Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.mft
File: xjfMzVzaAYlbGJzKlfKWtcswx8g.mft (raw, json)
Hash identifier: dBl6H/Hk5FXW7Wyo2Itp0D+hKYjTS8G1XiyPzoB2S80=
Subject key identifier: 03:18:FD:27:CD:E2:47:E8:BB:40:93:0A:A4:39:55:DE:61:B3:CC:86
Authority key identifier: C6:37:CC:CD:5C:DA:01:89:5B:18:9C:CA:95:F2:96:B5:CB:30:C7:C8
Certificate issuer: /CN=c637cccd5cda01895b189cca95f296b5cb30c7c8
Certificate serial: 019D389C0A70642D7411CFB076B54E0C4A41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xjfMzVzaAYlbGJzKlfKWtcswx8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.mft
Manifest number: 12AD
Signing time: Sun 29 Mar 2026 08:00:43 +0000
Manifest this update: Sun 29 Mar 2026 08:00:43 +0000
Manifest next update: Mon 30 Mar 2026 08:00:43 +0000
Files and hashes: 1: wB4QvInT_08HfB4Wbo978Zg5LxQ.roa (hash: 36Tl4rWIAgYSpZdqpjtz90qhnVy9+Ek0JlcXnPNo7QU=)
2: xjfMzVzaAYlbGJzKlfKWtcswx8g.crl (hash: feyoAUPqF9sSYJgxX9SyaVi2EEDF7vzUQgQAtnOWTBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xjfMzVzaAYlbGJzKlfKWtcswx8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:0a:70:64:2d:74:11:cf:b0:76:b5:4e:0c:4a:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c637cccd5cda01895b189cca95f296b5cb30c7c8
Validity
Not Before: Mar 29 08:00:43 2026 GMT
Not After : Mar 30 08:00:43 2026 GMT
Subject: CN=0318fd27cde247e8bb40930aa43955de61b3cc86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:23:04:3a:5c:84:91:9e:72:5f:90:9c:32:db:
f9:ef:01:cd:bd:b4:79:31:66:25:a0:f4:62:1f:8b:
58:2b:1a:13:be:1c:4f:35:e2:08:b8:cc:e2:cb:de:
16:59:28:50:f4:6d:2d:25:13:d0:65:23:31:27:51:
2e:b9:11:39:27:f7:8f:c2:11:b1:43:12:24:02:b7:
0c:9c:fd:64:9e:5c:45:48:1c:bb:71:28:ab:26:4b:
36:e2:40:f0:fa:59:08:3b:f0:6d:f5:f5:b5:5f:f7:
9d:c4:5b:11:a5:23:34:47:4d:8f:9d:c8:09:6a:62:
c5:d8:f8:fc:35:c2:64:00:dc:e4:e9:9d:d2:f6:2b:
3b:e1:47:6b:ad:c6:4d:6b:b0:16:0f:df:e3:69:d4:
79:e5:86:4c:63:d0:8b:8a:fe:79:7d:1f:af:80:50:
83:cb:c9:4d:14:80:24:e6:8e:ba:0b:c8:6c:89:b7:
59:86:96:ec:eb:88:c1:12:a8:a1:b8:5d:63:85:59:
77:16:34:03:cf:f3:84:3d:08:63:7d:d0:47:22:d4:
e6:59:78:ae:6c:ef:76:da:1e:12:4c:8a:97:8a:45:
cd:c9:a0:aa:bf:9f:35:df:a9:69:52:26:04:5b:36:
5f:c3:f1:bd:a7:ba:ae:74:66:85:3b:0b:45:4d:f2:
6b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:18:FD:27:CD:E2:47:E8:BB:40:93:0A:A4:39:55:DE:61:B3:CC:86
X509v3 Authority Key Identifier:
keyid:C6:37:CC:CD:5C:DA:01:89:5B:18:9C:CA:95:F2:96:B5:CB:30:C7:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xjfMzVzaAYlbGJzKlfKWtcswx8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:a8:7a:5e:53:67:31:de:cb:cf:5c:19:f4:11:53:75:a6:86:
17:75:68:20:cd:e0:44:c0:d0:ed:e2:e6:45:37:8c:b0:9b:9a:
0b:9b:e7:ea:b2:e9:f5:9f:7e:91:11:7e:ec:f1:b0:e4:94:48:
25:79:44:9d:25:f4:fc:2d:f9:97:5e:6b:b1:28:5a:5c:19:59:
02:f2:93:17:88:26:39:41:ad:79:29:28:d4:67:32:55:a3:21:
30:dc:0f:b4:43:c8:e1:9a:28:0d:79:58:e1:27:c8:9d:0d:97:
45:d8:64:22:d9:5f:35:87:dd:8b:d1:07:c1:4b:16:3d:68:e4:
11:ba:6a:18:cb:7f:8a:b6:55:4a:7d:cf:0a:4a:90:72:d1:2c:
df:a4:67:55:a5:46:24:46:44:db:6a:e5:1f:4c:ac:68:a4:a8:
46:7e:a6:46:0e:58:27:4c:10:4c:f3:e2:fd:b8:cf:69:80:1a:
94:61:6d:17:a4:77:a3:94:9d:72:db:cd:8b:63:90:54:44:aa:
99:55:80:5d:eb:b4:05:86:83:42:bb:73:20:21:b8:39:58:f7:
3b:19:7f:11:a0:80:9d:52:ad:77:21:5b:b1:e2:4d:03:76:6a:
19:a2:6c:e6:b1:0e:39:1b:4f:09:68:91:6d:11:26:f7:11:39:
4e:05:21:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nApwZC10Ec+wdrVODEpBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MzdjY2NkNWNkYTAxODk1YjE4OWNjYTk1ZjI5NmI1Y2Iz
MGM3YzgwHhcNMjYwMzI5MDgwMDQzWhcNMjYwMzMwMDgwMDQzWjAzMTEwLwYDVQQD
EygwMzE4ZmQyN2NkZTI0N2U4YmI0MDkzMGFhNDM5NTVkZTYxYjNjYzg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiMEOlyEkZ5yX5CcMtv57wHNvbR5
MWYloPRiH4tYKxoTvhxPNeIIuMziy94WWShQ9G0tJRPQZSMxJ1EuuRE5J/ePwhGx
QxIkArcMnP1knlxFSBy7cSirJks24kDw+lkIO/Bt9fW1X/edxFsRpSM0R02PncgJ
amLF2Pj8NcJkANzk6Z3S9is74UdrrcZNa7AWD9/jadR55YZMY9CLiv55fR+vgFCD
y8lNFIAk5o66C8hsibdZhpbs64jBEqihuF1jhVl3FjQDz/OEPQhjfdBHItTmWXiu
bO922h4STIqXikXNyaCqv58136lpUiYEWzZfw/G9p7qudGaFOwtFTfJrXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAMY/SfN4kfou0CTCqQ5Vd5hs8yGMB8GA1UdIwQY
MBaAFMY3zM1c2gGJWxicypXylrXLMMfIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGpmTXpWemFBWWxiR0p6S2xmS1d0Y3N3eDhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8xZTA1MWUtM2NmOC00NzYzLWIzY2Yt
YTc0NmE4MTIwZTliLzEveGpmTXpWemFBWWxiR0p6S2xmS1d0Y3N3eDhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My8xZTA1MWUtM2NmOC00NzYzLWIzY2YtYTc0NmE4MTIwZTli
LzEveGpmTXpWemFBWWxiR0p6S2xmS1d0Y3N3eDhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARah6XlNn
Md7Lz1wZ9BFTdaaGF3VoIM3gRMDQ7eLmRTeMsJuaC5vn6rLp9Z9+kRF+7PGw5JRI
JXlEnSX0/C35l15rsShaXBlZAvKTF4gmOUGteSko1GcyVaMhMNwPtEPI4ZooDXlY
4SfInQ2XRdhkItlfNYfdi9EHwUsWPWjkEbpqGMt/irZVSn3PCkqQctEs36RnVaVG
JEZE22rlH0ysaKSoRn6mRg5YJ0wQTPPi/bjPaYAalGFtF6R3o5SdctvNi2OQVESq
mVWAXeu0BYaDQrtzICG4OVj3Oxl/EaCAnVKtdyFbseJNA3ZqGaJs5rEOORtPCWiR
bREm9xE5TgUhPA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:58:13 2026 by rpki-client