Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
File: xAZEdsLEf3eEdKFIFsHgakCBPlw.mft (raw, json)
Hash identifier: 4i9H/z37HYio869MBUysb0QKGD5jmuXw4cpyizVz1fk=
Subject key identifier: 58:28:30:AC:2C:C9:4A:DD:A3:FD:35:F3:26:F4:52:70:93:9C:1A:59
Authority key identifier: C4:06:44:76:C2:C4:7F:77:84:74:A1:48:16:C1:E0:6A:40:81:3E:5C
Certificate issuer: /CN=c4064476c2c47f778474a14816c1e06a40813e5c
Certificate serial: 019D25840B972E34826EA3957E1407FFADDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 15:01:43 +0000
Manifest this update: Wed 25 Mar 2026 15:01:43 +0000
Manifest next update: Thu 26 Mar 2026 15:01:43 +0000
Files and hashes: 1: pl4G0drpVsiUnTNv0aNJRxAq40Y.roa (hash: TIrmY5F1mz/rcq5o0AaF7KuNyHFmI5rxVVBApqp6+Ig=)
2: uCT5qS0TatwLKR2syBgBgC34NYE.roa (hash: 6Pav0LB8Y/JGRbLI7vMShFMSStiFyP+H+ECIrWK519s=)
3: xAZEdsLEf3eEdKFIFsHgakCBPlw.crl (hash: csfGXfslDOz9iXj7Mquwb/Ta5wu7q+kvFEIN7A/00Q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:0b:97:2e:34:82:6e:a3:95:7e:14:07:ff:ad:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4064476c2c47f778474a14816c1e06a40813e5c
Validity
Not Before: Mar 25 15:01:43 2026 GMT
Not After : Mar 26 15:01:43 2026 GMT
Subject: CN=582830ac2cc94adda3fd35f326f45270939c1a59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:14:e6:51:6a:ac:d9:f6:7b:72:94:de:f2:47:
b1:1d:49:da:63:35:e3:d8:00:f4:03:58:7a:45:6d:
0c:82:f0:9b:62:f4:51:b8:60:6f:20:ee:c2:af:0d:
33:09:e9:21:b7:d1:a3:f0:9e:06:70:b6:51:c7:c9:
9f:be:8f:dc:f2:33:de:ca:d8:dd:b2:41:48:f0:13:
29:33:a7:7c:9b:1c:51:d8:47:f0:3e:62:8c:c8:90:
9a:ea:30:86:c1:64:69:25:c3:13:70:b5:83:e1:4c:
de:84:f1:d1:42:7e:3d:4d:a2:bb:62:90:20:ce:dc:
e2:b9:99:a9:4e:10:d7:f0:c3:6d:10:2e:66:21:6b:
82:0d:c8:42:f4:87:ea:e5:fb:a8:23:e6:63:b2:a3:
38:00:76:9f:c4:ba:bb:1f:e3:2d:9e:af:fe:49:5a:
d3:f8:ba:ba:4b:b3:d6:c6:57:30:69:a3:20:85:ea:
2c:d8:43:1a:64:e8:92:ff:f2:9b:96:86:e1:ae:7f:
60:5c:46:ce:d7:9e:a1:23:5a:e3:74:8a:53:32:d6:
ff:46:66:11:86:01:c4:94:87:77:86:4e:2b:53:54:
0a:d8:e0:10:5f:6f:d0:3d:3d:97:f5:41:f2:63:61:
d7:0c:71:f9:c9:42:4d:04:bd:2c:89:eb:8d:27:62:
41:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:28:30:AC:2C:C9:4A:DD:A3:FD:35:F3:26:F4:52:70:93:9C:1A:59
X509v3 Authority Key Identifier:
keyid:C4:06:44:76:C2:C4:7F:77:84:74:A1:48:16:C1:E0:6A:40:81:3E:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:1a:46:4b:9a:4e:99:f3:77:43:86:33:78:ec:1b:ab:76:22:
a0:30:b3:05:c0:89:c4:64:fc:9c:74:2e:d6:cc:c7:3a:80:5e:
ae:29:b2:f1:88:33:89:06:24:a6:c5:5b:2c:04:d0:3d:38:46:
b3:96:58:2a:c2:6f:1c:cb:6c:fd:33:60:31:4c:0b:c8:d2:1a:
ea:86:f1:33:d4:bb:ad:db:ec:69:2e:cc:05:53:bb:09:2d:af:
fd:40:2f:13:38:89:bf:ef:aa:07:e6:1c:2a:34:4f:3e:c7:09:
be:cf:26:e8:86:eb:6a:a5:a7:4b:f7:da:18:e8:b4:08:06:bd:
10:3d:e0:67:e3:3f:1b:51:65:56:b7:90:fa:15:84:53:ce:23:
52:9b:6e:4a:86:74:eb:d7:56:eb:1d:5f:8f:e2:ed:0a:23:e6:
c8:53:d6:a3:6a:6e:0e:fd:59:11:5d:0b:6e:75:3a:ba:e4:e2:
ca:d1:27:21:90:7e:c1:ce:5b:2c:a1:65:3a:cd:1b:73:78:02:
4b:bb:c1:29:a2:a2:28:7f:51:9c:98:7d:91:22:e0:85:40:c1:
fd:6b:cb:b6:52:10:5e:06:96:15:c0:ad:b2:61:b7:70:4c:8f:
bc:fd:f0:58:b1:9e:a9:ec:24:9d:e6:21:9e:88:bc:ae:f1:49:
76:5a:64:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lhAuXLjSCbqOVfhQH/63eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0MDY0NDc2YzJjNDdmNzc4NDc0YTE0ODE2YzFlMDZhNDA4
MTNlNWMwHhcNMjYwMzI1MTUwMTQzWhcNMjYwMzI2MTUwMTQzWjAzMTEwLwYDVQQD
Eyg1ODI4MzBhYzJjYzk0YWRkYTNmZDM1ZjMyNmY0NTI3MDkzOWMxYTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRTmUWqs2fZ7cpTe8kexHUnaYzXj
2AD0A1h6RW0MgvCbYvRRuGBvIO7Crw0zCekht9Gj8J4GcLZRx8mfvo/c8jPeytjd
skFI8BMpM6d8mxxR2EfwPmKMyJCa6jCGwWRpJcMTcLWD4UzehPHRQn49TaK7YpAg
ztziuZmpThDX8MNtEC5mIWuCDchC9Ifq5fuoI+ZjsqM4AHafxLq7H+Mtnq/+SVrT
+Lq6S7PWxlcwaaMgheos2EMaZOiS//Kblobhrn9gXEbO156hI1rjdIpTMtb/RmYR
hgHElId3hk4rU1QK2OAQX2/QPT2X9UHyY2HXDHH5yUJNBL0sieuNJ2JB5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFgoMKwsyUrdo/018yb0UnCTnBpZMB8GA1UdIwQY
MBaAFMQGRHbCxH93hHShSBbB4GpAgT5cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEFaRWRzTEVmM2VFZEtGSUZzSGdha0NCUGx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC85YTdkZjctMThiYS00MWY3LTg4MGEt
NzQ2Nzc3ZTIxYzViLzEveEFaRWRzTEVmM2VFZEtGSUZzSGdha0NCUGx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC85YTdkZjctMThiYS00MWY3LTg4MGEtNzQ2Nzc3ZTIxYzVi
LzEveEFaRWRzTEVmM2VFZEtGSUZzSGdha0NCUGx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAehpGS5pO
mfN3Q4YzeOwbq3YioDCzBcCJxGT8nHQu1szHOoBerimy8YgziQYkpsVbLATQPThG
s5ZYKsJvHMts/TNgMUwLyNIa6obxM9S7rdvsaS7MBVO7CS2v/UAvEziJv++qB+Yc
KjRPPscJvs8m6IbraqWnS/faGOi0CAa9ED3gZ+M/G1FlVreQ+hWEU84jUptuSoZ0
69dW6x1fj+LtCiPmyFPWo2puDv1ZEV0LbnU6uuTiytEnIZB+wc5bLKFlOs0bc3gC
S7vBKaKiKH9RnJh9kSLghUDB/WvLtlIQXgaWFcCtsmG3cEyPvP3wWLGeqewkneYh
noi8rvFJdlpkOg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:07:08 2026 by rpki-client