Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft
File: xg8yRv3WG6G1eS_hrsStypjXWlw.mft (raw, json)
Hash identifier: BKRnyCwfl6+tc0Z2p4klCwWF0HsMDKkVGqdKBVMcLYQ=
Subject key identifier: BB:35:3A:42:9D:66:93:9A:38:48:39:96:DE:05:4B:DF:B5:74:21:13
Authority key identifier: C6:0F:32:46:FD:D6:1B:A1:B5:79:2F:E1:AE:C4:AD:CA:98:D7:5A:5C
Certificate issuer: /CN=c60f3246fdd61ba1b5792fe1aec4adca98d75a5c
Certificate serial: 019CAC46A3AB6DF9D773BAA46FB254C7513A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xg8yRv3WG6G1eS_hrsStypjXWlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft
Manifest number: 0228
Signing time: Mon 02 Mar 2026 02:00:36 +0000
Manifest this update: Mon 02 Mar 2026 02:00:36 +0000
Manifest next update: Tue 03 Mar 2026 02:00:36 +0000
Files and hashes: 1: MmQGKSoH5LF3BVkr3ibrE-H9I9E.roa (hash: yWJCfOrBqqRptAvrnSvVrhM/S/WywcoV/IXeHHMd0es=)
2: xg8yRv3WG6G1eS_hrsStypjXWlw.crl (hash: zHuOqQNjcwAZvaPruevT5upoCc2yMFZsrUjaamNbhvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xg8yRv3WG6G1eS_hrsStypjXWlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:a3:ab:6d:f9:d7:73:ba:a4:6f:b2:54:c7:51:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c60f3246fdd61ba1b5792fe1aec4adca98d75a5c
Validity
Not Before: Mar 2 02:00:36 2026 GMT
Not After : Mar 3 02:00:36 2026 GMT
Subject: CN=bb353a429d66939a38483996de054bdfb5742113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:71:fc:d2:47:48:d2:e4:92:8c:7e:13:41:50:
1d:d4:a0:68:b8:bc:aa:83:04:02:01:1e:a0:24:6f:
d3:b7:59:b3:d8:ce:f5:92:24:9f:27:cb:83:ac:29:
bc:78:3b:87:46:85:35:29:9a:99:3b:46:22:d8:cb:
c4:68:e8:6e:11:7e:99:44:3f:5d:2a:a9:a1:66:c6:
db:c9:43:70:96:5c:9c:c0:14:c7:3c:f6:eb:42:28:
13:b7:1e:ce:20:4f:dd:01:8b:7c:ad:b8:4c:57:ed:
81:8b:3f:ff:ea:4d:48:c7:3b:60:49:92:c8:e3:fe:
56:a6:66:da:a8:01:12:d6:f2:07:71:98:68:5a:71:
35:8c:23:50:bf:da:9b:ba:30:3d:35:1c:ef:78:18:
20:a4:14:10:6a:5b:19:2b:a7:8f:5b:c6:e1:08:e3:
5a:66:31:35:00:95:fb:bc:5a:a2:2b:d5:18:94:fe:
67:3d:b4:c3:4a:3a:e2:70:fa:f6:2b:67:2e:11:6d:
14:2c:98:98:e5:f4:62:9e:25:8b:e8:4e:a9:8d:07:
ff:30:e2:cd:df:63:12:9d:6b:85:fb:e6:e1:51:dc:
c4:46:7e:1a:ea:76:47:1e:d2:4f:50:05:11:a6:e3:
cc:f1:92:9e:d8:a6:fb:30:7a:03:05:7f:a8:ed:da:
d0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:35:3A:42:9D:66:93:9A:38:48:39:96:DE:05:4B:DF:B5:74:21:13
X509v3 Authority Key Identifier:
keyid:C6:0F:32:46:FD:D6:1B:A1:B5:79:2F:E1:AE:C4:AD:CA:98:D7:5A:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xg8yRv3WG6G1eS_hrsStypjXWlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:1a:26:9f:02:ae:73:46:39:e5:12:d8:58:b5:4e:ae:c4:2b:
2d:a4:24:c5:b3:11:47:97:13:28:72:05:4e:79:c5:2a:c6:ea:
89:96:82:67:56:0f:7c:c8:25:eb:ae:fe:a5:ea:36:86:ee:ce:
78:25:fb:e5:0e:69:4f:73:2e:9f:bf:0e:e8:d2:70:a9:96:3a:
d9:af:e8:49:a5:cd:ad:06:98:ff:9c:e5:9d:99:e6:cd:ac:cb:
5d:9d:43:de:9d:ec:2b:5a:79:fc:0e:6c:b5:3f:dd:84:fd:a3:
f2:2f:31:f3:6c:1b:bd:48:b5:fc:dd:8d:2c:d9:02:c2:0b:49:
ad:59:31:b4:5e:b8:8a:9e:8b:9d:79:fb:79:45:9e:73:e4:dd:
51:cf:04:c0:0c:c2:55:8a:f0:87:8d:59:9b:3f:9d:ab:7f:6a:
e4:f7:61:76:92:b8:a8:63:f0:15:e2:be:4d:ba:5d:49:83:05:
9b:22:4c:cd:0d:2a:9d:1f:0a:3a:99:88:89:c9:6e:bf:7b:56:
79:6b:2c:38:9f:02:2b:d6:0a:1d:3d:91:b2:d2:1a:60:50:9a:
83:f6:6e:b2:f0:b6:97:4c:61:4a:2e:3f:e6:51:66:8b:42:95:
13:2d:93:74:d6:d8:e4:e7:44:8a:ca:6a:02:98:47:17:10:96:
c5:2c:08:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRqOrbfnXc7qkb7JUx1E6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MGYzMjQ2ZmRkNjFiYTFiNTc5MmZlMWFlYzRhZGNhOThk
NzVhNWMwHhcNMjYwMzAyMDIwMDM2WhcNMjYwMzAzMDIwMDM2WjAzMTEwLwYDVQQD
EyhiYjM1M2E0MjlkNjY5MzlhMzg0ODM5OTZkZTA1NGJkZmI1NzQyMTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5HH80kdI0uSSjH4TQVAd1KBouLyq
gwQCAR6gJG/Tt1mz2M71kiSfJ8uDrCm8eDuHRoU1KZqZO0Yi2MvEaOhuEX6ZRD9d
KqmhZsbbyUNwllycwBTHPPbrQigTtx7OIE/dAYt8rbhMV+2Biz//6k1IxztgSZLI
4/5WpmbaqAES1vIHcZhoWnE1jCNQv9qbujA9NRzveBggpBQQalsZK6ePW8bhCONa
ZjE1AJX7vFqiK9UYlP5nPbTDSjricPr2K2cuEW0ULJiY5fRiniWL6E6pjQf/MOLN
32MSnWuF++bhUdzERn4a6nZHHtJPUAURpuPM8ZKe2Kb7MHoDBX+o7drQXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLs1OkKdZpOaOEg5lt4FS9+1dCETMB8GA1UdIwQY
MBaAFMYPMkb91huhtXkv4a7ErcqY11pcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGc4eVJ2M1dHNkcxZVNfaHJzU3R5cGpYV2x3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8yYTY1NmEtOTMyMy00NDI0LThmYjUt
MTc5NzkyNzY4ZGFlLzEveGc4eVJ2M1dHNkcxZVNfaHJzU3R5cGpYV2x3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8yYTY1NmEtOTMyMy00NDI0LThmYjUtMTc5NzkyNzY4ZGFl
LzEveGc4eVJ2M1dHNkcxZVNfaHJzU3R5cGpYV2x3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADRomnwKu
c0Y55RLYWLVOrsQrLaQkxbMRR5cTKHIFTnnFKsbqiZaCZ1YPfMgl667+peo2hu7O
eCX75Q5pT3Mun78O6NJwqZY62a/oSaXNrQaY/5zlnZnmzazLXZ1D3p3sK1p5/A5s
tT/dhP2j8i8x82wbvUi1/N2NLNkCwgtJrVkxtF64ip6LnXn7eUWec+TdUc8EwAzC
VYrwh41Zmz+dq39q5PdhdpK4qGPwFeK+TbpdSYMFmyJMzQ0qnR8KOpmIicluv3tW
eWssOJ8CK9YKHT2RstIaYFCag/ZusvC2l0xhSi4/5lFmi0KVEy2TdNbY5OdEispq
AphHFxCWxSwIDA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:01:36 2026 by rpki-client