Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
File: xt_rrIt1RREi-RT8oCTuH1QXyrs.mft (raw, json)
Hash identifier: ZHBBuZ8fMyqxeL8U2oUWLWQX+xb+NHzbZN/tRxzHdiI=
Subject key identifier: 89:73:CC:F6:41:99:C9:B5:DE:6E:36:43:FB:00:C9:D9:6A:9C:F1:9B
Authority key identifier: C6:DF:EB:AC:8B:75:45:11:22:F9:14:FC:A0:24:EE:1F:54:17:CA:BB
Certificate issuer: /CN=c6dfebac8b75451122f914fca024ee1f5417cabb
Certificate serial: 019D29290BA577770C6D6570AE10E4553A4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 08:00:48 +0000
Manifest this update: Thu 26 Mar 2026 08:00:48 +0000
Manifest next update: Fri 27 Mar 2026 08:00:48 +0000
Files and hashes: 1: LXxDQYBI8a2bgUeaO6Um5RWeWus.roa (hash: eyN2GAZCoXjAEdKeBKmxr2YBtVYHGsGtrSqCUIPElRo=)
2: xt_rrIt1RREi-RT8oCTuH1QXyrs.crl (hash: z7rc3Po2ae/MrhPCCfWKGLclhkQcNh9YqcIv5gOjU4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:0b:a5:77:77:0c:6d:65:70:ae:10:e4:55:3a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6dfebac8b75451122f914fca024ee1f5417cabb
Validity
Not Before: Mar 26 08:00:48 2026 GMT
Not After : Mar 27 08:00:48 2026 GMT
Subject: CN=8973ccf64199c9b5de6e3643fb00c9d96a9cf19b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:74:00:2a:06:c3:6a:ee:84:d9:9e:f7:c4:5a:
7c:bf:f6:75:e3:87:ce:e9:6f:92:59:03:fd:ab:b7:
15:a6:5d:53:9f:e1:10:1d:54:4d:33:b5:b4:c4:52:
d5:a1:88:6d:88:ec:ec:2c:ef:90:9c:5f:43:52:32:
2e:5d:f1:95:2a:19:02:2c:2a:42:2b:06:27:bc:a6:
a1:87:53:a0:99:9b:be:e6:94:5f:af:fc:eb:d8:a0:
e3:46:6a:6c:db:6c:15:0b:11:c2:8f:68:84:0a:ab:
ff:7a:7a:42:a2:a4:74:db:d8:da:59:c8:6f:b5:ce:
7b:08:36:2e:52:aa:89:1d:f5:d1:bd:f4:eb:af:71:
e7:6a:4b:0c:34:68:bd:8f:3a:c0:17:57:8b:e4:1c:
c6:f7:2d:c4:29:ab:b0:95:38:bf:56:e9:a6:f0:ea:
09:58:63:49:39:f8:7d:e8:0f:05:d8:48:fd:78:78:
a3:57:89:95:28:c5:10:18:5a:72:6d:60:97:3b:1a:
ae:b6:da:fd:37:fc:3a:a0:dc:64:bf:ce:44:69:62:
32:60:c5:71:31:60:a9:59:a0:62:b1:40:64:a2:c4:
bc:c9:61:9c:53:c5:00:22:98:32:a2:0d:a6:6b:c5:
f0:b4:af:37:09:c2:80:07:fc:1c:32:3e:30:c8:db:
ea:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:73:CC:F6:41:99:C9:B5:DE:6E:36:43:FB:00:C9:D9:6A:9C:F1:9B
X509v3 Authority Key Identifier:
keyid:C6:DF:EB:AC:8B:75:45:11:22:F9:14:FC:A0:24:EE:1F:54:17:CA:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ed:fc:b0:86:8b:e4:ad:ae:37:c0:b6:6b:58:97:ae:49:74:
cc:bc:1d:0b:57:8e:41:bd:18:28:e8:0c:3e:8c:e3:b3:ed:9f:
7f:43:be:76:1f:2c:19:e0:cc:e8:4d:39:76:91:37:79:b9:cb:
97:bd:c9:77:f3:ce:76:2c:75:bf:22:68:7d:47:18:e9:87:bb:
60:ce:da:38:c8:95:6c:54:64:29:86:24:e0:ce:fc:40:72:eb:
7b:f0:13:4a:32:39:77:7c:fc:7d:2b:9a:ed:1b:a0:0b:24:a4:
d2:d9:3a:08:5f:ae:4c:a4:f9:e2:11:8d:12:aa:a6:67:b5:1d:
e3:d8:f3:b1:87:0a:84:43:b0:bb:1c:c4:47:72:f6:0a:cc:07:
83:09:fb:a8:35:89:ee:ac:ea:48:92:99:78:f7:4d:00:a2:be:
07:33:8e:03:e3:9a:e3:47:27:45:4e:e0:a5:43:57:93:9d:9a:
3c:0a:30:1e:1c:6a:8d:f0:12:72:fb:9d:4c:cf:e4:03:23:6a:
88:9c:a2:d7:12:de:a0:22:bc:f3:f8:3d:65:6f:f9:ec:69:5e:
90:df:cd:ab:78:58:40:a2:5d:d8:46:b9:2b:fb:a0:45:8e:f0:
29:fb:db:49:b4:de:90:4c:24:3e:15:ef:dc:56:08:d3:b8:ae:
04:5a:92:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKQuld3cMbWVwrhDkVTpNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2ZGZlYmFjOGI3NTQ1MTEyMmY5MTRmY2EwMjRlZTFmNTQx
N2NhYmIwHhcNMjYwMzI2MDgwMDQ4WhcNMjYwMzI3MDgwMDQ4WjAzMTEwLwYDVQQD
Eyg4OTczY2NmNjQxOTljOWI1ZGU2ZTM2NDNmYjAwYzlkOTZhOWNmMTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3QAKgbDau6E2Z73xFp8v/Z144fO
6W+SWQP9q7cVpl1Tn+EQHVRNM7W0xFLVoYhtiOzsLO+QnF9DUjIuXfGVKhkCLCpC
KwYnvKahh1OgmZu+5pRfr/zr2KDjRmps22wVCxHCj2iECqv/enpCoqR029jaWchv
tc57CDYuUqqJHfXRvfTrr3HnaksMNGi9jzrAF1eL5BzG9y3EKauwlTi/Vumm8OoJ
WGNJOfh96A8F2Ej9eHijV4mVKMUQGFpybWCXOxquttr9N/w6oNxkv85EaWIyYMVx
MWCpWaBisUBkosS8yWGcU8UAIpgyog2ma8XwtK83CcKAB/wcMj4wyNvqFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIlzzPZBmcm13m42Q/sAydlqnPGbMB8GA1UdIwQY
MBaAFMbf66yLdUURIvkU/KAk7h9UF8q7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHRfcnJJdDFSUkVpLVJUOG9DVHVIMVFYeXJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9hNjVhNDgtMDkzNS00YTc5LWFjMGYt
MzgwOTFiMTk3NjRiLzEveHRfcnJJdDFSUkVpLVJUOG9DVHVIMVFYeXJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9hNjVhNDgtMDkzNS00YTc5LWFjMGYtMzgwOTFiMTk3NjRi
LzEveHRfcnJJdDFSUkVpLVJUOG9DVHVIMVFYeXJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkO38sIaL
5K2uN8C2a1iXrkl0zLwdC1eOQb0YKOgMPozjs+2ff0O+dh8sGeDM6E05dpE3ebnL
l73Jd/POdix1vyJofUcY6Ye7YM7aOMiVbFRkKYYk4M78QHLre/ATSjI5d3z8fSua
7RugCySk0tk6CF+uTKT54hGNEqqmZ7Ud49jzsYcKhEOwuxzER3L2CswHgwn7qDWJ
7qzqSJKZePdNAKK+BzOOA+Oa40cnRU7gpUNXk52aPAowHhxqjfAScvudTM/kAyNq
iJyi1xLeoCK88/g9ZW/57GlekN/Nq3hYQKJd2Ea5K/ugRY7wKfvbSbTekEwkPhXv
3FYI07iuBFqSDw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:19:17 2026 by rpki-client