Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
File: XP44gfPER3T1HMde5-b5HFVlpgY.mft (raw, json)
Hash identifier: Bf8O3eZDMJ976ovAIzd2YA5ZK9OUQmIM3wIOLxO/9Oo=
Subject key identifier: 53:F8:09:86:76:F6:69:88:05:F9:84:44:48:10:FD:9B:12:30:E0:5C
Authority key identifier: 5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06
Certificate issuer: /CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606
Certificate serial: 019D3865D0D8D2B5A3D9A3A029877AD0A92E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 07:01:29 +0000
Manifest this update: Sun 29 Mar 2026 07:01:29 +0000
Manifest next update: Mon 30 Mar 2026 07:01:29 +0000
Files and hashes: 1: MsnqFaljx-vLs6R1klCk-k4mqbE.roa (hash: 9w5Fj/ix8Y1oWU+nhqJcIUFjp29qAgz5fs3U3GbWExc=)
2: XP44gfPER3T1HMde5-b5HFVlpgY.crl (hash: yzIRjlI2AKBTvUdRcUR4AljfTqiAz5Q+yRQbD7oZb9A=)
3: Y-0LFW4QQXme0gq1FoIF-wZ-SQc.roa (hash: wu/R/xhocC/i/LlV9UK65CdEa6/Nxe99KI2JumwUKlc=)
4: a_XjHLHQF6uE4SSOtjsOa8f4-2Q.roa (hash: m3nX1Uyzi87lTewY/HPBoiE0m8iVkIMnK/iQX/3hwYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:d0:d8:d2:b5:a3:d9:a3:a0:29:87:7a:d0:a9:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606
Validity
Not Before: Mar 29 07:01:29 2026 GMT
Not After : Mar 30 07:01:29 2026 GMT
Subject: CN=53f8098676f6698805f984444810fd9b1230e05c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:01:c1:60:e5:b3:dd:3e:3b:c1:84:c8:4c:4e:
d8:37:4a:fb:51:bd:3c:85:37:17:0e:11:0d:08:c3:
24:16:70:bf:09:36:b9:61:ef:c0:af:1c:9f:96:0d:
3c:e7:01:40:02:5c:27:d9:d9:f4:5e:b6:fc:90:15:
e6:82:44:63:ca:b0:c9:a2:1a:e1:5e:6d:ca:71:f3:
3c:bf:de:14:ef:4e:b9:69:fe:73:9d:ae:0b:7d:8b:
aa:dc:50:10:f7:e2:3e:ef:f5:34:04:74:87:57:49:
c8:97:d7:11:e2:fd:60:5c:20:68:0a:3e:20:62:60:
66:b0:be:22:80:5b:6a:7a:b4:7e:0d:24:e1:1a:cb:
be:ef:f9:c2:ff:4f:d9:ec:9d:58:46:bf:dd:84:cf:
05:32:b5:4f:c7:ec:3a:fa:b0:d2:f5:80:2c:cc:be:
d0:78:f5:47:aa:52:53:b2:99:6b:62:73:f6:0c:46:
7f:ec:0f:26:6c:5a:f9:07:ab:88:35:47:30:91:88:
ee:17:b5:4a:ea:8c:b6:78:96:86:65:c4:29:82:43:
ea:5d:ed:ba:21:ba:80:98:8d:d9:f6:01:26:79:78:
1e:4f:dd:cb:62:4a:6a:69:f0:8b:26:ed:81:6f:59:
e4:14:12:b9:16:45:95:78:8d:dc:4e:77:e8:db:84:
0b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F8:09:86:76:F6:69:88:05:F9:84:44:48:10:FD:9B:12:30:E0:5C
X509v3 Authority Key Identifier:
keyid:5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:96:8c:42:fb:f0:48:e4:a1:f2:94:01:58:ab:88:19:76:fc:
6a:7e:0a:d1:1b:20:b9:d6:f8:0f:2a:3f:26:fd:86:b2:46:07:
57:64:c0:9a:30:2b:17:e9:94:0b:88:07:84:71:74:5b:fe:24:
2a:c3:06:3c:23:05:67:47:d0:3c:a0:f8:94:12:cd:1c:4c:22:
e4:fd:5f:f8:df:0f:40:da:76:1a:2b:88:22:40:f3:a0:7b:01:
67:83:aa:e0:b8:0d:bd:62:bf:1c:af:6c:51:83:e0:d2:53:cc:
89:25:4e:9e:ee:02:e6:d8:cc:c4:76:06:7a:2f:2f:1e:e7:c2:
a3:fb:dd:82:44:51:9b:d9:51:97:69:1a:88:ed:a2:62:9e:9d:
d6:fa:0b:6e:d0:ed:ad:c4:54:fe:d0:ec:0a:99:d4:47:79:75:
9a:eb:31:12:d9:2d:7d:cd:b9:f7:42:86:55:0b:55:73:8a:e2:
09:f3:3d:53:cf:e5:b0:90:d1:74:ba:51:ec:33:50:6e:db:22:
36:9e:81:ba:b2:1b:4c:f8:82:27:c2:5a:64:e6:a7:43:8c:52:
91:0c:08:90:d9:08:d0:29:b2:f9:f0:8c:02:b1:5e:0a:57:54:
e8:70:b3:d4:c7:aa:bf:ce:11:5f:11:2a:ae:12:b8:17:31:2b:
35:0e:46:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZdDY0rWj2aOgKYd60KkuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZmUzODgxZjNjNDQ3NzRmNTFjYzc1ZWU3ZTZmOTFjNTU2
NWE2MDYwHhcNMjYwMzI5MDcwMTI5WhcNMjYwMzMwMDcwMTI5WjAzMTEwLwYDVQQD
Eyg1M2Y4MDk4Njc2ZjY2OTg4MDVmOTg0NDQ0ODEwZmQ5YjEyMzBlMDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowHBYOWz3T47wYTITE7YN0r7Ub08
hTcXDhENCMMkFnC/CTa5Ye/Arxyflg085wFAAlwn2dn0Xrb8kBXmgkRjyrDJohrh
Xm3KcfM8v94U7065af5zna4LfYuq3FAQ9+I+7/U0BHSHV0nIl9cR4v1gXCBoCj4g
YmBmsL4igFtqerR+DSThGsu+7/nC/0/Z7J1YRr/dhM8FMrVPx+w6+rDS9YAszL7Q
ePVHqlJTsplrYnP2DEZ/7A8mbFr5B6uINUcwkYjuF7VK6oy2eJaGZcQpgkPqXe26
IbqAmI3Z9gEmeXgeT93LYkpqafCLJu2Bb1nkFBK5FkWVeI3cTnfo24QL5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFP4CYZ29mmIBfmEREgQ/ZsSMOBcMB8GA1UdIwQY
MBaAFFz+OIHzxEd09RzHXufm+RxVZaYGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFA0NGdmUEVSM1QxSE1kZTUtYjVIRlZscGdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS81MjYwZDAtMTg1NS00ZjMwLWI4ZWYt
N2M5OTgwNzlhNmE5LzEvWFA0NGdmUEVSM1QxSE1kZTUtYjVIRlZscGdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS81MjYwZDAtMTg1NS00ZjMwLWI4ZWYtN2M5OTgwNzlhNmE5
LzEvWFA0NGdmUEVSM1QxSE1kZTUtYjVIRlZscGdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAZaMQvvw
SOSh8pQBWKuIGXb8an4K0Rsgudb4Dyo/Jv2GskYHV2TAmjArF+mUC4gHhHF0W/4k
KsMGPCMFZ0fQPKD4lBLNHEwi5P1f+N8PQNp2GiuIIkDzoHsBZ4Oq4LgNvWK/HK9s
UYPg0lPMiSVOnu4C5tjMxHYGei8vHufCo/vdgkRRm9lRl2kaiO2iYp6d1voLbtDt
rcRU/tDsCpnUR3l1musxEtktfc2590KGVQtVc4riCfM9U8/lsJDRdLpR7DNQbtsi
Np6BurIbTPiCJ8JaZOanQ4xSkQwIkNkI0Cmy+fCMArFeCldU6HCz1Meqv84RXxEq
rhK4FzErNQ5Ghw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:25 2026 by rpki-client