Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a0475f-ca97-4b16-96db-2145ca75e383/1/XWU9B97R6Nf08uoEvTaELFsS8V4.mft
File: XWU9B97R6Nf08uoEvTaELFsS8V4.mft (raw, json)
Hash identifier: wCmihPv9eju/rqhGovkD3IlcUnUNkKqBXijR8geLOKM=
Subject key identifier: 6D:30:D7:E4:C6:F3:0A:38:14:BF:A6:F7:ED:2A:2E:00:9E:9D:C8:01
Authority key identifier: 5D:65:3D:07:DE:D1:E8:D7:F4:F2:EA:04:BD:36:84:2C:5B:12:F1:5E
Certificate issuer: /CN=5d653d07ded1e8d7f4f2ea04bd36842c5b12f15e
Certificate serial: 019CAA58BF5A1FBF91003FD682DF72382BBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWU9B97R6Nf08uoEvTaELFsS8V4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a0475f-ca97-4b16-96db-2145ca75e383/1/XWU9B97R6Nf08uoEvTaELFsS8V4.mft
Manifest number: 106E
Signing time: Sun 01 Mar 2026 17:01:08 +0000
Manifest this update: Sun 01 Mar 2026 17:01:08 +0000
Manifest next update: Mon 02 Mar 2026 17:01:08 +0000
Files and hashes: 1: XWU9B97R6Nf08uoEvTaELFsS8V4.crl (hash: tbBPa5xrKNJ4CGGiLmme2lLHbuxMmEpIVoTfzQD3cxg=)
2: y8aS9NjGoMwtiWTSfAPqlGnxCWs.roa (hash: ZuvgKYnV+P1b5dUwqqoJerGmgiPYibNQHqD2j8CfPTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a0475f-ca97-4b16-96db-2145ca75e383/1/XWU9B97R6Nf08uoEvTaELFsS8V4.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/a0475f-ca97-4b16-96db-2145ca75e383/1/XWU9B97R6Nf08uoEvTaELFsS8V4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWU9B97R6Nf08uoEvTaELFsS8V4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:bf:5a:1f:bf:91:00:3f:d6:82:df:72:38:2b:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d653d07ded1e8d7f4f2ea04bd36842c5b12f15e
Validity
Not Before: Mar 1 17:01:08 2026 GMT
Not After : Mar 2 17:01:08 2026 GMT
Subject: CN=6d30d7e4c6f30a3814bfa6f7ed2a2e009e9dc801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:77:8c:ba:a0:80:91:19:88:b8:02:49:78:fb:
69:5b:12:c5:97:71:e0:94:51:ed:0b:03:11:f5:c7:
37:13:97:4f:80:b9:42:64:14:3a:36:02:b7:c0:34:
89:8c:1c:94:52:24:8f:2d:ac:52:86:94:15:06:40:
96:c4:0e:92:70:b5:a1:d5:08:cb:8c:2d:d7:37:a7:
e4:39:14:6b:26:ee:59:81:f1:63:6b:d4:2c:a4:a8:
f8:f7:60:d1:1c:7b:a5:00:d6:93:31:50:c9:85:90:
4b:9a:c4:93:c4:e4:ba:bc:31:0b:33:f8:96:68:7d:
d3:65:31:67:d8:85:29:6e:db:80:49:bc:8a:db:6f:
56:d2:50:34:da:46:f7:a4:6c:b7:99:4d:3c:f2:ca:
a2:66:c3:e1:e0:b9:fb:65:79:28:ad:4d:16:9c:c8:
cb:de:59:09:2a:3c:9b:bc:f2:f9:45:e3:cf:f4:72:
46:7c:92:74:36:39:f2:14:b0:4c:ab:ce:50:2f:64:
ae:0b:f7:c3:d7:8d:8c:1f:90:d2:d4:6f:1e:78:ba:
8a:1a:53:be:c5:da:aa:f6:e5:1c:ad:72:bc:8e:3c:
4a:2f:b9:b1:86:be:b0:1b:02:14:08:d2:c8:71:b1:
85:6f:91:19:5b:d0:21:75:df:f2:f7:77:c0:45:95:
7e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:30:D7:E4:C6:F3:0A:38:14:BF:A6:F7:ED:2A:2E:00:9E:9D:C8:01
X509v3 Authority Key Identifier:
keyid:5D:65:3D:07:DE:D1:E8:D7:F4:F2:EA:04:BD:36:84:2C:5B:12:F1:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWU9B97R6Nf08uoEvTaELFsS8V4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a0475f-ca97-4b16-96db-2145ca75e383/1/XWU9B97R6Nf08uoEvTaELFsS8V4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a0475f-ca97-4b16-96db-2145ca75e383/1/XWU9B97R6Nf08uoEvTaELFsS8V4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:f1:4a:f8:a8:90:3e:b0:fe:23:db:5e:df:e5:69:0f:59:d7:
64:3f:1e:a6:a3:ed:96:b0:6c:f7:0b:60:df:d8:c2:ec:7f:eb:
d1:12:4b:17:36:cf:cd:0b:78:85:49:e0:05:59:9c:b0:bd:9b:
3d:d6:60:04:53:fe:67:cf:77:5c:d8:c3:00:06:f3:bd:2a:be:
de:72:99:b7:57:1e:69:53:2e:d2:ec:7f:b8:30:40:be:42:f2:
f5:7a:1c:54:33:50:51:33:a7:01:ea:7e:d4:5e:ef:13:ac:b5:
77:aa:34:92:cd:9c:47:4b:0b:d4:e2:4f:3e:10:c2:b3:35:2d:
3b:7a:38:b1:35:16:6f:79:8c:9c:a3:7d:af:ca:63:dc:86:b9:
d3:f9:ee:dd:18:4a:0e:b3:c3:ba:4e:8a:f4:89:33:e3:91:1b:
b9:6e:0d:84:37:41:53:b0:25:3b:47:f4:1c:51:40:35:a0:3c:
0e:10:7f:e0:6b:03:75:77:1c:e7:c6:59:f3:c2:b2:db:dc:0d:
31:ee:53:e1:6d:fa:6d:cc:db:b5:5d:98:84:5a:f3:d7:48:73:
c3:0f:85:c8:21:5c:e7:30:c4:6d:e4:e5:e0:fd:c8:59:fb:0a:
99:4b:ea:19:de:a3:d8:5d:dd:32:db:47:41:16:e8:3e:d1:81:
00:56:82:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWL9aH7+RAD/Wgt9yOCu7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkNjUzZDA3ZGVkMWU4ZDdmNGYyZWEwNGJkMzY4NDJjNWIx
MmYxNWUwHhcNMjYwMzAxMTcwMTA4WhcNMjYwMzAyMTcwMTA4WjAzMTEwLwYDVQQD
Eyg2ZDMwZDdlNGM2ZjMwYTM4MTRiZmE2ZjdlZDJhMmUwMDllOWRjODAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3eMuqCAkRmIuAJJePtpWxLFl3Hg
lFHtCwMR9cc3E5dPgLlCZBQ6NgK3wDSJjByUUiSPLaxShpQVBkCWxA6ScLWh1QjL
jC3XN6fkORRrJu5ZgfFja9QspKj492DRHHulANaTMVDJhZBLmsSTxOS6vDELM/iW
aH3TZTFn2IUpbtuASbyK229W0lA02kb3pGy3mU088sqiZsPh4Ln7ZXkorU0WnMjL
3lkJKjybvPL5RePP9HJGfJJ0NjnyFLBMq85QL2SuC/fD142MH5DS1G8eeLqKGlO+
xdqq9uUcrXK8jjxKL7mxhr6wGwIUCNLIcbGFb5EZW9Ahdd/y93fARZV+OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG0w1+TG8wo4FL+m9+0qLgCencgBMB8GA1UdIwQY
MBaAFF1lPQfe0ejX9PLqBL02hCxbEvFeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFdVOUI5N1I2TmYwOHVvRXZUYUVMRnNTOFY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9hMDQ3NWYtY2E5Ny00YjE2LTk2ZGIt
MjE0NWNhNzVlMzgzLzEvWFdVOUI5N1I2TmYwOHVvRXZUYUVMRnNTOFY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9hMDQ3NWYtY2E5Ny00YjE2LTk2ZGItMjE0NWNhNzVlMzgz
LzEvWFdVOUI5N1I2TmYwOHVvRXZUYUVMRnNTOFY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE/FK+KiQ
PrD+I9te3+VpD1nXZD8epqPtlrBs9wtg39jC7H/r0RJLFzbPzQt4hUngBVmcsL2b
PdZgBFP+Z893XNjDAAbzvSq+3nKZt1ceaVMu0ux/uDBAvkLy9XocVDNQUTOnAep+
1F7vE6y1d6o0ks2cR0sL1OJPPhDCszUtO3o4sTUWb3mMnKN9r8pj3Ia50/nu3RhK
DrPDuk6K9Ikz45EbuW4NhDdBU7AlO0f0HFFANaA8DhB/4GsDdXcc58ZZ88Ky29wN
Me5T4W36bczbtV2YhFrz10hzww+FyCFc5zDEbeTl4P3IWfsKmUvqGd6j2F3dMttH
QRboPtGBAFaCSQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:55:56 2026 by rpki-client