Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
File: xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft (raw, json)
Hash identifier: /p7VlwVZRrpEPBcwp634SkCK8RlqDfBgwSnoYYm0DHs=
Subject key identifier: B5:FD:9C:D9:E8:C6:C0:2B:C9:06:AE:3D:5A:6D:ED:D6:1B:70:CF:9B
Authority key identifier: C5:76:BA:0C:09:8D:C4:72:18:62:23:C9:1E:7D:EF:52:16:E2:39:F1
Certificate issuer: /CN=c576ba0c098dc472186223c91e7def5216e239f1
Certificate serial: 019D2583B3518E2776037B5516B668388803
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
Manifest number: 077B
Signing time: Wed 25 Mar 2026 15:01:21 +0000
Manifest this update: Wed 25 Mar 2026 15:01:21 +0000
Manifest next update: Thu 26 Mar 2026 15:01:21 +0000
Files and hashes: 1: D93aVb7wrIXUaG1-CC-3JUagYOE.roa (hash: /8ReYoccQ/vVAZ/EZIZ9ttYSoWEPANiLCShHLXPhYb0=)
2: xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl (hash: R3lkUDPHzVrCH0WrPy89M9ehMkyohBosSY7aUYvQhiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:b3:51:8e:27:76:03:7b:55:16:b6:68:38:88:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c576ba0c098dc472186223c91e7def5216e239f1
Validity
Not Before: Mar 25 15:01:21 2026 GMT
Not After : Mar 26 15:01:21 2026 GMT
Subject: CN=b5fd9cd9e8c6c02bc906ae3d5a6dedd61b70cf9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:26:6d:df:51:19:95:ad:68:50:ec:80:2a:7b:
4e:7c:0d:19:5d:0b:44:d1:ce:4c:14:b0:00:61:0b:
5d:c6:78:d2:ae:a6:d4:5b:4e:f6:98:31:34:cf:39:
d9:9b:6d:db:28:f7:77:61:56:87:a6:e5:ed:40:60:
b4:5f:b4:4f:f1:3d:73:63:b0:65:e3:59:d9:69:b0:
ab:e8:e2:84:e2:5c:ff:e3:2d:62:2f:bb:7c:28:e7:
df:1f:47:ad:92:73:29:eb:e2:b9:58:3a:09:2e:7f:
ed:73:d6:8f:63:66:e9:63:6e:6f:c5:11:c4:6c:4f:
ea:64:53:28:8f:9c:c5:05:42:14:56:e7:3b:77:b1:
5f:a3:d9:be:f4:b4:7d:52:4d:bf:8b:2a:45:30:32:
06:e3:41:a9:23:d7:8a:fe:ea:d4:96:d4:60:f1:09:
50:6c:63:5b:f8:ac:1e:52:e0:e6:b3:86:66:a1:f6:
d9:9a:23:99:98:fb:c6:98:3b:33:0b:45:29:06:b0:
f0:d2:c2:22:64:a6:50:27:47:8b:f2:df:6f:57:e6:
1f:f2:03:16:32:4e:52:82:45:8c:fa:ea:94:84:b2:
3c:01:0f:d5:b9:88:ec:e7:c3:bb:61:d4:ba:07:42:
0d:10:60:89:69:2f:a9:c0:81:e2:ed:63:4a:2b:7b:
9c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:FD:9C:D9:E8:C6:C0:2B:C9:06:AE:3D:5A:6D:ED:D6:1B:70:CF:9B
X509v3 Authority Key Identifier:
keyid:C5:76:BA:0C:09:8D:C4:72:18:62:23:C9:1E:7D:EF:52:16:E2:39:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:88:b4:c7:18:76:5d:96:cd:28:71:23:85:68:5e:cc:80:9e:
e6:2c:e6:9c:c4:95:a1:be:71:0a:1d:fa:b0:35:14:76:cd:41:
a8:69:5f:a1:d7:9b:2a:0c:98:bb:61:13:86:0e:aa:df:43:81:
3a:de:54:a8:9f:b5:c3:19:bb:b7:24:a2:68:f8:a5:eb:f5:45:
a7:98:29:24:fe:b7:b7:4c:67:46:c5:71:23:e0:38:97:64:b5:
ff:ce:aa:83:48:c7:d6:b2:4f:c5:2a:00:15:03:27:d6:7c:b0:
04:f4:f3:7b:e0:5d:4e:6a:41:5d:ed:b9:e2:2a:69:7a:4f:80:
d7:dd:bb:c6:2c:be:00:c3:bc:bc:65:65:12:59:70:46:77:84:
9e:65:73:02:32:09:60:8f:05:40:f1:71:59:14:2d:6c:fa:ae:
f9:53:af:cd:74:90:9c:42:e8:f2:94:ee:35:d4:c4:96:30:4c:
4a:cb:31:b9:db:52:9a:74:a2:a1:71:ae:f9:a4:95:55:2e:37:
6f:95:1d:0e:83:7d:76:42:a5:ca:84:91:7b:b4:13:77:54:89:
ec:da:e3:74:39:1c:2d:5d:90:f5:29:dd:8c:9d:aa:65:a3:d1:
67:11:52:e4:05:ca:ac:6f:b6:cf:0a:0c:a6:e9:73:9f:6d:85:
69:97:cc:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lg7NRjid2A3tVFrZoOIgDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NzZiYTBjMDk4ZGM0NzIxODYyMjNjOTFlN2RlZjUyMTZl
MjM5ZjEwHhcNMjYwMzI1MTUwMTIxWhcNMjYwMzI2MTUwMTIxWjAzMTEwLwYDVQQD
EyhiNWZkOWNkOWU4YzZjMDJiYzkwNmFlM2Q1YTZkZWRkNjFiNzBjZjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSZt31EZla1oUOyAKntOfA0ZXQtE
0c5MFLAAYQtdxnjSrqbUW072mDE0zznZm23bKPd3YVaHpuXtQGC0X7RP8T1zY7Bl
41nZabCr6OKE4lz/4y1iL7t8KOffH0etknMp6+K5WDoJLn/tc9aPY2bpY25vxRHE
bE/qZFMoj5zFBUIUVuc7d7Ffo9m+9LR9Uk2/iypFMDIG40GpI9eK/urUltRg8QlQ
bGNb+KweUuDms4ZmofbZmiOZmPvGmDszC0UpBrDw0sIiZKZQJ0eL8t9vV+Yf8gMW
Mk5SgkWM+uqUhLI8AQ/VuYjs58O7YdS6B0INEGCJaS+pwIHi7WNKK3uc9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLX9nNnoxsAryQauPVpt7dYbcM+bMB8GA1UdIwQY
MBaAFMV2ugwJjcRyGGIjyR5971IW4jnxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFhhNkRBbU54SElZWWlQSkhuM3ZVaGJpT2ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi85ZDYyZDQtZDAzMy00NmU5LWJmZDMt
MzJlZTQ1OGE2MzQ4LzEveFhhNkRBbU54SElZWWlQSkhuM3ZVaGJpT2ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi85ZDYyZDQtZDAzMy00NmU5LWJmZDMtMzJlZTQ1OGE2MzQ4
LzEveFhhNkRBbU54SElZWWlQSkhuM3ZVaGJpT2ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw4i0xxh2
XZbNKHEjhWhezICe5izmnMSVob5xCh36sDUUds1BqGlfodebKgyYu2EThg6q30OB
Ot5UqJ+1wxm7tySiaPil6/VFp5gpJP63t0xnRsVxI+A4l2S1/86qg0jH1rJPxSoA
FQMn1nywBPTze+BdTmpBXe254ippek+A1927xiy+AMO8vGVlEllwRneEnmVzAjIJ
YI8FQPFxWRQtbPqu+VOvzXSQnELo8pTuNdTEljBMSssxudtSmnSioXGu+aSVVS43
b5UdDoN9dkKlyoSRe7QTd1SJ7NrjdDkcLV2Q9SndjJ2qZaPRZxFS5AXKrG+2zwoM
pulzn22FaZfMig==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:51:25 2026 by rpki-client