Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft
File: XB3W7EouHzdshVxYMSGVoAXNuFA.mft (raw, json)
Hash identifier: beI5rPY1KqcH/WtyUQzO9f/L/x5zS7RKc717SGGaUNY=
Subject key identifier: BB:20:C2:BB:55:26:82:C1:62:B1:4F:D8:50:15:2C:16:33:B4:0A:ED
Authority key identifier: 5C:1D:D6:EC:4A:2E:1F:37:6C:85:5C:58:31:21:95:A0:05:CD:B8:50
Certificate issuer: /CN=5c1dd6ec4a2e1f376c855c58312195a005cdb850
Certificate serial: 019D25F16F0FE5DCF8084DAAFF2B1822BEFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XB3W7EouHzdshVxYMSGVoAXNuFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft
Manifest number: 0E92
Signing time: Wed 25 Mar 2026 17:01:12 +0000
Manifest this update: Wed 25 Mar 2026 17:01:12 +0000
Manifest next update: Thu 26 Mar 2026 17:01:12 +0000
Files and hashes: 1: KpNNrs7-74JuAx07tH3Ntml_vj8.roa (hash: iDfnHxKAzmOYLOtglm6RsnOhV84NnDbI1O2L4oOFWp8=)
2: XB3W7EouHzdshVxYMSGVoAXNuFA.crl (hash: JHf4Y/tsrog03EwLUOxcDr5dSm38MREKrwONLX0vcsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XB3W7EouHzdshVxYMSGVoAXNuFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:6f:0f:e5:dc:f8:08:4d:aa:ff:2b:18:22:be:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c1dd6ec4a2e1f376c855c58312195a005cdb850
Validity
Not Before: Mar 25 17:01:12 2026 GMT
Not After : Mar 26 17:01:12 2026 GMT
Subject: CN=bb20c2bb552682c162b14fd850152c1633b40aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:3b:d3:aa:c1:67:0d:f5:dd:58:b0:09:76:37:
53:4c:05:a9:3d:01:ec:fe:4b:98:f0:b7:f1:0b:65:
f2:9d:77:5e:0b:59:46:ca:09:88:1c:57:de:0a:c1:
d5:7f:18:84:87:ce:21:8d:f1:b3:ed:0b:39:cd:b7:
3b:07:1d:c5:be:f7:d7:ba:c1:09:2f:e4:23:05:93:
e3:90:7a:79:4e:8a:e0:73:af:96:b6:d1:f1:4a:fb:
4d:89:43:0a:6a:3b:b9:ee:bb:63:ac:4f:e6:79:50:
ee:a1:82:a0:df:f4:cb:07:15:62:3b:9a:ed:a9:bd:
ab:f5:1b:cd:f8:b6:a1:3d:31:19:d2:77:03:a2:0c:
28:f4:e0:8f:b1:e1:ad:0b:42:2f:09:db:b0:51:95:
fe:20:b3:07:fe:c9:b9:1f:c1:2d:9f:8d:45:b5:c2:
bf:c5:00:35:4a:04:e9:bc:2f:d7:17:35:19:05:1a:
73:b5:7a:b0:a5:71:7c:97:08:aa:ca:46:35:b0:3c:
3e:03:46:b5:ce:4f:b1:d3:65:a2:b9:1d:f8:e8:67:
02:4a:2d:a1:35:cf:65:94:15:e8:8d:bd:52:ba:7b:
fc:16:d0:94:2f:8f:0b:0a:88:99:66:15:b5:42:1d:
c3:80:35:f5:7a:48:4c:20:5b:e2:dc:f1:26:10:e2:
49:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:20:C2:BB:55:26:82:C1:62:B1:4F:D8:50:15:2C:16:33:B4:0A:ED
X509v3 Authority Key Identifier:
keyid:5C:1D:D6:EC:4A:2E:1F:37:6C:85:5C:58:31:21:95:A0:05:CD:B8:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XB3W7EouHzdshVxYMSGVoAXNuFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:fc:69:fe:a2:10:b2:6b:0c:a2:e3:05:4c:7d:cc:fd:4c:7a:
54:81:02:ea:60:30:88:6e:29:36:c5:3a:5b:2c:5e:a1:c4:39:
31:0d:f5:d6:8c:03:77:7e:e8:78:aa:3d:b5:21:38:1f:eb:7c:
e4:d4:3c:a8:c5:bc:85:0f:66:72:45:18:6f:e1:e7:96:d6:81:
f5:d7:f7:41:16:08:03:49:c8:bf:ea:db:fe:15:7b:ab:0b:0c:
15:cc:9a:07:75:12:ab:e7:b2:5e:bd:d5:85:12:63:b0:1e:bf:
b9:df:5b:9c:da:5e:2f:85:79:85:6a:4b:e1:49:67:d1:e2:17:
06:fb:df:80:19:43:6e:b5:45:3a:04:17:c6:07:33:69:4f:27:
f2:d0:20:ed:c1:ab:e8:df:80:53:96:dc:20:af:c4:ec:bf:7d:
32:70:87:a9:2f:5d:76:bb:a4:0a:9c:b9:3a:83:67:db:83:47:
3d:8c:51:51:f4:b2:ea:e2:5a:76:60:46:59:03:b1:74:26:3a:
92:c4:a9:1a:c4:9e:0b:2c:58:55:ca:b3:44:5c:fb:7b:4a:df:
a3:f2:96:50:a5:a4:03:00:d8:46:df:d3:11:c3:a1:b4:96:54:
62:34:5f:06:41:42:4b:2c:56:36:b1:10:a4:40:21:c5:1f:bf:
83:76:86:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8W8P5dz4CE2q/ysYIr76MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjMWRkNmVjNGEyZTFmMzc2Yzg1NWM1ODMxMjE5NWEwMDVj
ZGI4NTAwHhcNMjYwMzI1MTcwMTEyWhcNMjYwMzI2MTcwMTEyWjAzMTEwLwYDVQQD
EyhiYjIwYzJiYjU1MjY4MmMxNjJiMTRmZDg1MDE1MmMxNjMzYjQwYWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9DvTqsFnDfXdWLAJdjdTTAWpPQHs
/kuY8LfxC2XynXdeC1lGygmIHFfeCsHVfxiEh84hjfGz7Qs5zbc7Bx3FvvfXusEJ
L+QjBZPjkHp5Torgc6+WttHxSvtNiUMKaju57rtjrE/meVDuoYKg3/TLBxViO5rt
qb2r9RvN+LahPTEZ0ncDogwo9OCPseGtC0IvCduwUZX+ILMH/sm5H8Etn41FtcK/
xQA1SgTpvC/XFzUZBRpztXqwpXF8lwiqykY1sDw+A0a1zk+x02WiuR346GcCSi2h
Nc9llBXojb1Sunv8FtCUL48LCoiZZhW1Qh3DgDX1ekhMIFvi3PEmEOJJnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLsgwrtVJoLBYrFP2FAVLBYztArtMB8GA1UdIwQY
MBaAFFwd1uxKLh83bIVcWDEhlaAFzbhQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEIzVzdFb3VIemRzaFZ4WU1TR1ZvQVhOdUZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC81ZTRjMjItY2ZkZS00ZGVkLWE1MjYt
Mzk2NzFlMGI2MjY2LzEvWEIzVzdFb3VIemRzaFZ4WU1TR1ZvQVhOdUZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC81ZTRjMjItY2ZkZS00ZGVkLWE1MjYtMzk2NzFlMGI2MjY2
LzEvWEIzVzdFb3VIemRzaFZ4WU1TR1ZvQVhOdUZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt/xp/qIQ
smsMouMFTH3M/Ux6VIEC6mAwiG4pNsU6WyxeocQ5MQ311owDd37oeKo9tSE4H+t8
5NQ8qMW8hQ9mckUYb+HnltaB9df3QRYIA0nIv+rb/hV7qwsMFcyaB3USq+eyXr3V
hRJjsB6/ud9bnNpeL4V5hWpL4Uln0eIXBvvfgBlDbrVFOgQXxgczaU8n8tAg7cGr
6N+AU5bcIK/E7L99MnCHqS9ddrukCpy5OoNn24NHPYxRUfSy6uJadmBGWQOxdCY6
ksSpGsSeCyxYVcqzRFz7e0rfo/KWUKWkAwDYRt/TEcOhtJZUYjRfBkFCSyxWNrEQ
pEAhxR+/g3aGkQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:36:48 2026 by rpki-client