Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
File: xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft (raw, json)
Hash identifier: PwX17WCV49+xweyhn/7Lzkr2PxfSB22typQw6E5RXUE=
Subject key identifier: 9A:BD:D9:4E:AF:A4:C7:E6:5F:99:E6:C6:C9:3E:5A:F4:A6:60:74:BC
Authority key identifier: C4:CC:02:F8:FA:74:CF:0D:A8:1E:8C:E2:94:3E:A7:F9:ED:2A:85:F4
Certificate issuer: /CN=c4cc02f8fa74cf0da81e8ce2943ea7f9ed2a85f4
Certificate serial: 019D37525633D97DB36026F552B34936C652
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
Manifest number: 0987
Signing time: Sun 29 Mar 2026 02:00:36 +0000
Manifest this update: Sun 29 Mar 2026 02:00:36 +0000
Manifest next update: Mon 30 Mar 2026 02:00:36 +0000
Files and hashes: 1: DXdb0QbgjHMGHimqfVTZInAkH0I.roa (hash: zClF7sUyyb6keJxNkbEQRGoa69WKNSmQnfjqa4nnCv8=)
2: rDKGPxVegdVjKSh5RnICAFOVm5s.roa (hash: Xcgmgg/GuSeVcsd6rM/OBeKREsZ93Yvuqbvwr0v7xYc=)
3: xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl (hash: X7rm3P7r8QzDp4ZrqLaxP2LXGGPxi3VNJfyK8yzVEhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:56:33:d9:7d:b3:60:26:f5:52:b3:49:36:c6:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4cc02f8fa74cf0da81e8ce2943ea7f9ed2a85f4
Validity
Not Before: Mar 29 02:00:36 2026 GMT
Not After : Mar 30 02:00:36 2026 GMT
Subject: CN=9abdd94eafa4c7e65f99e6c6c93e5af4a66074bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5a:59:22:19:27:de:c8:4d:65:65:11:34:0e:
15:8b:83:a2:57:92:d3:16:40:25:fb:3d:4b:f4:c7:
dd:1b:37:1d:1b:c6:12:21:4f:da:e7:84:34:75:23:
ef:16:cb:34:7d:24:11:37:de:3f:3d:31:74:12:c6:
8f:24:1d:8e:50:da:42:71:4f:89:b9:3d:e1:aa:6c:
80:49:d2:ed:f3:56:46:06:20:9d:e0:db:31:33:bb:
67:45:58:9e:00:84:29:0c:40:e2:5f:f1:79:48:c2:
19:4d:95:91:f1:1b:df:d1:b5:33:08:08:bb:13:a5:
1f:0c:1f:7a:6c:39:d5:74:4a:7c:18:91:c2:99:a2:
2f:c0:a7:ed:d3:85:ba:da:34:c0:11:cc:d8:f3:35:
87:b6:60:15:c5:a7:90:ee:e2:9e:89:57:78:1f:9c:
58:ea:9d:c5:eb:bc:de:ff:d8:fd:76:ba:25:b7:94:
25:0b:d5:59:03:fe:68:13:50:0a:a4:77:2e:10:72:
9b:a3:79:6d:f6:95:cb:81:f4:af:6a:6a:96:bc:f3:
86:7c:c7:e4:f4:c6:6b:4c:25:16:43:be:f2:83:8f:
5a:e3:ef:5e:ea:89:3f:67:a3:e2:cc:70:95:6c:2b:
8a:47:e7:4c:a4:6a:ad:07:88:ba:7d:a4:d4:01:bc:
e3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:BD:D9:4E:AF:A4:C7:E6:5F:99:E6:C6:C9:3E:5A:F4:A6:60:74:BC
X509v3 Authority Key Identifier:
keyid:C4:CC:02:F8:FA:74:CF:0D:A8:1E:8C:E2:94:3E:A7:F9:ED:2A:85:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:21:5e:9e:a5:d5:b8:d5:55:ad:79:93:30:98:f8:77:22:0e:
47:33:0e:e1:9b:3b:7f:47:04:e8:e5:69:5b:27:79:e1:8f:82:
06:17:93:69:8c:26:2e:35:6c:92:65:36:7a:30:67:5e:7d:60:
49:6d:41:36:b3:71:47:63:c8:a0:26:a6:77:83:a5:67:d9:21:
c6:75:df:13:6f:4e:8b:22:8c:c1:ed:c7:d9:53:75:22:55:f7:
a9:9c:e2:64:c8:6e:89:8c:f5:86:5a:99:55:2b:9f:b2:4d:9f:
d9:38:28:35:b6:51:e0:e6:d8:2a:c3:1c:74:c5:fe:db:8f:7d:
fe:bc:83:b7:04:6c:e3:a3:52:73:ce:01:72:dc:69:05:10:9a:
b1:27:72:1b:32:78:f8:f7:02:84:44:06:d1:5f:84:43:8a:5c:
55:1e:7a:dd:50:06:20:55:e0:b3:5d:b8:92:34:a5:54:22:7e:
d9:d2:3b:3f:dc:dd:a4:2a:fd:ad:ca:b3:d4:ac:26:e0:2f:9a:
58:97:70:0a:be:93:6d:64:e0:42:0c:0f:9f:e7:97:bf:fe:4b:
dc:48:67:20:1b:8f:6c:3a:d5:e7:41:43:38:e5:84:34:41:22:
fe:2d:23:82:d9:d3:b5:56:ec:1b:33:ba:22:d0:1c:6a:ec:9f:
d6:24:87:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UlYz2X2zYCb1UrNJNsZSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0Y2MwMmY4ZmE3NGNmMGRhODFlOGNlMjk0M2VhN2Y5ZWQy
YTg1ZjQwHhcNMjYwMzI5MDIwMDM2WhcNMjYwMzMwMDIwMDM2WjAzMTEwLwYDVQQD
Eyg5YWJkZDk0ZWFmYTRjN2U2NWY5OWU2YzZjOTNlNWFmNGE2NjA3NGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslpZIhkn3shNZWURNA4Vi4OiV5LT
FkAl+z1L9MfdGzcdG8YSIU/a54Q0dSPvFss0fSQRN94/PTF0EsaPJB2OUNpCcU+J
uT3hqmyASdLt81ZGBiCd4NsxM7tnRVieAIQpDEDiX/F5SMIZTZWR8Rvf0bUzCAi7
E6UfDB96bDnVdEp8GJHCmaIvwKft04W62jTAEczY8zWHtmAVxaeQ7uKeiVd4H5xY
6p3F67ze/9j9drolt5QlC9VZA/5oE1AKpHcuEHKbo3lt9pXLgfSvamqWvPOGfMfk
9MZrTCUWQ77yg49a4+9e6ok/Z6PizHCVbCuKR+dMpGqtB4i6faTUAbzjMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJq92U6vpMfmX5nmxsk+WvSmYHS8MB8GA1UdIwQY
MBaAFMTMAvj6dM8NqB6M4pQ+p/ntKoX0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE13Qy1QcDB6dzJvSG96aWxENm4tZTBxaGZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9lMzQ4ZjEtYmI3MC00YjM0LWJlMTIt
MjE5ZTc5ZDg0ZTQzLzEveE13Qy1QcDB6dzJvSG96aWxENm4tZTBxaGZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9lMzQ4ZjEtYmI3MC00YjM0LWJlMTItMjE5ZTc5ZDg0ZTQz
LzEveE13Qy1QcDB6dzJvSG96aWxENm4tZTBxaGZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfSFenqXV
uNVVrXmTMJj4dyIORzMO4Zs7f0cE6OVpWyd54Y+CBheTaYwmLjVskmU2ejBnXn1g
SW1BNrNxR2PIoCamd4OlZ9khxnXfE29OiyKMwe3H2VN1IlX3qZziZMhuiYz1hlqZ
VSufsk2f2TgoNbZR4ObYKsMcdMX+2499/ryDtwRs46NSc84BctxpBRCasSdyGzJ4
+PcChEQG0V+EQ4pcVR563VAGIFXgs124kjSlVCJ+2dI7P9zdpCr9rcqz1Kwm4C+a
WJdwCr6TbWTgQgwPn+eXv/5L3EhnIBuPbDrV50FDOOWENEEi/i0jgtnTtVbsGzO6
ItAcauyf1iSHTA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:48 2026 by rpki-client