Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
File: XigJUGU6fsWMUzhdALOB77tGWCQ.mft (raw, json)
Hash identifier: nk/GzrKXUDXBUF8zSUUp/zH8uEdqgozbBX0Sctxw1is=
Subject key identifier: C2:57:52:DF:A7:4B:82:BB:F4:A1:50:8E:71:A9:41:B9:6D:1F:7D:C1
Authority key identifier: 5E:28:09:50:65:3A:7E:C5:8C:53:38:5D:00:B3:81:EF:BB:46:58:24
Certificate issuer: /CN=5e280950653a7ec58c53385d00b381efbb465824
Certificate serial: 019CC8D07329A7E24E6AE42AF4A511DA91CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
Manifest number: 0816
Signing time: Sat 07 Mar 2026 15:00:29 +0000
Manifest this update: Sat 07 Mar 2026 15:00:29 +0000
Manifest next update: Sun 08 Mar 2026 15:00:29 +0000
Files and hashes: 1: 1-N-Z3cPVFu_Om0GHK2AgOkgXdoM.roa (hash: fr16WHaKP/dmz7kwPH4GVwwXFVV/SyIEEVY49/wQV+U=)
2: 1aw8Nv97xOelgCP3-YnwnaxEm5Y.roa (hash: jy29WIgwdNl8op/0r93ONPzqQSdB42DU8p3Gs7efZY0=)
3: 2PxDuTNSWd2nVBQOyZp7w-a3G48.roa (hash: nuRMk74zjQwmTzVhehj6QjrkhW4+qo+fGCHLFEBJBC0=)
4: XigJUGU6fsWMUzhdALOB77tGWCQ.crl (hash: sNdJnc7aXAvYa1ptppw23fAOEge9wuUDIyxs5BP2FNU=)
5: c9R4pyYEgXuth8LibhVlQrijaqw.roa (hash: GjJoF2AKi6roB+eJMggN2owFvnp/FEnfdBtdPLGnDgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 10:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c8:d0:73:29:a7:e2:4e:6a:e4:2a:f4:a5:11:da:91:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e280950653a7ec58c53385d00b381efbb465824
Validity
Not Before: Mar 7 15:00:29 2026 GMT
Not After : Mar 8 15:00:29 2026 GMT
Subject: CN=c25752dfa74b82bbf4a1508e71a941b96d1f7dc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a3:a0:29:b0:a6:1a:1f:72:54:61:8b:ce:03:
0a:ff:08:91:ef:f3:a6:43:9b:86:5c:76:b5:38:93:
30:d1:d0:b5:62:20:1c:2e:6f:4a:58:c5:e5:ee:ac:
e6:a6:71:ea:f6:f0:cf:2b:14:fc:a9:f8:94:ce:55:
30:f8:a5:ff:b9:63:4b:d4:c0:ac:dd:c3:c3:8d:83:
75:f6:e1:f3:90:58:49:cc:89:a5:7e:e4:91:49:2b:
ee:1b:37:5d:97:40:95:66:ba:57:43:8d:a7:83:7c:
ca:fa:22:6c:11:8d:28:88:a3:90:b3:cc:a9:e6:83:
26:99:e4:18:9b:1e:c5:fa:ac:86:3d:d0:df:32:26:
2d:20:0a:a9:3c:f6:f1:c6:44:3c:7c:b8:fd:d6:f9:
f3:c0:84:20:47:93:64:d8:f6:90:f9:30:61:83:4f:
e0:2c:8b:0d:7c:80:c8:63:3c:29:4d:72:cf:16:00:
20:1b:98:24:25:99:24:53:9d:28:ba:9c:d1:11:d6:
7d:a5:76:95:4b:21:3d:e4:03:9c:dd:e1:c4:e4:e8:
42:50:9a:7b:d6:44:df:ba:51:9f:83:9c:55:a7:dc:
21:30:35:36:92:76:63:bd:44:1a:59:ca:94:df:67:
49:7f:89:c5:78:43:d4:76:e0:df:6b:38:c4:73:cf:
50:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:57:52:DF:A7:4B:82:BB:F4:A1:50:8E:71:A9:41:B9:6D:1F:7D:C1
X509v3 Authority Key Identifier:
keyid:5E:28:09:50:65:3A:7E:C5:8C:53:38:5D:00:B3:81:EF:BB:46:58:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:fc:d8:b2:82:6a:76:3f:30:d6:07:43:b6:ca:76:29:b8:bf:
ee:69:2d:76:fd:e1:89:b3:ce:40:f4:39:62:ad:e2:00:84:83:
b3:3c:b0:18:d9:07:cb:9e:3b:3f:9e:3a:bf:da:b7:01:ce:a2:
3d:4b:d3:e9:bb:8d:7b:b3:85:e4:47:e8:e1:27:b0:bd:e8:2e:
6b:da:b0:c4:d9:fc:75:76:db:ec:bb:55:c7:bc:9a:0b:1a:04:
c4:f8:eb:8b:0f:83:e7:b8:f6:21:26:c1:e1:00:f0:33:5e:39:
96:17:5d:2f:80:ff:01:8e:33:e3:89:9f:d8:91:ff:e4:80:68:
66:e0:25:db:5b:0a:15:17:87:68:d6:6e:63:85:9a:dd:ee:dc:
38:11:76:2c:70:95:cb:41:d7:5c:f7:91:85:0d:5d:a7:81:0f:
94:42:97:e1:cf:13:f9:15:00:72:06:e1:ec:ae:cb:d0:35:ae:
b7:3d:2e:a9:96:fa:d2:10:a4:03:35:e9:0d:fe:ef:79:ef:4f:
03:36:3e:27:b7:8b:f2:74:f1:97:b1:c7:0f:85:36:aa:41:f1:
31:23:e8:c4:9b:d0:73:2e:dd:8a:96:29:8a:de:6f:b0:3d:5b:
83:37:0f:4d:d0:db:46:85:da:93:3e:38:f6:9f:59:2f:01:25:
48:cc:a8:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzI0HMpp+JOauQq9KUR2pHLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMjgwOTUwNjUzYTdlYzU4YzUzMzg1ZDAwYjM4MWVmYmI0
NjU4MjQwHhcNMjYwMzA3MTUwMDI5WhcNMjYwMzA4MTUwMDI5WjAzMTEwLwYDVQQD
EyhjMjU3NTJkZmE3NGI4MmJiZjRhMTUwOGU3MWE5NDFiOTZkMWY3ZGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36OgKbCmGh9yVGGLzgMK/wiR7/Om
Q5uGXHa1OJMw0dC1YiAcLm9KWMXl7qzmpnHq9vDPKxT8qfiUzlUw+KX/uWNL1MCs
3cPDjYN19uHzkFhJzImlfuSRSSvuGzddl0CVZrpXQ42ng3zK+iJsEY0oiKOQs8yp
5oMmmeQYmx7F+qyGPdDfMiYtIAqpPPbxxkQ8fLj91vnzwIQgR5Nk2PaQ+TBhg0/g
LIsNfIDIYzwpTXLPFgAgG5gkJZkkU50oupzREdZ9pXaVSyE95AOc3eHE5OhCUJp7
1kTfulGfg5xVp9whMDU2knZjvUQaWcqU32dJf4nFeEPUduDfazjEc89QzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMJXUt+nS4K79KFQjnGpQbltH33BMB8GA1UdIwQY
MBaAFF4oCVBlOn7FjFM4XQCzge+7RlgkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGlnSlVHVTZmc1dNVXpoZEFMT0I3N3RHV0NRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC83MmM1ODctYzVjYi00MGU0LThjZTEt
ZTFiNTM1NTZjMWMzLzEvWGlnSlVHVTZmc1dNVXpoZEFMT0I3N3RHV0NRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC83MmM1ODctYzVjYi00MGU0LThjZTEtZTFiNTM1NTZjMWMz
LzEvWGlnSlVHVTZmc1dNVXpoZEFMT0I3N3RHV0NRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH/zYsoJq
dj8w1gdDtsp2Kbi/7mktdv3hibPOQPQ5Yq3iAISDszywGNkHy547P546v9q3Ac6i
PUvT6buNe7OF5Efo4Sewvegua9qwxNn8dXbb7LtVx7yaCxoExPjriw+D57j2ISbB
4QDwM145lhddL4D/AY4z44mf2JH/5IBoZuAl21sKFReHaNZuY4Wa3e7cOBF2LHCV
y0HXXPeRhQ1dp4EPlEKX4c8T+RUAcgbh7K7L0DWutz0uqZb60hCkAzXpDf7vee9P
AzY+J7eL8nTxl7HHD4U2qkHxMSPoxJvQcy7dipYpit5vsD1bgzcPTdDbRoXakz44
9p9ZLwElSMyoNA==
-----END CERTIFICATE-----
Generated at Sat Mar 7 19:31:28 2026 by rpki-client