Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft
File: XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft (raw, json)
Hash identifier: RjaNdudg9IsSXo0RAIV/iAVEgrnTuNoyWbThBvc8680=
Subject key identifier: A1:69:30:09:CE:9B:A7:E0:E2:8A:52:03:7B:B3:47:06:52:9A:6C:2F
Authority key identifier: 5D:65:6B:20:13:E8:51:51:6B:94:2F:A9:07:06:C7:20:90:DC:DD:EF
Certificate issuer: /CN=5d656b2013e851516b942fa90706c72090dcddef
Certificate serial: 019D38D3A3DB74F7EB5FC70A2E89A17E4513
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWVrIBPoUVFrlC-pBwbHIJDc3e8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 09:01:27 +0000
Manifest this update: Sun 29 Mar 2026 09:01:27 +0000
Manifest next update: Mon 30 Mar 2026 09:01:27 +0000
Files and hashes: 1: QlZ3EwceRly-CQVyh76fsical88.roa (hash: GhqviNkjdeBBcrA1tzvOBRebTTX9kM0EqFFhCTAnsnQ=)
2: XWVrIBPoUVFrlC-pBwbHIJDc3e8.crl (hash: K6xZoDM3sAsxuzgZ2qVZ3UNKpjyIS4Bpi9AuVNyTsiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWVrIBPoUVFrlC-pBwbHIJDc3e8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:a3:db:74:f7:eb:5f:c7:0a:2e:89:a1:7e:45:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d656b2013e851516b942fa90706c72090dcddef
Validity
Not Before: Mar 29 09:01:27 2026 GMT
Not After : Mar 30 09:01:27 2026 GMT
Subject: CN=a1693009ce9ba7e0e28a52037bb34706529a6c2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:88:8a:46:bb:94:f6:6c:19:05:2a:83:51:d6:
bd:43:9d:18:8c:75:69:58:c2:61:a5:a2:83:28:67:
6c:ad:30:58:e1:99:9d:80:fc:b8:d9:b6:70:cc:0d:
2d:e3:13:17:44:39:75:60:71:6f:95:e4:a2:3b:66:
c5:05:af:2d:64:ab:59:7f:e6:5d:74:ee:1b:9b:25:
1f:ba:5b:b6:85:43:37:6d:91:90:8c:4b:a0:4e:f2:
49:c5:e1:ba:21:10:a8:c5:48:8a:79:2f:d1:d9:4f:
4c:56:be:75:7d:b1:ec:80:14:5d:54:c0:f4:52:26:
ad:25:6d:9d:f0:a9:36:c0:ae:d0:55:ef:2b:c6:ed:
84:94:fd:7b:1d:05:46:7a:fe:e8:6a:72:f2:77:12:
69:00:54:8d:07:c2:b0:31:9c:8c:04:2a:9c:64:83:
e1:e8:96:c8:6e:1a:17:c3:f7:f2:d2:a0:a4:70:c7:
5e:3f:0c:cd:07:06:6a:48:70:e9:c8:4a:9a:dd:b9:
a2:f2:29:30:8e:9e:da:06:28:51:6f:25:bf:b5:8f:
82:10:8c:27:63:d0:a8:86:43:12:c2:15:2b:4a:3a:
33:27:e3:cb:69:e0:b2:3d:a0:d7:bb:94:f4:7d:be:
f5:59:81:88:92:d4:fb:2a:5e:59:33:8a:09:5c:0c:
99:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:69:30:09:CE:9B:A7:E0:E2:8A:52:03:7B:B3:47:06:52:9A:6C:2F
X509v3 Authority Key Identifier:
keyid:5D:65:6B:20:13:E8:51:51:6B:94:2F:A9:07:06:C7:20:90:DC:DD:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWVrIBPoUVFrlC-pBwbHIJDc3e8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:89:34:fb:d2:92:f9:c3:9d:4c:31:01:0d:47:b6:f6:27:39:
e5:8e:2f:af:38:f3:a8:66:92:1b:ad:31:d8:d7:96:03:f8:42:
fd:bd:c7:c0:1e:9c:e6:90:7b:88:08:07:9e:9a:b7:9f:c7:0c:
57:77:65:d7:6b:85:4f:f2:af:c8:f2:89:95:e5:8e:2e:7f:97:
1b:27:46:ac:19:80:70:6a:0a:ec:e4:e3:c2:ae:00:88:1d:31:
60:42:82:dc:cb:3c:00:f5:d8:8c:88:6e:4d:4c:68:97:87:a7:
e3:12:d9:d5:69:bf:e4:58:32:c6:74:7c:b0:be:f0:dc:af:33:
62:fd:09:f0:11:a7:c2:27:4f:bd:78:8c:f4:3b:94:e3:db:30:
58:d0:ff:eb:e7:0f:18:57:f1:1d:64:68:b1:a0:81:92:d4:4a:
29:4a:33:5d:49:52:1f:aa:bc:fd:a3:39:42:a6:2c:30:77:8e:
a2:5a:9b:ac:ff:83:b8:7c:f5:21:57:1d:a3:8b:75:4a:c9:c2:
71:1f:d4:4c:8f:5e:cf:eb:f0:10:b1:98:15:bf:54:99:80:0d:
2b:a4:49:1a:89:32:6f:ba:14:d2:a2:5c:1f:64:c6:bc:b1:64:
47:cc:36:33:c3:25:56:a4:15:e5:ba:fd:91:ea:fe:3f:8b:7d:
31:7c:8a:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0406PbdPfrX8cKLomhfkUTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkNjU2YjIwMTNlODUxNTE2Yjk0MmZhOTA3MDZjNzIwOTBk
Y2RkZWYwHhcNMjYwMzI5MDkwMTI3WhcNMjYwMzMwMDkwMTI3WjAzMTEwLwYDVQQD
EyhhMTY5MzAwOWNlOWJhN2UwZTI4YTUyMDM3YmIzNDcwNjUyOWE2YzJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4iKRruU9mwZBSqDUda9Q50YjHVp
WMJhpaKDKGdsrTBY4ZmdgPy42bZwzA0t4xMXRDl1YHFvleSiO2bFBa8tZKtZf+Zd
dO4bmyUfulu2hUM3bZGQjEugTvJJxeG6IRCoxUiKeS/R2U9MVr51fbHsgBRdVMD0
UiatJW2d8Kk2wK7QVe8rxu2ElP17HQVGev7oanLydxJpAFSNB8KwMZyMBCqcZIPh
6JbIbhoXw/fy0qCkcMdePwzNBwZqSHDpyEqa3bmi8ikwjp7aBihRbyW/tY+CEIwn
Y9CohkMSwhUrSjozJ+PLaeCyPaDXu5T0fb71WYGIktT7Kl5ZM4oJXAyZ4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKFpMAnOm6fg4opSA3uzRwZSmmwvMB8GA1UdIwQY
MBaAFF1layAT6FFRa5QvqQcGxyCQ3N3vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFdWcklCUG9VVkZybEMtcEJ3YkhJSkRjM2U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8xZGY3NjQtMmI4My00MzQzLTkxMDIt
NDdhOWY5NmNhNTg2LzEvWFdWcklCUG9VVkZybEMtcEJ3YkhJSkRjM2U4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8xZGY3NjQtMmI4My00MzQzLTkxMDItNDdhOWY5NmNhNTg2
LzEvWFdWcklCUG9VVkZybEMtcEJ3YkhJSkRjM2U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArIk0+9KS
+cOdTDEBDUe29ic55Y4vrzjzqGaSG60x2NeWA/hC/b3HwB6c5pB7iAgHnpq3n8cM
V3dl12uFT/KvyPKJleWOLn+XGydGrBmAcGoK7OTjwq4AiB0xYEKC3Ms8APXYjIhu
TUxol4en4xLZ1Wm/5FgyxnR8sL7w3K8zYv0J8BGnwidPvXiM9DuU49swWND/6+cP
GFfxHWRosaCBktRKKUozXUlSH6q8/aM5QqYsMHeOolqbrP+DuHz1IVcdo4t1SsnC
cR/UTI9ez+vwELGYFb9UmYANK6RJGokyb7oU0qJcH2TGvLFkR8w2M8MlVqQV5br9
ker+P4t9MXyK8w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:01 2026 by rpki-client