Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
File: XxSk5lWLq4nTbjuiHJXir91o--o.mft (raw, json)
Hash identifier: gEQzM9/sH0OaGnun/4s9ipgZqwLjmap6Hx2M1PqklhM=
Subject key identifier: C5:2E:26:15:79:8E:B8:51:6E:4C:27:9D:9E:16:58:3F:94:32:F6:3D
Authority key identifier: 5F:14:A4:E6:55:8B:AB:89:D3:6E:3B:A2:1C:95:E2:AF:DD:68:FB:EA
Certificate issuer: /CN=5f14a4e6558bab89d36e3ba21c95e2afdd68fbea
Certificate serial: 019D39AE55284B24F4A1937341D8A196DE66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
Manifest number: 1801
Signing time: Sun 29 Mar 2026 13:00:19 +0000
Manifest this update: Sun 29 Mar 2026 13:00:19 +0000
Manifest next update: Mon 30 Mar 2026 13:00:19 +0000
Files and hashes: 1: 4GacYlC1xTXBA2gZGI4h12SFY-0.roa (hash: NjXRgF24DIZuh863duD3ZThupdmVygwzxLiXyqu402Q=)
2: E0wwloupObPs9_O7vd7bSguVl6w.roa (hash: db081CMNM92GGYGAY4P5+DovYW2JE0c6H2IK3KWF7l0=)
3: XxSk5lWLq4nTbjuiHJXir91o--o.crl (hash: BCugmIpiyj0M0kcxVXCkXj8IuG+e9F2EqNFiZOhHpRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:55:28:4b:24:f4:a1:93:73:41:d8:a1:96:de:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f14a4e6558bab89d36e3ba21c95e2afdd68fbea
Validity
Not Before: Mar 29 13:00:19 2026 GMT
Not After : Mar 30 13:00:19 2026 GMT
Subject: CN=c52e2615798eb8516e4c279d9e16583f9432f63d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:55:74:4d:99:0b:b7:c2:33:07:40:00:b9:1e:
28:3c:3a:7e:ec:d9:14:ff:87:6a:b2:18:cf:13:e9:
d8:da:0c:8f:62:1d:92:b3:5e:2b:0a:e8:06:31:9c:
c5:08:02:21:3b:31:fb:cf:f3:47:75:f8:6f:6b:4d:
34:79:7e:6b:b2:95:70:ad:f6:2d:bc:73:00:5b:05:
17:a6:5e:7c:f5:1c:3d:68:1f:22:8e:3c:d6:8b:db:
36:ff:d2:14:13:32:ab:2e:f9:0e:9c:46:42:43:6a:
c1:f0:d2:de:9b:af:c6:13:73:d8:16:22:f8:0e:ca:
c2:f9:dc:e5:a0:ec:bb:1d:75:df:f0:7d:91:82:b9:
f9:97:8c:ed:b4:79:f7:03:4b:c7:ec:a9:9e:63:e8:
2d:c6:2c:72:8e:46:fe:ea:b7:b1:13:5c:0f:95:29:
f7:6e:b5:82:d8:24:d7:1e:9c:e7:68:05:d3:cf:e8:
19:5e:18:32:f8:a5:93:a0:79:6c:02:28:29:87:04:
95:e2:37:09:d9:e5:32:ca:74:22:5c:81:ad:34:0e:
52:35:57:cc:d8:23:09:23:3f:9a:06:08:0f:bb:5b:
93:7d:08:d6:83:57:fb:c5:8e:b7:16:23:24:21:59:
5e:00:8e:7a:9a:64:a6:18:cd:c1:c2:d8:0c:31:3c:
2d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:2E:26:15:79:8E:B8:51:6E:4C:27:9D:9E:16:58:3F:94:32:F6:3D
X509v3 Authority Key Identifier:
keyid:5F:14:A4:E6:55:8B:AB:89:D3:6E:3B:A2:1C:95:E2:AF:DD:68:FB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:47:06:6d:33:07:5b:46:a3:63:1a:c4:0e:7d:ae:c7:9e:dd:
3c:fc:39:c3:43:cc:75:68:9a:4d:23:23:f3:1a:29:a8:4f:ed:
58:e4:44:10:9d:f1:32:38:38:2a:9a:20:9b:80:fa:5b:0b:c3:
89:75:8b:a7:66:ef:a8:bc:e4:81:bf:da:9f:67:7d:83:a3:cb:
60:e9:ee:f5:d9:48:91:8d:d3:4c:0d:da:bb:a8:7f:1f:ae:d4:
08:cd:6d:d1:41:93:5c:b7:0f:31:b5:1f:50:ec:15:e6:8b:37:
8c:63:d7:22:7f:d4:ff:3c:5b:f5:e5:7c:16:13:21:69:06:14:
b3:fb:5a:50:d2:5b:94:e9:b8:d6:56:ea:d6:19:a0:38:b8:42:
16:38:ca:5d:e3:36:79:c6:23:e2:e3:d1:87:d7:63:0f:de:69:
a5:1b:ad:68:36:82:25:8a:79:55:45:0e:13:e5:10:8e:2f:b9:
6e:26:a4:36:bb:47:53:d8:04:bd:96:c1:4b:a9:b9:99:9e:25:
33:81:ec:21:85:19:54:6d:2e:e3:9a:03:97:a0:f9:ec:42:18:
36:41:83:d1:84:5a:5c:ed:4a:73:85:58:a0:22:04:f6:d5:22:
ad:54:78:e1:0a:ec:9d:fc:01:eb:ab:56:1a:16:81:3c:58:be:
ce:a4:ec:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rlUoSyT0oZNzQdihlt5mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMTRhNGU2NTU4YmFiODlkMzZlM2JhMjFjOTVlMmFmZGQ2
OGZiZWEwHhcNMjYwMzI5MTMwMDE5WhcNMjYwMzMwMTMwMDE5WjAzMTEwLwYDVQQD
EyhjNTJlMjYxNTc5OGViODUxNmU0YzI3OWQ5ZTE2NTgzZjk0MzJmNjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1V0TZkLt8IzB0AAuR4oPDp+7NkU
/4dqshjPE+nY2gyPYh2Ss14rCugGMZzFCAIhOzH7z/NHdfhva000eX5rspVwrfYt
vHMAWwUXpl589Rw9aB8ijjzWi9s2/9IUEzKrLvkOnEZCQ2rB8NLem6/GE3PYFiL4
DsrC+dzloOy7HXXf8H2Rgrn5l4zttHn3A0vH7KmeY+gtxixyjkb+6rexE1wPlSn3
brWC2CTXHpznaAXTz+gZXhgy+KWToHlsAigphwSV4jcJ2eUyynQiXIGtNA5SNVfM
2CMJIz+aBggPu1uTfQjWg1f7xY63FiMkIVleAI56mmSmGM3BwtgMMTwtqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMUuJhV5jrhRbkwnnZ4WWD+UMvY9MB8GA1UdIwQY
MBaAFF8UpOZVi6uJ0247ohyV4q/daPvqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHhTazVsV0xxNG5UYmp1aUhKWGlyOTFvLS1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC83YTk2Y2ItYzNlMC00OWM2LWFlMzQt
ZGE4MWYwOGY2MDAxLzEvWHhTazVsV0xxNG5UYmp1aUhKWGlyOTFvLS1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC83YTk2Y2ItYzNlMC00OWM2LWFlMzQtZGE4MWYwOGY2MDAx
LzEvWHhTazVsV0xxNG5UYmp1aUhKWGlyOTFvLS1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJEcGbTMH
W0ajYxrEDn2ux57dPPw5w0PMdWiaTSMj8xopqE/tWOREEJ3xMjg4Kpogm4D6WwvD
iXWLp2bvqLzkgb/an2d9g6PLYOnu9dlIkY3TTA3au6h/H67UCM1t0UGTXLcPMbUf
UOwV5os3jGPXIn/U/zxb9eV8FhMhaQYUs/taUNJblOm41lbq1hmgOLhCFjjKXeM2
ecYj4uPRh9djD95ppRutaDaCJYp5VUUOE+UQji+5biakNrtHU9gEvZbBS6m5mZ4l
M4HsIYUZVG0u45oDl6D57EIYNkGD0YRaXO1Kc4VYoCIE9tUirVR44QrsnfwB66tW
GhaBPFi+zqTs8Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 20:03:25 2026 by rpki-client