Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
File: X8JHQzBLf9mgZdIs2JzalQReJpw.mft (raw, json)
Hash identifier: afz3e15srjRFyztOLp1dDzNTNBfOktc2TrvFYgKkUo8=
Subject key identifier: A5:BF:EE:B7:A9:56:D6:37:AF:C8:8B:E1:7F:98:01:47:27:60:00:34
Authority key identifier: 5F:C2:47:43:30:4B:7F:D9:A0:65:D2:2C:D8:9C:DA:95:04:5E:26:9C
Certificate issuer: /CN=5fc24743304b7fd9a065d22cd89cda95045e269c
Certificate serial: 019D284D7BA661A82F5974B0AED2255C175B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 04:00:59 +0000
Manifest this update: Thu 26 Mar 2026 04:00:59 +0000
Manifest next update: Fri 27 Mar 2026 04:00:59 +0000
Files and hashes: 1: X8JHQzBLf9mgZdIs2JzalQReJpw.crl (hash: BKQcj9CpGW3EQZQat1+hmgCR4De3zQKjNrNcenEVWrs=)
2: mde2iraZFBwTbp97_tvjs2IMwjU.roa (hash: Q0iRTXsb5myu//hBM4zbKFOJNKJsTWjqhNvukcS55wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:7b:a6:61:a8:2f:59:74:b0:ae:d2:25:5c:17:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc24743304b7fd9a065d22cd89cda95045e269c
Validity
Not Before: Mar 26 04:00:59 2026 GMT
Not After : Mar 27 04:00:59 2026 GMT
Subject: CN=a5bfeeb7a956d637afc88be17f98014727600034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:af:77:fc:47:08:29:d6:72:ef:46:a7:eb:bc:
34:9e:89:c5:2e:c9:16:20:ac:c4:69:13:fe:7b:f1:
9d:e8:2a:76:0a:61:7e:69:7e:ee:b8:c1:92:15:ac:
91:f3:83:29:23:c1:4f:84:be:c2:36:6c:fd:91:66:
16:8a:a3:9a:18:b6:ef:d1:e1:67:3d:8b:87:8a:00:
84:6d:7b:20:bc:37:f9:16:d1:f2:0d:b2:f0:1a:69:
0d:bb:ce:2a:e4:fd:4e:bc:ee:b1:1e:dd:e4:1a:be:
92:83:1b:20:b6:e9:71:91:db:be:bf:92:d4:58:4c:
0f:40:87:f6:90:f3:ac:21:7e:3f:48:63:a3:07:b6:
9e:f3:84:4e:4b:d0:96:3c:92:d6:3f:99:a7:ae:d5:
52:b6:68:65:e2:8d:b7:93:0d:c7:2a:7c:71:78:7b:
95:c5:d8:70:e6:40:c4:df:df:6a:75:31:fc:ab:71:
2f:ef:9e:bd:5f:55:7c:d1:41:38:8d:ca:22:bc:fb:
38:83:1f:c2:23:3f:21:5d:ec:83:c9:1e:94:bf:e7:
41:fc:19:0f:ed:e0:e4:cf:8e:ca:49:3d:b2:a4:44:
d4:f2:10:e3:07:7c:12:0c:c7:f8:83:83:30:b9:dd:
f9:35:da:b5:a7:1c:6e:0d:7f:a3:0d:20:05:c5:14:
ca:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:BF:EE:B7:A9:56:D6:37:AF:C8:8B:E1:7F:98:01:47:27:60:00:34
X509v3 Authority Key Identifier:
keyid:5F:C2:47:43:30:4B:7F:D9:A0:65:D2:2C:D8:9C:DA:95:04:5E:26:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:66:be:d2:44:6d:f1:1b:02:e9:59:46:c8:70:39:44:24:2d:
67:4a:9f:bc:51:67:08:86:0f:be:3b:ba:cf:42:b8:30:10:4c:
78:4a:55:ca:df:cf:9d:bb:a8:1d:b8:fd:d5:ff:9a:54:cc:20:
b1:6a:06:56:c0:50:56:16:af:85:21:b3:a1:7b:f4:4e:a2:38:
f6:52:d0:ad:9e:48:dc:08:df:d8:b4:9c:57:91:ee:14:a8:6d:
65:1e:59:16:33:a8:a7:48:2e:8f:a4:eb:38:0d:ab:fb:d4:b4:
41:aa:c3:a9:56:d3:bf:2a:bd:dc:bc:b6:a7:26:06:7f:9e:04:
0c:5e:cc:a1:70:37:43:07:dc:95:b9:9e:6f:44:02:f0:28:fa:
cb:4d:49:4c:e5:0b:f8:21:af:df:5d:c4:f8:1b:8b:2d:51:dd:
64:65:4a:5d:36:bc:6d:ab:12:77:af:24:61:65:c9:21:1c:1a:
d4:4d:2c:9b:a7:b0:0c:f5:d4:90:bd:d5:5c:d7:32:a3:13:26:
f1:7a:28:c2:09:f2:ac:6b:29:87:55:6a:90:a1:89:94:44:79:
ee:71:4c:9d:9e:9e:ff:43:6a:b9:e4:89:b7:c2:0d:15:e3:1e:
c3:ef:f3:e9:58:1e:c9:8d:dd:21:0f:80:9a:01:aa:02:cd:32:
f7:64:bf:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTXumYagvWXSwrtIlXBdbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYzI0NzQzMzA0YjdmZDlhMDY1ZDIyY2Q4OWNkYTk1MDQ1
ZTI2OWMwHhcNMjYwMzI2MDQwMDU5WhcNMjYwMzI3MDQwMDU5WjAzMTEwLwYDVQQD
EyhhNWJmZWViN2E5NTZkNjM3YWZjODhiZTE3Zjk4MDE0NzI3NjAwMDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzK93/EcIKdZy70an67w0nonFLskW
IKzEaRP+e/Gd6Cp2CmF+aX7uuMGSFayR84MpI8FPhL7CNmz9kWYWiqOaGLbv0eFn
PYuHigCEbXsgvDf5FtHyDbLwGmkNu84q5P1OvO6xHt3kGr6Sgxsgtulxkdu+v5LU
WEwPQIf2kPOsIX4/SGOjB7ae84ROS9CWPJLWP5mnrtVStmhl4o23kw3HKnxxeHuV
xdhw5kDE399qdTH8q3Ev7569X1V80UE4jcoivPs4gx/CIz8hXeyDyR6Uv+dB/BkP
7eDkz47KST2ypETU8hDjB3wSDMf4g4Mwud35Ndq1pxxuDX+jDSAFxRTK4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKW/7repVtY3r8iL4X+YAUcnYAA0MB8GA1UdIwQY
MBaAFF/CR0MwS3/ZoGXSLNic2pUEXiacMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDhKSFF6QkxmOW1nWmRJczJKemFsUVJlSnB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9lNWEyYzctMDQ1My00OGJhLWIxMGMt
MGJhOTY3OWRlMmU2LzEvWDhKSFF6QkxmOW1nWmRJczJKemFsUVJlSnB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9lNWEyYzctMDQ1My00OGJhLWIxMGMtMGJhOTY3OWRlMmU2
LzEvWDhKSFF6QkxmOW1nWmRJczJKemFsUVJlSnB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACWa+0kRt
8RsC6VlGyHA5RCQtZ0qfvFFnCIYPvju6z0K4MBBMeEpVyt/PnbuoHbj91f+aVMwg
sWoGVsBQVhavhSGzoXv0TqI49lLQrZ5I3Ajf2LScV5HuFKhtZR5ZFjOop0guj6Tr
OA2r+9S0QarDqVbTvyq93Ly2pyYGf54EDF7MoXA3Qwfclbmeb0QC8Cj6y01JTOUL
+CGv313E+BuLLVHdZGVKXTa8basSd68kYWXJIRwa1E0sm6ewDPXUkL3VXNcyoxMm
8XoowgnyrGsph1VqkKGJlER57nFMnZ6e/0NqueSJt8INFeMew+/z6VgeyY3dIQ+A
mgGqAs0y92S/vQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:21 2026 by rpki-client