Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
File: xtEbZP_hjvpC9DpsdlY53uONAn4.mft (raw, json)
Hash identifier: wRmReN+qcOs6vRW+eYoRv444ZCPl/diPkkkGrlWM0HI=
Subject key identifier: 61:D1:82:F1:3E:9F:FE:30:4F:E7:EA:F7:B3:9E:F7:19:30:9D:7E:DD
Authority key identifier: C6:D1:1B:64:FF:E1:8E:FA:42:F4:3A:6C:76:56:39:DE:E3:8D:02:7E
Certificate issuer: /CN=c6d11b64ffe18efa42f43a6c765639dee38d027e
Certificate serial: 019D39409193279FC4751B19230F582A502B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
Manifest number: 1117
Signing time: Sun 29 Mar 2026 11:00:25 +0000
Manifest this update: Sun 29 Mar 2026 11:00:25 +0000
Manifest next update: Mon 30 Mar 2026 11:00:25 +0000
Files and hashes: 1: 1HMsGfdsMj6bVCe_HqSPHKmPGQA.roa (hash: Aa+3horScinkb91IcV06nuOTEkzdcEAPUq8TBlQGMDg=)
2: Q6q5ifTmogwJicn2e4z2f5_1UN8.roa (hash: ZCT+LPivkmFqXHHIYRE3kEHzKOk9mVM2bvW0OtpppFg=)
3: xtEbZP_hjvpC9DpsdlY53uONAn4.crl (hash: wRPuZAsPB8AgcyB15wM7nbNSP35rxddypSuxSd0veGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:91:93:27:9f:c4:75:1b:19:23:0f:58:2a:50:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6d11b64ffe18efa42f43a6c765639dee38d027e
Validity
Not Before: Mar 29 11:00:25 2026 GMT
Not After : Mar 30 11:00:25 2026 GMT
Subject: CN=61d182f13e9ffe304fe7eaf7b39ef719309d7edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8d:97:43:9c:4e:d3:65:85:ad:4d:5b:9b:bb:
f4:2c:de:ac:36:68:77:67:76:ad:a5:9f:13:20:ab:
7b:f4:f6:99:08:4e:0f:b6:21:93:9b:24:1e:64:dd:
86:12:31:37:a4:fb:89:63:ff:ae:c3:df:c2:16:95:
09:ea:1e:e9:e8:a4:a2:38:5e:43:c5:3a:4b:89:bf:
79:0b:e2:f4:89:da:71:e9:bf:53:74:e6:e7:8a:b8:
05:0e:f8:8e:c3:7d:fa:1f:4e:ae:1e:59:78:51:24:
c8:8f:27:c1:20:b3:15:93:5d:dc:ca:13:ee:07:a9:
d1:38:82:f2:34:08:f3:78:a3:a0:54:c3:2a:6e:70:
07:aa:5d:2f:c7:61:7d:b8:c0:a5:da:e5:da:90:d8:
41:71:2d:81:ac:64:2e:da:67:83:49:24:0b:29:7a:
ae:36:c9:e2:fc:b0:9f:65:0d:5a:9b:48:d5:92:e4:
94:2b:2d:f2:6f:68:04:d1:81:16:7d:43:69:15:64:
92:7b:e3:20:a6:9b:37:1e:0e:bd:3e:05:93:2d:62:
10:0f:fb:d5:a6:f4:94:6c:ca:b9:29:bd:4c:80:ed:
15:7b:c2:c1:fb:b4:53:cd:59:59:8b:ff:c9:eb:86:
c5:45:70:5d:a2:0d:53:04:7d:6f:e5:f2:97:b4:63:
6a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D1:82:F1:3E:9F:FE:30:4F:E7:EA:F7:B3:9E:F7:19:30:9D:7E:DD
X509v3 Authority Key Identifier:
keyid:C6:D1:1B:64:FF:E1:8E:FA:42:F4:3A:6C:76:56:39:DE:E3:8D:02:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:69:c9:2a:7d:28:3d:ca:ba:cc:91:5f:a5:97:94:25:71:3d:
e4:db:28:85:61:d2:5d:61:3c:46:46:e5:d3:8e:f5:9f:75:da:
34:b8:dc:17:a1:59:61:a9:ea:16:89:6a:7c:b7:53:05:18:57:
ac:f9:f1:7a:15:a8:41:d4:34:f7:1f:89:45:ec:3a:5f:91:8b:
77:16:bf:e5:60:09:cf:f5:de:5d:5d:ea:ff:66:b1:6d:61:6c:
20:b2:31:57:77:42:44:f9:85:20:21:f9:a3:f3:e4:5b:21:17:
4b:51:ff:17:ec:74:64:a8:94:1d:ad:f5:00:46:88:59:ce:48:
16:6a:d7:4f:f5:e7:68:b5:aa:ba:6e:a9:ae:75:6f:28:13:ef:
bb:81:e8:26:c5:fb:e9:5c:bb:53:c7:6b:8e:f1:4a:b3:fa:c0:
76:90:7b:c1:ec:90:af:ab:d6:2a:9a:cf:f1:6d:25:5a:4e:09:
57:f6:94:d6:e2:bc:29:1a:9c:e2:d2:ff:1a:cb:00:e9:a2:fb:
e8:9f:75:b2:b5:e8:31:3e:28:e5:a7:83:15:d7:6b:76:5e:02:
3d:9b:cf:27:8b:04:7d:94:40:52:06:dc:b0:64:0f:22:4e:88:
12:53:a7:e5:3d:29:a4:12:d2:ad:9a:36:f8:cb:95:d9:aa:b7:
f7:3e:55:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QJGTJ5/EdRsZIw9YKlArMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2ZDExYjY0ZmZlMThlZmE0MmY0M2E2Yzc2NTYzOWRlZTM4
ZDAyN2UwHhcNMjYwMzI5MTEwMDI1WhcNMjYwMzMwMTEwMDI1WjAzMTEwLwYDVQQD
Eyg2MWQxODJmMTNlOWZmZTMwNGZlN2VhZjdiMzllZjcxOTMwOWQ3ZWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzY2XQ5xO02WFrU1bm7v0LN6sNmh3
Z3atpZ8TIKt79PaZCE4PtiGTmyQeZN2GEjE3pPuJY/+uw9/CFpUJ6h7p6KSiOF5D
xTpLib95C+L0idpx6b9TdObnirgFDviOw336H06uHll4USTIjyfBILMVk13cyhPu
B6nROILyNAjzeKOgVMMqbnAHql0vx2F9uMCl2uXakNhBcS2BrGQu2meDSSQLKXqu
Nsni/LCfZQ1am0jVkuSUKy3yb2gE0YEWfUNpFWSSe+Mgpps3Hg69PgWTLWIQD/vV
pvSUbMq5Kb1MgO0Ve8LB+7RTzVlZi//J64bFRXBdog1TBH1v5fKXtGNqpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGHRgvE+n/4wT+fq97Oe9xkwnX7dMB8GA1UdIwQY
MBaAFMbRG2T/4Y76QvQ6bHZWOd7jjQJ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHRFYlpQX2hqdnBDOURwc2RsWTUzdU9OQW40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80Y2FjNmItOGUwNS00NDhhLTgzZjct
NjgzNTg1MjE1OGQ4LzEveHRFYlpQX2hqdnBDOURwc2RsWTUzdU9OQW40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy80Y2FjNmItOGUwNS00NDhhLTgzZjctNjgzNTg1MjE1OGQ4
LzEveHRFYlpQX2hqdnBDOURwc2RsWTUzdU9OQW40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACmnJKn0o
Pcq6zJFfpZeUJXE95NsohWHSXWE8Rkbl0471n3XaNLjcF6FZYanqFolqfLdTBRhX
rPnxehWoQdQ09x+JRew6X5GLdxa/5WAJz/XeXV3q/2axbWFsILIxV3dCRPmFICH5
o/PkWyEXS1H/F+x0ZKiUHa31AEaIWc5IFmrXT/XnaLWqum6prnVvKBPvu4HoJsX7
6Vy7U8drjvFKs/rAdpB7weyQr6vWKprP8W0lWk4JV/aU1uK8KRqc4tL/GssA6aL7
6J91srXoMT4o5aeDFddrdl4CPZvPJ4sEfZRAUgbcsGQPIk6IElOn5T0ppBLSrZo2
+MuV2aq39z5Vzw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:19 2026 by rpki-client