Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft
File: Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft (raw, json)
Hash identifier: JnPgvtUuMKWfrWFbOP1lnvVZ72pR/aynO2iUc6K663o=
Subject key identifier: 2C:90:00:11:E4:10:A0:BE:43:EA:98:F8:AC:0F:92:B9:1C:1C:A9:15
Authority key identifier: 5E:CE:10:F1:3C:46:80:69:26:A6:79:46:CC:6A:11:02:AA:09:03:1A
Certificate issuer: /CN=5ece10f13c46806926a67946cc6a1102aa09031a
Certificate serial: 019D28F2369D24C3103BE0691284C82298C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 07:00:55 +0000
Manifest this update: Thu 26 Mar 2026 07:00:55 +0000
Manifest next update: Fri 27 Mar 2026 07:00:55 +0000
Files and hashes: 1: RM6TUZSUSaasZ-dBQ85053ksR-0.roa (hash: v5GrLhG4mT6P4v3eZCOBY4Q0WYXL2CD9LeoqtKdCqz0=)
2: Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.crl (hash: mdI5hTP0NJ89rggZTEvy1ebbP/EgrDJdTGTUuZR8+yQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:36:9d:24:c3:10:3b:e0:69:12:84:c8:22:98:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ece10f13c46806926a67946cc6a1102aa09031a
Validity
Not Before: Mar 26 07:00:55 2026 GMT
Not After : Mar 27 07:00:55 2026 GMT
Subject: CN=2c900011e410a0be43ea98f8ac0f92b91c1ca915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:72:d7:22:17:b9:d6:69:8c:9c:7d:9c:13:0c:
53:97:65:97:06:25:d7:88:6a:31:e4:74:db:c2:b1:
b7:e9:d3:21:33:d1:33:5b:ea:1c:9b:f5:60:39:81:
8e:00:96:62:06:0f:b7:17:9f:29:83:b0:11:c8:63:
e6:34:6c:10:d3:71:a0:c2:3d:23:1c:4f:8f:80:e2:
be:f7:c1:a3:a5:09:5c:c6:46:72:57:77:f9:51:c5:
34:0a:8d:58:44:17:db:b0:bc:30:90:61:c1:04:59:
c3:bd:60:76:ce:63:68:54:7e:74:80:97:7c:e5:af:
83:01:a9:5c:fc:43:36:d3:0c:2a:7b:fa:d0:8f:55:
6d:18:f7:6d:90:47:1a:50:f1:78:40:42:00:1f:48:
2f:f2:42:53:98:b7:ca:f2:02:e4:95:46:d9:b5:35:
66:b0:ff:26:73:a5:c6:bb:fc:0f:e1:87:c1:e9:a4:
78:01:7b:6d:f3:c1:a8:bb:eb:19:71:5f:3c:d6:2e:
89:28:37:19:77:1c:99:91:1d:03:d3:00:c9:25:f6:
6e:13:27:e9:9a:d9:d7:2e:3f:92:45:63:b6:52:95:
9a:d8:41:0d:25:f5:1c:9e:3d:85:cf:21:d5:cb:37:
0d:60:14:3e:34:7d:a2:1a:eb:31:44:12:4e:1b:81:
01:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:90:00:11:E4:10:A0:BE:43:EA:98:F8:AC:0F:92:B9:1C:1C:A9:15
X509v3 Authority Key Identifier:
keyid:5E:CE:10:F1:3C:46:80:69:26:A6:79:46:CC:6A:11:02:AA:09:03:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:1f:bd:e8:17:29:96:0d:c3:13:21:47:f8:1c:d8:5e:50:75:
18:4a:5c:c7:d4:cb:10:59:7d:a7:cb:75:a6:9f:bf:38:d8:5e:
d9:e6:dc:27:b8:07:d5:7b:ec:2f:fc:3a:ff:ca:9e:d0:1f:41:
32:27:36:5f:74:47:b3:3c:78:ac:d3:f9:6b:ce:da:f0:67:aa:
0f:7c:18:7f:24:e0:ba:e4:73:b4:15:d1:6a:44:dc:16:a5:8c:
90:cc:1e:38:e4:b1:ac:ca:a3:86:65:b6:73:95:98:40:8f:fd:
d5:7c:cc:a3:25:57:d2:7e:1e:2a:c6:a0:e6:c5:a6:c4:ee:15:
24:31:a4:b4:d4:3b:92:22:5e:23:c0:88:9e:04:70:4f:42:3a:
2a:b5:45:c0:2f:29:1e:55:ed:7e:6d:32:30:a7:7d:05:59:3c:
32:04:ce:c7:d3:67:aa:ba:d2:07:ad:60:14:46:bc:7f:1e:a4:
40:33:28:b8:83:bb:83:be:a5:ca:47:0a:6c:24:cb:ed:fe:49:
3a:32:be:bf:ab:6b:34:ac:55:f8:51:a8:78:46:9b:8c:1e:4d:
23:f2:87:35:bf:30:2b:b5:5e:d7:cc:a2:6a:38:1e:1e:be:ce:
91:19:24:50:46:ec:7d:7e:a1:c7:2b:50:9e:ac:ad:66:f8:bf:
64:9c:62:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8jadJMMQO+BpEoTIIpjHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlY2UxMGYxM2M0NjgwNjkyNmE2Nzk0NmNjNmExMTAyYWEw
OTAzMWEwHhcNMjYwMzI2MDcwMDU1WhcNMjYwMzI3MDcwMDU1WjAzMTEwLwYDVQQD
EygyYzkwMDAxMWU0MTBhMGJlNDNlYTk4ZjhhYzBmOTJiOTFjMWNhOTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHLXIhe51mmMnH2cEwxTl2WXBiXX
iGox5HTbwrG36dMhM9EzW+ocm/VgOYGOAJZiBg+3F58pg7ARyGPmNGwQ03Ggwj0j
HE+PgOK+98GjpQlcxkZyV3f5UcU0Co1YRBfbsLwwkGHBBFnDvWB2zmNoVH50gJd8
5a+DAalc/EM20wwqe/rQj1VtGPdtkEcaUPF4QEIAH0gv8kJTmLfK8gLklUbZtTVm
sP8mc6XGu/wP4YfB6aR4AXtt88Gou+sZcV881i6JKDcZdxyZkR0D0wDJJfZuEyfp
mtnXLj+SRWO2UpWa2EENJfUcnj2FzyHVyzcNYBQ+NH2iGusxRBJOG4EBBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCyQABHkEKC+Q+qY+KwPkrkcHKkVMB8GA1UdIwQY
MBaAFF7OEPE8RoBpJqZ5RsxqEQKqCQMaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHM0UThUeEdnR2ttcG5sR3pHb1JBcW9KQXhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9hZTMzMjMtMGE0OS00ZDdhLTg5NTUt
YjZmN2FlZDg1NmMwLzEvWHM0UThUeEdnR2ttcG5sR3pHb1JBcW9KQXhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9hZTMzMjMtMGE0OS00ZDdhLTg5NTUtYjZmN2FlZDg1NmMw
LzEvWHM0UThUeEdnR2ttcG5sR3pHb1JBcW9KQXhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0x+96Bcp
lg3DEyFH+BzYXlB1GEpcx9TLEFl9p8t1pp+/ONhe2ebcJ7gH1XvsL/w6/8qe0B9B
Mic2X3RHszx4rNP5a87a8GeqD3wYfyTguuRztBXRakTcFqWMkMweOOSxrMqjhmW2
c5WYQI/91XzMoyVX0n4eKsag5sWmxO4VJDGktNQ7kiJeI8CIngRwT0I6KrVFwC8p
HlXtfm0yMKd9BVk8MgTOx9NnqrrSB61gFEa8fx6kQDMouIO7g76lykcKbCTL7f5J
OjK+v6trNKxV+FGoeEabjB5NI/KHNb8wK7Ve18yiajgeHr7OkRkkUEbsfX6hxytQ
nqytZvi/ZJxiXg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:32:15 2026 by rpki-client