Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/1ebcb2-4ef0-42ff-81b5-9b17def9c233/1/x0HESpzVjhJWkGY32TXDGQ9_6xo.mft
File: x0HESpzVjhJWkGY32TXDGQ9_6xo.mft (raw, json)
Hash identifier: buUxttw+TfcXDNCZJdUcqXqr5LQRXo/bB/pKOAd85nI=
Subject key identifier: 88:7A:7E:62:38:E6:56:52:DC:78:6E:27:13:D6:56:80:80:F7:6B:9B
Authority key identifier: C7:41:C4:4A:9C:D5:8E:12:56:90:66:37:D9:35:C3:19:0F:7F:EB:1A
Certificate issuer: /CN=c741c44a9cd58e1256906637d935c3190f7feb1a
Certificate serial: 019D39AE926AFC75E90D78F7F6882AE57C96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0HESpzVjhJWkGY32TXDGQ9_6xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/1ebcb2-4ef0-42ff-81b5-9b17def9c233/1/x0HESpzVjhJWkGY32TXDGQ9_6xo.mft
Manifest number: 1631
Signing time: Sun 29 Mar 2026 13:00:35 +0000
Manifest this update: Sun 29 Mar 2026 13:00:35 +0000
Manifest next update: Mon 30 Mar 2026 13:00:35 +0000
Files and hashes: 1: sfmIc9gq5iDCMduVv_7--cWSu5U.roa (hash: o6P8lrqhFhaoqVSr9JiiRBUP/HqFrxkLK5sB6PXFGw8=)
2: x0HESpzVjhJWkGY32TXDGQ9_6xo.crl (hash: T7Rqyo/i9pF704I+wQ9cFdCRg0h40s1Qpe1BbtdW8Xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/1ebcb2-4ef0-42ff-81b5-9b17def9c233/1/x0HESpzVjhJWkGY32TXDGQ9_6xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/1ebcb2-4ef0-42ff-81b5-9b17def9c233/1/x0HESpzVjhJWkGY32TXDGQ9_6xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x0HESpzVjhJWkGY32TXDGQ9_6xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:92:6a:fc:75:e9:0d:78:f7:f6:88:2a:e5:7c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c741c44a9cd58e1256906637d935c3190f7feb1a
Validity
Not Before: Mar 29 13:00:35 2026 GMT
Not After : Mar 30 13:00:35 2026 GMT
Subject: CN=887a7e6238e65652dc786e2713d6568080f76b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:56:cc:7e:96:5a:8a:d8:fc:d5:b3:5b:58:3b:
a5:5f:b7:1c:50:79:81:a1:08:64:3e:2b:0a:ba:fc:
11:36:9e:c7:96:7e:80:6a:15:f7:10:86:56:b1:2c:
7f:28:6d:b6:43:8e:02:39:3c:98:43:ba:54:a9:7e:
e2:9f:e5:f7:39:8d:58:4f:3e:37:e6:30:a3:fb:f3:
f7:a9:6e:4a:ec:8d:4e:b8:37:3d:2d:c8:0b:07:f3:
1b:45:11:b2:a6:84:e8:a3:61:e5:b2:2b:4e:d5:f6:
6e:40:2d:a6:b1:35:5d:3d:ca:3d:bf:fd:c8:67:21:
16:c7:7a:7d:bc:90:5d:aa:03:b6:d4:24:76:37:d2:
ba:43:0a:77:50:be:58:b6:8f:f9:c0:10:28:ac:1a:
ac:b7:e7:1c:64:b9:ba:97:15:15:6d:55:40:4f:c3:
b6:84:05:0b:f7:17:7d:f7:38:b4:e1:f2:43:6b:00:
6d:ac:4c:c7:70:cc:ef:81:4c:43:1a:bf:21:0e:3b:
eb:88:d9:bf:2a:12:ac:3e:f9:2d:21:95:79:fc:51:
31:f9:74:02:36:56:2f:e7:84:7a:8c:bd:e9:ca:62:
5f:1c:19:3e:72:2c:80:5a:ca:29:2d:91:8b:5a:f1:
2d:ec:a5:59:20:f7:f5:bd:cc:91:71:25:bf:21:3d:
15:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:7A:7E:62:38:E6:56:52:DC:78:6E:27:13:D6:56:80:80:F7:6B:9B
X509v3 Authority Key Identifier:
keyid:C7:41:C4:4A:9C:D5:8E:12:56:90:66:37:D9:35:C3:19:0F:7F:EB:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0HESpzVjhJWkGY32TXDGQ9_6xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1ebcb2-4ef0-42ff-81b5-9b17def9c233/1/x0HESpzVjhJWkGY32TXDGQ9_6xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1ebcb2-4ef0-42ff-81b5-9b17def9c233/1/x0HESpzVjhJWkGY32TXDGQ9_6xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:97:7b:59:be:75:6e:3c:89:5a:76:33:30:67:c1:a8:49:38:
c1:83:71:90:3b:76:57:65:83:7c:6c:33:f7:c3:13:de:2c:b8:
80:3a:07:b1:0b:87:e7:d6:08:98:ca:e4:51:73:2f:57:44:df:
65:62:44:76:28:b2:e6:8d:0d:da:c0:ce:07:30:87:b8:84:24:
1f:49:26:46:0c:15:9d:bd:d9:4f:72:f5:73:f9:2f:d3:5f:5f:
f6:fc:5b:59:1d:02:9f:f3:63:48:4f:97:a7:e9:27:b1:f1:20:
73:e0:0e:0c:a9:16:3f:a4:29:ab:84:de:f9:7a:29:f5:ed:f4:
9f:3b:d4:00:67:47:55:be:73:48:e0:76:06:46:a1:ce:55:75:
2a:6e:81:02:45:80:50:3c:99:de:82:d5:f7:d4:b8:a0:b5:cf:
6b:1d:37:d0:3c:90:3e:cd:0f:c0:8e:2d:ca:03:85:1e:16:02:
4c:54:61:32:05:f2:82:b8:6d:8d:d1:75:ab:97:d6:ed:ec:13:
f8:c4:0d:ff:99:18:fa:1c:45:0a:40:87:68:a9:a9:16:50:60:
11:ab:49:30:ab:f9:0c:6d:8a:eb:d2:6c:f1:52:7d:fc:12:5d:
4a:0d:b3:e7:a3:60:00:a0:2f:73:bd:e3:a5:90:4e:6b:6e:ee:
3a:b8:5b:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rpJq/HXpDXj39ogq5XyWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NDFjNDRhOWNkNThlMTI1NjkwNjYzN2Q5MzVjMzE5MGY3
ZmViMWEwHhcNMjYwMzI5MTMwMDM1WhcNMjYwMzMwMTMwMDM1WjAzMTEwLwYDVQQD
Eyg4ODdhN2U2MjM4ZTY1NjUyZGM3ODZlMjcxM2Q2NTY4MDgwZjc2YjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1bMfpZaitj81bNbWDulX7ccUHmB
oQhkPisKuvwRNp7Hln6AahX3EIZWsSx/KG22Q44COTyYQ7pUqX7in+X3OY1YTz43
5jCj+/P3qW5K7I1OuDc9LcgLB/MbRRGypoToo2HlsitO1fZuQC2msTVdPco9v/3I
ZyEWx3p9vJBdqgO21CR2N9K6Qwp3UL5Yto/5wBAorBqst+ccZLm6lxUVbVVAT8O2
hAUL9xd99zi04fJDawBtrEzHcMzvgUxDGr8hDjvriNm/KhKsPvktIZV5/FEx+XQC
NlYv54R6jL3pymJfHBk+ciyAWsopLZGLWvEt7KVZIPf1vcyRcSW/IT0VywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIh6fmI45lZS3HhuJxPWVoCA92ubMB8GA1UdIwQY
MBaAFMdBxEqc1Y4SVpBmN9k1wxkPf+saMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDBIRVNwelZqaEpXa0dZMzJUWERHUTlfNnhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8xZWJjYjItNGVmMC00MmZmLTgxYjUt
OWIxN2RlZjljMjMzLzEveDBIRVNwelZqaEpXa0dZMzJUWERHUTlfNnhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8xZWJjYjItNGVmMC00MmZmLTgxYjUtOWIxN2RlZjljMjMz
LzEveDBIRVNwelZqaEpXa0dZMzJUWERHUTlfNnhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIpd7Wb51
bjyJWnYzMGfBqEk4wYNxkDt2V2WDfGwz98MT3iy4gDoHsQuH59YImMrkUXMvV0Tf
ZWJEdiiy5o0N2sDOBzCHuIQkH0kmRgwVnb3ZT3L1c/kv019f9vxbWR0Cn/NjSE+X
p+knsfEgc+AODKkWP6Qpq4Te+Xop9e30nzvUAGdHVb5zSOB2BkahzlV1Km6BAkWA
UDyZ3oLV99S4oLXPax030DyQPs0PwI4tygOFHhYCTFRhMgXygrhtjdF1q5fW7ewT
+MQN/5kY+hxFCkCHaKmpFlBgEatJMKv5DG2K69Js8VJ9/BJdSg2z56NgAKAvc73j
pZBOa27uOrhbuw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:43:00 2026 by rpki-client