Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft
File: XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft (raw, json)
Hash identifier: e5P8v7sZO5x9SalUGMjd/ujGAzBMiH4gcOMd1g+09wU=
Subject key identifier: 80:B2:4B:27:3E:3C:EF:A1:DB:02:0F:FD:5C:F5:E1:6D:E6:37:A0:C4
Authority key identifier: 5C:68:A2:79:76:9D:19:3D:F3:F9:78:1D:2B:A4:C1:D9:27:7B:4F:D6
Certificate issuer: /CN=5c68a279769d193df3f9781d2ba4c1d9277b4fd6
Certificate serial: 019CAEA3BBF280A34796259815F52DFB2CF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGiieXadGT3z-XgdK6TB2Sd7T9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft
Manifest number: 0678
Signing time: Mon 02 Mar 2026 13:01:31 +0000
Manifest this update: Mon 02 Mar 2026 13:01:31 +0000
Manifest next update: Tue 03 Mar 2026 13:01:31 +0000
Files and hashes: 1: IrwpzwNbD7ixeqg3vbCTik-T_Lc.roa (hash: HyILMqlsRAkiSlovY1KbO4nirms1nXEWPqExv/4Zspw=)
2: XGiieXadGT3z-XgdK6TB2Sd7T9Y.crl (hash: LFxvtMxQWPMUTL9b8TZ3AERxjAcyafjBEieapzPvcfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGiieXadGT3z-XgdK6TB2Sd7T9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:bb:f2:80:a3:47:96:25:98:15:f5:2d:fb:2c:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c68a279769d193df3f9781d2ba4c1d9277b4fd6
Validity
Not Before: Mar 2 13:01:31 2026 GMT
Not After : Mar 3 13:01:31 2026 GMT
Subject: CN=80b24b273e3cefa1db020ffd5cf5e16de637a0c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2c:35:bc:fd:1f:5f:07:5e:01:b3:dc:ca:5c:
75:e1:21:0f:c6:35:08:a4:0a:e0:e0:8b:c4:e9:f9:
d6:4a:46:bc:7e:e0:dd:fa:44:cc:0d:c5:c4:93:4d:
f3:bd:01:c8:dd:a2:bb:e9:01:f7:d5:ba:5a:f5:45:
51:51:59:88:11:8a:10:d0:7a:9a:d9:94:8e:10:41:
51:53:5f:1e:3b:a7:aa:71:e6:51:c3:32:7d:62:ac:
0f:30:7a:30:9a:ac:10:f8:6f:86:71:72:be:0b:8e:
71:f0:5e:2d:d3:0b:72:63:34:24:01:d8:4a:03:67:
81:e3:a5:89:4b:a7:8b:b5:5e:7c:18:41:b7:e0:2b:
3a:63:91:47:26:23:ae:0f:9e:b1:c0:35:39:d5:e8:
19:30:7a:41:ea:f5:80:86:c4:51:df:28:7e:ca:3a:
88:ee:2c:b3:d7:4e:cd:80:cf:1d:f0:54:56:b2:40:
51:b2:ec:28:a5:2e:b7:1f:17:9e:c1:90:aa:08:e4:
bd:12:fe:1d:c2:22:26:68:38:49:35:9a:94:99:aa:
a7:38:a5:0d:82:e8:c3:7c:54:af:9e:9b:d3:1c:97:
29:d7:8a:12:ed:07:e3:f3:d7:c9:71:79:ac:d2:e7:
89:8d:24:e1:3c:fd:15:c7:ce:2e:44:0e:58:9a:1d:
b8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B2:4B:27:3E:3C:EF:A1:DB:02:0F:FD:5C:F5:E1:6D:E6:37:A0:C4
X509v3 Authority Key Identifier:
keyid:5C:68:A2:79:76:9D:19:3D:F3:F9:78:1D:2B:A4:C1:D9:27:7B:4F:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGiieXadGT3z-XgdK6TB2Sd7T9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:d8:8f:f4:90:91:e0:12:5b:d3:13:12:74:14:06:76:7a:e1:
ca:6f:4d:48:f2:07:cf:f0:fa:89:0e:37:7d:37:47:7d:a1:51:
02:72:0c:f0:d5:34:a1:42:a1:7b:68:75:47:a9:72:b4:14:d0:
1f:44:78:a4:fe:c3:84:e6:87:c9:1d:79:40:91:db:04:3c:88:
1b:4f:9b:ab:50:17:8e:a7:4e:1b:f7:f7:e0:27:c6:b0:9c:1a:
ba:e8:ad:73:f8:d0:63:c9:a7:6f:cc:dd:1f:e7:ee:2e:07:c1:
a9:5e:d1:e6:3b:5a:e6:07:3a:59:b7:13:55:66:c5:38:00:a6:
d0:6f:c7:70:14:88:8c:7d:d6:e0:35:23:93:07:a3:26:3c:e2:
e9:de:c4:48:d3:d6:3c:ba:b8:96:fe:5b:c7:75:8c:34:c6:cd:
b7:a1:82:84:49:71:9e:db:3f:ee:97:1b:71:9d:6a:84:98:d4:
51:b9:7f:1f:de:c4:ef:03:55:15:d0:a1:c3:29:1a:c6:dc:dd:
11:1b:2b:cf:44:e7:34:33:05:96:61:cf:e2:a0:86:31:b5:a0:
5d:90:ae:db:82:f6:36:f4:e4:93:1b:80:66:20:9e:83:3b:11:
a2:9c:53:b5:73:20:a7:94:f0:36:3d:81:33:27:44:94:06:d3:
dd:93:6c:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuo7vygKNHliWYFfUt+yz4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNjhhMjc5NzY5ZDE5M2RmM2Y5NzgxZDJiYTRjMWQ5Mjc3
YjRmZDYwHhcNMjYwMzAyMTMwMTMxWhcNMjYwMzAzMTMwMTMxWjAzMTEwLwYDVQQD
Eyg4MGIyNGIyNzNlM2NlZmExZGIwMjBmZmQ1Y2Y1ZTE2ZGU2MzdhMGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCw1vP0fXwdeAbPcylx14SEPxjUI
pArg4IvE6fnWSka8fuDd+kTMDcXEk03zvQHI3aK76QH31bpa9UVRUVmIEYoQ0Hqa
2ZSOEEFRU18eO6eqceZRwzJ9YqwPMHowmqwQ+G+GcXK+C45x8F4t0wtyYzQkAdhK
A2eB46WJS6eLtV58GEG34Cs6Y5FHJiOuD56xwDU51egZMHpB6vWAhsRR3yh+yjqI
7iyz107NgM8d8FRWskBRsuwopS63HxeewZCqCOS9Ev4dwiImaDhJNZqUmaqnOKUN
gujDfFSvnpvTHJcp14oS7Qfj89fJcXms0ueJjSThPP0Vx84uRA5Ymh24KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFICySyc+PO+h2wIP/Vz14W3mN6DEMB8GA1UdIwQY
MBaAFFxoonl2nRk98/l4HSukwdkne0/WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEdpaWVYYWRHVDN6LVhnZEs2VEIyU2Q3VDlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9mNWM5NmEtYjcwZi00MTllLTgyNmYt
MTUzOThiYTViMGU3LzEvWEdpaWVYYWRHVDN6LVhnZEs2VEIyU2Q3VDlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9mNWM5NmEtYjcwZi00MTllLTgyNmYtMTUzOThiYTViMGU3
LzEvWEdpaWVYYWRHVDN6LVhnZEs2VEIyU2Q3VDlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABtiP9JCR
4BJb0xMSdBQGdnrhym9NSPIHz/D6iQ43fTdHfaFRAnIM8NU0oUKhe2h1R6lytBTQ
H0R4pP7DhOaHyR15QJHbBDyIG0+bq1AXjqdOG/f34CfGsJwauuitc/jQY8mnb8zd
H+fuLgfBqV7R5jta5gc6WbcTVWbFOACm0G/HcBSIjH3W4DUjkwejJjzi6d7ESNPW
PLq4lv5bx3WMNMbNt6GChElxnts/7pcbcZ1qhJjUUbl/H97E7wNVFdChwykaxtzd
ERsrz0TnNDMFlmHP4qCGMbWgXZCu24L2NvTkkxuAZiCegzsRopxTtXMgp5TwNj2B
MydElAbT3ZNshg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 22:48:27 2026 by rpki-client