Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.mft
File: XqaMhTgQ0DILFWhE8pMXcBtYYQ0.mft (raw, json)
Hash identifier: Q9MX8657aBZaO9IBmH+NHMj1IqXkdEN6uS/BhBs3yiU=
Subject key identifier: F6:EE:9E:D6:B0:21:65:27:3C:B1:10:C1:6B:F9:20:D4:01:D9:9E:FC
Authority key identifier: 5E:A6:8C:85:38:10:D0:32:0B:15:68:44:F2:93:17:70:1B:58:61:0D
Certificate issuer: /CN=5ea68c853810d0320b156844f29317701b58610d
Certificate serial: 019CAAC6A13FA8D65781032FCBF963760F44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.mft
Manifest number: 0C84
Signing time: Sun 01 Mar 2026 19:01:10 +0000
Manifest this update: Sun 01 Mar 2026 19:01:10 +0000
Manifest next update: Mon 02 Mar 2026 19:01:10 +0000
Files and hashes: 1: LiEVK06b_iEfWKONoW7STd84p8o.roa (hash: KP0hMh+NQgDSgDAVVXQlg1eOWnVVyRKaORcdjPcukmI=)
2: XqaMhTgQ0DILFWhE8pMXcBtYYQ0.crl (hash: 05NftB7D1kbZMCAGfISJHidzedHKze7kayOhmDtlPzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:a1:3f:a8:d6:57:81:03:2f:cb:f9:63:76:0f:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ea68c853810d0320b156844f29317701b58610d
Validity
Not Before: Mar 1 19:01:10 2026 GMT
Not After : Mar 2 19:01:10 2026 GMT
Subject: CN=f6ee9ed6b02165273cb110c16bf920d401d99efc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:55:8c:dd:f9:24:73:19:f9:a0:88:03:c5:8d:
8c:9a:ac:aa:e4:f7:6b:29:fb:e2:ed:e0:42:1a:9c:
b1:aa:93:ac:97:4d:0e:f3:45:18:d3:4d:bf:5c:7a:
6b:15:05:46:05:0e:ff:cd:c6:f6:de:92:0b:29:2e:
ef:3e:23:29:64:32:d4:0f:82:80:3d:f8:7a:89:d9:
c4:f5:75:b6:df:dd:47:13:6b:82:61:a7:ab:ba:0c:
7d:7e:e6:ab:7c:e1:4a:99:9d:82:a4:df:51:5f:a0:
ad:6b:0c:ee:15:c4:5d:4d:4f:3b:ac:b3:30:71:b2:
2b:8a:2f:3f:28:dd:6e:8d:ae:49:27:39:80:db:4b:
02:38:ae:51:df:45:d5:7d:61:ef:1a:f6:e8:30:72:
5e:be:00:56:ff:9c:b3:38:24:57:be:13:45:cd:3d:
ce:3c:05:bb:40:a9:50:37:58:ce:d7:40:a7:72:4c:
03:3c:a1:d1:f5:12:93:f0:0e:46:33:1f:89:92:8b:
b9:34:c0:a1:5a:a7:bd:df:d4:74:e9:82:90:17:da:
ba:c3:37:de:8e:aa:c9:ed:60:2b:44:da:bd:80:56:
3e:e3:fb:c6:4f:f4:0d:ee:c1:bb:57:e7:96:66:1f:
3f:02:68:a1:88:4c:af:b7:7f:d0:43:af:46:25:40:
fd:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:EE:9E:D6:B0:21:65:27:3C:B1:10:C1:6B:F9:20:D4:01:D9:9E:FC
X509v3 Authority Key Identifier:
keyid:5E:A6:8C:85:38:10:D0:32:0B:15:68:44:F2:93:17:70:1B:58:61:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:8b:eb:84:75:54:8b:f0:ac:07:e7:45:53:e1:c3:cb:8d:92:
ce:29:95:74:fc:1c:d2:bd:00:b7:ad:d6:29:6a:00:00:19:54:
55:3d:1a:f4:dc:57:93:22:26:43:b7:0a:46:fb:d5:07:a8:7b:
45:d6:c4:b6:b7:ac:bc:27:16:52:05:c8:b3:0c:30:a6:f0:17:
b5:30:df:ae:d6:44:92:02:70:7e:d0:ce:18:af:42:bf:bd:aa:
27:45:de:0b:92:81:39:04:7f:bd:0c:2a:f0:3f:e1:0b:4b:11:
b0:be:00:a1:9e:4b:c5:f1:a4:7b:3d:1a:c4:b3:81:66:cc:09:
dc:b1:c7:b3:e7:c2:6d:69:f9:58:89:5b:48:14:d0:fe:1c:74:
f2:ca:7b:f8:73:7e:36:04:e9:b8:a2:33:e6:72:c6:3d:f9:b3:
60:cc:9a:c1:15:65:29:ae:72:4c:40:7d:d7:66:f1:95:b3:b4:
09:df:a9:f5:61:40:7a:e8:0a:fc:d0:d4:0d:67:20:d6:3b:ec:
99:86:05:b6:35:01:f2:c1:36:f4:90:aa:e2:cf:90:50:47:4c:
ae:a2:a0:e9:74:c8:41:f9:53:6a:7d:1e:b1:e2:39:af:1b:d0:
a1:4f:20:02:99:e1:98:b3:34:fd:76:50:e6:0d:b3:09:5d:b9:
e0:0f:b3:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxqE/qNZXgQMvy/ljdg9EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlYTY4Yzg1MzgxMGQwMzIwYjE1Njg0NGYyOTMxNzcwMWI1
ODYxMGQwHhcNMjYwMzAxMTkwMTEwWhcNMjYwMzAyMTkwMTEwWjAzMTEwLwYDVQQD
EyhmNmVlOWVkNmIwMjE2NTI3M2NiMTEwYzE2YmY5MjBkNDAxZDk5ZWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5FWM3fkkcxn5oIgDxY2Mmqyq5Pdr
Kfvi7eBCGpyxqpOsl00O80UY002/XHprFQVGBQ7/zcb23pILKS7vPiMpZDLUD4KA
Pfh6idnE9XW2391HE2uCYaerugx9fuarfOFKmZ2CpN9RX6CtawzuFcRdTU87rLMw
cbIrii8/KN1uja5JJzmA20sCOK5R30XVfWHvGvboMHJevgBW/5yzOCRXvhNFzT3O
PAW7QKlQN1jO10CnckwDPKHR9RKT8A5GMx+Jkou5NMChWqe939R06YKQF9q6wzfe
jqrJ7WArRNq9gFY+4/vGT/QN7sG7V+eWZh8/AmihiEyvt3/QQ69GJUD9twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPbuntawIWUnPLEQwWv5INQB2Z78MB8GA1UdIwQY
MBaAFF6mjIU4ENAyCxVoRPKTF3AbWGENMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHFhTWhUZ1EwRElMRldoRThwTVhjQnRZWVEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8zZTIzZDctYTNiNy00MTZmLTg4MTAt
MWVmYTdjZjc3M2EwLzEvWHFhTWhUZ1EwRElMRldoRThwTVhjQnRZWVEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8zZTIzZDctYTNiNy00MTZmLTg4MTAtMWVmYTdjZjc3M2Ew
LzEvWHFhTWhUZ1EwRElMRldoRThwTVhjQnRZWVEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN4vrhHVU
i/CsB+dFU+HDy42SzimVdPwc0r0At63WKWoAABlUVT0a9NxXkyImQ7cKRvvVB6h7
RdbEtresvCcWUgXIswwwpvAXtTDfrtZEkgJwftDOGK9Cv72qJ0XeC5KBOQR/vQwq
8D/hC0sRsL4AoZ5LxfGkez0axLOBZswJ3LHHs+fCbWn5WIlbSBTQ/hx08sp7+HN+
NgTpuKIz5nLGPfmzYMyawRVlKa5yTEB912bxlbO0Cd+p9WFAeugK/NDUDWcg1jvs
mYYFtjUB8sE29JCq4s+QUEdMrqKg6XTIQflTan0eseI5rxvQoU8gApnhmLM0/XZQ
5g2zCV254A+zUQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:44 2026 by rpki-client