Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft
File: X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft (raw, json)
Hash identifier: 51wHRSHkQS5RMIaSujdLaVZwj3ZI5qJqy2XVt+WGGX8=
Subject key identifier: BE:07:0B:1E:AD:B1:91:7A:A5:37:56:E3:13:86:33:99:27:5E:87:0C
Authority key identifier: 5F:71:79:EF:F5:E0:E6:7D:03:37:AA:89:12:F9:5A:68:7F:D4:40:89
Certificate issuer: /CN=5f7179eff5e0e67d0337aa8912f95a687fd44089
Certificate serial: 019D3A53BB5F1A0770D7066C72E6FE5380AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X3F57_Xg5n0DN6qJEvlaaH_UQIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft
Manifest number: 0791
Signing time: Sun 29 Mar 2026 16:00:59 +0000
Manifest this update: Sun 29 Mar 2026 16:00:59 +0000
Manifest next update: Mon 30 Mar 2026 16:00:59 +0000
Files and hashes: 1: Sp-Rp44m3Zt8RuuF6n5097S4ock.roa (hash: Lz4ywdxNN6CBi6o+N2fbgHtT/99fDk01I1Om7/73lR4=)
2: X3F57_Xg5n0DN6qJEvlaaH_UQIk.crl (hash: 0BcDGcm7mb/MhVl6mD64EPdHUtvl9iJu9A4c8TWFen4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/X3F57_Xg5n0DN6qJEvlaaH_UQIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:bb:5f:1a:07:70:d7:06:6c:72:e6:fe:53:80:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7179eff5e0e67d0337aa8912f95a687fd44089
Validity
Not Before: Mar 29 16:00:59 2026 GMT
Not After : Mar 30 16:00:59 2026 GMT
Subject: CN=be070b1eadb1917aa53756e313863399275e870c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d8:58:02:49:d5:fb:68:ef:35:2c:4d:d1:b2:
64:49:eb:9a:da:46:7f:3b:2c:f2:62:7c:96:66:19:
6d:d5:7c:71:72:ba:d1:d6:93:3c:09:ee:38:27:d5:
58:b6:a3:c4:02:42:ef:44:5b:72:7e:16:2f:a9:e1:
a1:79:bc:ec:a1:9a:dd:7f:dd:3d:dc:24:fe:da:56:
b4:bd:56:15:b8:7a:98:f6:1a:22:f2:09:d3:34:f4:
de:e2:4d:8b:4e:a9:5a:1d:3e:88:5b:bc:b0:e4:fc:
29:24:35:63:bf:52:68:9f:90:ea:24:19:93:9d:76:
6e:48:43:f1:21:74:7e:db:cc:d4:62:76:20:7f:0f:
28:2b:6b:39:5a:78:bf:71:eb:35:bd:5b:8e:6c:a4:
73:19:82:a0:3d:36:33:0e:b3:ff:e2:1f:1d:50:07:
29:7c:63:79:e8:5a:32:44:dd:05:fe:37:67:9f:41:
7e:c2:49:f6:ae:40:a2:38:06:2b:8c:77:c6:59:08:
ae:72:7b:a7:95:8f:95:c3:6c:b6:52:d5:4f:98:f4:
31:8b:65:ed:77:71:f1:65:62:ae:76:96:1c:27:92:
8d:d5:c0:96:6a:63:36:8f:12:d1:a8:a2:ab:b8:c2:
4a:be:e3:dd:a7:e3:73:39:9b:99:69:1f:af:b9:72:
70:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:07:0B:1E:AD:B1:91:7A:A5:37:56:E3:13:86:33:99:27:5E:87:0C
X509v3 Authority Key Identifier:
keyid:5F:71:79:EF:F5:E0:E6:7D:03:37:AA:89:12:F9:5A:68:7F:D4:40:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X3F57_Xg5n0DN6qJEvlaaH_UQIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:ee:a2:54:5e:b6:76:fa:98:34:65:1c:e2:42:1c:ac:42:aa:
95:1f:e9:b1:6c:46:02:6a:c4:fe:b1:fd:33:84:62:b3:3b:e8:
fc:43:fd:b1:0c:a7:40:ca:87:7f:ec:42:d5:ee:08:25:5a:79:
18:cf:eb:7d:59:fa:05:d8:75:3c:ce:80:ab:e4:55:5f:66:e0:
bc:87:23:d7:2a:72:7e:7c:df:d8:24:af:f8:90:7c:81:83:e7:
4e:13:4c:db:45:b1:b8:b4:b0:d6:c3:fc:5a:06:f3:97:ef:ab:
1f:1e:19:85:6f:8e:65:43:c1:9d:07:00:56:c5:70:b5:9e:21:
2c:40:4c:d2:73:82:11:61:f4:fc:e7:c1:2f:c8:34:4b:90:d7:
dd:b7:f8:1a:28:34:cb:23:af:59:91:ab:d0:e0:8a:e4:bb:0d:
c7:44:96:e9:7b:66:00:e2:ab:20:f7:a1:0d:fd:f2:32:cc:0a:
29:e3:48:8f:f4:ee:a7:db:15:41:23:2c:0c:15:40:1d:cb:ec:
59:ef:5c:5a:49:bb:f8:08:c4:5f:64:90:4d:f2:8f:6a:e5:e8:
90:fd:7a:38:c1:04:3b:71:47:af:be:63:73:0e:06:6b:93:92:
80:d4:2b:50:61:83:d8:c7:09:94:c5:be:0c:43:47:c5:73:ce:
8e:0c:4e:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06U7tfGgdw1wZscub+U4CvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmNzE3OWVmZjVlMGU2N2QwMzM3YWE4OTEyZjk1YTY4N2Zk
NDQwODkwHhcNMjYwMzI5MTYwMDU5WhcNMjYwMzMwMTYwMDU5WjAzMTEwLwYDVQQD
EyhiZTA3MGIxZWFkYjE5MTdhYTUzNzU2ZTMxMzg2MzM5OTI3NWU4NzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9hYAknV+2jvNSxN0bJkSeua2kZ/
OyzyYnyWZhlt1XxxcrrR1pM8Ce44J9VYtqPEAkLvRFtyfhYvqeGhebzsoZrdf909
3CT+2la0vVYVuHqY9hoi8gnTNPTe4k2LTqlaHT6IW7yw5PwpJDVjv1Jon5DqJBmT
nXZuSEPxIXR+28zUYnYgfw8oK2s5Wni/ces1vVuObKRzGYKgPTYzDrP/4h8dUAcp
fGN56FoyRN0F/jdnn0F+wkn2rkCiOAYrjHfGWQiucnunlY+Vw2y2UtVPmPQxi2Xt
d3HxZWKudpYcJ5KN1cCWamM2jxLRqKKruMJKvuPdp+NzOZuZaR+vuXJwpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL4HCx6tsZF6pTdW4xOGM5knXocMMB8GA1UdIwQY
MBaAFF9xee/14OZ9AzeqiRL5Wmh/1ECJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDNGNTdfWGc1bjBETjZxSkV2bGFhSF9VUUlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9jNDRkOTMtMTY5NS00YWIxLTkxNDIt
NDI5NmQ3YWJkM2QxLzEvWDNGNTdfWGc1bjBETjZxSkV2bGFhSF9VUUlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9jNDRkOTMtMTY5NS00YWIxLTkxNDItNDI5NmQ3YWJkM2Qx
LzEvWDNGNTdfWGc1bjBETjZxSkV2bGFhSF9VUUlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAre6iVF62
dvqYNGUc4kIcrEKqlR/psWxGAmrE/rH9M4Riszvo/EP9sQynQMqHf+xC1e4IJVp5
GM/rfVn6Bdh1PM6Aq+RVX2bgvIcj1ypyfnzf2CSv+JB8gYPnThNM20WxuLSw1sP8
Wgbzl++rHx4ZhW+OZUPBnQcAVsVwtZ4hLEBM0nOCEWH0/OfBL8g0S5DX3bf4Gig0
yyOvWZGr0OCK5LsNx0SW6XtmAOKrIPehDf3yMswKKeNIj/Tup9sVQSMsDBVAHcvs
We9cWkm7+AjEX2SQTfKPauXokP16OMEEO3FHr75jcw4Ga5OSgNQrUGGD2McJlMW+
DENHxXPOjgxOzQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:23 2026 by rpki-client