Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
File: Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft (raw, json)
Hash identifier: gSIX3nqKZnd7cPvAJHS56t7pwN9+6d8FwNPdPE00m4M=
Subject key identifier: BC:24:11:E0:95:9B:C9:A9:7F:BC:06:58:78:D0:F3:44:0C:34:60:86
Authority key identifier: 5D:ED:D6:B0:E3:6F:4B:D8:F1:D5:7E:26:CC:1C:2D:18:C6:99:3C:04
Certificate issuer: /CN=5dedd6b0e36f4bd8f1d57e26cc1c2d18c6993c04
Certificate serial: 019D25F12C4539322312A7B833DAD0A5CBCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
Manifest number: 0E6B
Signing time: Wed 25 Mar 2026 17:00:55 +0000
Manifest this update: Wed 25 Mar 2026 17:00:55 +0000
Manifest next update: Thu 26 Mar 2026 17:00:55 +0000
Files and hashes: 1: Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl (hash: ZtGmhsmHCRMLD3L5DrolF3EPZSyQjWddi66vwKWVuWs=)
2: qvDZMPgKFD7gi5Q44AZYhiZ--Ig.roa (hash: cmgO04c2D3BrRGS4WvX7cY6GozgnK7NT0TwhEs+74Kg=)
3: uKoRxEv3mOldDEo6fDHAk9yg0S8.roa (hash: 4hEUcG83yfbcyvkKT/jDeEV25ZBIHXMO6CdGZ2yW5wU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:2c:45:39:32:23:12:a7:b8:33:da:d0:a5:cb:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dedd6b0e36f4bd8f1d57e26cc1c2d18c6993c04
Validity
Not Before: Mar 25 17:00:55 2026 GMT
Not After : Mar 26 17:00:55 2026 GMT
Subject: CN=bc2411e0959bc9a97fbc065878d0f3440c346086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cc:62:bf:31:13:45:c3:b3:ee:2a:42:63:a2:
0f:62:6e:04:2d:fb:77:95:0d:26:f0:97:57:53:ff:
f5:86:37:f0:65:d5:44:78:9b:7d:76:e9:5a:0e:ab:
25:23:0b:bf:ba:fb:c7:6e:f4:bb:4b:fc:b8:5e:ff:
02:29:c1:b2:36:23:62:d8:16:79:3b:f9:05:8f:9b:
5f:3a:26:bd:c1:74:75:f9:c4:f3:65:18:ad:7d:36:
d5:4e:fe:c8:a3:c7:f3:6a:86:2e:20:b9:6a:4b:15:
44:7b:75:bf:a5:57:42:0c:7c:09:de:69:55:64:79:
62:d1:ba:08:d6:aa:52:dd:27:c3:bb:f6:a7:a4:d7:
c6:f4:de:9b:47:6d:d5:31:8b:29:33:26:90:40:f8:
ba:2f:a8:5a:ec:78:e7:6f:c4:05:de:e6:4b:4b:d6:
b5:a9:5c:8b:c7:14:dd:c9:54:9d:a1:74:b2:07:93:
5f:08:2c:1a:a1:7b:bf:2b:33:fe:6e:55:7e:91:f4:
fb:8e:e7:8e:e8:3f:19:a9:06:9b:7c:e4:04:bb:66:
94:e7:fb:f0:40:58:a2:93:e2:95:76:6e:0e:06:a4:
2e:22:7b:b5:46:0e:51:c8:bd:78:9a:bb:f9:f4:15:
60:fe:c8:c6:68:69:b0:fd:a4:25:cc:36:d6:33:6b:
ef:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:24:11:E0:95:9B:C9:A9:7F:BC:06:58:78:D0:F3:44:0C:34:60:86
X509v3 Authority Key Identifier:
keyid:5D:ED:D6:B0:E3:6F:4B:D8:F1:D5:7E:26:CC:1C:2D:18:C6:99:3C:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:a4:f1:bc:1d:ca:50:a6:25:3a:61:bb:46:6a:82:30:bd:97:
b7:ec:b6:5b:bc:e1:b6:72:5b:18:8f:52:32:92:2f:fd:d1:e3:
e1:cc:62:18:be:0a:a8:4f:2d:12:59:f9:2d:be:67:44:68:f1:
1a:ad:03:08:3d:35:73:d0:38:57:0c:45:f7:e6:2f:6f:5c:37:
24:6b:3a:bb:ca:33:9f:14:50:e2:6a:b7:2b:7c:2e:f1:ff:d6:
de:22:7b:6e:a0:83:f4:68:04:1d:77:db:c1:82:37:d7:ad:57:
57:9b:4f:19:c0:8f:8f:e2:d4:af:8e:6d:69:33:6c:2c:d7:12:
2f:66:61:90:c3:e6:99:e5:64:0b:1e:65:a9:80:ab:0d:09:1b:
be:51:be:aa:3e:27:72:5e:89:f4:af:13:02:7c:f0:63:6a:26:
76:f3:fa:9a:79:c5:7e:ea:c1:c9:7f:e1:4b:8c:79:cf:65:a2:
ab:fa:ad:f0:4a:94:69:92:cf:91:99:b8:7f:56:c7:a4:ca:ac:
00:5a:e4:df:24:02:ee:1b:fb:f5:03:0c:1d:3d:21:8d:f8:92:
48:93:73:77:43:0f:73:de:dd:95:73:30:41:73:2a:46:f9:c4:
ba:be:53:fb:4b:f3:a9:f4:71:4c:18:c2:14:a5:25:7f:6c:b2:
51:09:d6:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8SxFOTIjEqe4M9rQpcvLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZWRkNmIwZTM2ZjRiZDhmMWQ1N2UyNmNjMWMyZDE4YzY5
OTNjMDQwHhcNMjYwMzI1MTcwMDU1WhcNMjYwMzI2MTcwMDU1WjAzMTEwLwYDVQQD
EyhiYzI0MTFlMDk1OWJjOWE5N2ZiYzA2NTg3OGQwZjM0NDBjMzQ2MDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8xivzETRcOz7ipCY6IPYm4ELft3
lQ0m8JdXU//1hjfwZdVEeJt9dulaDqslIwu/uvvHbvS7S/y4Xv8CKcGyNiNi2BZ5
O/kFj5tfOia9wXR1+cTzZRitfTbVTv7Io8fzaoYuILlqSxVEe3W/pVdCDHwJ3mlV
ZHli0boI1qpS3SfDu/anpNfG9N6bR23VMYspMyaQQPi6L6ha7Hjnb8QF3uZLS9a1
qVyLxxTdyVSdoXSyB5NfCCwaoXu/KzP+blV+kfT7jueO6D8ZqQabfOQEu2aU5/vw
QFiik+KVdm4OBqQuInu1Rg5RyL14mrv59BVg/sjGaGmw/aQlzDbWM2vvvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLwkEeCVm8mpf7wGWHjQ80QMNGCGMB8GA1UdIwQY
MBaAFF3t1rDjb0vY8dV+JswcLRjGmTwEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGUzV3NPTnZTOWp4MVg0bXpCd3RHTWFaUEFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9mMDNjZGMtMjk0NS00MDhjLTg4ODkt
YzY5ODcxZjVkMzA1LzEvWGUzV3NPTnZTOWp4MVg0bXpCd3RHTWFaUEFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9mMDNjZGMtMjk0NS00MDhjLTg4ODktYzY5ODcxZjVkMzA1
LzEvWGUzV3NPTnZTOWp4MVg0bXpCd3RHTWFaUEFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl6TxvB3K
UKYlOmG7RmqCML2Xt+y2W7zhtnJbGI9SMpIv/dHj4cxiGL4KqE8tEln5Lb5nRGjx
Gq0DCD01c9A4VwxF9+Yvb1w3JGs6u8oznxRQ4mq3K3wu8f/W3iJ7bqCD9GgEHXfb
wYI3161XV5tPGcCPj+LUr45taTNsLNcSL2ZhkMPmmeVkCx5lqYCrDQkbvlG+qj4n
cl6J9K8TAnzwY2omdvP6mnnFfurByX/hS4x5z2Wiq/qt8EqUaZLPkZm4f1bHpMqs
AFrk3yQC7hv79QMMHT0hjfiSSJNzd0MPc97dlXMwQXMqRvnEur5T+0vzqfRxTBjC
FKUlf2yyUQnWKw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:26 2026 by rpki-client