Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft
File: xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft (raw, json)
Hash identifier: lE5OU5qbuDaE67hA5TgQjT3nr6knEqV1zlcSO0dYFCA=
Subject key identifier: E4:BC:FB:21:90:34:DE:C5:F7:BF:AE:49:76:00:68:91:55:68:80:E2
Authority key identifier: C7:15:CD:3A:CF:3B:6B:2D:57:BC:34:85:67:58:27:53:C9:CC:09:33
Certificate issuer: /CN=c715cd3acf3b6b2d57bc348567582753c9cc0933
Certificate serial: 019D284DE1B7B7F6298E49F4F1888B9F1C01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xxXNOs87ay1XvDSFZ1gnU8nMCTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 04:01:25 +0000
Manifest this update: Thu 26 Mar 2026 04:01:25 +0000
Manifest next update: Fri 27 Mar 2026 04:01:25 +0000
Files and hashes: 1: eOXpQIA6qLtSRKi37aaBf2fN-Nw.roa (hash: YlsuBpQ4jmohvQqxKmhcIgBvEbbXIh+AX1kjTabOK9c=)
2: xxXNOs87ay1XvDSFZ1gnU8nMCTM.crl (hash: 9SmnGId1O9/gLl6hOqRgnQJLExaOyOHr1imMu2XmnKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xxXNOs87ay1XvDSFZ1gnU8nMCTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:e1:b7:b7:f6:29:8e:49:f4:f1:88:8b:9f:1c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c715cd3acf3b6b2d57bc348567582753c9cc0933
Validity
Not Before: Mar 26 04:01:25 2026 GMT
Not After : Mar 27 04:01:25 2026 GMT
Subject: CN=e4bcfb219034dec5f7bfae4976006891556880e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e3:c6:97:88:06:1d:65:ce:02:3a:ba:c7:b0:
81:ec:42:ee:20:39:22:a7:61:49:5f:ec:25:b2:4a:
57:44:65:fe:2d:8f:e5:1f:07:31:95:d1:83:cd:0b:
26:52:04:97:6d:ee:b1:46:99:6f:3e:73:0c:1e:59:
62:76:c6:ff:18:7e:cb:6b:08:57:f4:9c:96:84:0f:
98:6f:c2:bc:e7:99:f2:9f:85:96:e0:72:0d:7c:68:
92:3c:3c:fc:06:e8:f6:54:a4:55:7d:8e:2c:0a:e2:
8e:5a:9b:2a:37:95:e6:d5:88:4e:9a:8c:66:50:94:
a4:98:d5:ea:27:a4:72:07:47:80:fc:71:e7:54:18:
27:28:ad:2b:7b:8a:29:85:34:00:e9:bc:b2:2b:48:
3f:96:6a:b3:c2:03:fe:c4:8e:40:59:36:44:30:4f:
89:86:0c:77:ec:5d:29:0f:75:dd:fa:34:7f:b8:6f:
b4:a1:81:65:33:cf:b2:12:b8:50:d7:3e:e1:9a:ca:
82:53:c7:99:a1:27:12:ba:3b:13:1a:73:dd:b8:3a:
87:68:d0:16:c0:c6:01:b9:1f:cc:77:59:94:2d:8d:
91:d6:5e:4b:a8:d1:b8:26:c8:73:2b:ca:7a:d1:06:
78:20:d7:b0:12:f3:09:fe:c3:31:c8:0b:81:2e:1e:
73:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:BC:FB:21:90:34:DE:C5:F7:BF:AE:49:76:00:68:91:55:68:80:E2
X509v3 Authority Key Identifier:
keyid:C7:15:CD:3A:CF:3B:6B:2D:57:BC:34:85:67:58:27:53:C9:CC:09:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xxXNOs87ay1XvDSFZ1gnU8nMCTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:5d:00:e9:03:02:24:b0:d3:d8:1a:20:49:88:34:e8:eb:07:
29:99:59:d6:32:2b:cb:39:8c:4c:c3:a2:dc:2d:b5:3c:de:c3:
3c:4c:bf:f8:ce:55:14:0a:ad:99:ee:6b:4a:84:c7:31:95:d3:
f8:16:53:f4:2c:a0:e0:c9:07:7a:29:d0:88:8d:ff:17:53:2c:
73:4e:bc:7c:32:4a:ba:f5:3e:da:8f:ad:38:0d:07:f0:c3:92:
b5:ca:d0:38:8f:f7:e8:d7:cd:c8:7e:44:d1:50:6a:00:5b:fc:
d2:76:a9:ae:47:bd:91:ba:10:2a:de:04:f2:98:8e:d8:19:21:
0d:18:84:9f:79:17:32:b8:57:b5:13:fa:f3:b7:f2:72:d8:a1:
b1:61:26:43:ea:6d:76:d8:ff:56:d8:80:34:22:48:9e:f1:50:
fa:43:ae:ee:5d:2c:b5:4c:0a:f4:5e:66:6c:18:cd:f7:37:27:
a9:50:9f:38:b8:a1:91:c4:52:e1:ea:d1:30:8b:f5:d4:9e:c2:
a6:af:c7:7c:98:01:f9:5d:26:68:a8:34:b2:30:22:36:df:f2:
dc:8c:73:9b:e0:80:d9:60:7f:28:c2:bb:2e:f3:d2:4f:f2:04:
27:42:26:ab:c2:08:d4:0d:7e:2c:78:19:e1:dc:1c:68:30:26:
8b:a3:b5:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTeG3t/Ypjkn08YiLnxwBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3MTVjZDNhY2YzYjZiMmQ1N2JjMzQ4NTY3NTgyNzUzYzlj
YzA5MzMwHhcNMjYwMzI2MDQwMTI1WhcNMjYwMzI3MDQwMTI1WjAzMTEwLwYDVQQD
EyhlNGJjZmIyMTkwMzRkZWM1ZjdiZmFlNDk3NjAwNjg5MTU1Njg4MGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuPGl4gGHWXOAjq6x7CB7ELuIDki
p2FJX+wlskpXRGX+LY/lHwcxldGDzQsmUgSXbe6xRplvPnMMHllidsb/GH7LawhX
9JyWhA+Yb8K855nyn4WW4HINfGiSPDz8Buj2VKRVfY4sCuKOWpsqN5Xm1YhOmoxm
UJSkmNXqJ6RyB0eA/HHnVBgnKK0re4ophTQA6byyK0g/lmqzwgP+xI5AWTZEME+J
hgx37F0pD3Xd+jR/uG+0oYFlM8+yErhQ1z7hmsqCU8eZoScSujsTGnPduDqHaNAW
wMYBuR/Md1mULY2R1l5LqNG4JshzK8p60QZ4INewEvMJ/sMxyAuBLh5zuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOS8+yGQNN7F97+uSXYAaJFVaIDiMB8GA1UdIwQY
MBaAFMcVzTrPO2stV7w0hWdYJ1PJzAkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHhYTk9zODdheTFYdkRTRloxZ25VOG5NQ1RNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8yNGRkNTQtZTkxMC00ZTRiLWE5MjEt
YWU4ZDg0MDAzZmYxLzEveHhYTk9zODdheTFYdkRTRloxZ25VOG5NQ1RNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8yNGRkNTQtZTkxMC00ZTRiLWE5MjEtYWU4ZDg0MDAzZmYx
LzEveHhYTk9zODdheTFYdkRTRloxZ25VOG5NQ1RNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPV0A6QMC
JLDT2BogSYg06OsHKZlZ1jIryzmMTMOi3C21PN7DPEy/+M5VFAqtme5rSoTHMZXT
+BZT9Cyg4MkHeinQiI3/F1Msc068fDJKuvU+2o+tOA0H8MOStcrQOI/36NfNyH5E
0VBqAFv80naprke9kboQKt4E8piO2BkhDRiEn3kXMrhXtRP687fyctihsWEmQ+pt
dtj/VtiANCJInvFQ+kOu7l0stUwK9F5mbBjN9zcnqVCfOLihkcRS4erRMIv11J7C
pq/HfJgB+V0maKg0sjAiNt/y3Ixzm+CA2WB/KMK7LvPST/IEJ0Imq8II1A1+LHgZ
4dwcaDAmi6O1Cw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:23:34 2026 by rpki-client