Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
File: xFP14jBCC8SnDQph3jtH3NoajQ4.mft (raw, json)
Hash identifier: QYvLjEIkw4/4Ny833LghDmgpooEYqh95W1d+wC3b7rQ=
Subject key identifier: 5C:C0:22:B7:E1:46:2F:B7:FC:70:0D:2F:AE:F1:EF:36:4D:79:5D:5A
Authority key identifier: C4:53:F5:E2:30:42:0B:C4:A7:0D:0A:61:DE:3B:47:DC:DA:1A:8D:0E
Certificate issuer: /CN=c453f5e230420bc4a70d0a61de3b47dcda1a8d0e
Certificate serial: 019D284E033D251E0FB8F2AEB22BA8919C1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
Manifest number: 17B9
Signing time: Thu 26 Mar 2026 04:01:34 +0000
Manifest this update: Thu 26 Mar 2026 04:01:34 +0000
Manifest next update: Fri 27 Mar 2026 04:01:34 +0000
Files and hashes: 1: pN_P1IlTK7N9Tsyo-7qDne3seo8.roa (hash: 4JuBbaWoHsvx0AsZc9fY1wPJc+hsLORDmTae2tdrxYs=)
2: vCRnh4F_lljPYv3DYF0shQI8Bbo.roa (hash: qW582UkFyFw7De0dFAxA/OIbguYJh97E6vsR4Z29UJE=)
3: xFP14jBCC8SnDQph3jtH3NoajQ4.crl (hash: NKc2oNYIdFqZA8IzJ38nm2qT05iT1wP8UXxscTugQbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:03:3d:25:1e:0f:b8:f2:ae:b2:2b:a8:91:9c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c453f5e230420bc4a70d0a61de3b47dcda1a8d0e
Validity
Not Before: Mar 26 04:01:34 2026 GMT
Not After : Mar 27 04:01:34 2026 GMT
Subject: CN=5cc022b7e1462fb7fc700d2faef1ef364d795d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:69:c6:25:17:c5:fa:08:04:d3:4f:14:39:e6:
57:4c:5b:13:6e:35:0c:c2:85:2b:44:16:d3:be:56:
46:64:b0:3e:fb:c6:54:4a:92:8e:ba:31:2a:1f:6c:
c2:de:6c:ba:d2:ed:cf:f6:e6:8b:54:fb:06:e3:5d:
fe:a1:82:4a:0f:00:f5:7d:15:53:79:14:2a:a3:31:
87:f3:7b:43:ff:78:c8:a1:6f:cb:7d:58:e5:3e:ef:
5f:ef:2b:63:f8:6c:11:f4:24:87:a1:bd:23:66:70:
47:52:df:e0:27:d5:6d:10:c8:fe:41:61:57:4d:88:
64:9a:88:c6:83:8c:c6:1e:81:34:32:f7:dc:68:bb:
14:9b:75:b8:21:e2:2a:09:5f:3c:c8:08:c3:56:76:
ac:a7:66:43:a6:57:64:14:07:ae:e3:b0:8b:b6:37:
f9:af:50:3b:e2:cd:11:b3:9e:74:ad:80:93:cc:34:
10:14:18:d4:48:2e:46:50:6d:dc:91:37:b5:c4:99:
03:07:e5:f1:d4:c6:2f:73:cb:5e:b8:68:f6:e6:a8:
13:09:ab:95:f7:ed:34:cd:7a:5f:95:1f:dd:a0:0b:
90:f9:d1:1a:7b:36:97:dd:d8:00:c6:2f:db:a3:b0:
88:ca:17:8e:32:9d:db:d5:79:1b:92:ae:60:16:f3:
53:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C0:22:B7:E1:46:2F:B7:FC:70:0D:2F:AE:F1:EF:36:4D:79:5D:5A
X509v3 Authority Key Identifier:
keyid:C4:53:F5:E2:30:42:0B:C4:A7:0D:0A:61:DE:3B:47:DC:DA:1A:8D:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:c2:55:60:bc:a3:59:5c:ff:3b:e8:77:a5:2d:6c:b7:99:fd:
39:1d:d5:f6:06:0c:0f:d8:04:49:95:35:a3:fb:01:0c:9e:bd:
b8:96:35:cf:41:91:2a:f6:fa:73:28:97:93:92:3c:dc:80:93:
49:1a:60:9e:91:0e:60:c1:d2:bc:80:27:dc:e0:9e:7c:e1:b9:
7a:d7:7d:08:1e:cd:aa:a6:0b:4d:a9:1d:03:43:e9:d2:49:e8:
87:db:88:ef:08:d3:b9:b4:d2:fa:df:18:08:49:16:6d:12:35:
82:86:b8:c4:98:13:a2:25:ef:be:ee:a8:05:60:2c:bb:67:ef:
9b:c9:d2:62:bd:ba:8e:91:47:5b:07:1f:ad:04:60:68:07:0b:
7a:c5:d7:98:71:d8:a3:fc:fc:b8:9a:bc:b2:8c:99:f8:96:8f:
e2:73:0f:10:9b:be:a1:3f:6f:2b:7e:94:41:1a:4d:b9:ca:6a:
51:ef:c9:bf:6e:b6:1a:1a:b0:72:37:23:70:6c:6e:82:ed:8a:
f7:67:4b:da:f7:05:f3:0f:fa:a0:88:51:a1:7f:d7:70:a6:e5:
90:43:70:67:64:b2:08:c6:4c:5b:3c:3e:fe:ef:99:0d:ee:81:
4c:6b:af:cb:c2:0b:4d:cb:80:95:a4:dc:ad:83:ae:6a:e3:f1:
98:21:69:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTgM9JR4PuPKusiuokZwdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0NTNmNWUyMzA0MjBiYzRhNzBkMGE2MWRlM2I0N2RjZGEx
YThkMGUwHhcNMjYwMzI2MDQwMTM0WhcNMjYwMzI3MDQwMTM0WjAzMTEwLwYDVQQD
Eyg1Y2MwMjJiN2UxNDYyZmI3ZmM3MDBkMmZhZWYxZWYzNjRkNzk1ZDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmnGJRfF+ggE008UOeZXTFsTbjUM
woUrRBbTvlZGZLA++8ZUSpKOujEqH2zC3my60u3P9uaLVPsG413+oYJKDwD1fRVT
eRQqozGH83tD/3jIoW/LfVjlPu9f7ytj+GwR9CSHob0jZnBHUt/gJ9VtEMj+QWFX
TYhkmojGg4zGHoE0MvfcaLsUm3W4IeIqCV88yAjDVnasp2ZDpldkFAeu47CLtjf5
r1A74s0Rs550rYCTzDQQFBjUSC5GUG3ckTe1xJkDB+Xx1MYvc8teuGj25qgTCauV
9+00zXpflR/doAuQ+dEaezaX3dgAxi/bo7CIyheOMp3b1Xkbkq5gFvNT3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFzAIrfhRi+3/HANL67x7zZNeV1aMB8GA1UdIwQY
MBaAFMRT9eIwQgvEpw0KYd47R9zaGo0OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEZQMTRqQkNDOFNuRFFwaDNqdEgzTm9halE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80ODc1NjItZDE3MS00Njg2LTg1Njkt
ZTZjZjE3Y2RkYTRmLzEveEZQMTRqQkNDOFNuRFFwaDNqdEgzTm9halE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS80ODc1NjItZDE3MS00Njg2LTg1NjktZTZjZjE3Y2RkYTRm
LzEveEZQMTRqQkNDOFNuRFFwaDNqdEgzTm9halE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbsJVYLyj
WVz/O+h3pS1st5n9OR3V9gYMD9gESZU1o/sBDJ69uJY1z0GRKvb6cyiXk5I83ICT
SRpgnpEOYMHSvIAn3OCefOG5etd9CB7NqqYLTakdA0Pp0knoh9uI7wjTubTS+t8Y
CEkWbRI1goa4xJgToiXvvu6oBWAsu2fvm8nSYr26jpFHWwcfrQRgaAcLesXXmHHY
o/z8uJq8soyZ+JaP4nMPEJu+oT9vK36UQRpNucpqUe/Jv262GhqwcjcjcGxugu2K
92dL2vcF8w/6oIhRoX/XcKblkENwZ2SyCMZMWzw+/u+ZDe6BTGuvy8ILTcuAlaTc
rYOuauPxmCFpEg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:12:19 2026 by rpki-client