Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
File: xLG0WKv3l97cxmHlSmhfZRg0tdE.mft (raw, json)
Hash identifier: 6bvb86QQyb9vadfSrN09gemq4KtPs/F6KbQNE5ZsSz8=
Subject key identifier: AB:70:CF:EA:1E:AA:63:80:7D:D0:CC:1D:D1:AF:85:94:36:C6:65:21
Authority key identifier: C4:B1:B4:58:AB:F7:97:DE:DC:C6:61:E5:4A:68:5F:65:18:34:B5:D1
Certificate issuer: /CN=c4b1b458abf797dedcc661e54a685f651834b5d1
Certificate serial: 019D29CEA9A553F0D7A8E9FCC0E6520647C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
Manifest number: 158F
Signing time: Thu 26 Mar 2026 11:01:42 +0000
Manifest this update: Thu 26 Mar 2026 11:01:42 +0000
Manifest next update: Fri 27 Mar 2026 11:01:42 +0000
Files and hashes: 1: Vu85Nu-HoLeRv_52CEznI8bQbss.roa (hash: c6ty/wCdDrBOcI9jUvVNl5APK8YZjil4x8ZlNRshHvo=)
2: hwEYkWKezFU1S6DS8A0TF6JXUos.roa (hash: dJKRSf7F67Dm6ZGKlb7G6KP8NQfxdE863RZT2JIwE9k=)
3: lo3R5w_kTel81Z1irkIbzAD6F8Q.roa (hash: PuU1Xdn3kY1LjMwZS3Qaqe5MniakxiQ+Y+f6yTPGRCQ=)
4: nb0hXlBPQhPWTuMEqZzkSxkwpXI.roa (hash: 55gzjqx5n4gyySLdEurC8vvFbXFEosab3sYhqOZ+WA8=)
5: xLG0WKv3l97cxmHlSmhfZRg0tdE.crl (hash: QP6nMbmzOrxGLXadiaSvp0/VpCSgj2gKl6eb70f/8co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:a9:a5:53:f0:d7:a8:e9:fc:c0:e6:52:06:47:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b1b458abf797dedcc661e54a685f651834b5d1
Validity
Not Before: Mar 26 11:01:42 2026 GMT
Not After : Mar 27 11:01:42 2026 GMT
Subject: CN=ab70cfea1eaa63807dd0cc1dd1af859436c66521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f1:8f:ed:45:b7:1c:b0:ea:d7:04:ac:5f:79:
24:8d:38:34:95:c1:19:57:2a:a0:fd:08:46:a5:56:
f5:05:9a:d3:54:bb:b6:e6:19:4e:b6:91:5c:68:26:
e0:96:2c:19:38:b7:04:ae:e0:76:64:bb:3f:1c:9c:
61:e7:2d:a0:be:7d:19:42:b8:c0:20:42:44:84:2d:
d5:a0:e1:09:fe:47:fc:49:08:1f:44:21:12:68:11:
4b:68:24:96:e6:04:61:ca:95:b4:67:49:00:dd:9e:
ad:05:dc:fa:29:4b:73:8b:c2:ca:c6:c1:77:72:64:
68:3c:ba:26:ac:81:d0:54:b8:c0:fa:8d:f7:4c:0d:
47:fd:24:54:6d:6c:67:40:21:0c:b9:11:f3:d5:bc:
b9:f0:19:5c:3f:a8:16:80:cc:1c:f4:eb:a0:e6:5a:
3e:98:c8:c3:41:e8:82:ac:2f:f1:4a:13:fc:0b:ee:
18:ca:16:49:9e:6a:be:af:d6:23:3b:93:00:0a:d1:
84:95:0d:07:63:99:85:7a:c0:2f:20:dc:ad:b6:ee:
85:5f:d9:6d:f1:d9:bb:87:41:6d:6f:57:67:ed:7d:
66:80:76:8f:e8:9c:6f:df:bc:8c:7b:c3:d9:d1:1e:
51:27:ad:a4:cd:cd:db:2b:eb:88:a1:3b:60:68:07:
32:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:70:CF:EA:1E:AA:63:80:7D:D0:CC:1D:D1:AF:85:94:36:C6:65:21
X509v3 Authority Key Identifier:
keyid:C4:B1:B4:58:AB:F7:97:DE:DC:C6:61:E5:4A:68:5F:65:18:34:B5:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:5c:24:c6:57:d9:fb:f5:0f:cf:0d:5b:2f:cb:6c:76:a7:aa:
0e:29:4c:eb:2a:58:b3:35:57:62:49:f5:34:20:7e:04:e1:d1:
45:b3:57:22:7d:a1:07:f8:64:a9:ff:c7:b7:b0:58:87:05:d5:
cd:37:17:fd:68:6b:6b:47:b5:e4:88:f7:ce:15:ef:5f:6c:30:
93:ec:50:0d:40:b4:67:d8:67:4b:7f:d3:d2:8c:3f:4b:c3:c2:
7f:07:62:05:80:8d:a6:c0:1e:59:77:ac:76:ec:1e:66:39:1c:
32:9b:b3:50:f1:d7:f9:f0:91:8d:df:b2:93:1c:0a:cc:a7:f1:
90:29:46:5d:07:0f:e5:96:da:3e:4c:5e:b4:d6:d5:2e:9d:6f:
7a:27:38:39:df:0c:30:d7:9d:89:e2:24:df:96:7c:91:92:ba:
20:44:5a:7f:3d:fc:48:7b:c3:a7:3c:98:f9:9d:ec:42:42:10:
48:84:05:6d:a0:c3:f1:99:0d:1e:9f:4d:ce:5d:98:a6:f5:d3:
6d:6c:f0:91:60:3e:d9:e3:30:2b:75:e9:df:e2:88:ae:46:8c:
20:ec:53:a0:b6:c4:26:43:58:7d:93:ec:3c:10:a0:23:59:14:
74:13:a1:3f:ce:22:6d:e3:e4:f8:1e:c9:91:c7:45:e9:eb:e7:
d2:ed:a2:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pzqmlU/DXqOn8wOZSBkfAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0YjFiNDU4YWJmNzk3ZGVkY2M2NjFlNTRhNjg1ZjY1MTgz
NGI1ZDEwHhcNMjYwMzI2MTEwMTQyWhcNMjYwMzI3MTEwMTQyWjAzMTEwLwYDVQQD
EyhhYjcwY2ZlYTFlYWE2MzgwN2RkMGNjMWRkMWFmODU5NDM2YzY2NTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvGP7UW3HLDq1wSsX3kkjTg0lcEZ
Vyqg/QhGpVb1BZrTVLu25hlOtpFcaCbgliwZOLcEruB2ZLs/HJxh5y2gvn0ZQrjA
IEJEhC3VoOEJ/kf8SQgfRCESaBFLaCSW5gRhypW0Z0kA3Z6tBdz6KUtzi8LKxsF3
cmRoPLomrIHQVLjA+o33TA1H/SRUbWxnQCEMuRHz1by58BlcP6gWgMwc9Oug5lo+
mMjDQeiCrC/xShP8C+4YyhZJnmq+r9YjO5MACtGElQ0HY5mFesAvINyttu6FX9lt
8dm7h0Ftb1dn7X1mgHaP6Jxv37yMe8PZ0R5RJ62kzc3bK+uIoTtgaAcypQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKtwz+oeqmOAfdDMHdGvhZQ2xmUhMB8GA1UdIwQY
MBaAFMSxtFir95fe3MZh5UpoX2UYNLXRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveExHMFdLdjNsOTdjeG1IbFNtaGZaUmcwdGRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8yNjBlMjQtMjA0MC00YTVjLTkyY2Yt
ZWM1OGEzMTI1ZWU1LzEveExHMFdLdjNsOTdjeG1IbFNtaGZaUmcwdGRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8yNjBlMjQtMjA0MC00YTVjLTkyY2YtZWM1OGEzMTI1ZWU1
LzEveExHMFdLdjNsOTdjeG1IbFNtaGZaUmcwdGRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdlwkxlfZ
+/UPzw1bL8tsdqeqDilM6ypYszVXYkn1NCB+BOHRRbNXIn2hB/hkqf/Ht7BYhwXV
zTcX/Whra0e15Ij3zhXvX2wwk+xQDUC0Z9hnS3/T0ow/S8PCfwdiBYCNpsAeWXes
duweZjkcMpuzUPHX+fCRjd+ykxwKzKfxkClGXQcP5ZbaPkxetNbVLp1veic4Od8M
MNedieIk35Z8kZK6IERafz38SHvDpzyY+Z3sQkIQSIQFbaDD8ZkNHp9Nzl2YpvXT
bWzwkWA+2eMwK3Xp3+KIrkaMIOxToLbEJkNYfZPsPBCgI1kUdBOhP84ibePk+B7J
kcdF6evn0u2iJg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:19:19 2026 by rpki-client