:9a:3d:b4:48:74:e8:eb:d5:
69:b4:5e:eb:62:0a:1a:01:3a:e7:39:9e:64:79:59:c9:3e:a4:
01:56:b3:ae:74:25:bd:29:1a:b5:07:bb:d4:14:de:66:09:d9:
0a:27:e2:55:41:29:1b:95:2d:d5:c1:44:4f:c4:da:e4:38:e6:
62:be:b0:7f:c5:db:d5:27:7f:bf:0a:ad:db:bb:07:74:f6:54:
49:ae:7c:4c:8e:33:7a:99:42:ea:a1:91:52:06:d9:b6:12:8f:
38:d0:56:8f:c4:a5:e1:65:e0:a8:a7:13:d2:58:12:32:9c:14:
26:19:55:28:94:00:a2:b4:4e:4a:ab:39:68:c0:fb:fb:a3:c3:
fb:f3:9a:a3:a4:d1:bb:ba:e9:55:13:d8:63:db:57:c4:a3:f0:
bc:d7:3c:d5:e8:6d:37:ae:06:da:b2:24:81:16:d8:8a:8d:24:
4c:b7:38:08:eb:90:c9:f5:fe:c1:e8:f7:ae:7d:98:8b:2c:48:
5e:06:80:30:48:a5:c3:d0:5a:a5:d4:a3:8a:bd:ec:be:b7:08:
84:e0:c4:75:a7:1d:fe:a8:96:b0:fa:cc:9c:45:16:78:98:77:
c1:e4:2b:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Lkpl3fSwfeBcCxEPNPatMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YzBmZGJiNjVjYTQ5MWNiODNjYzA4NWE0M2UwMzQwNTk2
YWU4NzMwHhcNMjYwMzI5MDYwMDUwWhcNMjYwMzMwMDYwMDUwWjAzMTEwLwYDVQQD
EyhmNWEyMTRjOTU1YTZmMDA1MTRlMmVmNzk2NTE4ODZiZGUyMDk2MjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmL0Ds8Vg/qSqCBgXT+nXwBSuyBg
3lmNC7Zu2QHiRCy949wfZG9Fm/HbbhyDd4G6ShU1RedSQhv7wKGsp5RCxIc+dBN8
qc/kk82clr+1jQ3nixdn3/e0hbzK1LRseKFN26MO+pUHlMQmq1jnSqT3MnmMll+o
EE9cTTJOLCGsT/1zTog62jMH7/aZY7ooAx6GZ980A5z2dKd+sD3iJ5g4JNv5YQ45
MsiSI3DEU3+w24PMpg6a+jCwD1hBaplBOsXQhCoCYm7qHYLO3X1cNvYhVZirTMUx
cfaIIBk0YIqD91E5fKxKeHt+KxGbaT0iL/DbxGscSGLN36o/LZZTVQuzFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPWiFMlVpvAFFOLveWUYhr3iCWJaMB8GA1UdIwQY
MBaAFMbA/btlykkcuDzAhaQ+A0BZauhzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHNEOXUyWEtTUnk0UE1DRnBENERRRmxxNkhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82NjY5YmItMWY2Mi00MmEzLTllOGQt
NDlhNjU0NTc4NmU2LzEveHNEOXUyWEtTUnk0UE1DRnBENERRRmxxNkhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi82NjY5YmItMWY2Mi00MmEzLTllOGQtNDlhNjU0NTc4NmU2
LzEveHNEOXUyWEtTUnk0UE1DRnBENERRRmxxNkhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ+xRaxyY
KoMg2tUqP8EAO1kNt9FXn/HDIeGHlZo9tEh06OvVabRe62IKGgE65zmeZHlZyT6k
AVazrnQlvSkatQe71BTeZgnZCifiVUEpG5Ut1cFET8Ta5DjmYr6wf8Xb1Sd/vwqt
27sHdPZUSa58TI4zeplC6qGRUgbZthKPONBWj8Sl4WXgqKcT0lgSMpwUJhlVKJQA
orROSqs5aMD7+6PD+/Oao6TRu7rpVRPYY9tXxKPwvNc81ehtN64G2rIkgRbYio0k
TLc4COuQyfX+wej3rn2YiyxIXgaAMEilw9BapdSjir3svrcIhODEdacd/qiWsPrM
nEUWeJh3weQrcg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:38 2026 by rpki-client