Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
File: xAZEdsLEf3eEdKFIFsHgakCBPlw.mft (raw, json)
Hash identifier: L2u0rwO/VDUy305QSl82ZujFWm50cnWRDFvR28B5JAg=
Subject key identifier: 2B:86:76:07:9F:C1:B0:07:A7:90:B2:A5:74:5E:D4:04:79:A2:A5:AB
Authority key identifier: C4:06:44:76:C2:C4:7F:77:84:74:A1:48:16:C1:E0:6A:40:81:3E:5C
Certificate issuer: /CN=c4064476c2c47f778474a14816c1e06a40813e5c
Certificate serial: 019D38D2BDE4A8345E1DA2B136BFD2364295
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 09:00:28 +0000
Manifest this update: Sun 29 Mar 2026 09:00:28 +0000
Manifest next update: Mon 30 Mar 2026 09:00:28 +0000
Files and hashes: 1: pl4G0drpVsiUnTNv0aNJRxAq40Y.roa (hash: TIrmY5F1mz/rcq5o0AaF7KuNyHFmI5rxVVBApqp6+Ig=)
2: uCT5qS0TatwLKR2syBgBgC34NYE.roa (hash: 6Pav0LB8Y/JGRbLI7vMShFMSStiFyP+H+ECIrWK519s=)
3: xAZEdsLEf3eEdKFIFsHgakCBPlw.crl (hash: 8O+tt3U/L68+7QZyjggAkB4asHnCH7R+y0T8x+0cXO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:bd:e4:a8:34:5e:1d:a2:b1:36:bf:d2:36:42:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4064476c2c47f778474a14816c1e06a40813e5c
Validity
Not Before: Mar 29 09:00:28 2026 GMT
Not After : Mar 30 09:00:28 2026 GMT
Subject: CN=2b8676079fc1b007a790b2a5745ed40479a2a5ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6e:50:84:32:10:27:01:9d:c6:d7:86:d6:81:
41:75:cf:0c:36:45:0e:e3:e6:0e:7b:b3:f6:b9:2a:
bc:a3:1b:0e:1a:26:0a:76:98:a0:ba:71:b9:96:62:
4e:17:0b:89:d5:31:2c:57:c9:45:03:07:65:8e:9a:
aa:65:6d:15:3b:65:b0:3e:40:55:35:39:e4:fa:5a:
f0:d3:e5:d9:06:a2:0e:3a:8f:69:cc:34:03:f1:39:
f0:b3:1e:6d:8d:f9:8d:b6:0f:aa:e0:cd:fb:33:cf:
55:75:d0:3b:7f:ef:74:0b:77:3a:7d:b3:3a:21:ec:
71:27:14:33:c8:a6:4a:f1:95:a8:ae:4b:8c:f7:89:
91:7b:48:b8:8c:44:4f:98:09:db:41:41:16:d6:ea:
6e:c7:0f:03:25:21:f9:1b:31:9d:6c:5e:70:fe:05:
5f:45:dd:1f:7a:fe:64:b6:9a:a7:e6:77:a6:d9:55:
9b:58:f8:d9:f9:f8:b7:70:6c:f5:fa:f8:96:e0:26:
10:8b:65:b5:4e:57:27:8f:bf:34:a9:72:38:74:81:
a6:b8:bf:49:7e:98:17:aa:39:d4:e7:02:95:ba:a5:
c8:51:15:9a:83:1f:5c:45:3d:33:a4:2e:75:90:fb:
29:e3:b8:4c:b3:40:00:b3:f7:d4:0f:8f:ed:1d:73:
f2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:86:76:07:9F:C1:B0:07:A7:90:B2:A5:74:5E:D4:04:79:A2:A5:AB
X509v3 Authority Key Identifier:
keyid:C4:06:44:76:C2:C4:7F:77:84:74:A1:48:16:C1:E0:6A:40:81:3E:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:b7:ba:1a:43:79:f0:1f:4e:4a:f1:0d:60:03:73:e0:70:97:
c7:63:3e:6e:94:89:8e:59:23:e4:cd:4b:e4:e9:f9:6a:bc:98:
af:a5:df:e9:24:13:59:30:a1:29:fb:d5:a0:8e:fa:df:60:06:
4b:37:27:72:7e:85:04:f2:f1:ff:33:02:20:db:43:8f:0f:29:
f7:b5:c9:7b:d6:02:8e:87:ec:bd:62:75:86:36:62:da:21:e3:
a8:20:3a:be:38:1f:68:cc:60:c1:8e:b4:07:b4:d7:fd:d9:68:
b2:9e:62:8a:ef:98:7f:06:f4:f5:e2:4c:f9:4a:98:95:d6:80:
dc:86:df:27:69:78:98:65:e3:dc:1c:b5:42:70:e8:d4:67:4c:
12:8f:20:b6:50:41:61:39:cb:15:50:7a:c0:fc:4a:27:1b:4c:
ba:18:df:04:de:89:c5:3f:5f:7a:d6:6c:eb:9c:ae:94:52:74:
3a:96:3c:0b:06:24:a5:21:98:c5:33:46:f1:99:fb:e6:5d:7d:
ba:32:0d:dc:6d:20:00:02:98:ca:19:7a:b1:71:e0:91:f1:c0:
b4:d4:06:c6:c5:ce:5e:ef:fc:b8:07:92:25:e7:fa:38:af:c0:
e5:4e:fa:f1:92:58:51:1f:d5:9c:5d:8f:1d:e5:14:b7:6b:3d:
79:2c:61:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040r3kqDReHaKxNr/SNkKVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0MDY0NDc2YzJjNDdmNzc4NDc0YTE0ODE2YzFlMDZhNDA4
MTNlNWMwHhcNMjYwMzI5MDkwMDI4WhcNMjYwMzMwMDkwMDI4WjAzMTEwLwYDVQQD
EygyYjg2NzYwNzlmYzFiMDA3YTc5MGIyYTU3NDVlZDQwNDc5YTJhNWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsG5QhDIQJwGdxteG1oFBdc8MNkUO
4+YOe7P2uSq8oxsOGiYKdpigunG5lmJOFwuJ1TEsV8lFAwdljpqqZW0VO2WwPkBV
NTnk+lrw0+XZBqIOOo9pzDQD8Tnwsx5tjfmNtg+q4M37M89VddA7f+90C3c6fbM6
IexxJxQzyKZK8ZWorkuM94mRe0i4jERPmAnbQUEW1upuxw8DJSH5GzGdbF5w/gVf
Rd0fev5ktpqn5nem2VWbWPjZ+fi3cGz1+viW4CYQi2W1Tlcnj780qXI4dIGmuL9J
fpgXqjnU5wKVuqXIURWagx9cRT0zpC51kPsp47hMs0AAs/fUD4/tHXPyCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCuGdgefwbAHp5CypXRe1AR5oqWrMB8GA1UdIwQY
MBaAFMQGRHbCxH93hHShSBbB4GpAgT5cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEFaRWRzTEVmM2VFZEtGSUZzSGdha0NCUGx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC85YTdkZjctMThiYS00MWY3LTg4MGEt
NzQ2Nzc3ZTIxYzViLzEveEFaRWRzTEVmM2VFZEtGSUZzSGdha0NCUGx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC85YTdkZjctMThiYS00MWY3LTg4MGEtNzQ2Nzc3ZTIxYzVi
LzEveEFaRWRzTEVmM2VFZEtGSUZzSGdha0NCUGx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAbe6GkN5
8B9OSvENYANz4HCXx2M+bpSJjlkj5M1L5On5aryYr6Xf6SQTWTChKfvVoI7632AG
Szcncn6FBPLx/zMCINtDjw8p97XJe9YCjofsvWJ1hjZi2iHjqCA6vjgfaMxgwY60
B7TX/dlosp5iiu+Yfwb09eJM+UqYldaA3IbfJ2l4mGXj3By1QnDo1GdMEo8gtlBB
YTnLFVB6wPxKJxtMuhjfBN6JxT9fetZs65yulFJ0OpY8CwYkpSGYxTNG8Zn75l19
ujIN3G0gAAKYyhl6sXHgkfHAtNQGxsXOXu/8uAeSJef6OK/A5U768ZJYUR/VnF2P
HeUUt2s9eSxhMQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:48:41 2026 by rpki-client