Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
File: X99RbJXdbrLR2d1ODgMobBkR9uE.mft (raw, json)
Hash identifier: y5hd5eJqnX+hAGt89HhSM62F4Wh4uuFoLIampeFUYxw=
Subject key identifier: 5A:F1:85:CA:1D:39:BA:70:CB:13:E0:92:E6:44:B2:CC:01:96:1B:7C
Authority key identifier: 5F:DF:51:6C:95:DD:6E:B2:D1:D9:DD:4E:0E:03:28:6C:19:11:F6:E1
Certificate issuer: /CN=5fdf516c95dd6eb2d1d9dd4e0e03286c1911f6e1
Certificate serial: 019D389C625E3DEBFE10FBEC2A60BD50BBF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 08:01:05 +0000
Manifest this update: Sun 29 Mar 2026 08:01:05 +0000
Manifest next update: Mon 30 Mar 2026 08:01:05 +0000
Files and hashes: 1: O58aCTrbE5lgm64c310ntztX4Wk.roa (hash: 0T3h+C9Xr6EOTPtS+HVLjRGd+kBq9kMPTWwsY3303pg=)
2: X99RbJXdbrLR2d1ODgMobBkR9uE.crl (hash: ae1OZImGdITD2i85ZQLzl8Mkb7SGkz+mV29cguEEskc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:62:5e:3d:eb:fe:10:fb:ec:2a:60:bd:50:bb:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fdf516c95dd6eb2d1d9dd4e0e03286c1911f6e1
Validity
Not Before: Mar 29 08:01:05 2026 GMT
Not After : Mar 30 08:01:05 2026 GMT
Subject: CN=5af185ca1d39ba70cb13e092e644b2cc01961b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:bd:e9:6c:34:73:88:5f:60:48:fd:13:1d:83:
91:38:ce:dd:27:3d:c8:ad:e1:94:0f:f5:ac:22:33:
11:2f:b0:04:e9:03:c8:28:ff:ca:54:f5:0f:4e:0a:
c6:24:7e:56:aa:a2:92:09:d3:ab:35:40:e3:2c:2d:
df:52:13:8b:3b:69:3a:25:d4:39:7b:5e:71:fc:e0:
ba:1e:e6:7c:01:d7:41:78:d4:cb:4d:cf:a8:c5:67:
78:4d:68:11:bf:ed:c7:17:eb:a4:be:ea:b2:14:ff:
21:ab:07:c4:74:6e:f1:61:a2:11:cd:16:a3:f1:6b:
84:51:60:f0:8a:a3:80:70:e7:16:5d:42:d5:1e:ff:
ad:b9:85:50:36:1f:60:8d:ac:29:da:e5:3e:14:14:
a2:1f:b5:3a:3b:57:ef:60:54:d6:56:a8:91:f0:99:
77:eb:0a:df:d2:5f:d4:00:e4:8b:f6:04:24:fa:5d:
b2:80:52:04:8d:99:f8:74:d5:b6:85:41:18:ac:92:
0f:6f:65:1c:8b:c0:47:4d:f9:56:ce:e4:2c:a5:cb:
b5:fa:4f:25:89:55:e5:fa:a2:e8:89:85:94:92:2d:
44:f3:3a:eb:7b:50:f7:fd:ff:3e:74:6b:91:0f:8c:
96:4b:c0:0d:cd:52:96:1e:a5:d9:17:c4:79:21:d2:
92:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F1:85:CA:1D:39:BA:70:CB:13:E0:92:E6:44:B2:CC:01:96:1B:7C
X509v3 Authority Key Identifier:
keyid:5F:DF:51:6C:95:DD:6E:B2:D1:D9:DD:4E:0E:03:28:6C:19:11:F6:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:ea:18:20:41:5d:6f:52:21:4b:76:85:24:34:e7:8a:36:a9:
c9:87:54:c0:11:80:dd:bf:2b:10:6b:14:65:15:5f:55:8a:f3:
c6:29:70:4e:cb:ee:ba:c0:c6:19:e9:af:5c:8f:17:ad:2a:f9:
ce:c6:98:88:30:02:b6:05:b8:c2:49:f9:07:a2:c2:47:c5:51:
7e:60:85:fa:0e:9f:3e:f4:5b:88:47:be:76:46:5b:6b:eb:0d:
fc:45:23:17:95:c1:da:01:88:42:e3:44:8c:fe:5e:ad:84:5e:
cb:3a:40:64:b6:a4:8d:52:57:ef:9d:cb:29:49:68:13:05:d8:
4d:21:a0:95:19:da:64:b3:25:c9:49:09:8a:3c:fb:d2:e3:b8:
37:89:03:4a:ce:aa:b2:59:07:33:06:2e:be:78:82:27:f3:23:
59:e5:df:10:a7:2a:a7:3d:f8:a0:43:aa:fd:1a:68:1b:9d:b5:
d6:38:bc:49:8a:b8:27:3f:36:cb:f3:a8:1e:f9:2e:4f:2a:db:
22:27:a8:9c:b3:96:fd:aa:86:b0:9d:82:f1:a5:ca:26:02:ab:
f2:3d:50:03:68:ac:cf:ec:43:a5:62:4b:d9:08:d3:d8:96:54:
30:0e:aa:e5:f6:24:89:be:3a:01:d1:32:54:b2:d4:11:6c:60:
3c:c2:92:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nGJePev+EPvsKmC9ULv5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmZGY1MTZjOTVkZDZlYjJkMWQ5ZGQ0ZTBlMDMyODZjMTkx
MWY2ZTEwHhcNMjYwMzI5MDgwMTA1WhcNMjYwMzMwMDgwMTA1WjAzMTEwLwYDVQQD
Eyg1YWYxODVjYTFkMzliYTcwY2IxM2UwOTJlNjQ0YjJjYzAxOTYxYjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA073pbDRziF9gSP0THYOROM7dJz3I
reGUD/WsIjMRL7AE6QPIKP/KVPUPTgrGJH5WqqKSCdOrNUDjLC3fUhOLO2k6JdQ5
e15x/OC6HuZ8AddBeNTLTc+oxWd4TWgRv+3HF+ukvuqyFP8hqwfEdG7xYaIRzRaj
8WuEUWDwiqOAcOcWXULVHv+tuYVQNh9gjawp2uU+FBSiH7U6O1fvYFTWVqiR8Jl3
6wrf0l/UAOSL9gQk+l2ygFIEjZn4dNW2hUEYrJIPb2Uci8BHTflWzuQspcu1+k8l
iVXl+qLoiYWUki1E8zrre1D3/f8+dGuRD4yWS8ANzVKWHqXZF8R5IdKS4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFrxhcodObpwyxPgkuZEsswBlht8MB8GA1UdIwQY
MBaAFF/fUWyV3W6y0dndTg4DKGwZEfbhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDk5UmJKWGRickxSMmQxT0RnTW9iQmtSOXVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy82NjVkN2QtZDE3MC00ZGY3LWFjYzct
YmYzZjc5NTFjNWVhLzEvWDk5UmJKWGRickxSMmQxT0RnTW9iQmtSOXVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy82NjVkN2QtZDE3MC00ZGY3LWFjYzctYmYzZjc5NTFjNWVh
LzEvWDk5UmJKWGRickxSMmQxT0RnTW9iQmtSOXVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAOoYIEFd
b1IhS3aFJDTnijapyYdUwBGA3b8rEGsUZRVfVYrzxilwTsvuusDGGemvXI8XrSr5
zsaYiDACtgW4wkn5B6LCR8VRfmCF+g6fPvRbiEe+dkZba+sN/EUjF5XB2gGIQuNE
jP5erYReyzpAZLakjVJX753LKUloEwXYTSGglRnaZLMlyUkJijz70uO4N4kDSs6q
slkHMwYuvniCJ/MjWeXfEKcqpz34oEOq/RpoG5211ji8SYq4Jz82y/OoHvkuTyrb
IieonLOW/aqGsJ2C8aXKJgKr8j1QA2isz+xDpWJL2QjT2JZUMA6q5fYkib46AdEy
VLLUEWxgPMKSUw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:47 2026 by rpki-client