Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.mft
File: xHqEBhZxYD3cKujuqcrVHudarsY.mft (raw, json)
Hash identifier: kwFBZTWyVcrq3L3tsj1WpMhG4q5McqATKyijg7Q6yxI=
Subject key identifier: ED:16:B9:B2:36:69:9D:42:D6:E9:1B:33:1A:11:99:CE:AE:DB:ED:0E
Authority key identifier: C4:7A:84:06:16:71:60:3D:DC:2A:E8:EE:A9:CA:D5:1E:E7:5A:AE:C6
Certificate issuer: /CN=c47a84061671603ddc2ae8eea9cad51ee75aaec6
Certificate serial: 019D273A89B880130A59D7B7CB43168BCCBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xHqEBhZxYD3cKujuqcrVHudarsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 23:00:40 +0000
Manifest this update: Wed 25 Mar 2026 23:00:40 +0000
Manifest next update: Thu 26 Mar 2026 23:00:40 +0000
Files and hashes: 1: F_v6YtzOWtJq17zItdnU05lFmd8.roa (hash: 8fuF3GPsuTVKuXl4nbxF25sznai+CqgpM/JBWhxecLQ=)
2: xHqEBhZxYD3cKujuqcrVHudarsY.crl (hash: LChoDxM+UiztefedredAJ9Kt5Klrd9Pf1YPtgEplcT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xHqEBhZxYD3cKujuqcrVHudarsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:89:b8:80:13:0a:59:d7:b7:cb:43:16:8b:cc:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c47a84061671603ddc2ae8eea9cad51ee75aaec6
Validity
Not Before: Mar 25 23:00:40 2026 GMT
Not After : Mar 26 23:00:40 2026 GMT
Subject: CN=ed16b9b236699d42d6e91b331a1199ceaedbed0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e8:9c:f1:21:9e:eb:ea:0c:f6:d9:cf:3c:7f:
62:42:ba:17:d7:ce:17:e1:a9:b3:cf:58:ec:74:8a:
e5:7e:a8:52:d1:41:a7:bd:69:5a:2c:53:ac:53:8e:
41:b0:13:ec:5f:d3:a2:33:8f:cb:75:77:ed:8e:38:
35:10:22:38:4b:fb:48:21:96:06:40:1e:42:0b:a7:
8f:7f:7f:e2:c2:37:81:56:bc:a6:92:cc:6f:5f:85:
6f:74:f7:f7:51:ee:76:0c:ec:67:64:0a:71:39:3e:
84:29:8c:d1:32:1b:56:be:e8:74:e6:ef:b7:08:f2:
56:d7:31:ec:fc:59:b5:e7:a8:dc:0f:fc:39:91:d0:
64:7b:e6:3d:6a:e8:01:d4:f1:9c:f9:36:83:3e:c0:
79:21:7a:3d:67:95:5b:05:fc:52:1d:c8:65:6a:1b:
79:bb:1e:5d:e1:be:17:fe:d2:1d:05:3f:38:9a:aa:
43:37:a2:4c:1e:6d:02:5a:68:68:94:34:06:a0:0f:
03:a5:6b:0c:ba:cb:06:e8:2e:eb:15:78:59:6d:bc:
c2:69:ed:5a:c3:03:8d:19:00:80:cf:d4:59:28:c2:
c2:93:67:83:06:7d:e2:87:ea:da:ff:76:6a:04:4d:
5a:2f:17:1b:9b:8a:83:b5:8a:62:38:25:31:b1:08:
e9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:16:B9:B2:36:69:9D:42:D6:E9:1B:33:1A:11:99:CE:AE:DB:ED:0E
X509v3 Authority Key Identifier:
keyid:C4:7A:84:06:16:71:60:3D:DC:2A:E8:EE:A9:CA:D5:1E:E7:5A:AE:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xHqEBhZxYD3cKujuqcrVHudarsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:be:35:73:58:c6:be:b7:fa:f4:89:32:86:06:bd:1c:6a:3d:
b7:af:4f:eb:ed:91:f3:d8:37:32:94:a0:6b:a8:4b:d2:5d:1e:
ee:f1:24:b1:90:a6:22:b8:49:53:6c:90:2c:95:16:fb:34:56:
e3:4e:d6:df:67:9b:aa:80:8d:ff:e2:00:8a:85:8e:e9:76:4b:
f8:f6:64:6e:40:25:9d:5c:e0:ba:e0:07:e8:25:e8:10:a1:70:
41:e6:1e:6c:b5:87:3d:14:64:df:15:be:0c:13:7c:14:8d:0c:
f6:0b:a6:5a:a1:f5:1d:31:c2:21:e0:18:f2:2d:57:8a:2f:14:
df:74:14:de:ba:0f:3e:0a:17:0c:fe:de:86:8b:89:bf:58:dc:
45:09:c3:36:9a:4f:0e:7b:7d:80:aa:95:02:b4:8d:7e:60:d9:
c9:74:a9:8c:89:7d:f7:69:9f:3c:7c:c4:72:7d:6a:67:64:a7:
eb:74:74:b2:71:02:b2:1f:e3:7c:b6:32:22:be:88:c5:16:30:
a3:4c:06:5a:69:ef:be:8f:b3:f6:44:8b:a0:63:33:20:65:87:
4a:20:53:ab:9f:d1:4b:2e:5d:02:1e:6c:99:81:90:71:a6:2d:
b0:e2:14:ca:4c:a8:8f:db:ff:c2:51:da:2e:8e:3a:81:f5:16:
ce:10:4b:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOom4gBMKWde3y0MWi8y8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0N2E4NDA2MTY3MTYwM2RkYzJhZThlZWE5Y2FkNTFlZTc1
YWFlYzYwHhcNMjYwMzI1MjMwMDQwWhcNMjYwMzI2MjMwMDQwWjAzMTEwLwYDVQQD
EyhlZDE2YjliMjM2Njk5ZDQyZDZlOTFiMzMxYTExOTljZWFlZGJlZDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeic8SGe6+oM9tnPPH9iQroX184X
4amzz1jsdIrlfqhS0UGnvWlaLFOsU45BsBPsX9OiM4/LdXftjjg1ECI4S/tIIZYG
QB5CC6ePf3/iwjeBVrymksxvX4VvdPf3Ue52DOxnZApxOT6EKYzRMhtWvuh05u+3
CPJW1zHs/Fm156jcD/w5kdBke+Y9augB1PGc+TaDPsB5IXo9Z5VbBfxSHchlaht5
ux5d4b4X/tIdBT84mqpDN6JMHm0CWmholDQGoA8DpWsMussG6C7rFXhZbbzCae1a
wwONGQCAz9RZKMLCk2eDBn3ih+ra/3ZqBE1aLxcbm4qDtYpiOCUxsQjpTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO0WubI2aZ1C1ukbMxoRmc6u2+0OMB8GA1UdIwQY
MBaAFMR6hAYWcWA93Cro7qnK1R7nWq7GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEhxRUJoWnhZRDNjS3VqdXFjclZIdWRhcnNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC81M2YyNTItZjNmZS00NjdhLWJjY2Yt
YjI5MWY5N2I3MDk2LzEveEhxRUJoWnhZRDNjS3VqdXFjclZIdWRhcnNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC81M2YyNTItZjNmZS00NjdhLWJjY2YtYjI5MWY5N2I3MDk2
LzEveEhxRUJoWnhZRDNjS3VqdXFjclZIdWRhcnNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwr41c1jG
vrf69Ikyhga9HGo9t69P6+2R89g3MpSga6hL0l0e7vEksZCmIrhJU2yQLJUW+zRW
407W32ebqoCN/+IAioWO6XZL+PZkbkAlnVzguuAH6CXoEKFwQeYebLWHPRRk3xW+
DBN8FI0M9gumWqH1HTHCIeAY8i1Xii8U33QU3roPPgoXDP7ehouJv1jcRQnDNppP
Dnt9gKqVArSNfmDZyXSpjIl992mfPHzEcn1qZ2Sn63R0snECsh/jfLYyIr6IxRYw
o0wGWmnvvo+z9kSLoGMzIGWHSiBTq5/RSy5dAh5smYGQcaYtsOIUykyoj9v/wlHa
Lo46gfUWzhBL6g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:21 2026 by rpki-client