Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
File: xe6WP4Kg-whm1CVTszeFl9nz72g.mft (raw, json)
Hash identifier: H1N+swleJBDETsZTeqa8ZD+gQW0uycFapc35WSueM6Q=
Subject key identifier: CE:CD:D4:E3:A8:CF:03:4B:90:68:E8:4B:8E:8F:59:27:A4:1F:EB:A2
Authority key identifier: C5:EE:96:3F:82:A0:FB:08:66:D4:25:53:B3:37:85:97:D9:F3:EF:68
Certificate issuer: /CN=c5ee963f82a0fb0866d42553b3378597d9f3ef68
Certificate serial: 019D25F229D2256C73A825343B8C43E505DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
Manifest number: 142C
Signing time: Wed 25 Mar 2026 17:02:00 +0000
Manifest this update: Wed 25 Mar 2026 17:02:00 +0000
Manifest next update: Thu 26 Mar 2026 17:02:00 +0000
Files and hashes: 1: Cw_CJ5OIoHGbk_LBH69lh1CZovM.roa (hash: yuy/Yr+PAF0sScRAiUSYVsMjWEF5R7acxEyN+jKmOa4=)
2: GUYAfSyAe_7KoSF2zNniTR86G3o.asa (hash: QJFS4MThTD8AoeTU4o5zhEg8FJRAThUcCKNx9GenoTY=)
3: e1vkUB4hW3aB_edwhYTI6Nlcy0A.roa (hash: izbr6DXAEGnVX5rmj+RODLmoS4n5mXvbk+24OOXQV7s=)
4: xe6WP4Kg-whm1CVTszeFl9nz72g.crl (hash: 4RdpD3UIMlxGaU4qLFhUH3koXm6GxF2c0wQ42Z9Bhu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f2:29:d2:25:6c:73:a8:25:34:3b:8c:43:e5:05:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ee963f82a0fb0866d42553b3378597d9f3ef68
Validity
Not Before: Mar 25 17:02:00 2026 GMT
Not After : Mar 26 17:02:00 2026 GMT
Subject: CN=cecdd4e3a8cf034b9068e84b8e8f5927a41feba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3a:18:62:9f:45:90:3e:81:a7:9c:10:e8:00:
12:bd:17:2c:b8:db:0f:c8:35:ae:c1:ef:40:48:4a:
a1:25:72:55:a4:d9:dd:c0:7e:ff:2d:00:ed:bc:da:
ba:f0:16:15:70:21:f1:22:5e:01:f0:70:45:2e:29:
0c:cd:12:4e:14:e3:7e:82:e3:ad:fd:66:c5:37:18:
63:54:df:f0:2f:cd:3f:fa:74:95:23:0b:01:90:0e:
f9:6b:e1:c6:f6:6d:b1:d8:9c:46:ee:67:84:3e:90:
bd:be:99:cf:43:21:b6:3a:0b:61:4d:07:c7:7f:4a:
0d:05:e5:d7:b4:3f:5e:b7:f0:b6:e6:f7:ba:94:b5:
99:f7:28:41:7f:3d:f8:ed:32:2b:06:0b:2d:db:81:
96:b9:f6:73:92:44:28:54:fb:1e:b7:c4:00:c3:f5:
1b:cb:ba:66:f6:cf:dc:fd:7e:db:be:71:2e:f4:cb:
12:bb:48:8f:04:b7:ef:9e:e1:c0:40:46:8d:40:95:
48:09:ad:f8:f5:2b:de:7a:e6:47:bb:ee:07:58:fd:
09:76:10:b9:d7:59:4a:b3:46:60:29:9e:79:1e:54:
0b:64:c7:80:12:0b:1e:07:89:a2:f2:7f:09:61:00:
d1:ea:28:2f:fa:ee:8c:c9:7e:7d:c4:23:2f:7f:38:
99:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:CD:D4:E3:A8:CF:03:4B:90:68:E8:4B:8E:8F:59:27:A4:1F:EB:A2
X509v3 Authority Key Identifier:
keyid:C5:EE:96:3F:82:A0:FB:08:66:D4:25:53:B3:37:85:97:D9:F3:EF:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:5e:59:85:8b:29:30:2b:19:ca:6d:e8:fb:31:63:58:15:07:
c5:fe:26:30:29:8b:27:a7:0b:09:b8:1a:7f:da:72:6d:b2:48:
a9:8b:b9:f4:49:33:83:de:b1:d6:36:3f:1e:57:23:78:5b:93:
07:07:80:bb:80:aa:5a:35:50:f3:ac:d2:71:cf:4c:05:53:ae:
7f:94:6c:01:5e:68:1e:73:96:65:9c:ff:f8:7f:e6:13:5f:63:
33:db:9c:19:cd:b0:ec:29:74:00:59:f1:cb:6a:51:98:26:87:
b5:a4:92:d1:c7:fd:bc:d9:81:fb:50:88:61:95:33:70:c2:7c:
b6:7f:f7:ea:40:30:79:8d:cd:41:7b:15:bd:91:7d:bf:9f:c5:
fc:2f:c0:29:5a:2e:97:60:ad:1a:1c:8f:6b:ef:01:62:e9:f7:
93:22:38:96:34:72:3d:40:37:56:b8:17:51:99:b6:fd:3b:73:
89:6b:ce:bf:c0:02:6c:74:4f:c2:73:33:46:db:3e:13:6c:2c:
0f:20:af:33:8b:18:f2:2b:56:53:e8:df:e5:a4:7a:35:76:c7:
54:52:39:6c:f2:4b:28:0d:e3:b2:f2:6c:5d:9f:98:f9:d0:41:
e8:7a:e6:15:47:2b:68:6c:d5:c2:de:96:50:a0:66:c7:53:95:
4b:40:32:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8inSJWxzqCU0O4xD5QXdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1ZWU5NjNmODJhMGZiMDg2NmQ0MjU1M2IzMzc4NTk3ZDlm
M2VmNjgwHhcNMjYwMzI1MTcwMjAwWhcNMjYwMzI2MTcwMjAwWjAzMTEwLwYDVQQD
EyhjZWNkZDRlM2E4Y2YwMzRiOTA2OGU4NGI4ZThmNTkyN2E0MWZlYmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zoYYp9FkD6Bp5wQ6AASvRcsuNsP
yDWuwe9ASEqhJXJVpNndwH7/LQDtvNq68BYVcCHxIl4B8HBFLikMzRJOFON+guOt
/WbFNxhjVN/wL80/+nSVIwsBkA75a+HG9m2x2JxG7meEPpC9vpnPQyG2OgthTQfH
f0oNBeXXtD9et/C25ve6lLWZ9yhBfz347TIrBgst24GWufZzkkQoVPset8QAw/Ub
y7pm9s/c/X7bvnEu9MsSu0iPBLfvnuHAQEaNQJVICa349SveeuZHu+4HWP0JdhC5
11lKs0ZgKZ55HlQLZMeAEgseB4mi8n8JYQDR6igv+u6MyX59xCMvfziZvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM7N1OOozwNLkGjoS46PWSekH+uiMB8GA1UdIwQY
MBaAFMXulj+CoPsIZtQlU7M3hZfZ8+9oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGU2V1A0S2ctd2htMUNWVHN6ZUZsOW56NzJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS84M2QyNDYtNzQwZC00YjAxLTkwMjAt
ZGI1YWE1NzdjM2FmLzEveGU2V1A0S2ctd2htMUNWVHN6ZUZsOW56NzJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS84M2QyNDYtNzQwZC00YjAxLTkwMjAtZGI1YWE1NzdjM2Fm
LzEveGU2V1A0S2ctd2htMUNWVHN6ZUZsOW56NzJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZl5ZhYsp
MCsZym3o+zFjWBUHxf4mMCmLJ6cLCbgaf9pybbJIqYu59Ekzg96x1jY/HlcjeFuT
BweAu4CqWjVQ86zScc9MBVOuf5RsAV5oHnOWZZz/+H/mE19jM9ucGc2w7Cl0AFnx
y2pRmCaHtaSS0cf9vNmB+1CIYZUzcMJ8tn/36kAweY3NQXsVvZF9v5/F/C/AKVou
l2CtGhyPa+8BYun3kyI4ljRyPUA3VrgXUZm2/TtziWvOv8ACbHRPwnMzRts+E2ws
DyCvM4sY8itWU+jf5aR6NXbHVFI5bPJLKA3jsvJsXZ+Y+dBB6HrmFUcraGzVwt6W
UKBmx1OVS0Ay+w==
-----END CERTIFICATE-----
Generated at Wed Mar 25 22:39:26 2026 by rpki-client