Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
File: XtmdScSw5GsnhoQnMeFTSFyKxIs.mft (raw, json)
Hash identifier: z+AXKp7sEA95wGiJcUnyoTkfvQRuI8rQgzJkSWau488=
Subject key identifier: 24:DB:DD:77:09:1D:35:96:EC:51:BD:5B:F1:72:8A:93:56:27:EA:E5
Authority key identifier: 5E:D9:9D:49:C4:B0:E4:6B:27:86:84:27:31:E1:53:48:5C:8A:C4:8B
Certificate issuer: /CN=5ed99d49c4b0e46b2786842731e153485c8ac48b
Certificate serial: 019CE5FF7C232C8621AC92CB583C5C0BE425
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
Manifest number: 0F46
Signing time: Fri 13 Mar 2026 07:00:51 +0000
Manifest this update: Fri 13 Mar 2026 07:00:51 +0000
Manifest next update: Sat 14 Mar 2026 07:00:51 +0000
Files and hashes: 1: 1-nsaGOYJDQs8nE83JBsjbwYRoPA.roa (hash: ZorqeuTKQ8BzMES+IbO5PhiAMx62C25+2z4OV8xpzBs=)
2: XtmdScSw5GsnhoQnMeFTSFyKxIs.crl (hash: +wQVXz+4v0I1gL0Kn4GwTQoFBqdhen1qj6ZQSrc3kPU=)
3: fYv6u6ZqsaaVuf2RxvvaolhNBjk.roa (hash: jVk92j+q/o1dRJaAKw+eFCSe6j9s2E6quPaItwZl0/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:ff:7c:23:2c:86:21:ac:92:cb:58:3c:5c:0b:e4:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ed99d49c4b0e46b2786842731e153485c8ac48b
Validity
Not Before: Mar 13 07:00:51 2026 GMT
Not After : Mar 14 07:00:51 2026 GMT
Subject: CN=24dbdd77091d3596ec51bd5bf1728a935627eae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:40:ad:27:34:33:62:a0:f8:d9:62:aa:21:fd:
39:37:ee:0c:eb:46:31:51:fc:a3:32:d7:9d:e1:a0:
39:70:32:eb:4c:9e:a1:44:22:db:b8:6d:e5:eb:22:
11:86:2c:a6:e1:2f:62:12:fd:60:c0:fd:a5:47:7a:
da:bf:2c:f2:61:76:98:0e:0a:b2:3b:94:3c:99:b1:
ca:2f:b0:0f:1c:38:b6:4a:f1:b7:6f:59:17:5b:b1:
ba:4c:c4:9b:dd:8d:b5:40:24:67:3d:11:93:cb:38:
e8:db:99:8a:0b:e8:66:51:9c:f5:6a:30:18:3c:ba:
b2:7a:c0:d4:ad:a1:27:af:76:cb:78:6f:ef:84:5f:
64:e5:fd:f7:b6:cf:9b:1f:5f:e2:5f:82:b4:e8:04:
06:4d:0b:77:1f:7d:ee:0c:58:49:5c:83:45:34:28:
5b:82:ca:c3:3e:21:d6:a0:9e:f5:a1:be:2c:96:44:
c6:a8:fd:5d:30:60:5a:5a:00:c7:df:83:e2:3d:fb:
40:46:1c:9d:20:34:f0:f0:66:21:e5:50:8a:23:28:
52:80:b6:e5:61:a9:4c:e1:29:06:1b:d4:0b:b1:cb:
09:b3:c0:da:18:78:30:c4:9f:c7:16:77:a2:78:46:
d3:79:9d:6c:9c:77:2b:82:ca:f4:51:4d:33:cf:0f:
80:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:DB:DD:77:09:1D:35:96:EC:51:BD:5B:F1:72:8A:93:56:27:EA:E5
X509v3 Authority Key Identifier:
keyid:5E:D9:9D:49:C4:B0:E4:6B:27:86:84:27:31:E1:53:48:5C:8A:C4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:68:65:cf:ea:3a:6b:51:29:60:ea:5d:30:2a:e6:d4:58:03:
74:7d:be:a3:cb:38:aa:45:89:f5:90:cf:61:a4:d5:8b:ee:0f:
be:23:87:ce:40:4f:50:e7:a3:ca:78:b6:c6:02:fd:4b:f6:1d:
23:27:7a:35:36:9b:b9:c9:b5:92:89:84:7a:79:14:46:9c:31:
d0:bb:e5:40:8b:58:09:11:87:4a:13:f9:bd:69:40:ff:63:4f:
62:4b:da:70:61:9d:60:63:50:47:18:ae:cd:db:ae:a1:de:36:
3d:dd:ce:2f:f0:89:14:e1:37:8f:5f:cd:64:a0:d9:a7:a7:e4:
4b:49:e3:4c:ac:93:4d:bf:8c:4e:1b:84:19:1b:1a:31:05:89:
55:f0:5a:b5:13:cb:0f:fe:f1:aa:12:db:3f:59:48:21:7e:00:
19:27:6a:0d:a4:19:d0:9f:c0:c5:7f:ae:4e:cb:2b:af:34:a7:
eb:7c:98:26:20:63:e0:ea:84:98:c6:6d:01:23:4d:f6:d6:08:
e7:a8:a4:a8:7c:73:d0:56:36:21:23:e9:35:4b:00:63:c5:0f:
25:7c:4d:8e:38:c7:6d:4a:5b:5f:98:f3:15:5a:25:48:71:10:
36:83:9d:05:5b:21:10:eb:3d:3c:3b:f0:1f:36:7a:9e:09:e5:
89:46:c7:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzl/3wjLIYhrJLLWDxcC+QlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZDk5ZDQ5YzRiMGU0NmIyNzg2ODQyNzMxZTE1MzQ4NWM4
YWM0OGIwHhcNMjYwMzEzMDcwMDUxWhcNMjYwMzE0MDcwMDUxWjAzMTEwLwYDVQQD
EygyNGRiZGQ3NzA5MWQzNTk2ZWM1MWJkNWJmMTcyOGE5MzU2MjdlYWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkCtJzQzYqD42WKqIf05N+4M60Yx
UfyjMted4aA5cDLrTJ6hRCLbuG3l6yIRhiym4S9iEv1gwP2lR3ravyzyYXaYDgqy
O5Q8mbHKL7APHDi2SvG3b1kXW7G6TMSb3Y21QCRnPRGTyzjo25mKC+hmUZz1ajAY
PLqyesDUraEnr3bLeG/vhF9k5f33ts+bH1/iX4K06AQGTQt3H33uDFhJXINFNChb
gsrDPiHWoJ71ob4slkTGqP1dMGBaWgDH34PiPftARhydIDTw8GYh5VCKIyhSgLbl
YalM4SkGG9QLscsJs8DaGHgwxJ/HFneieEbTeZ1snHcrgsr0UU0zzw+AhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCTb3XcJHTWW7FG9W/FyipNWJ+rlMB8GA1UdIwQY
MBaAFF7ZnUnEsORrJ4aEJzHhU0hcisSLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHRtZFNjU3c1R3NuaG9Rbk1lRlRTRnlLeElzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS85Yjg5M2UtN2IwYy00MWFhLWE5NTEt
OTBjM2FmYzdjOTQ3LzEvWHRtZFNjU3c1R3NuaG9Rbk1lRlRTRnlLeElzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS85Yjg5M2UtN2IwYy00MWFhLWE5NTEtOTBjM2FmYzdjOTQ3
LzEvWHRtZFNjU3c1R3NuaG9Rbk1lRlRTRnlLeElzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAmhlz+o6
a1EpYOpdMCrm1FgDdH2+o8s4qkWJ9ZDPYaTVi+4PviOHzkBPUOejyni2xgL9S/Yd
Iyd6NTabucm1komEenkURpwx0LvlQItYCRGHShP5vWlA/2NPYkvacGGdYGNQRxiu
zduuod42Pd3OL/CJFOE3j1/NZKDZp6fkS0njTKyTTb+MThuEGRsaMQWJVfBatRPL
D/7xqhLbP1lIIX4AGSdqDaQZ0J/AxX+uTssrrzSn63yYJiBj4OqEmMZtASNN9tYI
56ikqHxz0FY2ISPpNUsAY8UPJXxNjjjHbUpbX5jzFVolSHEQNoOdBVshEOs9PDvw
HzZ6ngnliUbHDg==
-----END CERTIFICATE-----
Generated at Fri Mar 13 08:51:25 2026 by rpki-client