Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
File: xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft (raw, json)
Hash identifier: FW+zkASi0yjZUip9AuK5ek+9k2fGNeEi/fXUODLYekg=
Subject key identifier: 6B:BB:8D:D4:96:15:BF:B6:07:A2:84:7B:C6:E0:56:36:A1:23:E9:81
Authority key identifier: C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF
Certificate issuer: /CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf
Certificate serial: 019CAB6BD5DBDA5410253DE1FB7FF876E176
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
Manifest number: 1693
Signing time: Sun 01 Mar 2026 22:01:36 +0000
Manifest this update: Sun 01 Mar 2026 22:01:36 +0000
Manifest next update: Mon 02 Mar 2026 22:01:36 +0000
Files and hashes: 1: vAqm-n6lOJmboBYQxwCWXscToCI.roa (hash: eddQmjFbutaY0t3+KjyZXIhwzLmKmB/bUbWp/1/h8vE=)
2: xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl (hash: 1e1S/K+44Ujc1DY9FWebZX+7zmOIeri76/1cpZsuCls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:d5:db:da:54:10:25:3d:e1:fb:7f:f8:76:e1:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf
Validity
Not Before: Mar 1 22:01:36 2026 GMT
Not After : Mar 2 22:01:36 2026 GMT
Subject: CN=6bbb8dd49615bfb607a2847bc6e05636a123e981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:20:d1:fc:6b:c0:60:3d:48:2f:83:7e:2e:f1:
b6:14:bc:3e:e3:b0:49:0c:d3:57:74:8c:c7:9a:24:
55:93:b1:d3:2b:69:ab:1c:3a:40:9f:71:f7:75:00:
a4:67:0c:32:de:45:55:4f:ae:b5:4f:a6:a9:52:c4:
e0:f9:64:54:e5:91:5a:6f:ac:c0:55:b5:14:97:e3:
4e:47:0a:91:2e:6c:d6:95:ae:fe:09:bb:1c:b8:f5:
09:5a:a0:5d:27:31:eb:4d:61:99:b9:65:39:63:c3:
23:71:2e:81:aa:4c:8a:8d:b9:46:a9:fd:2b:49:fd:
37:f3:e9:1d:62:58:fe:46:35:6a:2b:87:ff:4e:5d:
fd:9d:e2:4c:7d:27:e1:4f:90:f0:00:5c:c7:0f:c3:
74:11:98:47:41:88:97:14:62:9e:95:86:a5:c7:ba:
93:f1:4d:a9:38:da:b2:19:54:14:3d:2e:a7:9d:84:
9d:99:8e:3a:02:e3:4a:41:3b:94:80:f7:72:70:bc:
13:76:e9:f4:fb:33:db:91:e9:47:e1:68:69:8b:88:
1e:c1:6e:db:15:05:68:8e:2a:99:73:ae:3e:43:e2:
2a:ad:06:89:73:e5:1f:22:04:2b:d9:80:ab:8f:a9:
73:a6:98:f8:e3:25:c1:e4:70:bb:0e:64:79:6b:df:
97:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:BB:8D:D4:96:15:BF:B6:07:A2:84:7B:C6:E0:56:36:A1:23:E9:81
X509v3 Authority Key Identifier:
keyid:C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:b0:11:ae:14:47:da:d1:70:1f:25:6b:24:1f:9b:1c:db:19:
e1:b8:ba:f4:f1:5f:8c:51:14:4f:30:23:63:04:a7:8c:11:80:
ca:72:c3:41:9c:32:69:ba:cd:1c:a4:de:fb:d6:d6:3e:97:17:
6b:33:ac:e4:18:aa:a3:8c:b2:a5:92:23:be:04:4c:bc:c4:2a:
cc:1b:a6:83:cb:70:b4:0b:b6:37:cc:9e:c3:ed:39:41:f1:fd:
fa:b2:c0:c9:23:2a:d1:12:59:c1:57:d7:01:6a:25:d3:8b:aa:
f5:6a:04:d1:7a:05:b6:47:a4:99:f0:33:15:e6:01:72:3a:26:
db:c9:2d:b4:5b:0b:76:65:0b:ac:89:31:4d:4b:00:fa:2f:ed:
4b:e5:f2:52:f0:63:94:8a:7a:86:58:7f:49:c9:6d:e6:81:6d:
11:c1:0e:da:83:bf:2f:ae:f8:5a:ce:7f:fe:30:17:de:e1:ae:
64:7d:8a:53:84:f7:ac:57:5c:38:b4:a4:55:8b:7d:57:7c:d4:
f0:80:26:4f:57:6c:49:8a:f9:5c:48:e4:cb:95:aa:6c:33:11:
6e:80:6f:17:d5:45:80:44:45:ee:7f:78:9f:6e:27:47:82:ac:
58:b1:7b:07:4b:a2:e4:28:c2:0b:14:03:0b:d7:4e:74:f9:41:
79:3a:3b:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra9Xb2lQQJT3h+3/4duF2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0OTE0NTZlZGE1OWZiMGZkMmQxNzNmOTU0MTJiZTM1ZjZj
ZmJmYWYwHhcNMjYwMzAxMjIwMTM2WhcNMjYwMzAyMjIwMTM2WjAzMTEwLwYDVQQD
Eyg2YmJiOGRkNDk2MTViZmI2MDdhMjg0N2JjNmUwNTYzNmExMjNlOTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSDR/GvAYD1IL4N+LvG2FLw+47BJ
DNNXdIzHmiRVk7HTK2mrHDpAn3H3dQCkZwwy3kVVT661T6apUsTg+WRU5ZFab6zA
VbUUl+NORwqRLmzWla7+CbscuPUJWqBdJzHrTWGZuWU5Y8MjcS6BqkyKjblGqf0r
Sf038+kdYlj+RjVqK4f/Tl39neJMfSfhT5DwAFzHD8N0EZhHQYiXFGKelYalx7qT
8U2pONqyGVQUPS6nnYSdmY46AuNKQTuUgPdycLwTdun0+zPbkelH4Whpi4gewW7b
FQVojiqZc64+Q+IqrQaJc+UfIgQr2YCrj6lzppj44yXB5HC7DmR5a9+X+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGu7jdSWFb+2B6KEe8bgVjahI+mBMB8GA1UdIwQY
MBaAFMSRRW7aWfsP0tFz+VQSvjX2z7+vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEpGRmJ0cFotd19TMFhQNVZCSy1OZmJQdjY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni80ZjQwOGQtYmRhNS00YTk0LWI4M2Et
YTczMGNjZmRhZGM1LzEveEpGRmJ0cFotd19TMFhQNVZCSy1OZmJQdjY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni80ZjQwOGQtYmRhNS00YTk0LWI4M2EtYTczMGNjZmRhZGM1
LzEveEpGRmJ0cFotd19TMFhQNVZCSy1OZmJQdjY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPLARrhRH
2tFwHyVrJB+bHNsZ4bi69PFfjFEUTzAjYwSnjBGAynLDQZwyabrNHKTe+9bWPpcX
azOs5Biqo4yypZIjvgRMvMQqzBumg8twtAu2N8yew+05QfH9+rLAySMq0RJZwVfX
AWol04uq9WoE0XoFtkekmfAzFeYBcjom28kttFsLdmULrIkxTUsA+i/tS+XyUvBj
lIp6hlh/Sclt5oFtEcEO2oO/L674Ws5//jAX3uGuZH2KU4T3rFdcOLSkVYt9V3zU
8IAmT1dsSYr5XEjky5WqbDMRboBvF9VFgERF7n94n24nR4KsWLF7B0ui5CjCCxQD
C9dOdPlBeTo7Vg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:28:39 2026 by rpki-client