Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
File: X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft (raw, json)
Hash identifier: pDFtURUcdpDAZBAqle7JFSfIBzFoRzwL9jrn+yddVZ0=
Subject key identifier: 14:65:4A:4D:26:E4:89:EF:2A:F9:14:AD:92:0F:16:51:77:D4:35:77
Authority key identifier: 5F:B8:8D:91:78:8F:E9:92:10:89:D9:B6:27:1E:21:0F:7F:89:14:A2
Certificate issuer: /CN=5fb88d91788fe9921089d9b6271e210f7f8914a2
Certificate serial: 019D25F1E36AB893BCF8EFFDB5D4C2D79FC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
Manifest number: 0BF3
Signing time: Wed 25 Mar 2026 17:01:42 +0000
Manifest this update: Wed 25 Mar 2026 17:01:42 +0000
Manifest next update: Thu 26 Mar 2026 17:01:42 +0000
Files and hashes: 1: OvbRlSnTXlATqx6AnWYr1toDU7w.roa (hash: Q7J38waQ9GMMd+3BefTKWI7xIc5v9QQp9c12zI1W6yo=)
2: X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl (hash: ZvpqVsWDRzCdBkUL1MmpitDIk6W5VyC1xlzd49Bc8Ow=)
3: ka4LXP3r8o1mdLFuGzD128vQb8c.roa (hash: b2UoUARxm+G737EGkLibfrOXAzwN80OkLpiAV/fDR/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:e3:6a:b8:93:bc:f8:ef:fd:b5:d4:c2:d7:9f:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fb88d91788fe9921089d9b6271e210f7f8914a2
Validity
Not Before: Mar 25 17:01:42 2026 GMT
Not After : Mar 26 17:01:42 2026 GMT
Subject: CN=14654a4d26e489ef2af914ad920f165177d43577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e8:cd:90:a0:e9:03:d6:0a:19:f9:f8:e1:eb:
8f:76:3e:d4:32:31:57:7c:7f:dd:63:36:8e:ba:7d:
36:95:35:06:9b:5b:82:83:7b:35:2e:5f:1f:81:7a:
23:34:12:d4:9b:dd:32:6b:af:9d:a7:97:bf:34:da:
47:92:b5:89:d7:b1:89:91:67:d8:7c:45:72:0d:fe:
7c:a6:0a:e3:94:18:5c:33:46:94:8a:ec:50:a8:56:
0f:0b:a8:1c:8c:bb:a0:96:99:91:de:16:dc:62:1e:
5b:eb:f8:4b:ef:61:4b:1f:06:a3:86:cb:f6:dc:de:
20:89:89:98:b7:e4:7f:04:c2:55:a3:89:c8:9f:76:
c3:ab:0d:d5:b5:7a:ab:a8:40:51:bb:a8:2d:60:82:
8a:b1:19:d3:44:17:f8:78:ea:ee:90:ad:dd:7d:75:
0b:f9:dd:82:a8:01:e7:b1:9a:d1:9d:99:a1:3e:52:
5d:29:fc:4f:75:da:dc:45:53:83:ab:73:d7:7b:aa:
af:31:97:a7:8e:8a:e6:c2:82:48:58:77:89:89:3b:
61:74:fb:0e:c6:9d:9b:53:85:e7:8f:81:17:0b:f7:
06:b4:5e:77:e3:b4:11:26:d7:aa:4d:e4:f6:64:b0:
5b:71:b8:56:7a:e1:67:9c:51:d5:c5:53:36:a9:4a:
62:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:65:4A:4D:26:E4:89:EF:2A:F9:14:AD:92:0F:16:51:77:D4:35:77
X509v3 Authority Key Identifier:
keyid:5F:B8:8D:91:78:8F:E9:92:10:89:D9:B6:27:1E:21:0F:7F:89:14:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:68:3e:72:7b:7b:02:e9:8d:58:a9:c2:e1:bb:20:1b:43:8e:
1b:70:6b:1d:6e:71:18:60:1e:68:06:26:22:0f:1a:a9:de:fd:
f3:9a:b1:72:6f:db:74:59:0b:72:18:dd:01:58:90:65:d2:97:
35:a6:5f:75:69:e9:12:99:98:36:f5:ee:d6:25:9d:6f:73:6c:
5d:9c:a9:0b:72:32:5e:24:45:88:ca:dc:c1:cc:74:1e:60:59:
a5:f8:82:af:ea:ee:eb:f6:e0:38:a7:15:c2:c8:8c:e8:b9:b7:
91:c2:81:2e:6f:7e:c2:9a:46:f9:a7:a5:89:8d:f3:67:bd:40:
d5:ea:c2:42:5a:71:47:72:8a:c1:13:01:e1:82:6b:e1:20:55:
d6:7b:c1:a7:53:14:e7:c6:28:a6:b6:38:80:aa:be:ba:93:ed:
b0:3d:ec:69:54:ea:34:09:3a:cb:eb:55:be:4a:bd:e2:e1:62:
58:5e:e2:08:7b:bf:69:c5:d6:53:24:69:2d:d4:a7:f3:15:55:
95:72:d5:26:17:63:e2:d2:d6:72:9b:3e:e9:48:0c:ba:03:2d:
9b:6f:42:75:29:ab:2e:21:dd:d9:d0:8f:c8:34:40:e7:d0:95:
0d:36:d2:e9:7b:ab:f8:fb:73:b3:70:8c:68:87:ee:d0:fb:e3:
d7:03:a8:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8eNquJO8+O/9tdTC15/CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYjg4ZDkxNzg4ZmU5OTIxMDg5ZDliNjI3MWUyMTBmN2Y4
OTE0YTIwHhcNMjYwMzI1MTcwMTQyWhcNMjYwMzI2MTcwMTQyWjAzMTEwLwYDVQQD
EygxNDY1NGE0ZDI2ZTQ4OWVmMmFmOTE0YWQ5MjBmMTY1MTc3ZDQzNTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OjNkKDpA9YKGfn44euPdj7UMjFX
fH/dYzaOun02lTUGm1uCg3s1Ll8fgXojNBLUm90ya6+dp5e/NNpHkrWJ17GJkWfY
fEVyDf58pgrjlBhcM0aUiuxQqFYPC6gcjLuglpmR3hbcYh5b6/hL72FLHwajhsv2
3N4giYmYt+R/BMJVo4nIn3bDqw3VtXqrqEBRu6gtYIKKsRnTRBf4eOrukK3dfXUL
+d2CqAHnsZrRnZmhPlJdKfxPddrcRVODq3PXe6qvMZenjormwoJIWHeJiTthdPsO
xp2bU4Xnj4EXC/cGtF5347QRJteqTeT2ZLBbcbhWeuFnnFHVxVM2qUpiSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBRlSk0m5InvKvkUrZIPFlF31DV3MB8GA1UdIwQY
MBaAFF+4jZF4j+mSEInZticeIQ9/iRSiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDdpTmtYaVA2WklRaWRtMkp4NGhEMy1KRktJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zZjdiY2QtYTdlYS00ZTEwLWJhMzQt
NGNlNGQ4ZmVhNmVmLzEvWDdpTmtYaVA2WklRaWRtMkp4NGhEMy1KRktJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8zZjdiY2QtYTdlYS00ZTEwLWJhMzQtNGNlNGQ4ZmVhNmVm
LzEvWDdpTmtYaVA2WklRaWRtMkp4NGhEMy1KRktJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUmg+cnt7
AumNWKnC4bsgG0OOG3BrHW5xGGAeaAYmIg8aqd7985qxcm/bdFkLchjdAViQZdKX
NaZfdWnpEpmYNvXu1iWdb3NsXZypC3IyXiRFiMrcwcx0HmBZpfiCr+ru6/bgOKcV
wsiM6Lm3kcKBLm9+wppG+aeliY3zZ71A1erCQlpxR3KKwRMB4YJr4SBV1nvBp1MU
58YoprY4gKq+upPtsD3saVTqNAk6y+tVvkq94uFiWF7iCHu/acXWUyRpLdSn8xVV
lXLVJhdj4tLWcps+6UgMugMtm29CdSmrLiHd2dCPyDRA59CVDTbS6Xur+Ptzs3CM
aIfu0Pvj1wOoOA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:26:09 2026 by rpki-client