Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.mft
File: xrr44wiCF-S3wMIxcY-rkJsYgeQ.mft (raw, json)
Hash identifier: PlDEKArBukJm6SqB86uV9UuligvLESdBf8Ldf2dCGqo=
Subject key identifier: 72:35:D7:A2:B8:EF:AB:0D:AD:67:23:FF:B5:9C:48:79:2A:14:DB:E0
Authority key identifier: C6:BA:F8:E3:08:82:17:E4:B7:C0:C2:31:71:8F:AB:90:9B:18:81:E4
Certificate issuer: /CN=c6baf8e3088217e4b7c0c231718fab909b1881e4
Certificate serial: 019D25BA8C80D0967EF0BDE0157E959A8328
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrr44wiCF-S3wMIxcY-rkJsYgeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.mft
Manifest number: FB
Signing time: Wed 25 Mar 2026 16:01:15 +0000
Manifest this update: Wed 25 Mar 2026 16:01:15 +0000
Manifest next update: Thu 26 Mar 2026 16:01:15 +0000
Files and hashes: 1: 7kloanVHOYaHRlhEsLAGIVGi_rY.asa (hash: 8NXppGEeLQlW5S79hnELA4YUQ5d6IwXskVcbthg2tt4=)
2: YfYnV8dROfvt9YlNJZwwIzCuaVk.roa (hash: 8h9Qzp6OMQv/b+8I/FjbB7FBpfDNca2A4Lb8PfnMIP8=)
3: xrr44wiCF-S3wMIxcY-rkJsYgeQ.crl (hash: tQft8zA+ISMhMm+sEBg4hPod1aXPR5LndCasNOVQiA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xrr44wiCF-S3wMIxcY-rkJsYgeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:8c:80:d0:96:7e:f0:bd:e0:15:7e:95:9a:83:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6baf8e3088217e4b7c0c231718fab909b1881e4
Validity
Not Before: Mar 25 16:01:15 2026 GMT
Not After : Mar 26 16:01:15 2026 GMT
Subject: CN=7235d7a2b8efab0dad6723ffb59c48792a14dbe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:77:f1:ba:43:a2:3e:be:5f:79:bc:b0:21:0b:
8b:34:7e:e4:4d:e4:7a:1e:65:dd:76:41:1a:21:f2:
4b:90:98:47:ac:54:a3:7c:15:8f:c2:51:3e:64:7f:
06:a4:5b:67:54:8a:c9:19:d1:9d:a3:66:36:23:05:
a0:de:fd:d8:b0:09:81:62:9c:64:47:78:d0:79:e6:
77:2b:e1:da:0b:18:f0:f6:ff:bc:23:8c:0a:96:bb:
ce:6e:72:1b:0d:26:59:23:7f:fa:10:eb:65:f9:b8:
2b:35:c4:eb:16:d0:97:82:bd:15:34:c3:5c:91:5d:
25:9d:c9:6c:39:a5:0d:5c:6b:c1:b1:9c:c9:65:c2:
88:6f:80:8f:92:c1:ae:1c:ed:5a:17:cd:64:12:ad:
81:8b:54:0f:00:24:19:9f:65:97:ac:82:50:c1:2f:
25:7d:1d:90:3d:d0:92:3d:66:69:b4:03:02:2e:8b:
07:e9:c9:d0:5a:04:64:4d:2a:3e:21:5d:08:84:ad:
c3:70:66:07:f5:4e:ed:f2:a6:7b:8d:d9:36:d4:10:
be:e1:d8:03:41:2a:46:91:84:2e:e6:cf:38:70:57:
ef:f7:59:95:bb:c1:5d:dd:71:76:44:0c:d2:71:7f:
62:bd:7c:c6:7b:c0:70:5f:65:d5:18:8f:8f:79:12:
15:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:35:D7:A2:B8:EF:AB:0D:AD:67:23:FF:B5:9C:48:79:2A:14:DB:E0
X509v3 Authority Key Identifier:
keyid:C6:BA:F8:E3:08:82:17:E4:B7:C0:C2:31:71:8F:AB:90:9B:18:81:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrr44wiCF-S3wMIxcY-rkJsYgeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:aa:a5:fd:78:87:93:ad:45:b2:4d:ad:b5:65:22:12:ba:9c:
b2:15:1f:d9:9e:4c:27:c1:20:97:b0:ed:eb:b7:ca:34:56:14:
62:dc:63:93:a5:c0:c0:c2:bf:4f:89:81:d7:10:64:95:4f:55:
fd:84:70:2b:08:26:2c:71:ea:92:dd:1b:03:42:ac:41:cc:0b:
c6:9a:40:25:22:c8:4c:11:40:e5:10:a2:f1:47:33:9d:88:06:
b8:c0:e5:0e:01:91:89:18:ac:a7:88:ff:d1:4f:a9:b4:41:8e:
f4:1c:cb:b1:08:73:28:35:47:ef:31:ac:73:7e:8d:b7:83:c1:
30:57:99:1d:6e:4a:5c:99:7b:b9:92:9d:69:ad:8c:ff:5d:bf:
ea:3f:de:fe:d3:55:bf:a3:a4:f6:8d:1c:77:99:18:ba:c4:a4:
b3:de:39:16:30:30:c3:10:07:2c:ea:b1:1d:4c:1a:d1:a0:5a:
43:8c:5c:24:95:ad:b0:76:35:92:95:1c:ac:e0:4d:13:8f:32:
db:9d:22:6b:95:cf:13:77:d8:0f:65:98:05:de:a2:e5:27:b8:
dd:e2:8f:62:df:7e:d7:c5:f7:1d:e1:a1:39:c8:d0:57:e9:ec:
67:10:9d:e1:b6:24:9c:e1:4a:4b:82:6f:cb:1a:2d:a8:08:f1:
7f:3d:c9:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0luoyA0JZ+8L3gFX6VmoMoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YmFmOGUzMDg4MjE3ZTRiN2MwYzIzMTcxOGZhYjkwOWIx
ODgxZTQwHhcNMjYwMzI1MTYwMTE1WhcNMjYwMzI2MTYwMTE1WjAzMTEwLwYDVQQD
Eyg3MjM1ZDdhMmI4ZWZhYjBkYWQ2NzIzZmZiNTljNDg3OTJhMTRkYmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXfxukOiPr5febywIQuLNH7kTeR6
HmXddkEaIfJLkJhHrFSjfBWPwlE+ZH8GpFtnVIrJGdGdo2Y2IwWg3v3YsAmBYpxk
R3jQeeZ3K+HaCxjw9v+8I4wKlrvObnIbDSZZI3/6EOtl+bgrNcTrFtCXgr0VNMNc
kV0lnclsOaUNXGvBsZzJZcKIb4CPksGuHO1aF81kEq2Bi1QPACQZn2WXrIJQwS8l
fR2QPdCSPWZptAMCLosH6cnQWgRkTSo+IV0IhK3DcGYH9U7t8qZ7jdk21BC+4dgD
QSpGkYQu5s84cFfv91mVu8Fd3XF2RAzScX9ivXzGe8BwX2XVGI+PeRIVLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHI116K476sNrWcj/7WcSHkqFNvgMB8GA1UdIwQY
MBaAFMa6+OMIghfkt8DCMXGPq5CbGIHkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHJyNDR3aUNGLVMzd01JeGNZLXJrSnNZZ2VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS84NzNkZDAtYWY4OC00YmU1LTk4NjEt
ZmVhNWVmZjM3NzI0LzEveHJyNDR3aUNGLVMzd01JeGNZLXJrSnNZZ2VRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS84NzNkZDAtYWY4OC00YmU1LTk4NjEtZmVhNWVmZjM3NzI0
LzEveHJyNDR3aUNGLVMzd01JeGNZLXJrSnNZZ2VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeKql/XiH
k61Fsk2ttWUiErqcshUf2Z5MJ8Egl7Dt67fKNFYUYtxjk6XAwMK/T4mB1xBklU9V
/YRwKwgmLHHqkt0bA0KsQcwLxppAJSLITBFA5RCi8UcznYgGuMDlDgGRiRisp4j/
0U+ptEGO9BzLsQhzKDVH7zGsc36Nt4PBMFeZHW5KXJl7uZKdaa2M/12/6j/e/tNV
v6Ok9o0cd5kYusSks945FjAwwxAHLOqxHUwa0aBaQ4xcJJWtsHY1kpUcrOBNE48y
250ia5XPE3fYD2WYBd6i5Se43eKPYt9+18X3HeGhOcjQV+nsZxCd4bYknOFKS4Jv
yxotqAjxfz3JSg==
-----END CERTIFICATE-----
Generated at Wed Mar 25 21:27:38 2026 by rpki-client