Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.mft
File: XLeTntcMiuoxvkk-eOiPSGH1MSE.mft (raw, json)
Hash identifier: QNi1cxZMS8jCsyFCusTmEIfHV27SkSdAW6tTmx0rrng=
Subject key identifier: E5:57:53:CF:0C:63:AB:0A:83:07:F4:29:4A:AD:F1:FD:6D:2D:80:08
Authority key identifier: 5C:B7:93:9E:D7:0C:8A:EA:31:BE:49:3E:78:E8:8F:48:61:F5:31:21
Certificate issuer: /CN=5cb7939ed70c8aea31be493e78e88f4861f53121
Certificate serial: 019D3AC19E0BE5C19A2E7FDD942CFCF545E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLeTntcMiuoxvkk-eOiPSGH1MSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.mft
Manifest number: 0F75
Signing time: Sun 29 Mar 2026 18:01:00 +0000
Manifest this update: Sun 29 Mar 2026 18:01:00 +0000
Manifest next update: Mon 30 Mar 2026 18:01:00 +0000
Files and hashes: 1: 7eeo5JU3juiQ8OvLCUlUNcZKztE.roa (hash: JrzW0ZclqW95xnASoAIpiYFf6Rp0SBoASsXXNEQq9kc=)
2: XLeTntcMiuoxvkk-eOiPSGH1MSE.crl (hash: P9AeVwuQ8z6yZc886jTWv8qMvBthGL9dBKw0qQbbm70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XLeTntcMiuoxvkk-eOiPSGH1MSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:9e:0b:e5:c1:9a:2e:7f:dd:94:2c:fc:f5:45:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cb7939ed70c8aea31be493e78e88f4861f53121
Validity
Not Before: Mar 29 18:01:00 2026 GMT
Not After : Mar 30 18:01:00 2026 GMT
Subject: CN=e55753cf0c63ab0a8307f4294aadf1fd6d2d8008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f6:19:43:c8:81:00:94:6c:0a:8a:e8:3c:91:
fe:ab:c3:bd:c8:e3:f4:6c:e5:20:5b:3c:03:7b:e8:
0b:53:bb:ff:aa:13:17:00:1d:61:0d:62:f4:41:6b:
9b:5c:77:72:e1:37:1c:1d:59:45:28:c2:d0:9b:80:
f2:92:49:76:fe:90:cd:21:f0:a2:7e:8c:01:2d:2e:
61:6e:41:db:d3:8d:ea:33:af:f0:94:44:65:1f:68:
a4:de:21:ce:5b:f6:d3:e6:7c:24:bb:a6:6d:15:2f:
84:1b:fc:0a:15:06:f1:29:07:f0:25:8f:0e:68:12:
70:f2:86:a9:43:87:4f:2a:dd:49:42:fc:99:2c:70:
3c:a1:27:94:86:01:04:85:0d:2f:0b:f2:6a:60:8b:
1d:38:b9:81:13:b0:c0:75:26:fb:48:76:64:86:fa:
dd:82:7a:81:a9:a1:3e:19:40:7a:4e:b5:1c:d8:7d:
38:31:48:3d:7e:aa:22:fe:d5:7c:65:63:ec:27:99:
f5:7e:5c:99:76:8f:2e:e6:fc:33:7b:6b:ce:b8:23:
0e:94:dd:00:51:f9:30:10:26:40:94:cb:6a:45:a5:
1c:a0:a9:65:25:38:a8:0a:70:b6:59:dc:7c:79:7b:
39:41:a0:2e:e0:b6:28:97:09:a4:25:34:8b:b3:0a:
18:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:57:53:CF:0C:63:AB:0A:83:07:F4:29:4A:AD:F1:FD:6D:2D:80:08
X509v3 Authority Key Identifier:
keyid:5C:B7:93:9E:D7:0C:8A:EA:31:BE:49:3E:78:E8:8F:48:61:F5:31:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLeTntcMiuoxvkk-eOiPSGH1MSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:83:84:ac:a6:99:bb:52:97:54:00:3c:fb:b1:b7:aa:eb:14:
96:f7:4c:e4:0f:0f:6b:99:9a:d0:b6:b3:ed:8d:e1:dc:14:45:
8a:0f:38:38:05:ce:5d:ad:a4:94:f2:ac:be:5b:73:13:d0:9b:
50:04:d6:54:83:61:a0:37:c0:16:99:27:db:55:a0:37:5d:a4:
6e:2f:6f:8a:2f:35:f5:47:79:d3:96:e7:40:8e:93:21:60:dc:
70:12:d6:f1:59:6a:1c:1a:0f:b5:db:0b:98:79:2a:87:48:4c:
fa:d0:cd:56:51:59:40:4a:71:d9:66:27:34:ed:53:1b:fb:8d:
63:93:e4:05:31:a0:c9:8f:6e:84:3c:4f:6a:21:ec:d6:3d:96:
e8:b8:96:3d:e2:49:12:3a:3a:62:8e:96:27:4d:a1:25:39:bf:
cf:a2:42:82:82:df:2d:69:40:6b:28:b0:76:63:6b:28:9e:9f:
f6:b6:f6:2e:bf:92:15:24:5d:11:aa:cb:fb:36:7a:ca:9f:98:
5d:08:90:35:f2:46:a3:6d:5b:8a:d4:91:c6:37:47:5c:4c:82:
36:d5:d6:81:92:62:9a:93:a8:d0:3f:5b:84:62:20:b7:59:12:
49:7a:b5:f1:5d:c6:90:ed:9f:59:20:75:d2:67:f9:02:13:e6:
f9:b9:6e:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06wZ4L5cGaLn/dlCz89UXhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjYjc5MzllZDcwYzhhZWEzMWJlNDkzZTc4ZTg4ZjQ4NjFm
NTMxMjEwHhcNMjYwMzI5MTgwMTAwWhcNMjYwMzMwMTgwMTAwWjAzMTEwLwYDVQQD
EyhlNTU3NTNjZjBjNjNhYjBhODMwN2Y0Mjk0YWFkZjFmZDZkMmQ4MDA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPYZQ8iBAJRsCoroPJH+q8O9yOP0
bOUgWzwDe+gLU7v/qhMXAB1hDWL0QWubXHdy4TccHVlFKMLQm4Dykkl2/pDNIfCi
fowBLS5hbkHb043qM6/wlERlH2ik3iHOW/bT5nwku6ZtFS+EG/wKFQbxKQfwJY8O
aBJw8oapQ4dPKt1JQvyZLHA8oSeUhgEEhQ0vC/JqYIsdOLmBE7DAdSb7SHZkhvrd
gnqBqaE+GUB6TrUc2H04MUg9fqoi/tV8ZWPsJ5n1flyZdo8u5vwze2vOuCMOlN0A
UfkwECZAlMtqRaUcoKllJTioCnC2Wdx8eXs5QaAu4LYolwmkJTSLswoY2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOVXU88MY6sKgwf0KUqt8f1tLYAIMB8GA1UdIwQY
MBaAFFy3k57XDIrqMb5JPnjoj0hh9TEhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWExlVG50Y01pdW94dmtrLWVPaVBTR0gxTVNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9jNDM4NmYtZDFiZS00M2M4LTk5MmYt
MmVkYWZjNjBmMmRmLzEvWExlVG50Y01pdW94dmtrLWVPaVBTR0gxTVNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9jNDM4NmYtZDFiZS00M2M4LTk5MmYtMmVkYWZjNjBmMmRm
LzEvWExlVG50Y01pdW94dmtrLWVPaVBTR0gxTVNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArYOErKaZ
u1KXVAA8+7G3qusUlvdM5A8Pa5ma0Laz7Y3h3BRFig84OAXOXa2klPKsvltzE9Cb
UATWVINhoDfAFpkn21WgN12kbi9vii819Ud505bnQI6TIWDccBLW8VlqHBoPtdsL
mHkqh0hM+tDNVlFZQEpx2WYnNO1TG/uNY5PkBTGgyY9uhDxPaiHs1j2W6LiWPeJJ
Ejo6Yo6WJ02hJTm/z6JCgoLfLWlAayiwdmNrKJ6f9rb2Lr+SFSRdEarL+zZ6yp+Y
XQiQNfJGo21bitSRxjdHXEyCNtXWgZJimpOo0D9bhGIgt1kSSXq18V3GkO2fWSB1
0mf5AhPm+blu2g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 20:25:53 2026 by rpki-client