Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
File: xXHZWAqPAeScYcX8_f8uWJlTS48.mft (raw, json)
Hash identifier: zwktHLkh5atfkn1Kt05rZZ2r3U3S04pWhJu4cniEOQ8=
Subject key identifier: 98:BC:22:5C:C4:0D:7C:72:3F:E3:42:A2:2B:C4:0A:E1:48:0C:07:CB
Authority key identifier: C5:71:D9:58:0A:8F:01:E4:9C:61:C5:FC:FD:FF:2E:58:99:53:4B:8F
Certificate issuer: /CN=c571d9580a8f01e49c61c5fcfdff2e5899534b8f
Certificate serial: 019D39AF640D61594353F0CC2BBBFA416A0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
Manifest number: 0744
Signing time: Sun 29 Mar 2026 13:01:28 +0000
Manifest this update: Sun 29 Mar 2026 13:01:28 +0000
Manifest next update: Mon 30 Mar 2026 13:01:28 +0000
Files and hashes: 1: uWNKx0IJVXvtTHYU4bkunZTjfuw.roa (hash: AUH4XmlqocQ9F/9lHvt0FvG+HzGfyUQaY0PdFUq9T4I=)
2: xXHZWAqPAeScYcX8_f8uWJlTS48.crl (hash: tSaYZxrTTemDrpw5NWDvC7H2p5OkqW2ci/OLSM1aTwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:64:0d:61:59:43:53:f0:cc:2b:bb:fa:41:6a:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c571d9580a8f01e49c61c5fcfdff2e5899534b8f
Validity
Not Before: Mar 29 13:01:28 2026 GMT
Not After : Mar 30 13:01:28 2026 GMT
Subject: CN=98bc225cc40d7c723fe342a22bc40ae1480c07cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:18:5d:cf:0b:d1:5c:b4:26:43:24:61:b5:49:
19:86:63:ac:ae:06:2f:4e:b4:82:18:f9:71:54:69:
2d:fb:ec:4f:b6:11:12:54:a4:3e:1d:ff:50:b5:3f:
73:85:84:2c:dc:b0:24:c5:e7:12:d2:e4:4e:07:c4:
71:cd:da:c7:1b:4e:49:43:7e:de:d0:96:3a:a6:ee:
a2:73:60:15:c3:72:eb:1a:7a:05:a3:f8:a8:0d:85:
35:56:13:2c:f3:42:47:0a:35:29:b7:e2:04:9e:44:
03:16:da:0e:f8:f4:6d:6d:99:b5:10:26:cf:e8:3d:
20:3a:5c:bf:96:54:6d:d8:a6:92:5e:a5:c8:4a:37:
06:ce:f7:c5:c0:8a:d3:36:d0:1d:8e:c7:86:74:5e:
9a:60:61:da:f3:c2:b9:30:06:09:21:7b:e7:eb:b4:
40:52:c1:b3:75:3f:86:b3:e5:00:73:4f:b7:07:f0:
70:64:ad:75:ef:ce:33:11:55:f7:63:fa:f1:99:30:
b2:50:42:e7:77:bb:48:dd:f3:d0:53:56:7c:a3:d9:
35:38:09:ac:91:52:84:1f:44:40:da:92:38:01:55:
85:d7:17:63:9b:61:b1:8d:a2:26:8c:bb:7e:b9:36:
2c:88:c6:cb:b7:cd:1a:c2:f9:7a:c1:c5:21:fb:de:
19:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:BC:22:5C:C4:0D:7C:72:3F:E3:42:A2:2B:C4:0A:E1:48:0C:07:CB
X509v3 Authority Key Identifier:
keyid:C5:71:D9:58:0A:8F:01:E4:9C:61:C5:FC:FD:FF:2E:58:99:53:4B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:d7:37:30:ed:3c:af:6d:68:3d:65:9d:7b:c4:93:cf:47:56:
77:18:38:d4:55:59:5e:d8:99:6c:b5:ba:15:63:10:81:f4:9e:
a2:da:eb:f4:a6:98:57:32:d4:fa:be:27:11:cb:09:0f:b0:d1:
e1:5f:1b:c8:14:df:38:1b:a2:ba:bc:d3:fd:e5:52:02:92:0e:
e7:f3:c6:a6:ec:1e:ab:6f:14:d9:5d:d3:5b:40:89:12:af:a0:
75:20:46:e5:d1:8d:93:68:60:14:cc:b2:e8:b0:a0:21:5e:4c:
1e:f6:74:2b:fa:5d:10:31:ec:2e:af:68:8a:ec:fc:be:18:57:
4c:3c:94:37:7a:46:b0:71:b0:80:34:f0:02:25:8b:2e:b5:e6:
7b:72:99:4b:a3:49:5b:5a:5d:42:1b:78:48:7d:84:82:a5:6e:
fd:b7:ac:83:17:01:c5:bc:62:2d:50:30:f4:28:8d:2b:90:0a:
a6:24:05:66:84:ad:78:9e:23:04:db:86:3a:83:22:b8:a1:22:
30:c8:c0:18:dd:bb:92:0e:52:ff:4b:f4:ac:43:8a:1e:ca:1d:
91:eb:d8:18:62:17:2e:46:fa:41:7e:d9:64:bc:21:98:d5:40:
b4:58:2e:76:77:8e:40:9a:4e:d7:93:91:1f:92:b8:0a:e4:c1:
0c:11:4d:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05r2QNYVlDU/DMK7v6QWoLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NzFkOTU4MGE4ZjAxZTQ5YzYxYzVmY2ZkZmYyZTU4OTk1
MzRiOGYwHhcNMjYwMzI5MTMwMTI4WhcNMjYwMzMwMTMwMTI4WjAzMTEwLwYDVQQD
Eyg5OGJjMjI1Y2M0MGQ3YzcyM2ZlMzQyYTIyYmM0MGFlMTQ4MGMwN2NiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBhdzwvRXLQmQyRhtUkZhmOsrgYv
TrSCGPlxVGkt++xPthESVKQ+Hf9QtT9zhYQs3LAkxecS0uROB8RxzdrHG05JQ37e
0JY6pu6ic2AVw3LrGnoFo/ioDYU1VhMs80JHCjUpt+IEnkQDFtoO+PRtbZm1ECbP
6D0gOly/llRt2KaSXqXISjcGzvfFwIrTNtAdjseGdF6aYGHa88K5MAYJIXvn67RA
UsGzdT+Gs+UAc0+3B/BwZK11784zEVX3Y/rxmTCyUELnd7tI3fPQU1Z8o9k1OAms
kVKEH0RA2pI4AVWF1xdjm2GxjaImjLt+uTYsiMbLt80awvl6wcUh+94Z+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJi8IlzEDXxyP+NCoivECuFIDAfLMB8GA1UdIwQY
MBaAFMVx2VgKjwHknGHF/P3/LliZU0uPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFhIWldBcVBBZVNjWWNYOF9mOHVXSmxUUzQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni84MTFmMjEtMTI1Yi00ZDA3LWJhYzgt
NzU0NmRkMTcxNmM4LzEveFhIWldBcVBBZVNjWWNYOF9mOHVXSmxUUzQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni84MTFmMjEtMTI1Yi00ZDA3LWJhYzgtNzU0NmRkMTcxNmM4
LzEveFhIWldBcVBBZVNjWWNYOF9mOHVXSmxUUzQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALNc3MO08
r21oPWWde8STz0dWdxg41FVZXtiZbLW6FWMQgfSeotrr9KaYVzLU+r4nEcsJD7DR
4V8byBTfOBuiurzT/eVSApIO5/PGpuweq28U2V3TW0CJEq+gdSBG5dGNk2hgFMyy
6LCgIV5MHvZ0K/pdEDHsLq9oiuz8vhhXTDyUN3pGsHGwgDTwAiWLLrXme3KZS6NJ
W1pdQht4SH2EgqVu/besgxcBxbxiLVAw9CiNK5AKpiQFZoSteJ4jBNuGOoMiuKEi
MMjAGN27kg5S/0v0rEOKHsodkevYGGIXLkb6QX7ZZLwhmNVAtFgudneOQJpO15OR
H5K4CuTBDBFNGA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 21:17:16 2026 by rpki-client