Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft
File: xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft (raw, json)
Hash identifier: GamGCbqhTULzeWHt1c5UalwG7fLz4kcee/AluzXJfTI=
Subject key identifier: 38:E1:F7:95:FF:04:AC:04:41:F4:C8:2B:48:CC:2C:FC:63:21:74:8D
Authority key identifier: C5:16:74:FE:E5:55:67:28:17:5E:FB:56:EA:A8:B9:9F:38:15:AF:A7
Certificate issuer: /CN=c51674fee5556728175efb56eaa8b99f3815afa7
Certificate serial: 019D2C986DBA6C39FA08CDA0A9BF6E53A2C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft
Manifest number: 168B
Signing time: Fri 27 Mar 2026 00:01:20 +0000
Manifest this update: Fri 27 Mar 2026 00:01:20 +0000
Manifest next update: Sat 28 Mar 2026 00:01:20 +0000
Files and hashes: 1: 5VgBPMnvg-Y4r70mw9zcqUHf-ms.roa (hash: P3U3l0akrscgsoVcKLjR90FDWEx4VR/+ukAn/96yuzo=)
2: xRZ0_uVVZygXXvtW6qi5nzgVr6c.crl (hash: B07uS/9ZH4NLZt8kpkL+jENQYHqChklrsrWk+Vhb9w4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:98:6d:ba:6c:39:fa:08:cd:a0:a9:bf:6e:53:a2:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c51674fee5556728175efb56eaa8b99f3815afa7
Validity
Not Before: Mar 27 00:01:20 2026 GMT
Not After : Mar 28 00:01:20 2026 GMT
Subject: CN=38e1f795ff04ac0441f4c82b48cc2cfc6321748d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a3:08:a1:7d:c6:84:ed:37:54:b9:31:8d:2a:
93:8d:38:df:e9:41:71:a1:11:15:b2:fa:2c:26:fa:
e2:d7:cc:00:7f:76:15:33:2c:24:84:20:74:65:90:
ac:87:42:f1:2b:05:be:c0:67:b1:fc:61:51:57:9e:
98:be:f6:14:75:7e:71:dd:fd:bf:62:0c:d7:b5:fc:
99:43:ba:f0:a5:e1:01:f4:d4:1b:59:29:b5:86:c9:
b7:8d:6f:d3:ca:f6:0e:b7:11:d3:1f:dc:53:f5:65:
e4:de:7f:ef:ba:b5:73:8b:0b:8b:a6:a5:73:09:99:
bf:6e:1b:e5:65:2b:93:71:48:9d:83:6f:84:ef:13:
88:5a:88:31:ce:c0:b4:80:9a:e2:21:00:1b:1f:a8:
a9:6b:68:8d:ae:94:94:53:bc:ae:df:53:02:36:1c:
5a:78:11:22:07:95:d7:55:66:fe:e5:47:9c:12:08:
66:1d:d0:fb:3b:e0:96:b3:8e:d3:bc:27:aa:13:b9:
d7:d3:15:4a:9b:97:b2:3a:0b:7a:d7:44:23:21:19:
15:e0:a3:75:5c:a6:e2:f0:27:b7:21:93:36:cc:c5:
8e:c6:ea:b7:42:30:66:a9:44:84:e7:ec:4d:26:cf:
2e:72:75:41:7b:31:25:d0:c2:18:7c:e7:01:79:95:
11:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E1:F7:95:FF:04:AC:04:41:F4:C8:2B:48:CC:2C:FC:63:21:74:8D
X509v3 Authority Key Identifier:
keyid:C5:16:74:FE:E5:55:67:28:17:5E:FB:56:EA:A8:B9:9F:38:15:AF:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:49:fc:35:f5:ff:ad:3e:9a:4a:e6:64:71:2b:c1:47:0b:0d:
65:e0:b8:e7:26:ee:3a:b0:1d:1f:b3:c6:03:34:1f:cc:7c:9f:
53:30:b1:2c:4d:f2:c5:18:88:c3:0b:c3:48:58:a8:3c:d5:b3:
7f:09:d4:69:32:c5:4e:83:f7:03:0e:57:6e:08:44:a1:c3:8f:
da:9e:c3:75:2b:1f:ff:11:a6:60:3e:be:50:6c:a0:b5:ca:83:
29:d7:1a:bb:24:58:2a:bf:12:19:7a:9b:ed:1a:ca:31:b1:9c:
f5:e5:b4:f3:48:b9:0d:7b:1c:b6:80:6e:7f:a2:07:3e:f3:43:
5c:0b:86:05:f9:da:7f:73:f9:ea:f2:cc:6f:18:fd:d8:43:06:
c0:80:04:bb:c6:39:eb:91:3e:77:88:21:a2:0a:36:7d:09:ca:
87:66:f0:5c:7d:80:7d:3c:d1:dd:f6:3f:6f:05:c8:18:c8:39:
23:0e:05:ac:16:e7:d4:ed:04:02:47:0e:08:1e:18:63:5a:20:
c7:28:00:8f:3f:31:7d:2e:30:0c:ea:4b:26:81:fb:32:44:e7:
f6:aa:ef:55:85:4b:df:14:27:f0:16:23:ae:3b:ad:9e:88:0b:
d6:27:8b:27:23:9a:2f:14:bc:00:ec:39:e8:c4:58:96:de:b9:
30:35:2a:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0smG26bDn6CM2gqb9uU6LCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MTY3NGZlZTU1NTY3MjgxNzVlZmI1NmVhYThiOTlmMzgx
NWFmYTcwHhcNMjYwMzI3MDAwMTIwWhcNMjYwMzI4MDAwMTIwWjAzMTEwLwYDVQQD
EygzOGUxZjc5NWZmMDRhYzA0NDFmNGM4MmI0OGNjMmNmYzYzMjE3NDhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKMIoX3GhO03VLkxjSqTjTjf6UFx
oREVsvosJvri18wAf3YVMywkhCB0ZZCsh0LxKwW+wGex/GFRV56YvvYUdX5x3f2/
YgzXtfyZQ7rwpeEB9NQbWSm1hsm3jW/TyvYOtxHTH9xT9WXk3n/vurVziwuLpqVz
CZm/bhvlZSuTcUidg2+E7xOIWogxzsC0gJriIQAbH6ipa2iNrpSUU7yu31MCNhxa
eBEiB5XXVWb+5UecEghmHdD7O+CWs47TvCeqE7nX0xVKm5eyOgt610QjIRkV4KN1
XKbi8Ce3IZM2zMWOxuq3QjBmqUSE5+xNJs8ucnVBezEl0MIYfOcBeZURAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDjh95X/BKwEQfTIK0jMLPxjIXSNMB8GA1UdIwQY
MBaAFMUWdP7lVWcoF177VuqouZ84Fa+nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFJaMF91VlZaeWdYWHZ0VzZxaTVuemdWcjZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC81ZmIwODktMjU4OS00YzcxLWIwMjYt
M2NiZTFhZjNiODJjLzEveFJaMF91VlZaeWdYWHZ0VzZxaTVuemdWcjZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC81ZmIwODktMjU4OS00YzcxLWIwMjYtM2NiZTFhZjNiODJj
LzEveFJaMF91VlZaeWdYWHZ0VzZxaTVuemdWcjZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqkn8NfX/
rT6aSuZkcSvBRwsNZeC45ybuOrAdH7PGAzQfzHyfUzCxLE3yxRiIwwvDSFioPNWz
fwnUaTLFToP3Aw5XbghEocOP2p7DdSsf/xGmYD6+UGygtcqDKdcauyRYKr8SGXqb
7RrKMbGc9eW080i5DXsctoBuf6IHPvNDXAuGBfnaf3P56vLMbxj92EMGwIAEu8Y5
65E+d4ghogo2fQnKh2bwXH2AfTzR3fY/bwXIGMg5Iw4FrBbn1O0EAkcOCB4YY1og
xygAjz8xfS4wDOpLJoH7MkTn9qrvVYVL3xQn8BYjrjutnogL1ieLJyOaLxS8AOw5
6MRYlt65MDUqEA==
-----END CERTIFICATE-----
Generated at Fri Mar 27 03:45:24 2026 by rpki-client