Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft
File: XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft (raw, json)
Hash identifier: ZbDYOfmmWUt4g6vckqopxAqutC3iCV0PvBT/sjlttuc=
Subject key identifier: 5F:9C:10:95:91:92:E6:73:35:82:D1:75:82:63:E3:F4:E2:EC:86:8A
Authority key identifier: 5F:2B:E6:2B:E7:53:BA:99:29:35:5B:4C:E9:88:BA:E1:2A:F7:27:2A
Certificate issuer: /CN=5f2be62be753ba9929355b4ce988bae12af7272a
Certificate serial: 019CAC47069DF6D7CE27C4E0C8B65A121D79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft
Manifest number: 079F
Signing time: Mon 02 Mar 2026 02:01:01 +0000
Manifest this update: Mon 02 Mar 2026 02:01:01 +0000
Manifest next update: Tue 03 Mar 2026 02:01:01 +0000
Files and hashes: 1: XyvmK-dTupkpNVtM6Yi64Sr3Jyo.crl (hash: k4vpR2i5v23+bM1PNSMbOc86wJJ9QB6IkG/FCiV3GmI=)
2: j0mWI7cQWBCGiDlGDSGVoZj238E.roa (hash: F2Brv8OMMvqFx8gd1Dzz6j6nuO9gaZQJk6LSgnOkIcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:06:9d:f6:d7:ce:27:c4:e0:c8:b6:5a:12:1d:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f2be62be753ba9929355b4ce988bae12af7272a
Validity
Not Before: Mar 2 02:01:01 2026 GMT
Not After : Mar 3 02:01:01 2026 GMT
Subject: CN=5f9c10959192e6733582d1758263e3f4e2ec868a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0d:0a:d3:06:5c:a9:d7:bc:b4:20:26:bd:1e:
9e:73:f8:98:32:d7:9a:b3:3e:8e:46:c0:6a:85:4a:
f5:91:18:c7:fc:a9:ad:1b:8c:05:bc:a4:11:98:28:
05:b3:3c:45:f7:44:2f:ae:cd:1d:03:5b:5b:12:90:
4a:1c:5e:66:0a:39:11:08:44:29:10:cb:00:03:ea:
17:60:dc:d5:56:42:e4:de:14:f7:61:e2:3f:b6:c7:
b6:78:02:03:b0:1a:06:d7:29:39:88:7b:bd:d4:43:
51:77:3f:e1:ef:90:09:7e:bb:db:72:00:c5:23:9b:
76:4e:d3:ef:03:70:87:2f:0e:9d:52:8a:ee:ff:d9:
27:99:85:e7:89:93:fe:29:d0:e6:81:36:b1:76:25:
93:da:2c:e7:5a:55:87:97:fa:c9:1e:54:8a:2a:6d:
ae:2d:1d:40:a8:6d:7b:34:a2:34:e0:86:e8:f8:0e:
fb:fd:d7:a7:e2:9d:56:1b:5f:f7:a9:27:5f:df:09:
5a:b7:34:be:95:56:90:9b:54:b8:e2:3e:0c:68:e4:
15:76:19:76:27:cf:7c:e6:36:d0:0d:71:54:f9:22:
b7:09:68:79:af:86:eb:35:d8:bf:d9:eb:fe:71:24:
d2:e8:42:e0:57:2f:41:cc:84:4f:f3:6e:25:a8:33:
68:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:9C:10:95:91:92:E6:73:35:82:D1:75:82:63:E3:F4:E2:EC:86:8A
X509v3 Authority Key Identifier:
keyid:5F:2B:E6:2B:E7:53:BA:99:29:35:5B:4C:E9:88:BA:E1:2A:F7:27:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:c6:d9:81:aa:b6:48:f7:ef:f6:cb:c9:4c:62:9f:6e:47:b2:
3d:11:68:49:8c:51:78:dd:90:ee:d6:92:54:26:d3:9a:13:72:
65:3c:55:48:1f:d3:cb:6f:83:c6:3e:d2:d4:e8:07:af:85:9b:
e0:89:03:11:86:39:06:d7:07:f1:07:74:fb:97:37:c7:4e:91:
83:08:35:87:1d:e8:2e:3d:4d:75:dd:56:28:e0:e0:b0:ce:8e:
d0:48:c2:f0:96:73:89:a8:fe:5a:da:5a:4f:f0:3e:33:07:69:
33:21:6c:ca:fa:b5:3b:b4:19:8a:31:07:ea:ff:4f:e8:f1:5d:
d2:4e:be:f8:8d:03:c9:23:1e:90:b1:f1:d5:56:dd:af:cb:30:
52:1a:81:1f:8c:66:88:1d:21:e3:ff:6e:a7:b3:4c:3b:d2:9c:
af:cf:1d:15:ba:b6:97:9f:d5:27:a4:3d:94:6a:d0:cd:4c:fa:
14:7c:e3:91:19:c5:7d:d1:22:6d:21:c0:3c:10:b1:ce:75:3c:
43:11:81:d2:fa:05:bd:0b:19:50:f6:3e:ab:fa:15:12:e7:d6:
82:f7:91:a1:d5:f3:81:ec:58:0f:47:7a:d8:88:00:f3:72:9d:
7d:1c:cd:58:d9:9e:22:00:7f:e5:51:29:11:e3:3c:fe:08:8a:
4d:3d:32:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRwad9tfOJ8TgyLZaEh15MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMmJlNjJiZTc1M2JhOTkyOTM1NWI0Y2U5ODhiYWUxMmFm
NzI3MmEwHhcNMjYwMzAyMDIwMTAxWhcNMjYwMzAzMDIwMTAxWjAzMTEwLwYDVQQD
Eyg1ZjljMTA5NTkxOTJlNjczMzU4MmQxNzU4MjYzZTNmNGUyZWM4NjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzg0K0wZcqde8tCAmvR6ec/iYMtea
sz6ORsBqhUr1kRjH/KmtG4wFvKQRmCgFszxF90Qvrs0dA1tbEpBKHF5mCjkRCEQp
EMsAA+oXYNzVVkLk3hT3YeI/tse2eAIDsBoG1yk5iHu91ENRdz/h75AJfrvbcgDF
I5t2TtPvA3CHLw6dUoru/9knmYXniZP+KdDmgTaxdiWT2iznWlWHl/rJHlSKKm2u
LR1AqG17NKI04Ibo+A77/den4p1WG1/3qSdf3wlatzS+lVaQm1S44j4MaOQVdhl2
J8985jbQDXFU+SK3CWh5r4brNdi/2ev+cSTS6ELgVy9BzIRP824lqDNoQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF+cEJWRkuZzNYLRdYJj4/Ti7IaKMB8GA1UdIwQY
MBaAFF8r5ivnU7qZKTVbTOmIuuEq9ycqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHl2bUstZFR1cGtwTlZ0TTZZaTY0U3IzSnlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9mZGEyNjAtOWJjZi00ZjY3LWJmN2It
ZTUyMmNhZTYzNDcwLzEvWHl2bUstZFR1cGtwTlZ0TTZZaTY0U3IzSnlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9mZGEyNjAtOWJjZi00ZjY3LWJmN2ItZTUyMmNhZTYzNDcw
LzEvWHl2bUstZFR1cGtwTlZ0TTZZaTY0U3IzSnlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdMbZgaq2
SPfv9svJTGKfbkeyPRFoSYxReN2Q7taSVCbTmhNyZTxVSB/Ty2+Dxj7S1OgHr4Wb
4IkDEYY5BtcH8Qd0+5c3x06Rgwg1hx3oLj1Ndd1WKODgsM6O0EjC8JZziaj+Wtpa
T/A+MwdpMyFsyvq1O7QZijEH6v9P6PFd0k6++I0DySMekLHx1Vbdr8swUhqBH4xm
iB0h4/9up7NMO9Kcr88dFbq2l5/VJ6Q9lGrQzUz6FHzjkRnFfdEibSHAPBCxznU8
QxGB0voFvQsZUPY+q/oVEufWgveRodXzgexYD0d62IgA83KdfRzNWNmeIgB/5VEp
EeM8/giKTT0yhQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:28:40 2026 by rpki-client