Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
File: rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft (raw, json)
Hash identifier: FQOuSz4+thoMykajCaAOsh3pkbvqf67Z3epr+IMuvOM=
Subject key identifier: 8E:34:00:ED:17:A8:56:F9:B2:E9:92:BA:94:81:36:BF:09:58:88:4C
Authority key identifier: AF:12:1C:D6:E1:1D:A0:95:F8:56:D7:9D:EE:C4:69:D0:C6:35:84:94
Certificate issuer: /CN=af121cd6e11da095f856d79deec469d0c6358494
Certificate serial: 019D382DDC8017F20E609495AC6DA6C29AB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
Manifest number: 13CF
Signing time: Sun 29 Mar 2026 06:00:22 +0000
Manifest this update: Sun 29 Mar 2026 06:00:22 +0000
Manifest next update: Mon 30 Mar 2026 06:00:22 +0000
Files and hashes: 1: KzmoITHkJpLOR4Tlul5pobyRKM4.roa (hash: AsqRiFYDTCnKZFcWZmiW079vgPj+Gpml9bimn7NxEjY=)
2: LeESlSzWIvuQdTBNS-mk1tTyv7E.roa (hash: WD96tCmI2Z4zPrVkF6yX9hz40ljCQT+UIo7XuVxQtwE=)
3: rXLsHixYlq3Kcw9EvhZkSV4zLvI.roa (hash: xL1IzYaCYhuM2YhqoZfpmf/cRlZ3zbvhm0l28fnKcTk=)
4: rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl (hash: vHR+xVLa1xZ2R6ECO/PYrr8AjuwZa65PmRecA85CKDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:dc:80:17:f2:0e:60:94:95:ac:6d:a6:c2:9a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af121cd6e11da095f856d79deec469d0c6358494
Validity
Not Before: Mar 29 06:00:22 2026 GMT
Not After : Mar 30 06:00:22 2026 GMT
Subject: CN=8e3400ed17a856f9b2e992ba948136bf0958884c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:12:a4:4e:37:50:bd:80:29:b8:2c:56:4b:1a:
21:46:cb:16:1b:de:70:96:b4:34:99:6c:32:05:b7:
4b:60:5a:7b:f6:d4:89:a3:2f:aa:58:a2:f2:01:c6:
d5:e8:1d:00:0e:fd:9f:9d:81:d0:a8:34:66:40:eb:
ee:2e:34:b9:5b:2e:c3:f1:51:7b:76:77:30:c8:38:
ef:11:12:ed:d3:87:f7:e8:75:6f:32:29:a0:41:b7:
2e:90:dc:0c:ad:39:f4:57:12:b6:06:1d:bb:2d:9c:
a7:47:da:41:62:0d:ea:7f:f4:12:ad:4d:7d:0f:ed:
e1:cb:f2:fb:82:bc:42:2c:44:6c:0e:5c:e2:a4:85:
ec:09:d3:37:55:1f:1a:9f:a8:b2:5b:d0:07:44:b6:
03:69:7f:b7:be:bb:ec:e8:df:ca:f2:27:1a:9b:9b:
74:60:c9:13:4f:ab:6d:d7:f7:b1:ce:e2:41:f1:51:
f8:ec:5a:9b:94:90:b8:9c:35:d7:eb:6d:b3:b0:12:
84:ab:3f:65:db:02:90:7c:97:f5:28:40:91:0b:0e:
9f:da:e8:ee:99:95:15:84:9b:a7:90:7d:65:1a:e3:
64:db:46:b9:14:94:8d:f0:1d:7f:35:79:4b:a8:01:
bb:c2:a7:ca:a8:d0:60:0b:f4:4e:de:6f:61:1f:1c:
d0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:34:00:ED:17:A8:56:F9:B2:E9:92:BA:94:81:36:BF:09:58:88:4C
X509v3 Authority Key Identifier:
keyid:AF:12:1C:D6:E1:1D:A0:95:F8:56:D7:9D:EE:C4:69:D0:C6:35:84:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:cf:7e:7c:5c:93:17:4f:93:1d:a8:24:a5:1c:20:6d:22:ab:
3d:a6:7f:cc:34:08:17:b9:25:2a:45:ad:d7:de:0a:2f:c2:91:
d5:e1:ad:ad:f2:26:21:53:07:a9:e1:ca:e9:b3:e9:0a:bc:71:
28:97:5f:90:78:86:21:78:e1:7d:ee:53:b7:af:fd:a5:81:67:
6a:f0:b8:b8:59:cd:4e:b2:e7:02:bf:5f:a0:9a:a4:47:92:4a:
3f:01:d7:08:d4:91:b9:49:00:27:d3:11:0e:06:ee:fd:1d:50:
fe:cc:21:84:ff:51:db:7e:78:b3:3f:18:db:db:a4:3d:24:16:
e4:f4:6b:8a:ca:eb:8a:2a:e5:d5:30:2d:40:dd:01:d3:09:ce:
e6:5e:61:82:75:58:83:3e:ff:b0:c4:fb:3e:0c:61:95:69:61:
85:6e:53:a9:a2:2f:2e:0d:cc:d2:7d:a1:6e:b4:da:cd:4d:b7:
e1:ed:b6:39:9c:4a:cf:66:7d:2f:55:82:d4:29:80:e1:4a:ba:
82:5a:88:3a:e3:cb:5e:c6:2d:21:09:0e:04:5a:a0:1a:8b:be:
40:2e:e2:d4:29:a3:fc:13:fb:20:21:27:23:99:e5:bd:f8:bf:
c8:93:83:7a:55:1d:48:b0:78:37:86:95:24:c9:c3:71:88:1f:
78:bd:7c:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LdyAF/IOYJSVrG2mwpq3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMTIxY2Q2ZTExZGEwOTVmODU2ZDc5ZGVlYzQ2OWQwYzYz
NTg0OTQwHhcNMjYwMzI5MDYwMDIyWhcNMjYwMzMwMDYwMDIyWjAzMTEwLwYDVQQD
Eyg4ZTM0MDBlZDE3YTg1NmY5YjJlOTkyYmE5NDgxMzZiZjA5NTg4ODRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRKkTjdQvYApuCxWSxohRssWG95w
lrQ0mWwyBbdLYFp79tSJoy+qWKLyAcbV6B0ADv2fnYHQqDRmQOvuLjS5Wy7D8VF7
dncwyDjvERLt04f36HVvMimgQbcukNwMrTn0VxK2Bh27LZynR9pBYg3qf/QSrU19
D+3hy/L7grxCLERsDlzipIXsCdM3VR8an6iyW9AHRLYDaX+3vrvs6N/K8icam5t0
YMkTT6tt1/exzuJB8VH47FqblJC4nDXX622zsBKEqz9l2wKQfJf1KECRCw6f2uju
mZUVhJunkH1lGuNk20a5FJSN8B1/NXlLqAG7wqfKqNBgC/RO3m9hHxzQ+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI40AO0XqFb5sumSupSBNr8JWIhMMB8GA1UdIwQY
MBaAFK8SHNbhHaCV+FbXne7EadDGNYSUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnhJYzF1RWRvSlg0VnRlZDdzUnAwTVkxaEpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9mZDYwNjktNDE3OS00NWJlLWI4MmEt
YWYzZjc5NGFlNjA3LzEvcnhJYzF1RWRvSlg0VnRlZDdzUnAwTVkxaEpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9mZDYwNjktNDE3OS00NWJlLWI4MmEtYWYzZjc5NGFlNjA3
LzEvcnhJYzF1RWRvSlg0VnRlZDdzUnAwTVkxaEpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI89+fFyT
F0+THagkpRwgbSKrPaZ/zDQIF7klKkWt194KL8KR1eGtrfImIVMHqeHK6bPpCrxx
KJdfkHiGIXjhfe5Tt6/9pYFnavC4uFnNTrLnAr9foJqkR5JKPwHXCNSRuUkAJ9MR
Dgbu/R1Q/swhhP9R2354sz8Y29ukPSQW5PRrisrriirl1TAtQN0B0wnO5l5hgnVY
gz7/sMT7PgxhlWlhhW5TqaIvLg3M0n2hbrTazU234e22OZxKz2Z9L1WC1CmA4Uq6
glqIOuPLXsYtIQkOBFqgGou+QC7i1Cmj/BP7ICEnI5nlvfi/yJODelUdSLB4N4aV
JMnDcYgfeL18YQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:19 2026 by rpki-client