Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.mft
File: xU9qEXeCbFq2S9OvATiptXpLkeU.mft (raw, json)
Hash identifier: acgrbcqXW14h3k5q8dMzHpLOIGmmsE5z2XyZPY0jD7I=
Subject key identifier: B5:3D:75:8B:E4:9D:08:C3:54:8D:A5:1F:51:6E:FE:E0:21:73:0E:65
Authority key identifier: C5:4F:6A:11:77:82:6C:5A:B6:4B:D3:AF:01:38:A9:B5:7A:4B:91:E5
Certificate issuer: /CN=c54f6a1177826c5ab64bd3af0138a9b57a4b91e5
Certificate serial: 019CB8F01324AAA406BC8D5CAFDD519A78E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xU9qEXeCbFq2S9OvATiptXpLkeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.mft
Manifest number: DF
Signing time: Wed 04 Mar 2026 13:01:07 +0000
Manifest this update: Wed 04 Mar 2026 13:01:07 +0000
Manifest next update: Thu 05 Mar 2026 13:01:07 +0000
Files and hashes: 1: AAL-YY9GVuWqbLX5GG1k3ImctWA.roa (hash: dOcDqpARrTucPUNtlVinnlKcwBaTZo2MLnDCrG84YIw=)
2: xU9qEXeCbFq2S9OvATiptXpLkeU.crl (hash: Y4kC2c6ug19OFHVi4ITbq6QvcM5ADKLb7mpCuAwr+6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xU9qEXeCbFq2S9OvATiptXpLkeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 13:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b8:f0:13:24:aa:a4:06:bc:8d:5c:af:dd:51:9a:78:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c54f6a1177826c5ab64bd3af0138a9b57a4b91e5
Validity
Not Before: Mar 4 13:01:07 2026 GMT
Not After : Mar 5 13:01:07 2026 GMT
Subject: CN=b53d758be49d08c3548da51f516efee021730e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8b:69:fa:a7:ad:4c:fb:c9:fd:0f:30:4b:8d:
89:e4:dc:e0:18:19:af:34:8a:00:b4:01:a3:26:e3:
36:66:2b:31:d9:93:79:4c:fa:f1:ca:ba:56:fd:c2:
0b:ef:84:17:f1:10:06:2e:16:cf:eb:f2:43:ee:74:
90:ce:cf:79:e7:e1:cd:f8:16:89:ca:10:cd:b9:0e:
3b:33:2f:e5:e6:89:1c:55:7c:45:73:2f:e7:9d:9f:
63:39:e6:79:e4:e9:7b:99:8d:1f:f2:e8:34:86:95:
10:b4:18:b0:b7:3a:d7:1f:8e:e6:be:68:2d:0a:31:
a0:76:b2:d4:7e:b6:64:74:e1:f0:24:20:80:d3:8b:
3b:d4:5d:d8:e8:b7:47:65:04:e9:8c:16:00:23:11:
0f:6a:75:72:c5:d6:66:77:09:a2:17:75:a4:9f:1e:
fd:37:eb:31:34:83:5b:63:56:cb:ff:5a:d4:95:d5:
d4:7b:ed:1c:12:59:92:b4:40:33:19:c5:1a:40:88:
81:ea:df:22:7f:d3:d1:6a:10:a3:05:a6:e3:d9:ff:
ab:cd:eb:db:0b:67:0b:0a:24:f7:5b:73:9b:86:e7:
9f:06:6e:2e:fc:04:7d:9e:bd:72:22:87:af:da:f4:
ce:94:dd:63:1d:f3:9d:4d:2d:6f:06:ec:65:e6:0e:
4b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:3D:75:8B:E4:9D:08:C3:54:8D:A5:1F:51:6E:FE:E0:21:73:0E:65
X509v3 Authority Key Identifier:
keyid:C5:4F:6A:11:77:82:6C:5A:B6:4B:D3:AF:01:38:A9:B5:7A:4B:91:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xU9qEXeCbFq2S9OvATiptXpLkeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:f2:d2:b0:61:7a:d9:0c:bf:2e:0a:04:28:de:0d:b1:ea:02:
ac:94:17:17:b6:f2:f2:fb:20:36:b4:fc:06:09:c7:02:d7:22:
6b:1c:a4:7f:c7:65:af:0f:33:e4:3f:45:01:e2:47:9e:1c:f4:
5e:8b:d2:59:1f:4e:c2:86:1b:f8:53:60:94:28:8b:34:53:d5:
2f:13:a0:23:7e:19:9b:81:6e:91:d8:ae:46:4a:d8:9b:15:f6:
73:cc:11:46:27:3f:44:5f:85:60:89:93:33:ac:2e:cb:d0:3a:
f7:42:c5:33:82:5a:19:09:6f:71:13:d1:9b:05:ce:b0:75:d3:
89:f6:6b:0f:97:53:1e:05:4b:8e:5e:ac:ba:c1:98:d6:81:a3:
c7:4a:6c:37:4a:dc:48:f0:bc:9e:fc:87:32:c0:67:a7:5a:a5:
c7:53:c2:e6:48:8b:d1:04:d0:60:13:d9:b6:92:60:a1:f6:26:
34:e3:cd:22:64:6e:2b:41:a0:52:9b:c2:93:92:e4:67:d8:36:
b2:7f:6c:9b:32:29:b4:5d:9d:96:7c:c2:8d:a1:5a:db:6c:b6:
cd:02:22:91:c7:52:67:e3:4f:fc:d1:72:ee:18:04:51:dd:dc:
75:0d:38:c5:f1:9e:2a:aa:0e:e4:6e:30:34:9a:3f:c6:27:d8:
c6:2c:53:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZy48BMkqqQGvI1cr91RmnjlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NGY2YTExNzc4MjZjNWFiNjRiZDNhZjAxMzhhOWI1N2E0
YjkxZTUwHhcNMjYwMzA0MTMwMTA3WhcNMjYwMzA1MTMwMTA3WjAzMTEwLwYDVQQD
EyhiNTNkNzU4YmU0OWQwOGMzNTQ4ZGE1MWY1MTZlZmVlMDIxNzMwZTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArItp+qetTPvJ/Q8wS42J5NzgGBmv
NIoAtAGjJuM2Zisx2ZN5TPrxyrpW/cIL74QX8RAGLhbP6/JD7nSQzs955+HN+BaJ
yhDNuQ47My/l5okcVXxFcy/nnZ9jOeZ55Ol7mY0f8ug0hpUQtBiwtzrXH47mvmgt
CjGgdrLUfrZkdOHwJCCA04s71F3Y6LdHZQTpjBYAIxEPanVyxdZmdwmiF3Wknx79
N+sxNINbY1bL/1rUldXUe+0cElmStEAzGcUaQIiB6t8if9PRahCjBabj2f+rzevb
C2cLCiT3W3ObhuefBm4u/AR9nr1yIoev2vTOlN1jHfOdTS1vBuxl5g5LgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLU9dYvknQjDVI2lH1Fu/uAhcw5lMB8GA1UdIwQY
MBaAFMVPahF3gmxatkvTrwE4qbV6S5HlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFU5cUVYZUNiRnEyUzlPdkFUaXB0WHBMa2VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xNGYzNjctM2I5ZS00OWQ0LTk2ODYt
MmVhOGFjZTViOTVlLzEveFU5cUVYZUNiRnEyUzlPdkFUaXB0WHBMa2VVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS8xNGYzNjctM2I5ZS00OWQ0LTk2ODYtMmVhOGFjZTViOTVl
LzEveFU5cUVYZUNiRnEyUzlPdkFUaXB0WHBMa2VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASvLSsGF6
2Qy/LgoEKN4NseoCrJQXF7by8vsgNrT8BgnHAtciaxykf8dlrw8z5D9FAeJHnhz0
XovSWR9OwoYb+FNglCiLNFPVLxOgI34Zm4FukdiuRkrYmxX2c8wRRic/RF+FYImT
M6wuy9A690LFM4JaGQlvcRPRmwXOsHXTifZrD5dTHgVLjl6susGY1oGjx0psN0rc
SPC8nvyHMsBnp1qlx1PC5kiL0QTQYBPZtpJgofYmNOPNImRuK0GgUpvCk5LkZ9g2
sn9smzIptF2dlnzCjaFa22y2zQIikcdSZ+NP/NFy7hgEUd3cdQ04xfGeKqoO5G4w
NJo/xifYxixTUA==
-----END CERTIFICATE-----
Generated at Wed Mar 4 21:28:49 2026 by rpki-client