Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
File: XZxbcz-6cemMB-E7A6fFWrhMyO0.mft (raw, json)
Hash identifier: wttH4JRlcsywm7exMxwVblCSdK3ww46pm5/kB0ly0DA=
Subject key identifier: 6D:F0:77:33:E7:AA:EE:FB:28:CF:0E:A5:53:44:4D:1E:97:7B:63:4A
Authority key identifier: 5D:9C:5B:73:3F:BA:71:E9:8C:07:E1:3B:03:A7:C5:5A:B8:4C:C8:ED
Certificate issuer: /CN=5d9c5b733fba71e98c07e13b03a7c55ab84cc8ed
Certificate serial: 019CAD9048AA494E6ECC0E0A1E7144B9E2DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 08:00:39 +0000
Manifest this update: Mon 02 Mar 2026 08:00:39 +0000
Manifest next update: Tue 03 Mar 2026 08:00:39 +0000
Files and hashes: 1: D7RyDh7lTL4H2jBeI3MtODxeB2w.roa (hash: j4FPb00AEU8sTGz7vN2WFChjUdkqXvKYmGt4w0kqQbw=)
2: XZxbcz-6cemMB-E7A6fFWrhMyO0.crl (hash: 8xJqJAPe5p0mhRn9XyYZrEG7gjVB0WMNiR+pch3lCi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:48:aa:49:4e:6e:cc:0e:0a:1e:71:44:b9:e2:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c5b733fba71e98c07e13b03a7c55ab84cc8ed
Validity
Not Before: Mar 2 08:00:39 2026 GMT
Not After : Mar 3 08:00:39 2026 GMT
Subject: CN=6df07733e7aaeefb28cf0ea553444d1e977b634a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fb:c8:36:11:af:1f:16:31:6e:61:be:c9:11:
e0:25:54:80:1a:ba:47:be:b2:c1:90:56:eb:5f:fc:
68:e6:24:da:c7:50:a8:b4:65:12:19:47:60:56:67:
bc:de:84:4b:a7:eb:a9:b6:85:20:9a:bc:04:f6:e5:
cf:90:1d:fe:d8:35:ec:15:6e:7c:83:12:cf:c8:e7:
f2:63:85:98:91:28:4c:a5:ac:3e:f5:c6:ae:e8:25:
5b:a3:d2:df:6d:d1:a3:37:0d:17:f2:a5:a8:90:5a:
bb:a3:51:7d:43:ef:c1:9f:1a:ce:81:b0:31:52:ba:
75:23:d5:94:1d:90:aa:72:3b:91:26:e6:29:69:25:
5b:94:43:45:3b:5c:f0:8f:fd:55:e0:e1:74:5e:b7:
6e:b2:7b:89:82:a4:af:62:7a:e9:34:88:80:63:63:
90:fd:bd:9b:b2:a7:19:b0:d5:15:f7:00:3c:58:b9:
4c:36:19:7a:bc:1d:4f:17:d9:ae:87:57:22:cf:36:
3c:a8:73:96:33:2c:06:40:f4:9c:4a:8b:c3:8d:e5:
c3:c3:c3:e7:3c:bb:1e:62:e0:ad:04:f5:a3:32:b2:
6a:a9:c1:21:95:b0:aa:90:67:da:b2:92:80:4b:f4:
66:55:41:d3:c2:39:03:b7:41:bd:a4:19:08:4e:86:
66:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F0:77:33:E7:AA:EE:FB:28:CF:0E:A5:53:44:4D:1E:97:7B:63:4A
X509v3 Authority Key Identifier:
keyid:5D:9C:5B:73:3F:BA:71:E9:8C:07:E1:3B:03:A7:C5:5A:B8:4C:C8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:92:b0:01:ac:0b:24:27:98:4c:b2:91:d6:c4:ea:cb:a6:0b:
d3:43:c4:0a:c0:86:b6:88:f3:17:18:d5:44:9e:a0:f6:6b:6c:
e2:46:05:8c:61:bd:62:a5:46:b2:a7:f9:fd:67:77:a2:2a:b9:
d4:66:9e:a7:72:97:c1:c0:79:29:78:3b:6d:23:50:a3:26:b2:
ea:eb:d9:24:8d:58:eb:a6:2a:a1:19:27:59:d0:d9:64:eb:43:
b0:b8:cb:7d:30:40:33:2a:6e:fd:8d:7f:df:db:8f:ef:ab:3c:
2c:14:ae:c5:88:d3:ff:24:ae:3a:2f:dc:16:cf:17:a3:02:a2:
42:97:57:df:d7:aa:be:31:ee:a8:c7:39:59:be:8b:cd:15:22:
95:31:a7:7d:f1:b3:c6:24:79:5f:cd:0e:ec:29:3a:58:1f:da:
23:c3:6b:ad:cb:14:15:62:80:37:c4:82:bb:7a:ab:c2:b1:e8:
db:d7:c6:cf:b0:3a:cd:f7:86:55:ea:4b:36:3b:24:f7:2a:57:
c2:41:21:af:32:1a:d3:3c:4c:1e:1c:73:2f:cc:b7:47:3a:ab:
94:6a:47:9b:7a:2c:cc:66:fc:bb:41:e6:e8:f6:71:17:ea:d3:
45:0a:82:f5:97:84:e1:e2:56:3e:96:fc:f4:ed:fe:6b:85:f2:
e0:d4:a7:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytkEiqSU5uzA4KHnFEueLcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkOWM1YjczM2ZiYTcxZTk4YzA3ZTEzYjAzYTdjNTVhYjg0
Y2M4ZWQwHhcNMjYwMzAyMDgwMDM5WhcNMjYwMzAzMDgwMDM5WjAzMTEwLwYDVQQD
Eyg2ZGYwNzczM2U3YWFlZWZiMjhjZjBlYTU1MzQ0NGQxZTk3N2I2MzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/vINhGvHxYxbmG+yRHgJVSAGrpH
vrLBkFbrX/xo5iTax1CotGUSGUdgVme83oRLp+uptoUgmrwE9uXPkB3+2DXsFW58
gxLPyOfyY4WYkShMpaw+9cau6CVbo9LfbdGjNw0X8qWokFq7o1F9Q+/BnxrOgbAx
Urp1I9WUHZCqcjuRJuYpaSVblENFO1zwj/1V4OF0XrdusnuJgqSvYnrpNIiAY2OQ
/b2bsqcZsNUV9wA8WLlMNhl6vB1PF9muh1cizzY8qHOWMywGQPScSovDjeXDw8Pn
PLseYuCtBPWjMrJqqcEhlbCqkGfaspKAS/RmVUHTwjkDt0G9pBkIToZmtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG3wdzPnqu77KM8OpVNETR6Xe2NKMB8GA1UdIwQY
MBaAFF2cW3M/unHpjAfhOwOnxVq4TMjtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFp4YmN6LTZjZW1NQi1FN0E2ZkZXcmhNeU8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9hMmQ0Y2ItOTIzYS00ZTA0LThkODUt
YWQ5ZDVkYjBmMDk5LzEvWFp4YmN6LTZjZW1NQi1FN0E2ZkZXcmhNeU8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9hMmQ0Y2ItOTIzYS00ZTA0LThkODUtYWQ5ZDVkYjBmMDk5
LzEvWFp4YmN6LTZjZW1NQi1FN0E2ZkZXcmhNeU8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZpKwAawL
JCeYTLKR1sTqy6YL00PECsCGtojzFxjVRJ6g9mts4kYFjGG9YqVGsqf5/Wd3oiq5
1Gaep3KXwcB5KXg7bSNQoyay6uvZJI1Y66YqoRknWdDZZOtDsLjLfTBAMypu/Y1/
39uP76s8LBSuxYjT/ySuOi/cFs8XowKiQpdX39eqvjHuqMc5Wb6LzRUilTGnffGz
xiR5X80O7Ck6WB/aI8NrrcsUFWKAN8SCu3qrwrHo29fGz7A6zfeGVepLNjsk9ypX
wkEhrzIa0zxMHhxzL8y3RzqrlGpHm3oszGb8u0Hm6PZxF+rTRQqC9ZeE4eJWPpb8
9O3+a4Xy4NSn7w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:07:36 2026 by rpki-client