Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
File: rf_xvXcSh87UxN1tioUdKtdwZh0.mft (raw, json)
Hash identifier: OixUheeWgoY9bETcM6BwdmWnbVZIXYj/4nD3We4gP1k=
Subject key identifier: 5F:13:1D:DA:EF:E5:FD:A8:79:3E:A7:24:EA:59:7F:19:23:D5:20:E7
Authority key identifier: AD:FF:F1:BD:77:12:87:CE:D4:C4:DD:6D:8A:85:1D:2A:D7:70:66:1D
Certificate issuer: /CN=adfff1bd771287ced4c4dd6d8a851d2ad770661d
Certificate serial: 019D26CCDB5DDC1AC1241DE6C31799872025
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 21:00:52 +0000
Manifest this update: Wed 25 Mar 2026 21:00:52 +0000
Manifest next update: Thu 26 Mar 2026 21:00:52 +0000
Files and hashes: 1: YHt9YKkoQObFkpk4bFMfaZH83j0.roa (hash: 4fsNZayDAjiJa4ZZH0ABpTRn6fHRN9+IikwCGEjvWBc=)
2: rf_xvXcSh87UxN1tioUdKtdwZh0.crl (hash: pvuhQyObnpNIcWYeaLFYXWxgdiJy4Cljs6zogLHU/gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:db:5d:dc:1a:c1:24:1d:e6:c3:17:99:87:20:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adfff1bd771287ced4c4dd6d8a851d2ad770661d
Validity
Not Before: Mar 25 21:00:52 2026 GMT
Not After : Mar 26 21:00:52 2026 GMT
Subject: CN=5f131ddaefe5fda8793ea724ea597f1923d520e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6b:97:dc:d0:52:2d:d2:d7:ec:76:7c:03:c3:
f9:c9:bb:59:bc:9f:8f:fa:20:d7:61:2a:81:1e:d8:
5c:9f:eb:1a:38:43:ef:60:6f:9b:34:2e:39:47:2d:
c1:a3:3b:1a:5b:ac:0c:48:1d:3c:d0:f8:db:40:99:
cb:dc:d2:0e:98:29:87:9f:89:fc:53:ff:26:dd:7b:
dd:20:fd:52:23:03:33:cf:80:97:89:4f:30:3a:bd:
20:95:9a:3e:b4:1d:46:de:e6:e3:dd:27:70:09:27:
67:d6:fe:79:a0:83:51:23:61:a3:ee:fb:3d:78:51:
79:1e:ca:e2:83:a7:87:ad:94:34:60:c6:9a:b5:1e:
75:9a:37:6e:d7:5d:31:6d:91:16:02:99:48:99:1b:
9d:10:f0:f8:70:ca:7c:24:90:2c:9f:f8:c3:d1:e0:
0b:34:d4:22:dd:e3:0a:ff:b6:89:d3:de:c6:b4:52:
9d:d5:37:4f:65:be:a8:ce:e9:57:b7:99:2b:9d:28:
24:e0:e3:ab:ac:d9:98:8b:13:d2:fd:34:6f:a3:df:
0b:70:0d:6b:d1:7f:4b:37:c7:95:8a:a8:1f:2d:31:
c1:2d:de:84:62:90:c8:9b:c8:3a:b0:15:d9:6a:be:
3e:04:a1:97:19:24:94:88:00:4a:75:59:4c:21:85:
ae:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:13:1D:DA:EF:E5:FD:A8:79:3E:A7:24:EA:59:7F:19:23:D5:20:E7
X509v3 Authority Key Identifier:
keyid:AD:FF:F1:BD:77:12:87:CE:D4:C4:DD:6D:8A:85:1D:2A:D7:70:66:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:3a:c0:b8:b6:a8:f0:5e:61:07:c1:2d:07:a3:28:ec:cf:69:
92:81:46:c7:f7:c8:bd:74:d8:6f:a6:46:44:bb:7a:77:fa:62:
7b:ca:6a:00:40:f2:9e:a1:bc:0b:ee:a6:f0:14:59:9b:8a:c2:
27:27:eb:cd:fd:02:30:e8:45:44:58:dc:cf:a7:cc:18:63:81:
de:08:a0:1c:d1:3b:5c:12:e8:f6:21:bd:8e:64:99:42:a7:41:
a2:8d:98:e6:6f:b4:b4:11:8f:33:e1:83:2b:8c:ba:5d:dc:1a:
92:de:87:8e:76:be:4d:9d:25:9c:e4:2d:d6:4a:aa:ae:e5:93:
d4:a5:d6:22:0f:4f:60:68:9c:c6:33:7f:51:bf:da:7e:fd:f7:
05:09:6f:51:ff:21:e0:95:d9:9f:fa:f1:c9:ba:52:04:bb:bb:
9e:83:4e:44:b3:4a:1f:eb:35:97:b0:06:6c:af:d7:16:c5:09:
44:59:5f:1e:b9:33:f9:84:ba:7c:a9:74:40:3c:ba:c5:b6:77:
14:60:14:07:85:70:9a:a3:45:72:2f:90:2e:16:d1:88:f9:98:
2e:76:58:ce:87:3c:ed:36:ef:d0:94:19:8d:84:fd:a8:d7:51:
d5:e4:4b:b6:c4:a2:ca:b5:19:f8:1b:4d:c9:14:9e:02:51:6b:
2b:e7:77:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzNtd3BrBJB3mwxeZhyAlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkZmZmMWJkNzcxMjg3Y2VkNGM0ZGQ2ZDhhODUxZDJhZDc3
MDY2MWQwHhcNMjYwMzI1MjEwMDUyWhcNMjYwMzI2MjEwMDUyWjAzMTEwLwYDVQQD
Eyg1ZjEzMWRkYWVmZTVmZGE4NzkzZWE3MjRlYTU5N2YxOTIzZDUyMGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WuX3NBSLdLX7HZ8A8P5ybtZvJ+P
+iDXYSqBHthcn+saOEPvYG+bNC45Ry3BozsaW6wMSB080PjbQJnL3NIOmCmHn4n8
U/8m3XvdIP1SIwMzz4CXiU8wOr0glZo+tB1G3ubj3SdwCSdn1v55oINRI2Gj7vs9
eFF5Hsrig6eHrZQ0YMaatR51mjdu110xbZEWAplImRudEPD4cMp8JJAsn/jD0eAL
NNQi3eMK/7aJ097GtFKd1TdPZb6ozulXt5krnSgk4OOrrNmYixPS/TRvo98LcA1r
0X9LN8eViqgfLTHBLd6EYpDIm8g6sBXZar4+BKGXGSSUiABKdVlMIYWu1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF8THdrv5f2oeT6nJOpZfxkj1SDnMB8GA1UdIwQY
MBaAFK3/8b13EofO1MTdbYqFHSrXcGYdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmZfeHZYY1NoODdVeE4xdGlvVWRLdGR3WmgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy82MjNlMTEtZTcwYy00ZjViLTg1MmMt
NDk0M2I0YjQyZWJiLzEvcmZfeHZYY1NoODdVeE4xdGlvVWRLdGR3WmgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy82MjNlMTEtZTcwYy00ZjViLTg1MmMtNDk0M2I0YjQyZWJi
LzEvcmZfeHZYY1NoODdVeE4xdGlvVWRLdGR3WmgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdDrAuLao
8F5hB8EtB6Mo7M9pkoFGx/fIvXTYb6ZGRLt6d/pie8pqAEDynqG8C+6m8BRZm4rC
Jyfrzf0CMOhFRFjcz6fMGGOB3gigHNE7XBLo9iG9jmSZQqdBoo2Y5m+0tBGPM+GD
K4y6Xdwakt6Hjna+TZ0lnOQt1kqqruWT1KXWIg9PYGicxjN/Ub/afv33BQlvUf8h
4JXZn/rxybpSBLu7noNORLNKH+s1l7AGbK/XFsUJRFlfHrkz+YS6fKl0QDy6xbZ3
FGAUB4VwmqNFci+QLhbRiPmYLnZYzoc87Tbv0JQZjYT9qNdR1eRLtsSiyrUZ+BtN
yRSeAlFrK+d3Ag==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:48 2026 by rpki-client