Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
File: XWlT20hASwxmoV8Npu-n-sCpNp4.mft (raw, json)
Hash identifier: WKNUfEBoox8p7TZpjwSZn0fb7zAJC2l+P6p9Tg5Ez6I=
Subject key identifier: 24:E2:97:A8:90:AB:68:BA:2F:B2:8B:44:28:99:BC:89:D9:4E:49:E4
Authority key identifier: 5D:69:53:DB:48:40:4B:0C:66:A1:5F:0D:A6:EF:A7:FA:C0:A9:36:9E
Certificate issuer: /CN=5d6953db48404b0c66a15f0da6efa7fac0a9369e
Certificate serial: 019CAE6C0ADD6F4388FB93E98C1CF414D674
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 12:00:42 +0000
Manifest this update: Mon 02 Mar 2026 12:00:42 +0000
Manifest next update: Tue 03 Mar 2026 12:00:42 +0000
Files and hashes: 1: PnV6MRrCbEDbUgZOWZkw0F-5fTw.roa (hash: gpEq7vfgynN+KUY61gV3ilXsbaQKj+P9YjZ3SCCvLxo=)
2: XWlT20hASwxmoV8Npu-n-sCpNp4.crl (hash: JRAvhP9Pg1ynjr7xYd72FUPNrhiS9gnMRLBBv9sKb4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:0a:dd:6f:43:88:fb:93:e9:8c:1c:f4:14:d6:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6953db48404b0c66a15f0da6efa7fac0a9369e
Validity
Not Before: Mar 2 12:00:42 2026 GMT
Not After : Mar 3 12:00:42 2026 GMT
Subject: CN=24e297a890ab68ba2fb28b442899bc89d94e49e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fc:ca:86:f7:11:38:44:6b:8d:8b:50:3d:c3:
ae:b6:07:73:f9:e7:79:a8:4a:a7:1a:60:eb:ca:c9:
3b:b9:66:d3:5e:3c:2e:a1:a0:13:15:27:65:11:7b:
9c:64:22:90:18:af:57:b5:8d:a6:8f:7e:fe:35:c9:
84:e9:c0:89:37:27:dc:a2:ce:58:2e:c8:ed:f9:f9:
51:32:80:81:4f:ef:20:c5:87:ce:c5:2d:7f:94:82:
1f:11:c9:45:06:aa:c1:9f:2c:96:93:3a:b2:5a:74:
62:36:51:a7:db:18:74:dd:e9:fa:49:61:0f:dd:a3:
ea:0d:79:8e:20:d3:89:bc:a0:c8:d9:9d:af:32:2b:
70:55:fb:3f:3d:8b:e4:da:da:7e:c6:a1:f2:cd:ed:
f4:f8:45:db:24:a6:59:28:63:9d:a0:12:c1:61:54:
d9:5c:a7:5e:0a:47:ff:0f:be:95:d5:e1:af:4d:08:
bb:a6:16:65:80:39:dd:b4:b1:ae:4f:47:37:02:56:
32:33:a2:4b:51:b6:1b:1f:58:3d:8f:c4:06:55:cb:
33:79:5d:c7:27:91:29:dd:bd:a4:8b:3f:33:d1:aa:
4d:4e:79:9a:e5:e6:5f:f3:24:a8:f0:18:31:ab:25:
b1:0e:b6:c3:58:4d:5d:32:c9:c2:79:b6:89:b9:8b:
46:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E2:97:A8:90:AB:68:BA:2F:B2:8B:44:28:99:BC:89:D9:4E:49:E4
X509v3 Authority Key Identifier:
keyid:5D:69:53:DB:48:40:4B:0C:66:A1:5F:0D:A6:EF:A7:FA:C0:A9:36:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:f6:bb:00:83:5e:99:ce:a6:30:80:80:71:4d:fc:53:16:b6:
fd:a9:92:b4:94:25:d1:71:05:36:c9:ba:28:58:77:9b:d0:5d:
70:1c:47:ea:f6:a4:88:a3:a4:7f:98:f2:02:6a:14:3c:4c:9b:
d9:30:fe:c1:f5:da:f4:e7:97:48:c9:e1:3b:47:2d:b3:61:ff:
ea:ac:59:42:65:54:59:20:bc:40:90:ef:2c:11:b9:39:8c:c9:
ba:96:43:ba:1a:8f:24:ca:1a:cb:0e:2c:65:aa:2b:3a:14:c0:
5f:b2:3d:8e:a9:b6:01:48:76:7a:d6:02:b4:61:de:89:dc:32:
c4:b1:73:89:da:ce:98:d3:a8:95:e1:18:96:6b:88:a1:f1:79:
ba:89:ed:44:55:fe:14:56:ce:5c:29:7e:09:36:c9:1c:c9:c9:
f1:e8:fd:cf:fb:77:f7:a5:2f:7b:34:47:e8:73:99:7e:b7:67:
4d:22:a2:20:85:db:e3:0d:14:5d:1b:86:b1:51:3b:25:68:c5:
d6:42:00:e5:ac:6c:35:29:73:20:01:a7:4f:be:85:dd:5e:78:
bf:45:e6:43:4e:ec:5b:b7:60:f8:b7:82:ef:7b:46:54:a5:81:
f9:b2:d1:38:88:11:73:55:e8:6d:3b:86:28:06:d7:50:c7:2f:
2a:ab:9f:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyubArdb0OI+5PpjBz0FNZ0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkNjk1M2RiNDg0MDRiMGM2NmExNWYwZGE2ZWZhN2ZhYzBh
OTM2OWUwHhcNMjYwMzAyMTIwMDQyWhcNMjYwMzAzMTIwMDQyWjAzMTEwLwYDVQQD
EygyNGUyOTdhODkwYWI2OGJhMmZiMjhiNDQyODk5YmM4OWQ5NGU0OWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PzKhvcROERrjYtQPcOutgdz+ed5
qEqnGmDrysk7uWbTXjwuoaATFSdlEXucZCKQGK9XtY2mj37+NcmE6cCJNyfcos5Y
Lsjt+flRMoCBT+8gxYfOxS1/lIIfEclFBqrBnyyWkzqyWnRiNlGn2xh03en6SWEP
3aPqDXmOINOJvKDI2Z2vMitwVfs/PYvk2tp+xqHyze30+EXbJKZZKGOdoBLBYVTZ
XKdeCkf/D76V1eGvTQi7phZlgDndtLGuT0c3AlYyM6JLUbYbH1g9j8QGVcszeV3H
J5Ep3b2kiz8z0apNTnma5eZf8ySo8BgxqyWxDrbDWE1dMsnCebaJuYtGHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCTil6iQq2i6L7KLRCiZvInZTknkMB8GA1UdIwQY
MBaAFF1pU9tIQEsMZqFfDabvp/rAqTaeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFdsVDIwaEFTd3htb1Y4TnB1LW4tc0NwTnA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi81MzZmZGUtYTAyZC00OGY1LWE3NWQt
ZmEyZmI5NGRhMWEyLzEvWFdsVDIwaEFTd3htb1Y4TnB1LW4tc0NwTnA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi81MzZmZGUtYTAyZC00OGY1LWE3NWQtZmEyZmI5NGRhMWEy
LzEvWFdsVDIwaEFTd3htb1Y4TnB1LW4tc0NwTnA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAffa7AINe
mc6mMICAcU38Uxa2/amStJQl0XEFNsm6KFh3m9BdcBxH6vakiKOkf5jyAmoUPEyb
2TD+wfXa9OeXSMnhO0cts2H/6qxZQmVUWSC8QJDvLBG5OYzJupZDuhqPJMoayw4s
ZaorOhTAX7I9jqm2AUh2etYCtGHeidwyxLFzidrOmNOoleEYlmuIofF5uontRFX+
FFbOXCl+CTbJHMnJ8ej9z/t396UvezRH6HOZfrdnTSKiIIXb4w0UXRuGsVE7JWjF
1kIA5axsNSlzIAGnT76F3V54v0XmQ07sW7dg+LeC73tGVKWB+bLROIgRc1XobTuG
KAbXUMcvKqufEA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:27:11 2026 by rpki-client