Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
File: Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft (raw, json)
Hash identifier: /aOdWW50Y7tr1uGAV/Hh07hxM8YPDeIwgjTeM8cwptE=
Subject key identifier: 25:10:E8:09:07:76:AF:B2:31:76:B6:5E:AE:62:D7:0B:11:D8:CC:AD
Authority key identifier: 5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
Certificate issuer: /CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Certificate serial: 019D9BF5786B7C6D5BECD88A95B18A95C68B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
Manifest number: 090A
Signing time: Fri 17 Apr 2026 15:00:48 +0000
Manifest this update: Fri 17 Apr 2026 15:00:48 +0000
Manifest next update: Sat 18 Apr 2026 15:00:48 +0000
Files and hashes: 1: ATrhcvfZe2XqHKs47Dt9M3QKFhs.roa (hash: PefWPwiiidlJBpS7I/NB+iVKQJ0FsVbJRiY+10cA0F4=)
2: HxvfpX5aIfEn1UqJ_JQ9JVA67YY.roa (hash: 7RSyHDJ1xj0KCQZdzozVZqOlI9r3j6g8qDcJh+l/iTA=)
3: Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl (hash: 04FtQKMuQK4vjh73qSr2Bxi2QR1aJJuO3mAwpixhprY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:78:6b:7c:6d:5b:ec:d8:8a:95:b1:8a:95:c6:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Validity
Not Before: Apr 17 15:00:48 2026 GMT
Not After : Apr 18 15:00:48 2026 GMT
Subject: CN=2510e8090776afb23176b65eae62d70b11d8ccad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:40:d2:61:3a:7b:de:32:92:12:bf:8b:2c:6e:
c2:a5:56:01:cb:11:3a:de:dc:34:4e:c6:2e:a6:a0:
7f:b4:1e:89:b6:60:a7:12:79:f7:65:07:35:ff:3d:
57:67:eb:17:e5:ac:df:49:7f:73:6e:03:76:51:0d:
d5:74:8c:a9:9d:fb:0f:0e:c7:0f:ee:ba:3f:24:d5:
f8:81:36:9e:3c:14:6b:12:42:9d:94:27:c9:e1:52:
5a:65:6b:62:a6:b6:10:44:48:51:0c:20:54:9b:30:
82:85:0a:34:55:9f:92:80:d3:b2:4a:1d:b2:79:69:
86:95:c9:8d:f8:d1:42:96:ed:c7:c5:7f:79:cf:be:
58:11:24:d9:22:90:7c:9e:5c:09:84:0b:d2:bf:94:
0c:75:6a:37:d8:35:fd:f7:05:c4:5b:71:1d:c1:37:
6f:a9:cb:a8:8f:53:d5:e6:61:fd:99:3b:c4:7a:ef:
bf:33:f7:bc:ae:23:e1:92:1c:75:f3:19:2a:c3:12:
db:0f:90:fc:c9:1e:fc:e4:5d:75:b7:5d:04:8f:d9:
f4:06:b9:41:eb:8d:2b:8b:5d:d6:76:58:c0:4b:04:
10:01:2e:59:ca:ae:07:be:5d:b1:7e:b7:04:32:3b:
5a:a4:5c:12:f4:df:11:67:95:ad:fc:79:fb:09:bb:
7f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:10:E8:09:07:76:AF:B2:31:76:B6:5E:AE:62:D7:0B:11:D8:CC:AD
X509v3 Authority Key Identifier:
keyid:5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ea:55:09:ea:05:26:50:3b:15:84:11:df:3c:38:0d:f5:96:c3:
5b:9e:b3:ae:a8:47:a5:93:36:59:c0:e2:7e:dd:49:6d:90:47:
6c:ff:26:02:73:7d:30:cd:76:77:be:69:7f:26:51:c8:97:41:
1b:b8:66:2f:3d:4f:af:ed:6c:e5:fa:53:6f:aa:68:b0:5e:fb:
b4:43:c8:e0:5c:6c:7f:24:48:b1:c1:44:2e:2c:08:8c:64:c7:
57:08:87:dc:a7:07:06:89:da:9b:d8:7b:c3:84:49:6d:28:fe:
55:5d:5c:bc:ef:07:67:68:f3:01:3a:f1:0e:b8:f5:35:c1:69:
c3:73:ac:a7:5d:9f:9a:e5:aa:72:cd:8b:34:46:44:a6:55:85:
c2:13:8d:4e:4a:4d:fc:4f:e5:5d:a7:e3:e7:34:e4:0f:3a:a6:
aa:a9:3d:97:3f:d1:63:12:29:a6:b9:9a:e9:0e:97:7c:36:5a:
5f:93:97:11:70:df:7b:b0:70:4d:2c:78:92:43:97:34:7c:a0:
2a:a7:ff:57:e4:f1:1a:9a:8d:9c:a1:f9:11:95:e6:5a:de:b5:
42:72:ff:0b:af:86:76:06:61:91:81:e7:d8:51:e6:77:ad:59:
82:2c:81:84:d8:09:9d:26:20:70:cd:0a:61:73:29:61:ce:59:
17:98:59:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2b9XhrfG1b7NiKlbGKlcaLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlYmJhMDczNWEwN2U0MGNhMzIwMjYyNzhiMjY3ODY3OGY4
YmFjZDkwHhcNMjYwNDE3MTUwMDQ4WhcNMjYwNDE4MTUwMDQ4WjAzMTEwLwYDVQQD
EygyNTEwZTgwOTA3NzZhZmIyMzE3NmI2NWVhZTYyZDcwYjExZDhjY2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0DSYTp73jKSEr+LLG7CpVYByxE6
3tw0TsYupqB/tB6JtmCnEnn3ZQc1/z1XZ+sX5azfSX9zbgN2UQ3VdIypnfsPDscP
7ro/JNX4gTaePBRrEkKdlCfJ4VJaZWtiprYQREhRDCBUmzCChQo0VZ+SgNOySh2y
eWmGlcmN+NFClu3HxX95z75YESTZIpB8nlwJhAvSv5QMdWo32DX99wXEW3EdwTdv
qcuoj1PV5mH9mTvEeu+/M/e8riPhkhx18xkqwxLbD5D8yR785F11t10Ej9n0BrlB
640ri13WdljASwQQAS5Zyq4Hvl2xfrcEMjtapFwS9N8RZ5Wt/Hn7Cbt/gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCUQ6AkHdq+yMXa2Xq5i1wsR2MytMB8GA1UdIwQY
MBaAFF67oHNaB+QMoyAmJ4smeGePi6zZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHJ1Z2Mxb0g1QXlqSUNZbml5WjRaNC1Mck5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC82MDc3ZDgtMjg3Ny00Njk4LTgwNDAt
MzIxMmI2ODU4NGU5LzEvWHJ1Z2Mxb0g1QXlqSUNZbml5WjRaNC1Mck5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC82MDc3ZDgtMjg3Ny00Njk4LTgwNDAtMzIxMmI2ODU4NGU5
LzEvWHJ1Z2Mxb0g1QXlqSUNZbml5WjRaNC1Mck5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6lUJ6gUm
UDsVhBHfPDgN9ZbDW56zrqhHpZM2WcDift1JbZBHbP8mAnN9MM12d75pfyZRyJdB
G7hmLz1Pr+1s5fpTb6posF77tEPI4FxsfyRIscFELiwIjGTHVwiH3KcHBonam9h7
w4RJbSj+VV1cvO8HZ2jzATrxDrj1NcFpw3Osp12fmuWqcs2LNEZEplWFwhONTkpN
/E/lXafj5zTkDzqmqqk9lz/RYxIpprma6Q6XfDZaX5OXEXDfe7BwTSx4kkOXNHyg
Kqf/V+TxGpqNnKH5EZXmWt61QnL/C6+GdgZhkYHn2FHmd61ZgiyBhNgJnSYgcM0K
YXMpYc5ZF5hZiQ==
-----END CERTIFICATE-----
Generated at Sat Apr 18 00:31:45 2026 by rpki-client