Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/XHbv8miEvwBiB9cis7AaRNK1YZk.mft
File: XHbv8miEvwBiB9cis7AaRNK1YZk.mft (raw, json)
Hash identifier: +BLMOUHiFAYfXVyDLOGAZH0ZjKWtu8T37BLbL594jhY=
Subject key identifier: 33:3D:46:F0:9C:9D:0E:7B:B6:30:9A:8F:7C:BA:4D:8D:D8:61:80:6C
Authority key identifier: 5C:76:EF:F2:68:84:BF:00:62:07:D7:22:B3:B0:1A:44:D2:B5:61:99
Certificate issuer: /CN=5c76eff26884bf006207d722b3b01a44d2b56199
Certificate serial: 019CAB33E49208BD3ADB56345182D1D9006F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHbv8miEvwBiB9cis7AaRNK1YZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/XHbv8miEvwBiB9cis7AaRNK1YZk.mft
Manifest number: 107D
Signing time: Sun 01 Mar 2026 21:00:30 +0000
Manifest this update: Sun 01 Mar 2026 21:00:30 +0000
Manifest next update: Mon 02 Mar 2026 21:00:30 +0000
Files and hashes: 1: XHbv8miEvwBiB9cis7AaRNK1YZk.crl (hash: 7z9YmkzJoWY0P9RxW1QN+YwK0IGHjB+bnMxZAZFAoZw=)
2: _YZBO3azDWzDB7ElIM22F0xnwLk.roa (hash: 4qcIMPGCjL8+gfTaAVV6FW+AJO4ktZWbZTXBgVeKur0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/XHbv8miEvwBiB9cis7AaRNK1YZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/XHbv8miEvwBiB9cis7AaRNK1YZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHbv8miEvwBiB9cis7AaRNK1YZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:e4:92:08:bd:3a:db:56:34:51:82:d1:d9:00:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c76eff26884bf006207d722b3b01a44d2b56199
Validity
Not Before: Mar 1 21:00:30 2026 GMT
Not After : Mar 2 21:00:30 2026 GMT
Subject: CN=333d46f09c9d0e7bb6309a8f7cba4d8dd861806c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b9:ac:74:02:00:2f:ae:19:cb:e5:17:cb:79:
7c:8a:79:f5:37:1a:18:bf:90:5d:66:a0:78:fc:15:
e2:33:c1:92:a2:0e:59:f1:b6:46:c2:6d:4e:c6:17:
b3:b3:09:d9:62:a6:46:e1:42:b8:1d:7b:e5:1b:0a:
23:4f:7b:a1:18:8a:37:00:a5:82:f8:31:50:3d:62:
22:cf:35:cf:5f:b9:61:26:3c:b9:4d:2e:e3:5e:04:
4c:aa:ec:87:01:46:a7:b1:dd:85:84:15:d1:9e:f4:
b0:e9:95:c1:10:3e:b9:9c:f8:91:4f:cf:b6:57:73:
d7:6b:b8:6d:37:37:99:e0:57:2f:e6:dd:d8:65:6f:
34:b8:09:61:4d:c5:18:ca:f7:1d:b7:a9:5a:a0:f2:
a7:1d:af:54:6d:d7:20:11:ae:96:bc:6f:0d:cf:32:
f3:73:7e:81:51:9c:45:5f:c4:c1:42:34:36:0d:7d:
df:ac:38:04:df:4a:37:b0:a6:4b:99:4e:7d:35:f4:
26:da:2b:14:b8:df:20:d6:ba:b2:25:55:16:7d:7d:
c5:d7:65:97:dd:3b:0d:dd:ca:8b:8e:fc:77:99:16:
57:c2:a7:c7:42:11:b6:15:ad:53:44:bb:95:c0:ad:
b2:0f:53:5d:17:6d:88:a1:39:1d:6c:1f:97:00:ae:
00:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:3D:46:F0:9C:9D:0E:7B:B6:30:9A:8F:7C:BA:4D:8D:D8:61:80:6C
X509v3 Authority Key Identifier:
keyid:5C:76:EF:F2:68:84:BF:00:62:07:D7:22:B3:B0:1A:44:D2:B5:61:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHbv8miEvwBiB9cis7AaRNK1YZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/XHbv8miEvwBiB9cis7AaRNK1YZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/XHbv8miEvwBiB9cis7AaRNK1YZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:06:ef:83:f5:a0:69:98:cd:d6:c2:02:4d:1c:04:df:cd:88:
f4:3c:85:e0:08:4f:90:d3:b3:e6:f2:03:0a:85:96:87:31:d4:
99:27:57:af:61:93:93:fa:fe:e4:2e:65:75:00:9c:fd:14:c5:
55:01:3d:2c:11:85:be:49:3d:4e:8c:fe:9f:5c:4e:9e:4b:e9:
55:d8:4e:1b:d6:f2:94:8d:09:33:fa:da:e5:66:4a:70:dd:85:
dc:e6:e1:7e:a5:72:62:31:2b:d9:8a:30:f6:35:b9:80:e4:ee:
a7:77:e8:99:d2:f0:cd:09:43:86:df:41:21:7a:54:96:7f:14:
b3:97:0d:a0:08:ac:6d:41:eb:1b:36:e9:d1:c8:35:9d:d6:bf:
18:10:bf:72:c6:27:c4:2a:ba:dc:1a:88:25:f3:7a:d8:7f:0f:
0e:2b:0e:38:a4:0e:fb:68:62:1a:30:fc:4c:a5:6f:37:13:91:
38:9f:7e:1f:78:49:7f:a6:3f:64:6d:6d:f2:54:f5:e9:ee:b9:
16:2c:d5:41:9b:63:9b:02:ed:99:67:64:b4:bb:62:a9:d0:c5:
02:48:b7:1c:fd:0d:e8:76:53:07:a2:42:7d:2c:2f:9d:f0:76:
b0:d0:5f:1d:fa:04:be:73:a7:42:46:30:5f:74:3f:13:6a:da:
5b:3d:5c:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrM+SSCL0621Y0UYLR2QBvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNzZlZmYyNjg4NGJmMDA2MjA3ZDcyMmIzYjAxYTQ0ZDJi
NTYxOTkwHhcNMjYwMzAxMjEwMDMwWhcNMjYwMzAyMjEwMDMwWjAzMTEwLwYDVQQD
EygzMzNkNDZmMDljOWQwZTdiYjYzMDlhOGY3Y2JhNGQ4ZGQ4NjE4MDZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrmsdAIAL64Zy+UXy3l8inn1NxoY
v5BdZqB4/BXiM8GSog5Z8bZGwm1OxhezswnZYqZG4UK4HXvlGwojT3uhGIo3AKWC
+DFQPWIizzXPX7lhJjy5TS7jXgRMquyHAUansd2FhBXRnvSw6ZXBED65nPiRT8+2
V3PXa7htNzeZ4Fcv5t3YZW80uAlhTcUYyvcdt6laoPKnHa9UbdcgEa6WvG8NzzLz
c36BUZxFX8TBQjQ2DX3frDgE30o3sKZLmU59NfQm2isUuN8g1rqyJVUWfX3F12WX
3TsN3cqLjvx3mRZXwqfHQhG2Fa1TRLuVwK2yD1NdF22IoTkdbB+XAK4A9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDM9RvCcnQ57tjCaj3y6TY3YYYBsMB8GA1UdIwQY
MBaAFFx27/JohL8AYgfXIrOwGkTStWGZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEhidjhtaUV2d0JpQjljaXM3QWFSTksxWVprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny84NjIyMzItNThkNy00YzFkLWIxOTgt
NjYwNDExYjlkMTY3LzEvWEhidjhtaUV2d0JpQjljaXM3QWFSTksxWVprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny84NjIyMzItNThkNy00YzFkLWIxOTgtNjYwNDExYjlkMTY3
LzEvWEhidjhtaUV2d0JpQjljaXM3QWFSTksxWVprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAswbvg/Wg
aZjN1sICTRwE382I9DyF4AhPkNOz5vIDCoWWhzHUmSdXr2GTk/r+5C5ldQCc/RTF
VQE9LBGFvkk9Toz+n1xOnkvpVdhOG9bylI0JM/ra5WZKcN2F3ObhfqVyYjEr2Yow
9jW5gOTup3fomdLwzQlDht9BIXpUln8Us5cNoAisbUHrGzbp0cg1nda/GBC/csYn
xCq63BqIJfN62H8PDisOOKQO+2hiGjD8TKVvNxOROJ9+H3hJf6Y/ZG1t8lT16e65
FizVQZtjmwLtmWdktLtiqdDFAki3HP0N6HZTB6JCfSwvnfB2sNBfHfoEvnOnQkYw
X3Q/E2raWz1czg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:58:33 2026 by rpki-client