Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.mft
File: XjFIuezSDl_yRlqc0QGtqa5QjVc.mft (raw, json)
Hash identifier: zNzz7Ptr6i45vq4u4vS5OvZsZ/f+T9Z+JRVfDaaToRU=
Subject key identifier: 43:E1:AA:7A:CF:F3:56:78:A2:8F:3A:01:A9:BE:61:CE:09:8A:6A:E4
Authority key identifier: 5E:31:48:B9:EC:D2:0E:5F:F2:46:5A:9C:D1:01:AD:A9:AE:50:8D:57
Certificate issuer: /CN=5e3148b9ecd20e5ff2465a9cd101ada9ae508d57
Certificate serial: 019D3A1C770553D8857A5DA1137F02F6C1E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjFIuezSDl_yRlqc0QGtqa5QjVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.mft
Manifest number: 144E
Signing time: Sun 29 Mar 2026 15:00:37 +0000
Manifest this update: Sun 29 Mar 2026 15:00:37 +0000
Manifest next update: Mon 30 Mar 2026 15:00:37 +0000
Files and hashes: 1: JA3YuaJEsqvd9eusygyCJH9iklY.roa (hash: 9CJlUPdmf0qr6MJ6TlKKLBohMPRtzMpsz+bJMGO5jMQ=)
2: XjFIuezSDl_yRlqc0QGtqa5QjVc.crl (hash: f7bDtPKLhyzpHOX2eNIpsQXEzsDn4SsRfT/cTyhFsS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XjFIuezSDl_yRlqc0QGtqa5QjVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:77:05:53:d8:85:7a:5d:a1:13:7f:02:f6:c1:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3148b9ecd20e5ff2465a9cd101ada9ae508d57
Validity
Not Before: Mar 29 15:00:37 2026 GMT
Not After : Mar 30 15:00:37 2026 GMT
Subject: CN=43e1aa7acff35678a28f3a01a9be61ce098a6ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:23:ba:84:92:64:2e:52:f1:e6:fc:30:e3:7f:
15:60:35:79:d0:d1:da:1c:96:79:52:4c:6c:b5:05:
72:70:a7:76:23:d3:a1:6f:53:de:c2:36:35:6b:7f:
d0:41:de:16:b7:a7:9c:d4:93:dd:4c:a5:f0:12:76:
e6:3a:5c:66:9b:37:76:25:c5:04:34:75:c1:eb:e4:
b9:e4:7a:e1:15:0e:92:49:1d:39:a4:4d:bd:4a:67:
fa:a4:d2:94:bb:1f:36:4c:dc:81:8a:09:cd:6e:64:
65:48:e2:d8:b9:90:01:e6:68:e6:1e:5f:49:b5:70:
f9:37:70:ac:83:f8:7d:c7:7d:86:df:4e:6a:cf:ab:
c8:fe:71:67:1e:5d:9a:fc:43:66:d6:5d:d8:c3:b2:
0d:ac:3a:f7:a8:40:03:e1:3d:09:65:44:f9:de:85:
ad:2b:99:a7:0a:6f:ef:a1:5b:01:5d:16:32:bd:57:
50:8b:6a:35:99:5b:2b:f5:3d:cf:f5:73:b0:12:91:
7c:ff:6a:e5:b0:4b:6f:14:3c:ad:8b:56:39:f3:44:
d7:01:f2:9b:76:91:62:d7:a2:48:59:ac:d4:36:04:
af:3e:e4:5d:a0:9e:39:a2:90:6a:ca:e4:13:a1:8b:
65:8c:e1:20:f9:cb:f5:0c:44:64:fc:38:0e:85:d6:
ab:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E1:AA:7A:CF:F3:56:78:A2:8F:3A:01:A9:BE:61:CE:09:8A:6A:E4
X509v3 Authority Key Identifier:
keyid:5E:31:48:B9:EC:D2:0E:5F:F2:46:5A:9C:D1:01:AD:A9:AE:50:8D:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjFIuezSDl_yRlqc0QGtqa5QjVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:5f:31:ae:07:dc:28:00:bb:1d:1e:a5:08:45:b2:51:e5:d4:
a1:22:82:65:80:49:57:09:ca:72:34:92:8d:49:cc:00:b8:a7:
01:bc:16:dc:0f:ea:6e:b1:da:2c:12:6f:f3:28:79:a7:51:73:
36:e1:c8:96:89:09:5b:ef:ab:6c:11:cf:ba:93:ec:fa:01:53:
1e:99:79:1c:5d:cd:93:a5:7e:4f:d9:3d:94:56:2e:45:6e:73:
fa:cf:3d:58:9d:fa:29:34:44:6f:8d:75:dd:d4:7f:0e:a8:87:
08:13:c1:56:1a:fa:6a:69:0d:6d:26:7a:e0:66:78:fe:82:ce:
30:8d:11:0b:6b:b3:a7:22:f5:75:f9:fa:d9:b6:7d:77:9f:40:
45:f0:2a:38:1a:e6:bd:68:20:5d:d0:73:2a:56:7c:88:18:f1:
c1:a5:af:16:e7:52:79:16:10:54:a8:98:60:26:9e:d2:76:e3:
3b:57:dc:4b:19:a7:0a:50:f0:8e:64:9e:48:ef:6d:20:33:30:
4c:b4:df:4b:ad:37:08:7a:86:14:59:b4:af:a7:70:89:df:6d:
11:5b:c1:63:60:bf:1f:7a:9c:59:f6:5b:13:0f:87:ca:f6:90:
ea:ce:a9:2c:b9:11:1c:1b:df:53:e3:50:55:c9:22:50:de:f5:
d5:ac:35:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06HHcFU9iFel2hE38C9sHnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMzE0OGI5ZWNkMjBlNWZmMjQ2NWE5Y2QxMDFhZGE5YWU1
MDhkNTcwHhcNMjYwMzI5MTUwMDM3WhcNMjYwMzMwMTUwMDM3WjAzMTEwLwYDVQQD
Eyg0M2UxYWE3YWNmZjM1Njc4YTI4ZjNhMDFhOWJlNjFjZTA5OGE2YWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyO6hJJkLlLx5vww438VYDV50NHa
HJZ5UkxstQVycKd2I9Ohb1PewjY1a3/QQd4Wt6ec1JPdTKXwEnbmOlxmmzd2JcUE
NHXB6+S55HrhFQ6SSR05pE29Smf6pNKUux82TNyBignNbmRlSOLYuZAB5mjmHl9J
tXD5N3Csg/h9x32G305qz6vI/nFnHl2a/ENm1l3Yw7INrDr3qEAD4T0JZUT53oWt
K5mnCm/voVsBXRYyvVdQi2o1mVsr9T3P9XOwEpF8/2rlsEtvFDyti1Y580TXAfKb
dpFi16JIWazUNgSvPuRdoJ45opBqyuQToYtljOEg+cv1DERk/DgOhdarJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEPhqnrP81Z4oo86Aam+Yc4JimrkMB8GA1UdIwQY
MBaAFF4xSLns0g5f8kZanNEBramuUI1XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGpGSXVlelNEbF95UmxxYzBRR3RxYTVRalZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy84ZjZiMTUtNmVjMS00ZTYwLWJmZDYt
ZTQ5MmQ0ZTFiNjMxLzEvWGpGSXVlelNEbF95UmxxYzBRR3RxYTVRalZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy84ZjZiMTUtNmVjMS00ZTYwLWJmZDYtZTQ5MmQ0ZTFiNjMx
LzEvWGpGSXVlelNEbF95UmxxYzBRR3RxYTVRalZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbV8xrgfc
KAC7HR6lCEWyUeXUoSKCZYBJVwnKcjSSjUnMALinAbwW3A/qbrHaLBJv8yh5p1Fz
NuHIlokJW++rbBHPupPs+gFTHpl5HF3Nk6V+T9k9lFYuRW5z+s89WJ36KTREb411
3dR/DqiHCBPBVhr6amkNbSZ64GZ4/oLOMI0RC2uzpyL1dfn62bZ9d59ARfAqOBrm
vWggXdBzKlZ8iBjxwaWvFudSeRYQVKiYYCae0nbjO1fcSxmnClDwjmSeSO9tIDMw
TLTfS603CHqGFFm0r6dwid9tEVvBY2C/H3qcWfZbEw+HyvaQ6s6pLLkRHBvfU+NQ
VckiUN711aw11Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:34:24 2026 by rpki-client