Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
File: X4KumjBKwILBiiiRZm9kzugdXKg.mft (raw, json)
Hash identifier: K5yrNRJv9g5F/uzT1EddY9hJDLGadOexjx/0X5+4HLg=
Subject key identifier: 59:B4:F7:9C:E8:CD:4D:C7:3B:AB:83:75:31:B7:7B:4C:AC:59:62:20
Authority key identifier: 5F:82:AE:9A:30:4A:C0:82:C1:8A:28:91:66:6F:64:CE:E8:1D:5C:A8
Certificate issuer: /CN=5f82ae9a304ac082c18a2891666f64cee81d5ca8
Certificate serial: 019D2929995BED6DA40E3D1F90657EE23ADF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
Manifest number: 0FED
Signing time: Thu 26 Mar 2026 08:01:25 +0000
Manifest this update: Thu 26 Mar 2026 08:01:25 +0000
Manifest next update: Fri 27 Mar 2026 08:01:25 +0000
Files and hashes: 1: FpMR3_wbyPoQ3SpLC3msQFuHBCc.roa (hash: mnRTyPfeR1b8jfxG5BpoCLK6zLk4lmp1OJjO9At2igc=)
2: X4KumjBKwILBiiiRZm9kzugdXKg.crl (hash: 4ApzkOIEVsrLQae5CVZT9KxGLafI1EBIwXQ4wzqu8FI=)
3: YcE6ReHh6unnU83H-TjyslkyeUw.roa (hash: McwZCMtZVwtttRxvoSUbvLr+7AkamJmadn/zlM3onqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:99:5b:ed:6d:a4:0e:3d:1f:90:65:7e:e2:3a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f82ae9a304ac082c18a2891666f64cee81d5ca8
Validity
Not Before: Mar 26 08:01:25 2026 GMT
Not After : Mar 27 08:01:25 2026 GMT
Subject: CN=59b4f79ce8cd4dc73bab837531b77b4cac596220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:56:6c:b7:65:1f:46:d3:40:db:86:c1:73:f4:
d2:93:32:6b:46:9d:63:8b:9e:d8:c4:5b:d9:e1:47:
55:23:32:dd:02:75:ad:fc:1f:56:d8:e1:ad:87:ec:
64:32:91:eb:f9:65:96:68:cb:80:29:8a:cb:25:31:
b8:59:4c:16:9d:a6:bc:63:97:1c:a8:ee:bf:6c:2e:
90:81:e7:41:a1:e3:82:54:c6:9a:31:b6:e0:4e:8d:
c0:75:9e:0e:50:fc:b3:14:4d:c0:32:43:73:7f:3b:
6b:1e:b9:29:75:64:50:14:ca:42:11:da:80:c5:69:
4f:31:95:6e:1f:ef:64:2a:76:51:d5:1d:b3:9a:50:
d6:33:5c:1c:17:3c:c0:36:4d:d5:e6:18:77:63:71:
80:f3:c2:37:cb:58:1d:30:23:d6:e2:9d:e2:dd:a3:
bb:8f:d3:df:3c:9a:f5:fd:8f:b3:50:2b:ca:6e:6b:
fb:23:81:2f:b1:6c:bb:ca:ce:0f:4f:a7:85:fc:44:
80:ad:d6:eb:98:52:95:b2:8b:38:9b:39:8d:b1:6a:
df:9b:c4:e8:cc:ca:d5:a7:b5:a3:34:cc:a2:44:f1:
17:65:56:6b:c1:3a:59:b1:5a:90:67:e1:ff:65:16:
c8:8b:2a:2c:c0:12:0b:36:1b:99:70:e5:fb:79:d6:
f2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B4:F7:9C:E8:CD:4D:C7:3B:AB:83:75:31:B7:7B:4C:AC:59:62:20
X509v3 Authority Key Identifier:
keyid:5F:82:AE:9A:30:4A:C0:82:C1:8A:28:91:66:6F:64:CE:E8:1D:5C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:8d:87:90:34:03:89:d7:a8:1e:dc:33:d3:73:49:08:3f:63:
9c:4e:00:dd:8f:e0:56:ad:7e:f5:bc:1a:64:20:41:14:39:1a:
85:ed:9d:ce:6d:cb:00:75:77:4d:46:78:31:9c:ac:91:7d:22:
57:e7:00:f2:df:0d:d9:c0:4e:5c:89:0a:ca:9a:f6:59:ee:66:
78:a2:30:a3:ef:a1:d9:ff:1c:e7:13:77:b3:bd:6c:f1:c7:5b:
66:4f:74:2f:48:be:02:51:7d:87:c3:5a:e5:2f:ec:6f:1c:65:
89:3c:9c:e7:8e:e4:af:d5:d7:12:41:2c:ca:f4:ac:0a:d2:b9:
3d:b3:21:e5:d4:cf:0b:ad:01:99:0a:12:35:40:63:01:c6:3f:
a5:20:9a:85:5e:72:ee:0b:d2:c9:65:cf:14:db:cf:2a:5d:0b:
44:74:d6:85:36:92:fd:83:8c:23:6a:8b:60:0c:c9:f5:9c:30:
39:06:59:9b:31:41:fa:d2:0f:fe:a9:24:7c:f4:68:be:f9:7d:
31:37:6b:65:ce:78:d1:2f:26:a8:f6:de:fa:1b:da:92:f1:c5:
4a:a8:fb:d1:65:0f:79:a6:22:0c:a0:e9:d9:76:73:70:5e:28:
8f:c5:41:2c:7f:61:5c:80:15:f8:f2:c1:96:96:18:d6:b2:fb:
15:63:9b:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKZlb7W2kDj0fkGV+4jrfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmODJhZTlhMzA0YWMwODJjMThhMjg5MTY2NmY2NGNlZTgx
ZDVjYTgwHhcNMjYwMzI2MDgwMTI1WhcNMjYwMzI3MDgwMTI1WjAzMTEwLwYDVQQD
Eyg1OWI0Zjc5Y2U4Y2Q0ZGM3M2JhYjgzNzUzMWI3N2I0Y2FjNTk2MjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFZst2UfRtNA24bBc/TSkzJrRp1j
i57YxFvZ4UdVIzLdAnWt/B9W2OGth+xkMpHr+WWWaMuAKYrLJTG4WUwWnaa8Y5cc
qO6/bC6QgedBoeOCVMaaMbbgTo3AdZ4OUPyzFE3AMkNzfztrHrkpdWRQFMpCEdqA
xWlPMZVuH+9kKnZR1R2zmlDWM1wcFzzANk3V5hh3Y3GA88I3y1gdMCPW4p3i3aO7
j9PfPJr1/Y+zUCvKbmv7I4EvsWy7ys4PT6eF/ESArdbrmFKVsos4mzmNsWrfm8To
zMrVp7WjNMyiRPEXZVZrwTpZsVqQZ+H/ZRbIiyoswBILNhuZcOX7edbyzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFm095zozU3HO6uDdTG3e0ysWWIgMB8GA1UdIwQY
MBaAFF+CrpowSsCCwYookWZvZM7oHVyoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDRLdW1qQkt3SUxCaWlpUlptOWt6dWdkWEtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9kNmRiZDgtNjQ2Ni00OGQwLWE1OTct
M2VjNDQ3MzEwZGZiLzEvWDRLdW1qQkt3SUxCaWlpUlptOWt6dWdkWEtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9kNmRiZDgtNjQ2Ni00OGQwLWE1OTctM2VjNDQ3MzEwZGZi
LzEvWDRLdW1qQkt3SUxCaWlpUlptOWt6dWdkWEtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZo2HkDQD
ideoHtwz03NJCD9jnE4A3Y/gVq1+9bwaZCBBFDkahe2dzm3LAHV3TUZ4MZyskX0i
V+cA8t8N2cBOXIkKypr2We5meKIwo++h2f8c5xN3s71s8cdbZk90L0i+AlF9h8Na
5S/sbxxliTyc547kr9XXEkEsyvSsCtK5PbMh5dTPC60BmQoSNUBjAcY/pSCahV5y
7gvSyWXPFNvPKl0LRHTWhTaS/YOMI2qLYAzJ9ZwwOQZZmzFB+tIP/qkkfPRovvl9
MTdrZc540S8mqPbe+hvakvHFSqj70WUPeaYiDKDp2XZzcF4oj8VBLH9hXIAV+PLB
lpYY1rL7FWOb4w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:48:45 2026 by rpki-client