Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
File: x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft (raw, json)
Hash identifier: 9BMqbvnpc+oQjhLCy2H1rKKxD6PZs2xgkFlSzvv9KyU=
Subject key identifier: 54:63:BD:D9:43:49:31:E2:C8:5D:11:12:D8:2A:79:9C:6F:AF:8F:F3
Authority key identifier: C7:DB:56:CD:A2:E7:DD:B0:23:16:8C:5D:77:EC:97:D9:A0:06:BA:ED
Certificate issuer: /CN=c7db56cda2e7ddb023168c5d77ec97d9a006baed
Certificate serial: 019D2929BB167ADD380A42207E4129CCEB88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
Manifest number: 14D0
Signing time: Thu 26 Mar 2026 08:01:33 +0000
Manifest this update: Thu 26 Mar 2026 08:01:33 +0000
Manifest next update: Fri 27 Mar 2026 08:01:33 +0000
Files and hashes: 1: VVO2x6L7LFTZsVY_zaZrcjz-CLU.roa (hash: mrQRCF7HAxobAPy4OykpZkTQroOOHVdF+aZo6ajUous=)
2: XSKluvUTTgVd2egTpJ08l-exvKw.roa (hash: k4WvTC/++ULE/2LzyeolM06KPsDEfc4ZDC8+guSUNtQ=)
3: x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl (hash: 0foVyy+Y8lY3eEfd5oGXJdTg8wXxoh6CFkaoawv30rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:bb:16:7a:dd:38:0a:42:20:7e:41:29:cc:eb:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7db56cda2e7ddb023168c5d77ec97d9a006baed
Validity
Not Before: Mar 26 08:01:33 2026 GMT
Not After : Mar 27 08:01:33 2026 GMT
Subject: CN=5463bdd9434931e2c85d1112d82a799c6faf8ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:dd:cb:14:b9:47:e9:2c:57:af:ec:4e:af:38:
ba:d2:d0:10:88:af:f5:84:ad:2a:a5:c2:a5:87:b2:
b1:b1:52:b8:b6:30:b7:de:c8:14:b4:cb:1b:df:fa:
9e:73:f7:17:9d:b3:fe:f4:2e:36:88:35:87:65:89:
ae:25:19:15:bf:8c:db:56:04:71:95:48:9a:ac:d7:
69:4d:44:21:dc:57:95:58:08:50:09:24:dc:bf:15:
89:96:0e:ff:73:98:e0:02:f5:42:3b:ff:33:de:d7:
e9:cc:82:e4:6d:ac:68:df:7e:81:e2:ed:33:18:a9:
47:92:be:6e:ec:df:88:ec:9e:24:e5:db:02:d7:7d:
85:1f:a6:55:a4:6b:91:c2:90:d5:27:91:e2:9c:6b:
a5:9c:d8:3f:e1:21:f6:97:09:41:f4:c1:42:89:1e:
06:3f:5c:9a:81:b5:c9:97:c7:b7:6e:41:2e:f9:62:
d2:ac:5a:8c:a9:f6:4f:8c:ca:e0:14:0f:00:1b:05:
2a:bd:28:a4:3f:e7:39:52:f8:16:26:a4:fb:84:d6:
93:a5:b5:6b:c1:a7:82:54:89:9e:73:19:8b:de:e0:
23:c1:18:34:1e:8f:30:17:b8:4b:0c:5e:ef:ff:14:
2c:0d:2b:f8:e8:3f:6b:99:79:0c:65:3e:1a:86:49:
44:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:63:BD:D9:43:49:31:E2:C8:5D:11:12:D8:2A:79:9C:6F:AF:8F:F3
X509v3 Authority Key Identifier:
keyid:C7:DB:56:CD:A2:E7:DD:B0:23:16:8C:5D:77:EC:97:D9:A0:06:BA:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:3a:fe:2d:fb:f7:d4:a6:3d:0b:a3:63:e1:c5:38:3c:b8:35:
79:c5:b9:56:9c:67:da:62:4a:90:d3:93:93:4c:d0:7a:37:5d:
15:c0:63:4e:39:30:34:24:ad:a2:24:d7:6b:f8:82:22:c9:f6:
64:0e:fc:58:0b:a9:cb:69:03:22:6c:18:c7:62:24:63:4c:17:
80:91:79:70:67:08:9e:9c:7d:8e:64:c4:1d:15:fc:4f:7e:40:
7e:8b:03:8a:08:bc:e1:2d:de:a8:29:26:da:f9:85:01:6f:f0:
04:b0:59:6f:06:d3:aa:78:fd:af:b0:be:16:0d:82:38:a1:62:
f9:bc:0f:73:81:32:fb:56:5a:94:1a:b7:5d:c8:6a:3f:e9:1d:
5d:5a:78:29:a2:ee:e5:64:20:6a:8b:18:05:15:5b:4c:6f:39:
76:e7:b7:30:9e:c3:66:03:39:e0:00:31:e7:9f:4d:80:18:db:
ee:50:45:9a:3f:26:c7:1c:23:2a:32:b2:ed:36:ec:ae:35:03:
51:6d:c3:24:2c:f5:7a:3f:a2:07:9f:67:2c:91:28:d3:ea:f0:
56:28:1f:07:73:4a:34:5f:0e:06:09:2c:70:b6:ea:fa:ce:65:
bc:e1:7d:8c:58:85:e8:b6:10:35:24:25:2a:d1:8e:05:22:31:
e8:56:a8:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKbsWet04CkIgfkEpzOuIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ZGI1NmNkYTJlN2RkYjAyMzE2OGM1ZDc3ZWM5N2Q5YTAw
NmJhZWQwHhcNMjYwMzI2MDgwMTMzWhcNMjYwMzI3MDgwMTMzWjAzMTEwLwYDVQQD
Eyg1NDYzYmRkOTQzNDkzMWUyYzg1ZDExMTJkODJhNzk5YzZmYWY4ZmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAut3LFLlH6SxXr+xOrzi60tAQiK/1
hK0qpcKlh7KxsVK4tjC33sgUtMsb3/qec/cXnbP+9C42iDWHZYmuJRkVv4zbVgRx
lUiarNdpTUQh3FeVWAhQCSTcvxWJlg7/c5jgAvVCO/8z3tfpzILkbaxo336B4u0z
GKlHkr5u7N+I7J4k5dsC132FH6ZVpGuRwpDVJ5HinGulnNg/4SH2lwlB9MFCiR4G
P1yagbXJl8e3bkEu+WLSrFqMqfZPjMrgFA8AGwUqvSikP+c5UvgWJqT7hNaTpbVr
waeCVImecxmL3uAjwRg0Ho8wF7hLDF7v/xQsDSv46D9rmXkMZT4ahklEWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFRjvdlDSTHiyF0REtgqeZxvr4/zMB8GA1UdIwQY
MBaAFMfbVs2i592wIxaMXXfsl9mgBrrtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDl0V3phTG4zYkFqRm94ZGQteVgyYUFHdXUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9hOTc4YWItNDNkNS00MzM1LWFmYTIt
ODJlYjZmZDExZGQ1LzEveDl0V3phTG4zYkFqRm94ZGQteVgyYUFHdXUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9hOTc4YWItNDNkNS00MzM1LWFmYTItODJlYjZmZDExZGQ1
LzEveDl0V3phTG4zYkFqRm94ZGQteVgyYUFHdXUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuzr+Lfv3
1KY9C6Nj4cU4PLg1ecW5Vpxn2mJKkNOTk0zQejddFcBjTjkwNCStoiTXa/iCIsn2
ZA78WAupy2kDImwYx2IkY0wXgJF5cGcInpx9jmTEHRX8T35AfosDigi84S3eqCkm
2vmFAW/wBLBZbwbTqnj9r7C+Fg2COKFi+bwPc4Ey+1ZalBq3XchqP+kdXVp4KaLu
5WQgaosYBRVbTG85due3MJ7DZgM54AAx559NgBjb7lBFmj8mxxwjKjKy7TbsrjUD
UW3DJCz1ej+iB59nLJEo0+rwVigfB3NKNF8OBgkscLbq+s5lvOF9jFiF6LYQNSQl
KtGOBSIx6Fao2w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:34:23 2026 by rpki-client