Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
File: XXg76LX3rdAI1xK0N72fmXwIT98.mft (raw, json)
Hash identifier: XLTwDTK5ZXm7GmXr5uAY0aDraQ6mpY1UMf6SqTNqRJo=
Subject key identifier: D5:7D:55:BB:FD:72:EB:C2:AB:DA:0F:E2:23:48:69:6E:A6:3D:56:E5
Authority key identifier: 5D:78:3B:E8:B5:F7:AD:D0:08:D7:12:B4:37:BD:9F:99:7C:08:4F:DF
Certificate issuer: /CN=5d783be8b5f7add008d712b437bd9f997c084fdf
Certificate serial: 019CAC0FEE47803B185330B23A3F66F3CF67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 01:00:51 +0000
Manifest this update: Mon 02 Mar 2026 01:00:51 +0000
Manifest next update: Tue 03 Mar 2026 01:00:51 +0000
Files and hashes: 1: 80ddEu08r1uFh6uix50N7d9F0o8.roa (hash: DtyowyLw2dVPCBg0r3cdDO/1HWaqkm/fNKE6IcB/i2Y=)
2: XXg76LX3rdAI1xK0N72fmXwIT98.crl (hash: tzivgLdhZBG30zoNDpANYs1gc4OY6Y6nLd392QvKIug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:ee:47:80:3b:18:53:30:b2:3a:3f:66:f3:cf:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d783be8b5f7add008d712b437bd9f997c084fdf
Validity
Not Before: Mar 2 01:00:51 2026 GMT
Not After : Mar 3 01:00:51 2026 GMT
Subject: CN=d57d55bbfd72ebc2abda0fe22348696ea63d56e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4a:9c:bb:8f:0a:9c:88:33:c0:b2:62:1f:22:
45:3e:4d:cf:1c:ff:66:b0:db:b1:42:f4:4d:b9:a4:
4f:a5:9a:86:26:62:bf:5c:91:1b:60:cd:7b:07:2e:
8c:7f:9d:69:69:96:1c:7e:37:e1:b1:13:2d:10:db:
e0:e3:63:ae:40:6a:22:00:60:66:4b:c9:d1:65:60:
4c:94:46:55:ed:ec:86:91:1f:1e:07:f2:c8:c7:50:
ce:b8:3f:66:59:1b:3f:36:de:45:ff:dc:e3:67:a5:
eb:19:36:ec:c3:1e:30:4f:e8:5b:37:c3:13:4d:ab:
8d:83:0b:2b:5a:30:20:7e:12:ff:5c:8f:7b:91:ae:
1f:e9:1f:d5:e7:4f:ca:5d:83:b6:94:ab:75:6a:bb:
95:95:6a:66:92:05:46:1d:00:6f:a3:2e:14:9c:f3:
4e:ae:c1:26:ae:dd:63:d8:41:f7:56:ce:1b:61:fd:
2c:35:fc:92:45:81:ba:97:6f:5f:8b:fa:c3:ae:16:
29:e6:eb:91:9e:91:0c:31:19:f9:6f:df:ff:85:f6:
c6:a5:06:05:e2:5d:68:d4:da:21:8e:e3:9a:a9:83:
4b:6d:57:c8:e5:38:71:e0:3d:4d:10:46:02:da:40:
e8:0d:93:2a:1b:18:57:c1:89:f7:43:9f:62:2c:71:
f7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:7D:55:BB:FD:72:EB:C2:AB:DA:0F:E2:23:48:69:6E:A6:3D:56:E5
X509v3 Authority Key Identifier:
keyid:5D:78:3B:E8:B5:F7:AD:D0:08:D7:12:B4:37:BD:9F:99:7C:08:4F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:6f:c5:ee:3c:a1:5b:03:c7:eb:d1:69:33:bf:2c:4b:51:df:
76:1c:d9:c5:c5:88:17:7a:f3:54:55:1c:6f:97:0b:bc:d5:db:
d4:c0:0a:12:44:4e:e7:d4:2a:0a:3d:b8:fd:ce:7a:cb:2c:50:
79:e6:d1:43:6e:45:08:ed:a4:87:7a:27:e2:d9:b3:f7:d8:7b:
d8:7d:98:c3:8e:dd:52:76:46:5b:34:2e:53:7c:ed:4c:52:53:
3d:a6:fd:9a:ec:b5:a7:bc:d6:68:eb:5d:3c:70:40:f3:95:a0:
b4:c3:e7:37:d4:55:70:04:b3:aa:77:c8:4d:0c:be:a7:7d:07:
da:60:4c:cd:07:35:a5:13:58:19:bd:e7:c1:14:9e:1c:1e:0b:
0a:0c:da:20:e4:12:a7:28:08:5e:79:8b:b2:94:2f:4a:dc:90:
89:c6:6b:65:77:e1:6b:71:fb:52:73:33:d7:01:8e:a1:fe:9e:
33:21:2c:e5:72:70:22:87:13:e9:ba:ea:f0:f3:c4:88:59:dc:
98:7d:a3:0d:37:d6:1d:16:7a:3e:28:d9:b3:fe:63:d5:2c:8f:
e4:d6:32:13:f3:b6:7d:3d:8b:89:58:bb:47:fe:0e:4e:81:17:
29:b8:03:d0:b8:6b:89:cd:0a:f7:8a:1e:e0:34:f8:82:b7:b1:
95:25:c5:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysD+5HgDsYUzCyOj9m889nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkNzgzYmU4YjVmN2FkZDAwOGQ3MTJiNDM3YmQ5Zjk5N2Mw
ODRmZGYwHhcNMjYwMzAyMDEwMDUxWhcNMjYwMzAzMDEwMDUxWjAzMTEwLwYDVQQD
EyhkNTdkNTViYmZkNzJlYmMyYWJkYTBmZTIyMzQ4Njk2ZWE2M2Q1NmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUqcu48KnIgzwLJiHyJFPk3PHP9m
sNuxQvRNuaRPpZqGJmK/XJEbYM17By6Mf51paZYcfjfhsRMtENvg42OuQGoiAGBm
S8nRZWBMlEZV7eyGkR8eB/LIx1DOuD9mWRs/Nt5F/9zjZ6XrGTbswx4wT+hbN8MT
TauNgwsrWjAgfhL/XI97ka4f6R/V50/KXYO2lKt1aruVlWpmkgVGHQBvoy4UnPNO
rsEmrt1j2EH3Vs4bYf0sNfySRYG6l29fi/rDrhYp5uuRnpEMMRn5b9//hfbGpQYF
4l1o1NohjuOaqYNLbVfI5Thx4D1NEEYC2kDoDZMqGxhXwYn3Q59iLHH3XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNV9Vbv9cuvCq9oP4iNIaW6mPVblMB8GA1UdIwQY
MBaAFF14O+i1963QCNcStDe9n5l8CE/fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFhnNzZMWDNyZEFJMXhLME43MmZtWHdJVDk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82MDY1ZGItOTNiMi00MWVjLWIxOWEt
Njg4Y2UwMTM2NzFlLzEvWFhnNzZMWDNyZEFJMXhLME43MmZtWHdJVDk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi82MDY1ZGItOTNiMi00MWVjLWIxOWEtNjg4Y2UwMTM2NzFl
LzEvWFhnNzZMWDNyZEFJMXhLME43MmZtWHdJVDk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHG/F7jyh
WwPH69FpM78sS1HfdhzZxcWIF3rzVFUcb5cLvNXb1MAKEkRO59QqCj24/c56yyxQ
eebRQ25FCO2kh3on4tmz99h72H2Yw47dUnZGWzQuU3ztTFJTPab9muy1p7zWaOtd
PHBA85WgtMPnN9RVcASzqnfITQy+p30H2mBMzQc1pRNYGb3nwRSeHB4LCgzaIOQS
pygIXnmLspQvStyQicZrZXfha3H7UnMz1wGOof6eMyEs5XJwIocT6brq8PPEiFnc
mH2jDTfWHRZ6PijZs/5j1SyP5NYyE/O2fT2LiVi7R/4OToEXKbgD0Lhric0K94oe
4DT4grexlSXF3w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:46:41 2026 by rpki-client