Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
File: xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft (raw, json)
Hash identifier: ALgk0ksTM9Ujc3q0ogy4YGkhniHMAIfw4UjKZzo6vMk=
Subject key identifier: 70:CD:83:D5:81:3F:CD:14:A2:FE:9A:2E:F5:86:1E:03:91:4D:C0:C8
Authority key identifier: C5:46:E1:58:19:EA:CD:05:BC:CE:BF:80:01:9C:A3:CB:7C:4A:38:E0
Certificate issuer: /CN=c546e15819eacd05bccebf80019ca3cb7c4a38e0
Certificate serial: 019CABD95AB1AAC5568CB5C725090FA49CFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
Manifest number: 184B
Signing time: Mon 02 Mar 2026 00:01:14 +0000
Manifest this update: Mon 02 Mar 2026 00:01:14 +0000
Manifest next update: Tue 03 Mar 2026 00:01:14 +0000
Files and hashes: 1: YJVBg6yi8rhbBJuxWKJ7v5Xiat0.roa (hash: Hyd6ST+4DY0Ptd4aJ86bVxwbS75QcKsP6VrnesIx1WI=)
2: __9VedluN1sWd7ruf5_gxA1gv9U.roa (hash: 9+zLsshZreT9h4dF/gegkgeeA5ROS1Ql2Nv3i9Zy+8U=)
3: xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl (hash: HjCXAg10HZ4ax6yADfQ6lNycNiMvfXN+wFpYVW58pz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:5a:b1:aa:c5:56:8c:b5:c7:25:09:0f:a4:9c:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c546e15819eacd05bccebf80019ca3cb7c4a38e0
Validity
Not Before: Mar 2 00:01:14 2026 GMT
Not After : Mar 3 00:01:14 2026 GMT
Subject: CN=70cd83d5813fcd14a2fe9a2ef5861e03914dc0c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7d:b4:2a:c6:3a:a8:4c:b1:11:31:0f:a5:06:
e0:e0:c4:db:9b:f4:38:4e:8b:cd:be:47:ac:e5:82:
01:9a:c8:f4:bd:42:ef:77:1e:17:1b:a4:4f:3c:28:
3d:39:43:04:bb:ea:98:6e:1e:90:44:81:8e:d9:08:
88:d4:4e:a9:ba:15:58:94:e6:53:c5:b1:19:1c:5b:
38:37:f3:bf:39:2a:9c:d8:2e:26:a4:5b:ac:72:80:
7b:97:f8:6b:2e:fa:c3:7c:c9:7b:62:29:0d:6d:c5:
0e:0a:fa:88:e2:68:af:b6:3f:59:7f:3b:60:5e:28:
68:92:72:da:6f:1f:3e:cd:72:10:de:62:a6:f8:67:
2d:6e:6b:ec:0f:93:d3:09:c4:e2:fb:0a:09:32:1f:
3a:33:3f:7e:12:cf:02:02:d5:1f:a5:25:1b:61:66:
9b:25:15:8e:c1:a3:05:75:02:5c:42:b6:09:6b:ee:
ef:d0:ac:c9:fb:ba:0e:f2:39:5a:61:be:31:a8:8c:
bf:98:58:a3:f9:f7:d2:ad:45:c4:06:06:b6:be:71:
25:c7:1c:3c:df:51:ef:28:7d:40:35:41:2f:8f:0e:
0c:d0:8f:c3:42:92:9f:f3:d0:c9:21:97:cf:56:c0:
27:47:b8:f2:d3:04:13:b7:bb:b1:1b:28:8e:d0:e7:
33:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:CD:83:D5:81:3F:CD:14:A2:FE:9A:2E:F5:86:1E:03:91:4D:C0:C8
X509v3 Authority Key Identifier:
keyid:C5:46:E1:58:19:EA:CD:05:BC:CE:BF:80:01:9C:A3:CB:7C:4A:38:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:70:cf:9e:73:74:78:a1:c5:f5:6f:56:7d:c3:1a:79:fe:17:
0d:18:ac:bb:8d:1f:2c:18:0a:c5:4f:9a:53:f2:fe:a6:2c:36:
d9:83:50:b6:3f:36:35:5f:cb:d4:8c:02:88:29:59:3a:1b:b1:
f2:c6:08:3b:4f:f6:24:9e:e2:2b:95:2a:06:da:b8:6a:08:a4:
60:e3:30:56:5e:ca:e4:f5:96:4f:e0:b5:06:5d:46:0b:20:b8:
f4:29:2a:8c:7a:66:96:30:3b:0d:2e:29:4d:4e:64:48:25:85:
b9:5e:16:70:92:f0:26:0a:b5:4f:39:c1:8b:62:ff:c1:f8:73:
96:0c:c5:64:b2:0a:39:e2:e1:1e:16:f4:69:b6:62:45:21:81:
c9:8d:cd:ff:3c:63:52:78:fe:6e:66:29:86:de:55:ca:15:cb:
d1:2c:75:0b:d4:b9:a7:9d:ee:bd:d6:2e:3d:36:17:a2:11:99:
9f:43:4c:28:eb:83:05:67:67:23:3e:ab:b6:2d:73:22:57:5c:
02:1d:8a:4a:ea:c9:16:d5:d3:46:e7:68:21:ab:ee:6e:ac:e2:
27:c4:3b:dd:de:c7:97:18:a0:6f:9b:fa:89:0e:1a:2f:77:05:
fa:d3:39:18:26:fe:71:fa:7e:7f:89:33:54:e3:e2:f9:27:21:
a3:a1:de:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2VqxqsVWjLXHJQkPpJz7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NDZlMTU4MTllYWNkMDViY2NlYmY4MDAxOWNhM2NiN2M0
YTM4ZTAwHhcNMjYwMzAyMDAwMTE0WhcNMjYwMzAzMDAwMTE0WjAzMTEwLwYDVQQD
Eyg3MGNkODNkNTgxM2ZjZDE0YTJmZTlhMmVmNTg2MWUwMzkxNGRjMGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp320KsY6qEyxETEPpQbg4MTbm/Q4
TovNvkes5YIBmsj0vULvdx4XG6RPPCg9OUMEu+qYbh6QRIGO2QiI1E6puhVYlOZT
xbEZHFs4N/O/OSqc2C4mpFuscoB7l/hrLvrDfMl7YikNbcUOCvqI4mivtj9Zfztg
XihoknLabx8+zXIQ3mKm+GctbmvsD5PTCcTi+woJMh86Mz9+Es8CAtUfpSUbYWab
JRWOwaMFdQJcQrYJa+7v0KzJ+7oO8jlaYb4xqIy/mFij+ffSrUXEBga2vnElxxw8
31HvKH1ANUEvjw4M0I/DQpKf89DJIZfPVsAnR7jy0wQTt7uxGyiO0Ocz4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHDNg9WBP80Uov6aLvWGHgORTcDIMB8GA1UdIwQY
MBaAFMVG4VgZ6s0FvM6/gAGco8t8SjjgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFViaFdCbnF6UVc4enItQUFaeWp5M3hLT09BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9mOTVhYzUtMGI4Yi00NWQ2LWJlOWEt
MmRiMjI0NWYyOTg1LzEveFViaFdCbnF6UVc4enItQUFaeWp5M3hLT09BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9mOTVhYzUtMGI4Yi00NWQ2LWJlOWEtMmRiMjI0NWYyOTg1
LzEveFViaFdCbnF6UVc4enItQUFaeWp5M3hLT09BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZXDPnnN0
eKHF9W9WfcMaef4XDRisu40fLBgKxU+aU/L+piw22YNQtj82NV/L1IwCiClZOhux
8sYIO0/2JJ7iK5UqBtq4agikYOMwVl7K5PWWT+C1Bl1GCyC49CkqjHpmljA7DS4p
TU5kSCWFuV4WcJLwJgq1TznBi2L/wfhzlgzFZLIKOeLhHhb0abZiRSGByY3N/zxj
Unj+bmYpht5VyhXL0Sx1C9S5p53uvdYuPTYXohGZn0NMKOuDBWdnIz6rti1zIldc
Ah2KSurJFtXTRudoIavubqziJ8Q73d7Hlxigb5v6iQ4aL3cF+tM5GCb+cfp+f4kz
VOPi+Scho6HePg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:45:47 2026 by rpki-client