Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
File: X1mAEy0ZPicO0e_grShJ_oqw12w.mft (raw, json)
Hash identifier: tNow4gmAIT3mk0yLfLEYfyhVLTXDEdrk9BZNfoY8L8g=
Subject key identifier: FB:03:9C:74:D2:AE:8D:38:05:77:87:48:B7:9B:2A:C1:37:DA:DD:06
Authority key identifier: 5F:59:80:13:2D:19:3E:27:0E:D1:EF:E0:AD:28:49:FE:8A:B0:D7:6C
Certificate issuer: /CN=5f5980132d193e270ed1efe0ad2849fe8ab0d76c
Certificate serial: 019D29609B645EF427E778DC0FE473B9355D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
Manifest number: 188E
Signing time: Thu 26 Mar 2026 09:01:30 +0000
Manifest this update: Thu 26 Mar 2026 09:01:30 +0000
Manifest next update: Fri 27 Mar 2026 09:01:30 +0000
Files and hashes: 1: 6-Ew-si9J0hf6ZarrCVeQjfqjE4.roa (hash: ljHxNRtveUXCickR/eyPdSx4OKRRH+YbhLZnTAcXkXg=)
2: I2tNxhGFF35MT6ATAQ34a1mldMA.roa (hash: aCwLuTKx+lT5TRi4XqsraXtHCM8YuZl8sxF9wyX0Vvo=)
3: JCTQgcUELCWna8Z80DBMEn0zGk0.roa (hash: aQm1A8aMpcGmR9Y0OhWPfstPmLBs4VFn6LiSckCGnCs=)
4: X1mAEy0ZPicO0e_grShJ_oqw12w.crl (hash: DhXxbsfNYwoDJUO1kwQhLcCKpNtIZizZMhqFmProTH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:9b:64:5e:f4:27:e7:78:dc:0f:e4:73:b9:35:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5980132d193e270ed1efe0ad2849fe8ab0d76c
Validity
Not Before: Mar 26 09:01:30 2026 GMT
Not After : Mar 27 09:01:30 2026 GMT
Subject: CN=fb039c74d2ae8d3805778748b79b2ac137dadd06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:4e:29:d4:74:2c:ca:3e:fd:70:b7:d8:cf:9a:
ce:5f:be:0c:c0:c5:03:21:44:32:60:af:cf:19:33:
a1:5e:c4:5f:bb:b3:63:69:41:f1:a4:98:67:94:26:
52:97:9f:ee:96:2e:42:a6:08:03:02:9f:81:15:1a:
c2:ae:8b:23:0c:5d:1d:2a:e5:48:21:b9:0b:6f:6c:
6f:c0:d1:08:7d:75:af:c5:cd:16:03:03:d7:de:fa:
8c:76:f8:56:7f:41:30:6c:11:4a:83:a3:ef:b3:7d:
c7:30:d8:1d:62:2e:fe:84:5e:4c:61:f2:6b:77:14:
c0:19:88:64:fe:d9:a2:00:0f:92:3b:73:fd:68:d3:
44:7e:62:43:91:66:ef:1b:43:c8:4b:83:f2:fc:f1:
02:9d:63:bd:d3:3a:9b:ba:51:0a:ee:49:fb:7c:40:
31:93:9a:78:0c:d6:7d:68:e2:e3:3f:79:67:75:63:
fc:a8:5f:c2:fd:4f:be:ff:91:6a:1c:1e:03:6b:6b:
8c:ae:06:6d:25:f4:f6:26:76:21:38:98:28:7a:f8:
fd:37:a5:30:e1:6b:ca:33:c4:cd:b6:eb:47:a4:0d:
26:09:ca:02:e9:ea:f5:85:f9:74:c9:05:c8:5f:9c:
56:3a:bc:0b:16:bf:98:25:a0:a2:1c:b9:77:5c:2c:
63:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:03:9C:74:D2:AE:8D:38:05:77:87:48:B7:9B:2A:C1:37:DA:DD:06
X509v3 Authority Key Identifier:
keyid:5F:59:80:13:2D:19:3E:27:0E:D1:EF:E0:AD:28:49:FE:8A:B0:D7:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:65:b6:83:20:79:24:44:35:d5:75:19:5e:37:5e:77:39:0d:
6b:f8:d5:bb:6f:01:91:89:56:45:7e:f3:0e:9e:c6:9e:18:56:
f4:9e:a4:e0:ed:8d:c5:d5:22:09:b9:de:de:d0:68:2c:8d:41:
8c:36:8f:28:b9:e7:a3:62:82:27:c9:e8:25:59:3c:71:d5:36:
ab:47:fa:66:f8:9d:78:ee:b2:8b:36:58:a0:9c:2a:69:45:0f:
9e:f9:b9:f3:75:20:53:ad:00:f7:4f:29:db:69:de:0b:de:d9:
dd:59:44:47:c0:d3:4e:5d:79:74:55:ec:65:9d:2f:47:da:0b:
ce:fd:13:55:49:aa:5e:21:a9:75:0b:97:84:16:ef:87:07:a3:
0c:cd:db:b3:28:36:00:d1:55:02:61:b1:7b:9d:53:87:00:b0:
ef:69:a1:b2:38:7e:94:cf:4f:9a:7d:fc:f4:32:7e:ec:6d:39:
3e:ed:5a:0d:b2:3f:4b:06:50:62:f0:de:57:de:7e:00:a0:ca:
d4:f2:bc:b9:33:53:56:83:b3:5d:89:b8:57:2d:5e:6f:62:be:
17:f4:af:df:b5:ea:a7:e0:ae:67:7e:9c:e9:a9:c3:7b:69:34:
79:a7:de:aa:e0:b7:9e:a3:39:61:1b:2a:b4:36:a6:0b:b8:88:
20:42:b9:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYJtkXvQn53jcD+RzuTVdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmNTk4MDEzMmQxOTNlMjcwZWQxZWZlMGFkMjg0OWZlOGFi
MGQ3NmMwHhcNMjYwMzI2MDkwMTMwWhcNMjYwMzI3MDkwMTMwWjAzMTEwLwYDVQQD
EyhmYjAzOWM3NGQyYWU4ZDM4MDU3Nzg3NDhiNzliMmFjMTM3ZGFkZDA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6E4p1HQsyj79cLfYz5rOX74MwMUD
IUQyYK/PGTOhXsRfu7NjaUHxpJhnlCZSl5/uli5CpggDAp+BFRrCrosjDF0dKuVI
IbkLb2xvwNEIfXWvxc0WAwPX3vqMdvhWf0EwbBFKg6Pvs33HMNgdYi7+hF5MYfJr
dxTAGYhk/tmiAA+SO3P9aNNEfmJDkWbvG0PIS4Py/PECnWO90zqbulEK7kn7fEAx
k5p4DNZ9aOLjP3lndWP8qF/C/U++/5FqHB4Da2uMrgZtJfT2JnYhOJgoevj9N6Uw
4WvKM8TNtutHpA0mCcoC6er1hfl0yQXIX5xWOrwLFr+YJaCiHLl3XCxj5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPsDnHTSro04BXeHSLebKsE32t0GMB8GA1UdIwQY
MBaAFF9ZgBMtGT4nDtHv4K0oSf6KsNdsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDFtQUV5MFpQaWNPMGVfZ3JTaEpfb3F3MTJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9hYThhYzgtMTNiOC00MTk3LWJlNTYt
MWUxZGU5MWE5ODdjLzEvWDFtQUV5MFpQaWNPMGVfZ3JTaEpfb3F3MTJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9hYThhYzgtMTNiOC00MTk3LWJlNTYtMWUxZGU5MWE5ODdj
LzEvWDFtQUV5MFpQaWNPMGVfZ3JTaEpfb3F3MTJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGmW2gyB5
JEQ11XUZXjdedzkNa/jVu28BkYlWRX7zDp7GnhhW9J6k4O2NxdUiCbne3tBoLI1B
jDaPKLnno2KCJ8noJVk8cdU2q0f6ZvideO6yizZYoJwqaUUPnvm583UgU60A908p
22neC97Z3VlER8DTTl15dFXsZZ0vR9oLzv0TVUmqXiGpdQuXhBbvhwejDM3bsyg2
ANFVAmGxe51ThwCw72mhsjh+lM9Pmn389DJ+7G05Pu1aDbI/SwZQYvDeV95+AKDK
1PK8uTNTVoOzXYm4Vy1eb2K+F/Sv37Xqp+CuZ36c6anDe2k0eafequC3nqM5YRsq
tDamC7iIIEK5Bg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:11:38 2026 by rpki-client