Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
File: X1B54OWHxH_xTSAhEvTu94sHhJE.mft (raw, json)
Hash identifier: 7Xyja/6Re9C6V1wDkUg13dYQmiHEOvYHdgB+Dq3SZ+I=
Subject key identifier: ED:CD:6E:D6:32:36:80:56:C1:0D:CD:71:B9:4D:7B:33:69:8D:21:58
Authority key identifier: 5F:50:79:E0:E5:87:C4:7F:F1:4D:20:21:12:F4:EE:F7:8B:07:84:91
Certificate issuer: /CN=5f5079e0e587c47ff14d202112f4eef78b078491
Certificate serial: 019D26CD22E3D4F94203E6A64906046C4B90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
Manifest number: 0AA9
Signing time: Wed 25 Mar 2026 21:01:11 +0000
Manifest this update: Wed 25 Mar 2026 21:01:11 +0000
Manifest next update: Thu 26 Mar 2026 21:01:11 +0000
Files and hashes: 1: 7bGl1Xdi6Pm1X1Ab1Zfe3WxrCvQ.roa (hash: WitY0IfqjKazmEtgATl+1ViOVRltHmA3RLHFAZFUngo=)
2: X1B54OWHxH_xTSAhEvTu94sHhJE.crl (hash: PFwwqXpbaPwJCBPmkVVAzTpotq9a0BKspwOeRPW/NzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:22:e3:d4:f9:42:03:e6:a6:49:06:04:6c:4b:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5079e0e587c47ff14d202112f4eef78b078491
Validity
Not Before: Mar 25 21:01:11 2026 GMT
Not After : Mar 26 21:01:11 2026 GMT
Subject: CN=edcd6ed632368056c10dcd71b94d7b33698d2158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:16:38:96:6d:c4:7b:fa:fd:65:35:e9:be:eb:
be:1f:89:dc:01:cc:df:87:9c:11:bb:cf:c3:7e:d3:
f8:a3:ec:3d:a8:54:52:a5:e6:a8:ca:ce:8f:da:73:
ee:9e:04:9b:64:e6:c3:72:e8:17:48:86:d2:66:b1:
24:07:f7:7c:fc:fc:8f:d8:25:1c:76:c5:9b:6b:0b:
f2:57:0e:1b:ca:85:20:1d:aa:a5:51:59:c7:0c:00:
7a:e7:aa:4c:8f:02:7d:d9:8d:5f:d3:3d:18:72:21:
0f:5f:e4:9d:67:21:b4:7d:97:ce:a8:51:a9:fa:4d:
31:1c:56:e8:3c:eb:11:50:3d:1b:1b:87:7d:0b:1a:
69:4f:42:49:04:52:47:b0:c2:d5:ae:cc:4d:2f:6c:
a3:94:39:b5:2f:98:53:5f:13:bc:96:82:48:d6:e7:
d5:4d:21:aa:2c:b4:01:38:c7:81:84:6e:ff:74:a0:
9a:cd:66:88:fb:17:d3:d9:82:d7:16:a6:36:71:fd:
4c:9b:82:a6:6c:ed:ba:cc:1b:aa:21:ec:86:18:69:
03:26:fd:dd:2b:81:ab:92:49:5e:33:b8:e2:f1:39:
5d:fd:24:ab:83:4c:fd:cc:bd:b7:e2:8a:1d:4f:5c:
e1:81:9a:78:7b:1c:6c:28:2c:d1:2b:97:f1:36:7e:
8c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:CD:6E:D6:32:36:80:56:C1:0D:CD:71:B9:4D:7B:33:69:8D:21:58
X509v3 Authority Key Identifier:
keyid:5F:50:79:E0:E5:87:C4:7F:F1:4D:20:21:12:F4:EE:F7:8B:07:84:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:69:81:f9:a6:6f:d7:51:e5:f7:59:59:fe:78:fb:af:92:cf:
92:77:0d:ad:7c:39:08:a6:f2:4a:e3:bf:3d:93:16:38:44:c3:
c9:89:41:af:2e:af:7c:58:c0:8d:e0:cf:ef:e5:a8:f6:6b:50:
3e:3e:8f:3d:b1:9c:59:7e:9c:58:d6:6e:b5:b3:06:33:a9:07:
ad:72:03:94:e4:b0:c6:6c:62:e9:33:ea:6b:b1:72:5d:90:7f:
18:4d:77:96:80:b9:09:56:3d:52:6d:27:97:a3:a9:d2:be:d9:
88:24:60:8c:29:f0:4e:c9:2b:4a:d3:fb:35:f8:98:d6:31:07:
cb:b1:c2:b1:03:5f:0b:b6:82:2e:de:48:95:cf:29:4e:d7:16:
4d:e8:f7:2c:77:90:18:d8:9b:b0:ba:b3:0f:10:fc:a5:a4:9a:
c9:66:86:f9:59:e5:d0:3e:48:a9:35:73:d0:09:bc:bb:22:50:
57:cc:d1:d1:c9:da:86:b7:86:c2:62:53:e7:a5:1f:e0:92:bc:
bc:a0:c8:0e:22:a3:93:b9:2d:60:b8:c6:21:da:6d:85:df:c2:
d9:92:f5:da:55:01:4c:ab:11:7b:30:2b:ce:64:03:39:0f:f6:
d9:39:99:56:ee:f3:8c:bb:1e:64:d6:41:23:67:a2:d4:3e:8b:
ad:b7:21:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzSLj1PlCA+amSQYEbEuQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmNTA3OWUwZTU4N2M0N2ZmMTRkMjAyMTEyZjRlZWY3OGIw
Nzg0OTEwHhcNMjYwMzI1MjEwMTExWhcNMjYwMzI2MjEwMTExWjAzMTEwLwYDVQQD
EyhlZGNkNmVkNjMyMzY4MDU2YzEwZGNkNzFiOTRkN2IzMzY5OGQyMTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhY4lm3Ee/r9ZTXpvuu+H4ncAczf
h5wRu8/DftP4o+w9qFRSpeaoys6P2nPungSbZObDcugXSIbSZrEkB/d8/PyP2CUc
dsWbawvyVw4byoUgHaqlUVnHDAB656pMjwJ92Y1f0z0YciEPX+SdZyG0fZfOqFGp
+k0xHFboPOsRUD0bG4d9CxppT0JJBFJHsMLVrsxNL2yjlDm1L5hTXxO8loJI1ufV
TSGqLLQBOMeBhG7/dKCazWaI+xfT2YLXFqY2cf1Mm4KmbO26zBuqIeyGGGkDJv3d
K4GrkkleM7ji8Tld/SSrg0z9zL234oodT1zhgZp4exxsKCzRK5fxNn6M2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO3NbtYyNoBWwQ3NcblNezNpjSFYMB8GA1UdIwQY
MBaAFF9QeeDlh8R/8U0gIRL07veLB4SRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDFCNTRPV0h4SF94VFNBaEV2VHU5NHNIaEpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9lMzc4YjItODg2NC00NzEwLTk2NzQt
MWZjOGY3NmE4MDZhLzEvWDFCNTRPV0h4SF94VFNBaEV2VHU5NHNIaEpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9lMzc4YjItODg2NC00NzEwLTk2NzQtMWZjOGY3NmE4MDZh
LzEvWDFCNTRPV0h4SF94VFNBaEV2VHU5NHNIaEpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMmmB+aZv
11Hl91lZ/nj7r5LPkncNrXw5CKbySuO/PZMWOETDyYlBry6vfFjAjeDP7+Wo9mtQ
Pj6PPbGcWX6cWNZutbMGM6kHrXIDlOSwxmxi6TPqa7FyXZB/GE13loC5CVY9Um0n
l6Op0r7ZiCRgjCnwTskrStP7NfiY1jEHy7HCsQNfC7aCLt5Ilc8pTtcWTej3LHeQ
GNibsLqzDxD8paSayWaG+Vnl0D5IqTVz0Am8uyJQV8zR0cnahreGwmJT56Uf4JK8
vKDIDiKjk7ktYLjGIdpthd/C2ZL12lUBTKsRezArzmQDOQ/22TmZVu7zjLseZNZB
I2ei1D6LrbchdQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:22:06 2026 by rpki-client