Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.mft
File: RlxixrzUz7iTO8tqYc97Pa0vsRg.mft (raw, json)
Hash identifier: dX44rfGgcGcZlpCypHI4sEtaRwg5PaOeE6niQR9wWUo=
Subject key identifier: 99:86:13:A4:4C:49:A9:91:09:95:55:0F:21:36:8F:E0:1C:4B:EF:74
Authority key identifier: 46:5C:62:C6:BC:D4:CF:B8:93:3B:CB:6A:61:CF:7B:3D:AD:2F:B1:18
Certificate issuer: /CN=465c62c6bcd4cfb8933bcb6a61cf7b3dad2fb118
Certificate serial: 019D382E9993A94A61994A169388CC60AEFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RlxixrzUz7iTO8tqYc97Pa0vsRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.mft
Manifest number: 0F85
Signing time: Sun 29 Mar 2026 06:01:10 +0000
Manifest this update: Sun 29 Mar 2026 06:01:10 +0000
Manifest next update: Mon 30 Mar 2026 06:01:10 +0000
Files and hashes: 1: ENG_c-IJkYRyd704wrJW6p57tLE.roa (hash: aVJt7m5b3gAwKY//U3FCsQzjDpxFgRS6LuQjONM9IoA=)
2: LKRFm8Pw00kXQoKIo5cZaR03rQg.roa (hash: ROfiKIWzfySuULtZm3Vy25ggedOkAvvyQXevFfnrv84=)
3: RlxixrzUz7iTO8tqYc97Pa0vsRg.crl (hash: HpucqIYNBk8KSGofj3kpYn1iNublZ+nLi2cQVrYqMq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RlxixrzUz7iTO8tqYc97Pa0vsRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:99:93:a9:4a:61:99:4a:16:93:88:cc:60:ae:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465c62c6bcd4cfb8933bcb6a61cf7b3dad2fb118
Validity
Not Before: Mar 29 06:01:10 2026 GMT
Not After : Mar 30 06:01:10 2026 GMT
Subject: CN=998613a44c49a9910995550f21368fe01c4bef74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:81:d5:13:f8:74:97:11:79:ad:98:fc:f5:9b:
7f:8f:c8:05:01:a7:67:89:11:71:7f:ee:0d:74:ae:
c8:ba:43:22:b7:28:e0:29:92:b2:eb:08:9b:6d:aa:
89:fb:e3:49:be:05:2f:9e:db:79:2f:94:9b:d3:91:
2c:11:64:b8:31:3f:17:53:63:0f:92:b3:02:32:9c:
f5:2f:7d:a1:22:35:6b:c4:ab:a4:3b:10:e2:75:45:
65:f0:30:04:08:a0:bb:1a:0e:fd:00:ce:8a:ef:5c:
5a:84:36:d6:cb:93:17:e3:cc:95:b2:0f:2d:0c:e8:
f9:50:d8:f1:d6:6f:97:6e:9d:91:d2:21:9e:af:0c:
f6:00:c9:76:88:55:c4:81:d2:53:27:89:a0:46:af:
dd:c3:81:81:39:5d:a2:ee:ec:6d:73:cb:52:aa:30:
20:f1:d2:6d:2f:30:9d:0d:76:49:67:eb:ea:eb:ea:
25:11:67:ae:09:b8:d4:26:16:d8:22:22:a1:2d:ac:
25:4c:fe:53:1d:1e:f3:c8:a9:bc:e1:da:f6:ae:5e:
81:ce:81:80:6d:6a:4d:4c:ec:38:d2:9d:c1:6b:dc:
53:46:78:82:35:56:71:25:57:1e:39:ba:68:27:1b:
04:f7:29:f6:4e:10:68:21:7e:9e:1a:2b:17:5c:7a:
1b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:86:13:A4:4C:49:A9:91:09:95:55:0F:21:36:8F:E0:1C:4B:EF:74
X509v3 Authority Key Identifier:
keyid:46:5C:62:C6:BC:D4:CF:B8:93:3B:CB:6A:61:CF:7B:3D:AD:2F:B1:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RlxixrzUz7iTO8tqYc97Pa0vsRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:57:dd:fc:fa:4b:1a:cd:f7:8e:d7:0d:d7:e4:cd:f5:9d:61:
84:8b:87:cc:ba:db:82:0b:2f:c8:94:33:d6:31:26:ef:a5:2c:
42:86:3a:6d:bd:9e:de:52:c8:bb:75:2d:83:88:dc:c8:54:75:
2e:a6:59:33:1d:69:d9:9d:81:7f:7f:3f:89:5b:40:c9:51:72:
d3:78:8d:9d:51:7e:db:ff:73:85:21:d5:37:71:a4:74:03:af:
56:34:87:b7:f2:01:a7:24:e9:9a:70:70:1a:16:b9:be:53:2c:
c0:fb:ac:93:31:bf:8d:f0:71:c7:d4:e5:4c:14:b2:4a:bd:41:
28:dc:b1:86:fa:c1:cf:fe:85:11:a9:ac:f7:85:99:02:62:5d:
3e:d2:89:c3:7f:43:94:26:b5:0b:6f:57:b7:fe:c6:8b:b3:c9:
42:b1:a4:17:02:73:fc:ff:be:85:5c:f3:45:0b:7e:60:81:30:
30:55:67:8f:ec:35:63:f7:02:bd:5a:ba:9e:a9:81:34:3e:ee:
16:c7:9a:2d:0a:0e:36:c9:af:1f:c5:60:99:c9:0a:81:c1:7e:
f4:0b:bc:0a:8b:43:5f:9c:b8:b4:31:64:22:55:6f:10:b9:e5:
fa:9b:e8:ac:8b:a0:02:b2:c5:19:7e:43:4c:2f:35:97:f3:87:
cb:eb:c8:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LpmTqUphmUoWk4jMYK7/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NWM2MmM2YmNkNGNmYjg5MzNiY2I2YTYxY2Y3YjNkYWQy
ZmIxMTgwHhcNMjYwMzI5MDYwMTEwWhcNMjYwMzMwMDYwMTEwWjAzMTEwLwYDVQQD
Eyg5OTg2MTNhNDRjNDlhOTkxMDk5NTU1MGYyMTM2OGZlMDFjNGJlZjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIHVE/h0lxF5rZj89Zt/j8gFAadn
iRFxf+4NdK7IukMityjgKZKy6wibbaqJ++NJvgUvntt5L5Sb05EsEWS4MT8XU2MP
krMCMpz1L32hIjVrxKukOxDidUVl8DAECKC7Gg79AM6K71xahDbWy5MX48yVsg8t
DOj5UNjx1m+Xbp2R0iGerwz2AMl2iFXEgdJTJ4mgRq/dw4GBOV2i7uxtc8tSqjAg
8dJtLzCdDXZJZ+vq6+olEWeuCbjUJhbYIiKhLawlTP5THR7zyKm84dr2rl6BzoGA
bWpNTOw40p3Ba9xTRniCNVZxJVceObpoJxsE9yn2ThBoIX6eGisXXHobcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJmGE6RMSamRCZVVDyE2j+AcS+90MB8GA1UdIwQY
MBaAFEZcYsa81M+4kzvLamHPez2tL7EYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmx4aXhyelV6N2lUTzh0cVljOTdQYTB2c1JnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC80OWEyMjEtNjdmNS00ZWRkLWIwMGQt
NGQyYzRjNWFkMTRlLzEvUmx4aXhyelV6N2lUTzh0cVljOTdQYTB2c1JnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC80OWEyMjEtNjdmNS00ZWRkLWIwMGQtNGQyYzRjNWFkMTRl
LzEvUmx4aXhyelV6N2lUTzh0cVljOTdQYTB2c1JnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH1fd/PpL
Gs33jtcN1+TN9Z1hhIuHzLrbggsvyJQz1jEm76UsQoY6bb2e3lLIu3Utg4jcyFR1
LqZZMx1p2Z2Bf38/iVtAyVFy03iNnVF+2/9zhSHVN3GkdAOvVjSHt/IBpyTpmnBw
Gha5vlMswPuskzG/jfBxx9TlTBSySr1BKNyxhvrBz/6FEams94WZAmJdPtKJw39D
lCa1C29Xt/7Gi7PJQrGkFwJz/P++hVzzRQt+YIEwMFVnj+w1Y/cCvVq6nqmBND7u
FseaLQoONsmvH8VgmckKgcF+9Au8CotDX5y4tDFkIlVvELnl+pvorIugArLFGX5D
TC81l/OHy+vIxQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:13 2026 by rpki-client