Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft
File: xrxZ-PdUTx6lulwYs44lc1F8kTI.mft (raw, json)
Hash identifier: nWnxHC2H+Mo/H+HlVoNR9DE+jHRi1fgHymZRYEUnQLM=
Subject key identifier: 63:4C:4A:41:14:95:3F:23:68:9E:B9:E0:F6:7D:DF:41:9F:88:95:52
Authority key identifier: C6:BC:59:F8:F7:54:4F:1E:A5:BA:5C:18:B3:8E:25:73:51:7C:91:32
Certificate issuer: /CN=c6bc59f8f7544f1ea5ba5c18b38e2573517c9132
Certificate serial: 019D37C0569B4432CB31DBDE04488E012F77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrxZ-PdUTx6lulwYs44lc1F8kTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft
Manifest number: 07B8
Signing time: Sun 29 Mar 2026 04:00:45 +0000
Manifest this update: Sun 29 Mar 2026 04:00:45 +0000
Manifest next update: Mon 30 Mar 2026 04:00:45 +0000
Files and hashes: 1: Q9ZgPk35Ok6M8we5yqQ4KCOhaNk.roa (hash: JPO6gHRzSYDvTmPZqjhIeasbbYanMzcflBe8oC0yynQ=)
2: xrxZ-PdUTx6lulwYs44lc1F8kTI.crl (hash: dtXKF4Jg8lylMaYByTbyp0V+l0dLqfD37jrD0EIUWyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xrxZ-PdUTx6lulwYs44lc1F8kTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:56:9b:44:32:cb:31:db:de:04:48:8e:01:2f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6bc59f8f7544f1ea5ba5c18b38e2573517c9132
Validity
Not Before: Mar 29 04:00:45 2026 GMT
Not After : Mar 30 04:00:45 2026 GMT
Subject: CN=634c4a4114953f23689eb9e0f67ddf419f889552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:79:c1:62:69:0b:19:4f:87:eb:cf:14:93:6b:
2d:18:17:fe:94:1a:af:4f:37:f5:ad:a2:17:06:35:
ac:8c:69:1a:91:72:86:39:90:50:68:91:c1:14:33:
dd:bc:43:0e:52:87:17:e9:bb:b9:c0:c5:f1:61:c0:
38:32:e8:6b:1e:53:3c:1a:f5:7a:b1:93:4a:9a:fa:
08:40:45:1f:89:59:ac:ba:99:17:92:3e:e6:1b:0b:
97:32:80:75:36:8d:aa:e9:4d:09:14:d5:72:ec:fe:
c1:40:09:f7:60:72:01:63:5a:3c:9c:e1:72:50:ff:
a6:ff:96:32:56:63:f1:b5:b0:c9:06:68:f0:66:6a:
df:3e:64:b0:25:d5:62:c4:e1:4d:ec:8f:a6:22:5d:
80:46:46:f7:3b:bb:8f:da:f1:50:fc:41:d5:89:24:
72:d3:19:3f:c5:64:6e:b2:3c:b1:90:2a:4b:eb:e7:
4e:d7:74:1e:c2:ca:4d:da:39:e1:d0:0b:70:d2:14:
15:46:00:fd:1f:20:67:e1:44:38:13:21:84:e1:f1:
1e:c1:f2:5a:1f:4f:24:d0:b8:b7:de:84:17:21:6b:
c8:7d:81:ac:a3:f7:69:ec:6b:ad:4f:a4:84:f9:8b:
a2:e8:0b:5f:5a:5c:98:20:85:34:54:82:c7:61:08:
72:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:4C:4A:41:14:95:3F:23:68:9E:B9:E0:F6:7D:DF:41:9F:88:95:52
X509v3 Authority Key Identifier:
keyid:C6:BC:59:F8:F7:54:4F:1E:A5:BA:5C:18:B3:8E:25:73:51:7C:91:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrxZ-PdUTx6lulwYs44lc1F8kTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:f8:04:75:0c:85:e5:c7:ac:55:43:2f:7e:15:1c:58:25:df:
b9:e9:22:bc:69:10:53:a4:39:5a:df:c8:0e:23:55:2c:be:d7:
3c:63:10:fe:9b:3a:02:f8:be:47:d2:2a:0b:b9:a3:ca:00:3a:
10:5e:ab:4c:2e:f3:95:4e:c8:df:57:7b:e5:08:16:60:68:17:
55:e1:68:ff:a0:0c:07:7b:8c:d9:59:df:0f:2c:c2:02:49:52:
a4:0d:de:71:40:42:7e:d3:98:11:96:d9:c5:a7:d7:41:2d:7f:
48:ca:65:e4:29:76:c3:63:08:40:ab:73:ad:29:39:a4:64:6d:
58:98:e6:56:4d:b8:97:2b:94:16:d4:fc:25:9e:d6:cd:2d:06:
4f:fd:4d:9b:f1:14:ea:cd:d7:b6:3f:bf:ab:1e:d7:28:37:0b:
35:2b:ff:7c:89:a3:d0:bb:32:c5:a7:3e:8e:fe:d5:0d:2f:ad:
09:4c:96:03:d1:c5:75:18:21:f8:69:8f:b5:21:15:6c:ab:81:
66:40:75:d9:12:78:d3:81:01:00:a3:ed:bc:17:2c:61:48:bf:
73:4e:65:b1:2a:13:fb:4d:cc:03:f0:f5:ab:cf:ac:e9:6b:6a:
7d:06:c2:fe:7c:9e:08:c4:cb:18:61:f8:64:0f:71:8e:89:d5:
0b:b2:e1:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wFabRDLLMdveBEiOAS93MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YmM1OWY4Zjc1NDRmMWVhNWJhNWMxOGIzOGUyNTczNTE3
YzkxMzIwHhcNMjYwMzI5MDQwMDQ1WhcNMjYwMzMwMDQwMDQ1WjAzMTEwLwYDVQQD
Eyg2MzRjNGE0MTE0OTUzZjIzNjg5ZWI5ZTBmNjdkZGY0MTlmODg5NTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHnBYmkLGU+H688Uk2stGBf+lBqv
Tzf1raIXBjWsjGkakXKGOZBQaJHBFDPdvEMOUocX6bu5wMXxYcA4MuhrHlM8GvV6
sZNKmvoIQEUfiVmsupkXkj7mGwuXMoB1No2q6U0JFNVy7P7BQAn3YHIBY1o8nOFy
UP+m/5YyVmPxtbDJBmjwZmrfPmSwJdVixOFN7I+mIl2ARkb3O7uP2vFQ/EHViSRy
0xk/xWRusjyxkCpL6+dO13QewspN2jnh0Atw0hQVRgD9HyBn4UQ4EyGE4fEewfJa
H08k0Li33oQXIWvIfYGso/dp7GutT6SE+Yui6AtfWlyYIIU0VILHYQhytQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGNMSkEUlT8jaJ654PZ930GfiJVSMB8GA1UdIwQY
MBaAFMa8Wfj3VE8epbpcGLOOJXNRfJEyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHJ4Wi1QZFVUeDZsdWx3WXM0NGxjMUY4a1RJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS85M2E4NDMtZDllNi00NDVlLWIyYTAt
M2NhNDA5YjUzMTFmLzEveHJ4Wi1QZFVUeDZsdWx3WXM0NGxjMUY4a1RJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS85M2E4NDMtZDllNi00NDVlLWIyYTAtM2NhNDA5YjUzMTFm
LzEveHJ4Wi1QZFVUeDZsdWx3WXM0NGxjMUY4a1RJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIfgEdQyF
5cesVUMvfhUcWCXfuekivGkQU6Q5Wt/IDiNVLL7XPGMQ/ps6Avi+R9IqC7mjygA6
EF6rTC7zlU7I31d75QgWYGgXVeFo/6AMB3uM2VnfDyzCAklSpA3ecUBCftOYEZbZ
xafXQS1/SMpl5Cl2w2MIQKtzrSk5pGRtWJjmVk24lyuUFtT8JZ7WzS0GT/1Nm/EU
6s3Xtj+/qx7XKDcLNSv/fImj0Lsyxac+jv7VDS+tCUyWA9HFdRgh+GmPtSEVbKuB
ZkB12RJ404EBAKPtvBcsYUi/c05lsSoT+03MA/D1q8+s6WtqfQbC/nyeCMTLGGH4
ZA9xjonVC7LhEA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:35:17 2026 by rpki-client