Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.mft
File: XuTrnvjdNYniMt-P6HbyXOlwehQ.mft (raw, json)
Hash identifier: aZqyFa97KqKXBCDpsHgxs1eRoJ4zCaNs8+DQ+KPMTuU=
Subject key identifier: 06:49:62:F8:8D:0A:92:B0:F7:E1:69:72:F3:62:B6:4C:4F:37:F4:DF
Authority key identifier: 5E:E4:EB:9E:F8:DD:35:89:E2:32:DF:8F:E8:76:F2:5C:E9:70:7A:14
Certificate issuer: /CN=5ee4eb9ef8dd3589e232df8fe876f25ce9707a14
Certificate serial: 019D37C058BA7F33B89502E176318908EE1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuTrnvjdNYniMt-P6HbyXOlwehQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.mft
Manifest number: 128A
Signing time: Sun 29 Mar 2026 04:00:45 +0000
Manifest this update: Sun 29 Mar 2026 04:00:45 +0000
Manifest next update: Mon 30 Mar 2026 04:00:45 +0000
Files and hashes: 1: XuTrnvjdNYniMt-P6HbyXOlwehQ.crl (hash: 0hnC3XLLvLI03d194ZTFKQOIZU++W/EhktqHDWGq0KI=)
2: eCfVBrUlWVO_wd2C6zG6HlsWFfw.roa (hash: LnqLUkXGJD0OiqsbSYEC0AppS9eAVHhK/gEl/tMcU6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuTrnvjdNYniMt-P6HbyXOlwehQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:58:ba:7f:33:b8:95:02:e1:76:31:89:08:ee:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee4eb9ef8dd3589e232df8fe876f25ce9707a14
Validity
Not Before: Mar 29 04:00:45 2026 GMT
Not After : Mar 30 04:00:45 2026 GMT
Subject: CN=064962f88d0a92b0f7e16972f362b64c4f37f4df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:64:7a:51:b5:de:a1:46:74:a3:20:70:ee:fb:
fe:16:fe:75:1e:e6:65:58:26:6e:8d:3c:01:bf:bd:
40:bb:2b:67:89:b9:67:0e:fa:da:57:fb:93:bc:7e:
84:af:43:c7:4a:05:62:6e:26:27:7a:a9:72:9e:21:
5d:22:8b:46:29:c2:65:d5:9b:5a:f3:76:94:cd:de:
f9:8a:7e:b0:0f:55:8e:5c:92:25:7b:95:a9:b3:a0:
b7:23:fc:05:39:69:2e:57:93:32:d5:0f:6a:b1:3a:
48:b2:86:6c:75:ef:a4:8a:cc:94:4b:da:50:e4:41:
7d:dd:a3:f6:e2:e3:20:9b:8a:91:34:30:57:98:50:
30:d7:7c:20:c1:86:f3:c4:f0:ab:04:88:f2:b5:6b:
59:df:72:a5:f9:6a:1f:e8:30:97:67:a1:47:7e:89:
3d:d6:ad:82:50:29:ab:d4:e0:6d:fa:25:b2:f4:31:
80:ba:95:dc:67:ae:c2:20:4a:d6:7c:c9:2c:40:21:
aa:2d:01:e1:55:55:f6:a4:8a:ce:f2:2b:ed:0c:ed:
61:0c:5a:3d:ec:ae:f8:b7:79:5c:cc:23:ee:05:d3:
06:13:1e:70:de:ed:79:17:25:9f:d3:db:3c:74:33:
aa:a4:b6:c2:8c:9e:d1:cb:dd:f1:0b:3d:c3:67:0e:
5b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:49:62:F8:8D:0A:92:B0:F7:E1:69:72:F3:62:B6:4C:4F:37:F4:DF
X509v3 Authority Key Identifier:
keyid:5E:E4:EB:9E:F8:DD:35:89:E2:32:DF:8F:E8:76:F2:5C:E9:70:7A:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuTrnvjdNYniMt-P6HbyXOlwehQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:72:a9:ec:6f:de:50:bb:a0:16:12:57:30:fc:a9:36:4f:8d:
ee:cd:54:ea:6c:6d:ff:2d:3c:f6:94:bc:92:32:97:7f:c1:93:
71:b8:44:f8:9a:be:cd:28:5d:0a:9c:f1:bb:7f:75:b7:fb:8b:
22:c4:dc:03:d9:c6:13:a0:b5:6e:7e:66:46:09:42:2c:3f:7f:
64:05:08:2d:df:13:9e:d5:3d:24:5b:1e:46:8b:d8:7f:0d:11:
0d:ba:91:40:9e:80:87:47:3d:81:65:3b:36:5f:07:98:7e:9e:
2d:09:8f:e1:a9:df:af:8f:b2:3a:47:55:b1:6a:d5:bb:70:a5:
bf:fd:da:ce:c7:61:dd:46:08:85:c9:e9:bc:3a:82:1f:2d:ec:
63:22:13:5d:f1:5b:6b:8c:b0:d6:77:58:5d:a3:51:d7:66:a8:
32:e2:cf:e7:0c:0d:5f:86:de:90:98:3a:d9:93:b9:08:f3:40:
07:79:1a:e1:2b:78:e2:91:9e:cd:d2:0a:2b:09:fc:9c:27:ea:
b5:bf:b7:a0:b9:c9:bb:ea:0e:d7:39:68:3e:0b:4c:47:0f:3e:
3d:72:86:4a:63:e1:98:ad:de:a2:01:13:00:c5:ca:d2:d1:40:
c3:70:f1:3a:5f:61:31:c9:01:eb:54:b1:88:4c:8f:9a:06:49:
c8:e0:87:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wFi6fzO4lQLhdjGJCO4dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZTRlYjllZjhkZDM1ODllMjMyZGY4ZmU4NzZmMjVjZTk3
MDdhMTQwHhcNMjYwMzI5MDQwMDQ1WhcNMjYwMzMwMDQwMDQ1WjAzMTEwLwYDVQQD
EygwNjQ5NjJmODhkMGE5MmIwZjdlMTY5NzJmMzYyYjY0YzRmMzdmNGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWR6UbXeoUZ0oyBw7vv+Fv51HuZl
WCZujTwBv71AuytniblnDvraV/uTvH6Er0PHSgVibiYneqlyniFdIotGKcJl1Zta
83aUzd75in6wD1WOXJIle5Wps6C3I/wFOWkuV5My1Q9qsTpIsoZsde+kisyUS9pQ
5EF93aP24uMgm4qRNDBXmFAw13wgwYbzxPCrBIjytWtZ33Kl+Wof6DCXZ6FHfok9
1q2CUCmr1OBt+iWy9DGAupXcZ67CIErWfMksQCGqLQHhVVX2pIrO8ivtDO1hDFo9
7K74t3lczCPuBdMGEx5w3u15FyWf09s8dDOqpLbCjJ7Ry93xCz3DZw5boQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAZJYviNCpKw9+FpcvNitkxPN/TfMB8GA1UdIwQY
MBaAFF7k65743TWJ4jLfj+h28lzpcHoUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHVUcm52amROWW5pTXQtUDZIYnlYT2x3ZWhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9iMmY4OTMtOTExZC00MGMwLThhYzIt
ZmQzZmYzNWYzNGE5LzEvWHVUcm52amROWW5pTXQtUDZIYnlYT2x3ZWhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9iMmY4OTMtOTExZC00MGMwLThhYzItZmQzZmYzNWYzNGE5
LzEvWHVUcm52amROWW5pTXQtUDZIYnlYT2x3ZWhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAnKp7G/e
ULugFhJXMPypNk+N7s1U6mxt/y089pS8kjKXf8GTcbhE+Jq+zShdCpzxu391t/uL
IsTcA9nGE6C1bn5mRglCLD9/ZAUILd8TntU9JFseRovYfw0RDbqRQJ6Ah0c9gWU7
Nl8HmH6eLQmP4anfr4+yOkdVsWrVu3Clv/3azsdh3UYIhcnpvDqCHy3sYyITXfFb
a4yw1ndYXaNR12aoMuLP5wwNX4bekJg62ZO5CPNAB3ka4St44pGezdIKKwn8nCfq
tb+3oLnJu+oO1zloPgtMRw8+PXKGSmPhmK3eogETAMXK0tFAw3DxOl9hMckB61Sx
iEyPmgZJyOCHmw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:18 2026 by rpki-client