Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f42a5e-70d6-44a0-840f-2ca905fd04de/1/XZyGd-_WExtOuEtCzl88VHt1eJI.mft
File: XZyGd-_WExtOuEtCzl88VHt1eJI.mft (raw, json)
Hash identifier: zM95iMeS2ES4phARTVp7GS14INueN5K1FOVPcH/90Bc=
Subject key identifier: D5:DA:E6:34:49:F2:E7:DB:6B:A3:DF:D8:DD:BE:57:AA:20:D0:0C:1E
Authority key identifier: 5D:9C:86:77:EF:D6:13:1B:4E:B8:4B:42:CE:5F:3C:54:7B:75:78:92
Certificate issuer: /CN=5d9c8677efd6131b4eb84b42ce5f3c547b757892
Certificate serial: 019D3789945C4C93A522815A3E1933F27F70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZyGd-_WExtOuEtCzl88VHt1eJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f42a5e-70d6-44a0-840f-2ca905fd04de/1/XZyGd-_WExtOuEtCzl88VHt1eJI.mft
Manifest number: 2B
Signing time: Sun 29 Mar 2026 03:00:56 +0000
Manifest this update: Sun 29 Mar 2026 03:00:56 +0000
Manifest next update: Mon 30 Mar 2026 03:00:56 +0000
Files and hashes: 1: XZyGd-_WExtOuEtCzl88VHt1eJI.crl (hash: qaf8K7g2RllmJosR+RGwpSE/Q9ypyqV4midiDN3HyKI=)
2: nOzHdVSVFT8iIJGyLic0u7u7NaE.roa (hash: t+CYzdrBmRUf/7FA3kXnfrrXfCtsfJ6AG3z7TQG7WKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f42a5e-70d6-44a0-840f-2ca905fd04de/1/XZyGd-_WExtOuEtCzl88VHt1eJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/f42a5e-70d6-44a0-840f-2ca905fd04de/1/XZyGd-_WExtOuEtCzl88VHt1eJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XZyGd-_WExtOuEtCzl88VHt1eJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:94:5c:4c:93:a5:22:81:5a:3e:19:33:f2:7f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c8677efd6131b4eb84b42ce5f3c547b757892
Validity
Not Before: Mar 29 03:00:56 2026 GMT
Not After : Mar 30 03:00:56 2026 GMT
Subject: CN=d5dae63449f2e7db6ba3dfd8ddbe57aa20d00c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:93:de:2e:86:70:e9:35:09:46:7f:ad:e1:32:
d7:d8:81:be:5b:b0:eb:7b:af:10:21:83:55:99:a7:
5c:cc:4f:30:f3:61:8b:39:5d:2b:a7:46:7c:50:18:
89:1a:82:de:cc:7f:bb:c6:8e:a9:83:98:a7:cd:06:
f7:01:68:5d:ce:2e:d7:92:1f:94:d1:78:a0:b9:16:
2c:17:76:6e:78:2b:47:89:8c:5a:2e:d0:4e:4a:ed:
98:9e:e1:36:c7:e6:08:98:ef:49:70:72:33:7d:cf:
6c:d8:ba:de:79:e2:06:58:26:35:73:54:c8:8d:a5:
e9:f1:f8:58:77:82:d7:d8:a3:11:13:6a:8c:e6:9a:
b1:ad:13:02:c9:65:18:df:88:42:72:b2:3c:74:90:
1b:f9:c6:c8:96:a6:61:a5:96:93:5a:35:ee:ba:65:
ca:3b:70:b7:27:96:11:09:b8:c0:77:15:93:4d:d5:
d5:a1:0e:11:84:55:13:4b:f8:36:87:15:00:09:a3:
49:c6:9e:69:5f:e8:2c:89:56:48:8f:bc:2e:55:16:
b9:98:06:7a:f3:7e:70:b9:52:48:93:0a:10:c7:1f:
31:f9:b1:a5:c8:98:c0:9a:d3:06:0c:4e:81:d4:53:
f0:30:15:34:e9:2b:c2:77:d9:e5:eb:23:1c:9f:b4:
3d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:DA:E6:34:49:F2:E7:DB:6B:A3:DF:D8:DD:BE:57:AA:20:D0:0C:1E
X509v3 Authority Key Identifier:
keyid:5D:9C:86:77:EF:D6:13:1B:4E:B8:4B:42:CE:5F:3C:54:7B:75:78:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZyGd-_WExtOuEtCzl88VHt1eJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f42a5e-70d6-44a0-840f-2ca905fd04de/1/XZyGd-_WExtOuEtCzl88VHt1eJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f42a5e-70d6-44a0-840f-2ca905fd04de/1/XZyGd-_WExtOuEtCzl88VHt1eJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:60:09:e1:86:f6:fc:4d:65:56:99:d2:fa:35:88:57:cb:c7:
48:8c:19:56:ce:0a:74:b5:e3:44:ca:20:a7:c4:18:d8:9b:28:
49:34:40:32:04:87:46:ce:4c:77:5e:b0:ed:4d:07:84:75:84:
4b:f8:2e:5d:3d:93:24:18:57:a5:13:31:e0:51:91:f3:64:42:
ed:c9:d8:05:55:5d:7b:66:e9:7c:57:9b:9c:76:a9:e7:79:68:
21:1e:2e:9d:03:48:ad:70:06:3b:a5:92:0e:fd:1c:0d:b1:28:
72:45:37:f7:f8:51:12:76:2d:28:76:b5:ec:7f:b9:21:58:05:
a7:74:10:32:d4:6c:f1:98:4c:00:c5:a4:81:88:7f:53:a9:81:
b4:a7:21:bc:d4:f6:46:da:18:00:ca:25:97:64:5e:06:4d:f3:
59:50:c1:7e:98:99:05:27:0a:a0:92:94:fe:bd:d5:16:ff:3c:
e9:6f:96:86:b9:b9:ba:13:a6:36:78:30:5e:d3:b0:34:c6:db:
42:fe:76:67:27:45:3d:3a:ca:64:ac:13:34:3a:8b:5d:3b:84:
a3:ba:bb:0e:19:20:2b:4b:c4:7a:3e:ab:9f:d3:a5:ce:77:c9:
82:de:d1:49:7c:f4:8a:ac:5d:21:94:31:16:ce:c1:b9:37:8d:
a1:7b:0b:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iZRcTJOlIoFaPhkz8n9wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkOWM4Njc3ZWZkNjEzMWI0ZWI4NGI0MmNlNWYzYzU0N2I3
NTc4OTIwHhcNMjYwMzI5MDMwMDU2WhcNMjYwMzMwMDMwMDU2WjAzMTEwLwYDVQQD
EyhkNWRhZTYzNDQ5ZjJlN2RiNmJhM2RmZDhkZGJlNTdhYTIwZDAwYzFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZPeLoZw6TUJRn+t4TLX2IG+W7Dr
e68QIYNVmadczE8w82GLOV0rp0Z8UBiJGoLezH+7xo6pg5inzQb3AWhdzi7Xkh+U
0XiguRYsF3ZueCtHiYxaLtBOSu2YnuE2x+YImO9JcHIzfc9s2LreeeIGWCY1c1TI
jaXp8fhYd4LX2KMRE2qM5pqxrRMCyWUY34hCcrI8dJAb+cbIlqZhpZaTWjXuumXK
O3C3J5YRCbjAdxWTTdXVoQ4RhFUTS/g2hxUACaNJxp5pX+gsiVZIj7wuVRa5mAZ6
835wuVJIkwoQxx8x+bGlyJjAmtMGDE6B1FPwMBU06SvCd9nl6yMcn7Q9JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNXa5jRJ8ufba6Pf2N2+V6og0AweMB8GA1UdIwQY
MBaAFF2chnfv1hMbTrhLQs5fPFR7dXiSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFp5R2QtX1dFeHRPdUV0Q3psODhWSHQxZUpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9mNDJhNWUtNzBkNi00NGEwLTg0MGYt
MmNhOTA1ZmQwNGRlLzEvWFp5R2QtX1dFeHRPdUV0Q3psODhWSHQxZUpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9mNDJhNWUtNzBkNi00NGEwLTg0MGYtMmNhOTA1ZmQwNGRl
LzEvWFp5R2QtX1dFeHRPdUV0Q3psODhWSHQxZUpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR2AJ4Yb2
/E1lVpnS+jWIV8vHSIwZVs4KdLXjRMogp8QY2JsoSTRAMgSHRs5Md16w7U0HhHWE
S/guXT2TJBhXpRMx4FGR82RC7cnYBVVde2bpfFebnHap53loIR4unQNIrXAGO6WS
Dv0cDbEockU39/hREnYtKHa17H+5IVgFp3QQMtRs8ZhMAMWkgYh/U6mBtKchvNT2
RtoYAMoll2ReBk3zWVDBfpiZBScKoJKU/r3VFv886W+Whrm5uhOmNngwXtOwNMbb
Qv52ZydFPTrKZKwTNDqLXTuEo7q7DhkgK0vEej6rn9OlznfJgt7RSXz0iqxdIZQx
Fs7BuTeNoXsLyA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:07:20 2026 by rpki-client