Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/xJyIRCupc0W8AQZVnm-nhpRK3KQ.mft
File: xJyIRCupc0W8AQZVnm-nhpRK3KQ.mft (raw, json)
Hash identifier: vNOJ+t4w9hbY3tl6k0tTLkRS77CO3B9BrB+h5deGmH8=
Subject key identifier: 49:52:C5:79:E8:FE:2F:5C:AC:33:ED:F0:AB:04:8A:71:F3:F3:9F:80
Authority key identifier: C4:9C:88:44:2B:A9:73:45:BC:01:06:55:9E:6F:A7:86:94:4A:DC:A4
Certificate issuer: /CN=c49c88442ba97345bc0106559e6fa786944adca4
Certificate serial: 019D2A3C45EBDE6D69783DEABF19AC717349
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJyIRCupc0W8AQZVnm-nhpRK3KQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/xJyIRCupc0W8AQZVnm-nhpRK3KQ.mft
Manifest number: 0E59
Signing time: Thu 26 Mar 2026 13:01:26 +0000
Manifest this update: Thu 26 Mar 2026 13:01:26 +0000
Manifest next update: Fri 27 Mar 2026 13:01:26 +0000
Files and hashes: 1: TxIZNzzKaH19rbmOUyZ9uXJGBrA.roa (hash: /R4FGOkjkhFDesEVBEJOaS2Lp1AMWloELlEn3WOI3+4=)
2: xJyIRCupc0W8AQZVnm-nhpRK3KQ.crl (hash: eku6eJmJ8x7arqfu2Y7GexSgUB9kVos3DtsoIrymZiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/xJyIRCupc0W8AQZVnm-nhpRK3KQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/xJyIRCupc0W8AQZVnm-nhpRK3KQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJyIRCupc0W8AQZVnm-nhpRK3KQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:45:eb:de:6d:69:78:3d:ea:bf:19:ac:71:73:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c49c88442ba97345bc0106559e6fa786944adca4
Validity
Not Before: Mar 26 13:01:26 2026 GMT
Not After : Mar 27 13:01:26 2026 GMT
Subject: CN=4952c579e8fe2f5cac33edf0ab048a71f3f39f80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e8:ff:42:8c:8c:5a:67:00:c8:a0:5b:37:7e:
e5:fe:33:6b:f9:a1:ff:ac:c6:72:39:40:b4:23:07:
f6:dd:63:32:e7:36:86:6d:a8:fc:85:50:30:43:7a:
a9:1c:50:3e:76:93:cb:32:3b:93:b0:1e:38:58:51:
a1:e6:37:c8:6c:ed:eb:4f:33:d0:a1:d1:04:2d:9b:
a4:0c:cc:ad:e2:27:02:c8:15:99:f1:dc:1a:c2:56:
ce:10:d7:37:d9:da:06:53:f5:18:47:1e:76:53:3d:
06:f6:54:e9:88:14:e1:4f:c5:27:ea:e5:2a:a8:57:
4f:69:ec:9b:e1:ca:68:2f:c7:24:17:19:a4:e0:79:
c4:93:33:a8:03:47:40:bf:b5:48:00:8d:e9:36:b3:
ff:0e:a8:95:a5:06:4a:5c:08:90:af:50:7e:b3:8d:
6d:81:0b:85:0c:b2:48:37:d2:59:f6:d7:a4:e3:ca:
e3:6f:8a:72:32:22:65:6b:e6:5e:ed:72:1c:3d:3d:
82:02:6e:dc:e0:db:24:9c:ef:4c:a8:43:de:15:81:
b0:4b:dc:7d:bb:b3:50:c9:fb:27:4b:49:fa:ab:02:
10:94:2a:c4:34:6e:de:a3:a8:76:99:ae:5e:bc:c0:
a7:23:bb:58:98:55:4f:ef:16:37:ba:fb:f3:4f:33:
c2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:52:C5:79:E8:FE:2F:5C:AC:33:ED:F0:AB:04:8A:71:F3:F3:9F:80
X509v3 Authority Key Identifier:
keyid:C4:9C:88:44:2B:A9:73:45:BC:01:06:55:9E:6F:A7:86:94:4A:DC:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJyIRCupc0W8AQZVnm-nhpRK3KQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/xJyIRCupc0W8AQZVnm-nhpRK3KQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/xJyIRCupc0W8AQZVnm-nhpRK3KQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:e8:67:01:59:1b:4d:e8:2a:a5:03:72:27:ab:a6:61:4a:a6:
1c:26:a2:5a:27:98:30:01:51:8f:fe:fa:29:a3:c8:9d:09:5b:
da:0c:16:9a:a9:55:0f:81:02:92:9b:a6:29:5c:1d:82:00:2d:
05:87:ca:6c:1e:ac:ec:7d:c5:af:e3:89:b2:43:2f:62:e8:12:
b2:21:07:ef:22:15:b2:d6:c5:fb:d9:91:02:d8:61:65:04:8f:
cf:ff:39:5c:2b:d4:fc:5d:87:f8:9f:aa:7a:51:ab:51:1e:ea:
11:8d:7e:38:dc:a4:4a:fe:1f:80:4b:37:b9:09:36:41:2f:b4:
d9:30:aa:c6:33:9c:2c:70:e0:19:67:fb:75:13:cb:73:d1:f9:
bb:02:1c:02:a0:62:49:fb:4e:b9:2b:01:fb:56:b3:a8:7a:2c:
45:66:6c:36:e6:c0:aa:dc:63:f5:2b:05:86:0c:76:00:c0:69:
dc:d0:15:28:fe:91:46:a0:fc:3f:93:1c:45:fa:ed:8a:a4:9b:
89:90:02:0e:e2:54:fe:40:f4:6c:c4:98:85:7e:43:ea:eb:69:
0f:48:bd:70:66:6c:c3:93:cc:13:81:1f:c6:88:ed:1e:fe:86:
1d:35:83:a4:17:85:d3:b1:15:0c:ea:63:0e:02:40:bc:e5:c0:
1c:72:18:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qPEXr3m1peD3qvxmscXNJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0OWM4ODQ0MmJhOTczNDViYzAxMDY1NTllNmZhNzg2OTQ0
YWRjYTQwHhcNMjYwMzI2MTMwMTI2WhcNMjYwMzI3MTMwMTI2WjAzMTEwLwYDVQQD
Eyg0OTUyYzU3OWU4ZmUyZjVjYWMzM2VkZjBhYjA0OGE3MWYzZjM5ZjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ej/QoyMWmcAyKBbN37l/jNr+aH/
rMZyOUC0Iwf23WMy5zaGbaj8hVAwQ3qpHFA+dpPLMjuTsB44WFGh5jfIbO3rTzPQ
odEELZukDMyt4icCyBWZ8dwawlbOENc32doGU/UYRx52Uz0G9lTpiBThT8Un6uUq
qFdPaeyb4cpoL8ckFxmk4HnEkzOoA0dAv7VIAI3pNrP/DqiVpQZKXAiQr1B+s41t
gQuFDLJIN9JZ9tek48rjb4pyMiJla+Ze7XIcPT2CAm7c4NsknO9MqEPeFYGwS9x9
u7NQyfsnS0n6qwIQlCrENG7eo6h2ma5evMCnI7tYmFVP7xY3uvvzTzPCfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFElSxXno/i9crDPt8KsEinHz85+AMB8GA1UdIwQY
MBaAFMSciEQrqXNFvAEGVZ5vp4aUStykMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEp5SVJDdXBjMFc4QVFaVm5tLW5ocFJLM0tRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi80ZjYxODctYmM2Ny00YWMzLTljOGQt
YTcwZjk5MmE1NTI5LzEveEp5SVJDdXBjMFc4QVFaVm5tLW5ocFJLM0tRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi80ZjYxODctYmM2Ny00YWMzLTljOGQtYTcwZjk5MmE1NTI5
LzEveEp5SVJDdXBjMFc4QVFaVm5tLW5ocFJLM0tRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG+hnAVkb
TegqpQNyJ6umYUqmHCaiWieYMAFRj/76KaPInQlb2gwWmqlVD4ECkpumKVwdggAt
BYfKbB6s7H3Fr+OJskMvYugSsiEH7yIVstbF+9mRAthhZQSPz/85XCvU/F2H+J+q
elGrUR7qEY1+ONykSv4fgEs3uQk2QS+02TCqxjOcLHDgGWf7dRPLc9H5uwIcAqBi
SftOuSsB+1azqHosRWZsNubAqtxj9SsFhgx2AMBp3NAVKP6RRqD8P5McRfrtiqSb
iZACDuJU/kD0bMSYhX5D6utpD0i9cGZsw5PME4EfxojtHv6GHTWDpBeF07EVDOpj
DgJAvOXAHHIYxw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:22:11 2026 by rpki-client