Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
File: x6trIlTkVzCq-kWrUZcyA2FLtsw.mft (raw, json)
Hash identifier: p9zc7Oup9OtbJNi3YJImuL4d5luyM6+PAb/OW2o/7Pg=
Subject key identifier: 08:8E:E5:1C:2D:42:80:D8:F2:9A:9D:72:4F:4B:BF:1A:8A:AA:9C:E4
Authority key identifier: C7:AB:6B:22:54:E4:57:30:AA:FA:45:AB:51:97:32:03:61:4B:B6:CC
Certificate issuer: /CN=c7ab6b2254e45730aafa45ab51973203614bb6cc
Certificate serial: 019D2AA9E7968ADBDBD1352395D7334019FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
Manifest number: 15CB
Signing time: Thu 26 Mar 2026 15:01:10 +0000
Manifest this update: Thu 26 Mar 2026 15:01:10 +0000
Manifest next update: Fri 27 Mar 2026 15:01:10 +0000
Files and hashes: 1: YOiCbjbkGoimIbW3nkdcU24V058.roa (hash: jiSJ+O2fFYcLK2VQfO+2IbVyopzNGD9QLV+WZmnKJXk=)
2: qiIZeyX9IxKh6T92ERJD5iYwHJM.roa (hash: wrTzp4KmTWE2/mdXpqaffqeTXDKkOFMqbZCBTP+Yqzg=)
3: x6trIlTkVzCq-kWrUZcyA2FLtsw.crl (hash: V+tza49P7/rlxz7bycG+IU3lSAgW4tJLJc85ToPA+lE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:e7:96:8a:db:db:d1:35:23:95:d7:33:40:19:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ab6b2254e45730aafa45ab51973203614bb6cc
Validity
Not Before: Mar 26 15:01:10 2026 GMT
Not After : Mar 27 15:01:10 2026 GMT
Subject: CN=088ee51c2d4280d8f29a9d724f4bbf1a8aaa9ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c6:a9:5d:50:f7:70:61:3e:95:f9:d9:54:82:
2e:1a:12:0b:35:d9:64:41:bb:bf:83:82:53:a4:ea:
f4:58:80:a8:d9:00:a3:2f:05:92:1a:27:3c:09:65:
90:25:25:04:e5:f7:6c:77:ad:ef:64:b1:4e:fe:41:
a9:cc:f3:84:88:25:49:b0:c2:bf:86:2b:68:b1:68:
2c:d1:4e:a7:3f:e0:cb:f6:64:2b:c1:5a:36:30:84:
c4:f4:40:db:d8:40:7b:da:67:ae:51:94:00:da:2f:
3d:01:06:9d:54:ce:00:20:83:ee:cc:e7:f6:0e:7c:
95:c0:7e:68:fb:ae:0e:f0:44:37:c8:17:bf:77:08:
21:18:6c:e9:45:ef:69:52:10:3b:ef:a5:5e:dd:9b:
3c:1c:50:a3:81:f2:df:96:9d:92:30:db:22:4b:69:
40:b1:b9:6f:10:cc:f3:fa:fb:c9:df:96:a0:1c:85:
b5:0a:e3:58:14:87:dc:1e:7f:30:9f:57:de:ce:ae:
8f:4b:a2:69:3a:ad:2c:77:59:ad:82:30:31:32:70:
71:25:d3:dd:71:c6:94:81:40:f2:75:4a:d4:34:c2:
fc:af:96:49:ee:c8:13:3c:84:e7:54:14:a6:9c:b9:
e6:e1:c7:60:35:f2:f5:2b:9b:7a:d7:cb:d9:ea:42:
bd:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:8E:E5:1C:2D:42:80:D8:F2:9A:9D:72:4F:4B:BF:1A:8A:AA:9C:E4
X509v3 Authority Key Identifier:
keyid:C7:AB:6B:22:54:E4:57:30:AA:FA:45:AB:51:97:32:03:61:4B:B6:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:e7:07:d9:ac:aa:ab:fc:63:32:bc:65:52:cf:51:bc:60:9e:
db:a4:ee:3b:fb:0d:aa:41:69:16:be:1a:ad:e4:8c:5d:a9:fb:
cd:27:37:56:4c:c5:93:6d:1e:4a:d9:4f:67:8d:f3:9d:68:20:
3e:75:a9:59:17:bd:b3:24:ab:ad:05:1a:ed:bf:8a:bc:c2:a9:
5d:56:dd:5b:42:c8:d9:e3:2a:c7:c2:67:b5:bc:6f:45:a4:63:
7f:46:00:c7:cf:20:4b:ba:83:4b:76:3f:ab:05:a7:ec:1a:45:
d6:13:95:07:71:74:ad:8a:51:e3:24:f8:e9:6c:29:e2:18:00:
e9:09:de:c0:89:67:2f:80:ce:3f:5a:62:46:e2:23:72:2b:2e:
fe:53:71:f8:e1:38:b2:ea:7a:15:29:9c:db:e7:dc:43:ac:3c:
1d:4a:19:7b:3a:29:1a:2a:92:c3:4a:a5:8d:f3:ad:fa:02:99:
08:57:c9:56:7a:a6:f7:bb:e9:77:79:40:40:bb:a7:12:d2:48:
04:78:99:30:9f:8c:10:4d:8f:da:dd:1b:5c:24:fe:11:65:c6:
df:a0:75:66:87:f0:15:95:5a:0a:fa:f0:8e:be:2e:6e:99:26:
36:58:e5:80:dc:c3:91:f1:52:ff:98:8c:35:48:46:b0:2a:d3:
46:4a:69:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qqeeWitvb0TUjldczQBn+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3YWI2YjIyNTRlNDU3MzBhYWZhNDVhYjUxOTczMjAzNjE0
YmI2Y2MwHhcNMjYwMzI2MTUwMTEwWhcNMjYwMzI3MTUwMTEwWjAzMTEwLwYDVQQD
EygwODhlZTUxYzJkNDI4MGQ4ZjI5YTlkNzI0ZjRiYmYxYThhYWE5Y2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcapXVD3cGE+lfnZVIIuGhILNdlk
Qbu/g4JTpOr0WICo2QCjLwWSGic8CWWQJSUE5fdsd63vZLFO/kGpzPOEiCVJsMK/
hitosWgs0U6nP+DL9mQrwVo2MITE9EDb2EB72meuUZQA2i89AQadVM4AIIPuzOf2
DnyVwH5o+64O8EQ3yBe/dwghGGzpRe9pUhA776Ve3Zs8HFCjgfLflp2SMNsiS2lA
sblvEMzz+vvJ35agHIW1CuNYFIfcHn8wn1fezq6PS6JpOq0sd1mtgjAxMnBxJdPd
ccaUgUDydUrUNML8r5ZJ7sgTPITnVBSmnLnm4cdgNfL1K5t618vZ6kK9jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAiO5RwtQoDY8pqdck9LvxqKqpzkMB8GA1UdIwQY
MBaAFMerayJU5FcwqvpFq1GXMgNhS7bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDZ0cklsVGtWekNxLWtXclVaY3lBMkZMdHN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8zM2I2OWQtZjRjYS00M2FhLTk3ODAt
MWQ1NWQ1OTI5Y2VjLzEveDZ0cklsVGtWekNxLWtXclVaY3lBMkZMdHN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy8zM2I2OWQtZjRjYS00M2FhLTk3ODAtMWQ1NWQ1OTI5Y2Vj
LzEveDZ0cklsVGtWekNxLWtXclVaY3lBMkZMdHN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiucH2ayq
q/xjMrxlUs9RvGCe26TuO/sNqkFpFr4areSMXan7zSc3VkzFk20eStlPZ43znWgg
PnWpWRe9sySrrQUa7b+KvMKpXVbdW0LI2eMqx8JntbxvRaRjf0YAx88gS7qDS3Y/
qwWn7BpF1hOVB3F0rYpR4yT46Wwp4hgA6QnewIlnL4DOP1piRuIjcisu/lNx+OE4
sup6FSmc2+fcQ6w8HUoZezopGiqSw0qljfOt+gKZCFfJVnqm97vpd3lAQLunEtJI
BHiZMJ+MEE2P2t0bXCT+EWXG36B1ZofwFZVaCvrwjr4ubpkmNljlgNzDkfFS/5iM
NUhGsCrTRkppNw==
-----END CERTIFICATE-----
Generated at Fri Mar 27 00:50:43 2026 by rpki-client