Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft
File: X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft (raw, json)
Hash identifier: THXcPmS1odmviK+cuPz/PC19UyUf3sDU9o30OSP6OM4=
Subject key identifier: 85:D8:0F:47:B2:25:1A:DF:44:4F:8E:89:02:F1:15:33:1D:C0:65:8A
Authority key identifier: 5F:6B:90:01:9D:4D:2B:52:AB:4C:AF:67:1C:37:E9:C4:D0:3A:DA:73
Certificate issuer: /CN=5f6b90019d4d2b52ab4caf671c37e9c4d03ada73
Certificate serial: 019CC63DAE04EDDF3FE7BCDE13F74FB07781
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X2uQAZ1NK1KrTK9nHDfpxNA62nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft
Manifest number: 01C0
Signing time: Sat 07 Mar 2026 03:00:56 +0000
Manifest this update: Sat 07 Mar 2026 03:00:56 +0000
Manifest next update: Sun 08 Mar 2026 03:00:56 +0000
Files and hashes: 1: 2aR01OFymFEwZxvW0ul_qajB_MU.roa (hash: uOcW0MztVBXCRsokN174A3EZiiQc7C1Cn12xFKZuxJI=)
2: X2uQAZ1NK1KrTK9nHDfpxNA62nM.crl (hash: nErBCErV1w+FlXcr6xkq7mD3nuAR2RvaP2KpMgsGxsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/X2uQAZ1NK1KrTK9nHDfpxNA62nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 00:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c6:3d:ae:04:ed:df:3f:e7:bc:de:13:f7:4f:b0:77:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f6b90019d4d2b52ab4caf671c37e9c4d03ada73
Validity
Not Before: Mar 7 03:00:56 2026 GMT
Not After : Mar 8 03:00:56 2026 GMT
Subject: CN=85d80f47b2251adf444f8e8902f115331dc0658a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:07:86:18:ae:fb:84:f6:76:b0:2c:08:fe:08:
30:87:7b:a3:46:b5:04:68:d1:c7:55:69:4b:3f:23:
e3:0c:3b:17:40:67:da:4f:b2:92:a9:38:b7:a9:c0:
6b:67:0e:24:e9:62:84:ab:5a:16:ce:16:28:9c:4d:
73:9b:c0:07:86:75:ae:39:ec:c0:5d:e4:1f:a9:e3:
f1:d6:b2:eb:82:46:da:4c:f3:fe:c6:11:44:03:2a:
1e:8a:0f:96:eb:79:f9:2c:e7:e2:df:12:bf:1c:2a:
14:da:89:f6:27:07:26:5f:d5:6b:31:00:d5:c9:36:
a1:80:c3:8e:f0:6b:55:b6:e2:05:11:11:76:c9:d4:
5d:57:84:0c:33:45:db:c9:b4:4d:e2:f8:d6:bb:88:
7a:83:9e:53:95:dc:9b:0f:f6:b6:d3:9d:06:2c:52:
aa:0d:b9:3e:6c:b6:36:68:70:8b:a7:59:d8:08:4c:
c9:7b:4d:4d:51:25:47:30:3c:25:f9:45:89:fd:4f:
72:d3:c9:45:47:13:80:b3:df:2b:f9:ac:6e:3f:98:
03:fe:7a:15:39:53:f7:0e:4e:b3:cd:06:2a:31:fa:
51:5c:fb:01:76:36:b0:85:09:0c:b4:b5:a0:86:23:
65:21:39:14:69:f9:63:1a:e5:b8:ca:d7:12:f6:88:
9e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D8:0F:47:B2:25:1A:DF:44:4F:8E:89:02:F1:15:33:1D:C0:65:8A
X509v3 Authority Key Identifier:
keyid:5F:6B:90:01:9D:4D:2B:52:AB:4C:AF:67:1C:37:E9:C4:D0:3A:DA:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X2uQAZ1NK1KrTK9nHDfpxNA62nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:10:1c:11:c0:cd:20:a1:15:7f:72:8b:e7:ef:c6:d6:eb:5b:
6f:f3:92:0c:1e:b5:97:92:28:a7:97:eb:ff:1d:08:6c:90:47:
63:b7:57:3b:1d:02:88:ab:19:fd:e5:6b:2c:bf:74:d5:e1:d8:
7b:b4:10:56:b6:58:3b:c9:ad:7a:a3:a7:ae:4d:36:c7:19:b1:
0f:8e:b6:cb:9e:e3:d1:c7:0d:a7:23:14:ff:29:e9:03:5e:9e:
aa:05:81:02:5e:b5:35:3e:3e:f8:2d:3d:74:af:db:b1:50:bc:
a2:c1:4f:6c:60:52:5d:58:f1:65:b7:5a:f8:03:a5:dc:1c:a4:
83:1d:43:31:a8:36:4a:d8:34:d8:0d:b5:1d:39:33:d3:1c:47:
b2:04:81:31:6b:f7:68:b4:ca:b8:bb:e8:d1:f5:04:09:13:33:
3c:45:89:00:35:9d:15:1a:4e:39:83:32:5b:81:c7:86:48:2e:
1c:f5:0b:2e:2c:3b:a9:fc:b9:68:71:be:f6:c3:ef:32:ce:fc:
ad:53:a4:dd:a6:0e:2e:2d:ff:f2:a5:ed:19:c8:0b:a7:18:d6:
35:87:50:a5:48:03:48:24:ec:b2:79:ad:2a:38:7f:b0:02:4b:
e1:04:45:32:9d:7a:58:36:4a:fd:33:01:3f:9a:44:4f:60:26:
1a:ec:a3:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzGPa4E7d8/57zeE/dPsHeBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmNmI5MDAxOWQ0ZDJiNTJhYjRjYWY2NzFjMzdlOWM0ZDAz
YWRhNzMwHhcNMjYwMzA3MDMwMDU2WhcNMjYwMzA4MDMwMDU2WjAzMTEwLwYDVQQD
Eyg4NWQ4MGY0N2IyMjUxYWRmNDQ0ZjhlODkwMmYxMTUzMzFkYzA2NThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3geGGK77hPZ2sCwI/ggwh3ujRrUE
aNHHVWlLPyPjDDsXQGfaT7KSqTi3qcBrZw4k6WKEq1oWzhYonE1zm8AHhnWuOezA
XeQfqePx1rLrgkbaTPP+xhFEAyoeig+W63n5LOfi3xK/HCoU2on2JwcmX9VrMQDV
yTahgMOO8GtVtuIFERF2ydRdV4QMM0XbybRN4vjWu4h6g55TldybD/a2050GLFKq
Dbk+bLY2aHCLp1nYCEzJe01NUSVHMDwl+UWJ/U9y08lFRxOAs98r+axuP5gD/noV
OVP3Dk6zzQYqMfpRXPsBdjawhQkMtLWghiNlITkUafljGuW4ytcS9oieeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIXYD0eyJRrfRE+OiQLxFTMdwGWKMB8GA1UdIwQY
MBaAFF9rkAGdTStSq0yvZxw36cTQOtpzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDJ1UUFaMU5LMUtyVEs5bkhEZnB4TkE2Mm5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi84MDk2MTYtYTAwOC00YTExLWJjMGEt
N2NmMDMxZmE3NWNlLzEvWDJ1UUFaMU5LMUtyVEs5bkhEZnB4TkE2Mm5NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi84MDk2MTYtYTAwOC00YTExLWJjMGEtN2NmMDMxZmE3NWNl
LzEvWDJ1UUFaMU5LMUtyVEs5bkhEZnB4TkE2Mm5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUhAcEcDN
IKEVf3KL5+/G1utbb/OSDB61l5Iop5fr/x0IbJBHY7dXOx0CiKsZ/eVrLL901eHY
e7QQVrZYO8mteqOnrk02xxmxD462y57j0ccNpyMU/ynpA16eqgWBAl61NT4++C09
dK/bsVC8osFPbGBSXVjxZbda+AOl3Bykgx1DMag2Stg02A21HTkz0xxHsgSBMWv3
aLTKuLvo0fUECRMzPEWJADWdFRpOOYMyW4HHhkguHPULLiw7qfy5aHG+9sPvMs78
rVOk3aYOLi3/8qXtGcgLpxjWNYdQpUgDSCTssnmtKjh/sAJL4QRFMp16WDZK/TMB
P5pET2AmGuyjCA==
-----END CERTIFICATE-----
Generated at Sat Mar 7 07:07:25 2026 by rpki-client