Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft
File: xNN466ZI9D5TpKQeE0uQExypPNg.mft (raw, json)
Hash identifier: wMTLAspzviTxNjn3Af05BQrDPlMgE+zAvbMjXnYAqLA=
Subject key identifier: 8A:A7:03:CE:02:8C:BD:5E:4F:66:6C:32:71:03:F7:A8:F5:06:59:1F
Authority key identifier: C4:D3:78:EB:A6:48:F4:3E:53:A4:A4:1E:13:4B:90:13:1C:A9:3C:D8
Certificate issuer: /CN=c4d378eba648f43e53a4a41e134b90131ca93cd8
Certificate serial: 019D3A1CA025B68D2B45944460541F5EA028
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNN466ZI9D5TpKQeE0uQExypPNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft
Manifest number: 0DD1
Signing time: Sun 29 Mar 2026 15:00:47 +0000
Manifest this update: Sun 29 Mar 2026 15:00:47 +0000
Manifest next update: Mon 30 Mar 2026 15:00:47 +0000
Files and hashes: 1: LTb5vPloqkbClBKB9zASxlBnfTI.roa (hash: UXcXLrrBaIHA3rxo2Vg1OLmswtJ0WJsGAG20BgieLSw=)
2: xNN466ZI9D5TpKQeE0uQExypPNg.crl (hash: rhqq7Oli6fJaMGNaygUqKQ4L9sUjDNTvEMhuTPVMaKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xNN466ZI9D5TpKQeE0uQExypPNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:a0:25:b6:8d:2b:45:94:44:60:54:1f:5e:a0:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4d378eba648f43e53a4a41e134b90131ca93cd8
Validity
Not Before: Mar 29 15:00:47 2026 GMT
Not After : Mar 30 15:00:47 2026 GMT
Subject: CN=8aa703ce028cbd5e4f666c327103f7a8f506591f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ec:04:36:5a:23:33:75:95:f7:69:fe:e2:88:
41:01:56:e5:30:d7:22:43:ad:ab:54:c1:a2:e0:5a:
93:11:d9:5d:e5:95:f3:7e:21:3a:40:d6:67:ab:7e:
ba:ee:c5:5b:93:3d:c3:43:fe:ce:05:f1:49:b1:f8:
32:54:33:41:b8:c9:59:b0:57:b8:e2:e0:d0:60:37:
b2:bd:ea:26:3c:01:41:cf:8e:73:f2:6c:9e:93:ce:
3f:1d:65:fb:81:77:75:22:5d:99:2e:f7:41:39:b0:
92:a4:15:bb:ac:c0:1d:e5:d9:e2:01:99:f3:9b:4e:
ec:49:1c:2f:1d:ce:06:c3:8d:3c:41:a5:04:57:a3:
29:0d:26:90:13:72:7b:cb:e3:ad:7b:35:09:a2:a3:
e8:31:5d:04:ff:d4:b1:d9:a1:50:cf:da:7d:9d:d6:
5b:5e:13:89:4c:4c:a2:e3:96:28:cb:a8:18:b2:3f:
d5:e6:c3:30:ba:5e:1c:3a:e0:42:19:9f:ae:e0:bf:
f2:7b:43:c3:87:92:84:78:e8:9a:5c:aa:f8:23:c4:
81:64:fd:1d:7d:7b:8e:36:7f:8a:04:ca:be:96:6b:
d5:0d:50:3e:68:93:25:9d:94:2c:ef:53:47:bb:b7:
6f:71:97:f8:1a:58:11:b4:bb:04:84:94:83:8d:dc:
63:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A7:03:CE:02:8C:BD:5E:4F:66:6C:32:71:03:F7:A8:F5:06:59:1F
X509v3 Authority Key Identifier:
keyid:C4:D3:78:EB:A6:48:F4:3E:53:A4:A4:1E:13:4B:90:13:1C:A9:3C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNN466ZI9D5TpKQeE0uQExypPNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:e4:1d:71:12:1f:39:c9:ae:f1:4d:9b:f1:75:d4:18:f2:85:
cf:63:df:6a:90:cd:2a:86:33:dd:18:e2:54:26:69:d8:b1:b2:
c0:82:e8:8f:54:62:a3:69:be:8e:7c:46:6f:e6:d9:66:5e:d9:
f3:8b:21:db:75:df:26:30:6a:65:a1:98:20:22:3a:3a:47:a1:
f9:d1:0b:8f:33:f5:18:d2:23:d5:26:8f:1a:00:29:f3:19:47:
b3:9f:24:1d:42:e1:6a:d1:24:08:32:fc:57:f0:ab:90:c9:db:
66:3e:f0:b1:83:77:ff:a0:78:a7:72:eb:ef:ca:a0:18:4e:50:
b8:cf:41:9f:d6:73:2f:75:c0:f4:e1:05:f5:05:c5:31:c3:49:
9e:6c:3a:a0:98:39:4a:47:ee:1e:2e:bd:e6:05:30:94:35:84:
86:f9:e5:e2:f6:49:21:81:86:2e:0b:72:94:e5:11:a7:b8:05:
54:69:44:35:74:0a:e0:bf:c8:51:a2:de:4d:34:fb:0a:19:d0:
77:68:6e:5a:6d:4f:42:38:f2:46:4a:20:32:1b:5c:a8:fe:ea:
ab:62:08:a9:ca:f2:6a:62:c3:48:cb:ab:e1:57:c7:3e:71:6f:
02:66:02:a5:9b:97:ce:56:f0:f4:04:ab:ae:e3:84:bb:7f:f8:
3f:27:76:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06HKAlto0rRZREYFQfXqAoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZDM3OGViYTY0OGY0M2U1M2E0YTQxZTEzNGI5MDEzMWNh
OTNjZDgwHhcNMjYwMzI5MTUwMDQ3WhcNMjYwMzMwMTUwMDQ3WjAzMTEwLwYDVQQD
Eyg4YWE3MDNjZTAyOGNiZDVlNGY2NjZjMzI3MTAzZjdhOGY1MDY1OTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OwENlojM3WV92n+4ohBAVblMNci
Q62rVMGi4FqTEdld5ZXzfiE6QNZnq3667sVbkz3DQ/7OBfFJsfgyVDNBuMlZsFe4
4uDQYDeyveomPAFBz45z8myek84/HWX7gXd1Il2ZLvdBObCSpBW7rMAd5dniAZnz
m07sSRwvHc4Gw408QaUEV6MpDSaQE3J7y+OtezUJoqPoMV0E/9Sx2aFQz9p9ndZb
XhOJTEyi45Yoy6gYsj/V5sMwul4cOuBCGZ+u4L/ye0PDh5KEeOiaXKr4I8SBZP0d
fXuONn+KBMq+lmvVDVA+aJMlnZQs71NHu7dvcZf4GlgRtLsEhJSDjdxjnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIqnA84CjL1eT2ZsMnED96j1BlkfMB8GA1UdIwQY
MBaAFMTTeOumSPQ+U6SkHhNLkBMcqTzYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE5ONDY2Wkk5RDVUcEtRZUUwdVFFeHlwUE5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy81MTY0YWQtOTE1OC00OGYyLWE0ZTMt
ZGQ1NWE4MDU2MzAzLzEveE5ONDY2Wkk5RDVUcEtRZUUwdVFFeHlwUE5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy81MTY0YWQtOTE1OC00OGYyLWE0ZTMtZGQ1NWE4MDU2MzAz
LzEveE5ONDY2Wkk5RDVUcEtRZUUwdVFFeHlwUE5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAReQdcRIf
Ocmu8U2b8XXUGPKFz2PfapDNKoYz3RjiVCZp2LGywILoj1Rio2m+jnxGb+bZZl7Z
84sh23XfJjBqZaGYICI6Okeh+dELjzP1GNIj1SaPGgAp8xlHs58kHULhatEkCDL8
V/CrkMnbZj7wsYN3/6B4p3Lr78qgGE5QuM9Bn9ZzL3XA9OEF9QXFMcNJnmw6oJg5
SkfuHi695gUwlDWEhvnl4vZJIYGGLgtylOURp7gFVGlENXQK4L/IUaLeTTT7ChnQ
d2huWm1PQjjyRkogMhtcqP7qq2IIqcryamLDSMur4VfHPnFvAmYCpZuXzlbw9ASr
ruOEu3/4Pyd2oA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:01:46 2026 by rpki-client