Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft
File: xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft (raw, json)
Hash identifier: rPtXQzSz+jfS2omp3NJwwDH6ok6Fl17lZb2tjw1FnHc=
Subject key identifier: C4:81:93:69:50:28:32:5D:AD:B2:41:1D:05:CD:76:D8:8E:54:15:C4
Authority key identifier: C5:34:35:F4:BE:2C:54:3B:F3:48:3E:37:7F:80:31:4D:28:23:01:84
Certificate issuer: /CN=c53435f4be2c543bf3483e377f80314d28230184
Certificate serial: 019D37526B5B320E8531ADA1619F69E9A992
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTQ19L4sVDvzSD43f4AxTSgjAYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 02:00:41 +0000
Manifest this update: Sun 29 Mar 2026 02:00:41 +0000
Manifest next update: Mon 30 Mar 2026 02:00:41 +0000
Files and hashes: 1: 3gfFN41_-V5KCVj9bLCnPzDA4Sg.roa (hash: feVZbY6ZTCnUm+ks82CSr0rpu6G60t2RiQeNmO5z3TE=)
2: xTQ19L4sVDvzSD43f4AxTSgjAYQ.crl (hash: 3DgvyZKmOHXSdbPiM6ce+AG2by1GSMz6l3lanmsCeZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTQ19L4sVDvzSD43f4AxTSgjAYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:6b:5b:32:0e:85:31:ad:a1:61:9f:69:e9:a9:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53435f4be2c543bf3483e377f80314d28230184
Validity
Not Before: Mar 29 02:00:41 2026 GMT
Not After : Mar 30 02:00:41 2026 GMT
Subject: CN=c48193695028325dadb2411d05cd76d88e5415c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e7:7b:7d:3b:0a:65:58:8e:cd:de:27:aa:ad:
da:b4:19:56:62:52:eb:c2:35:1c:39:85:7d:e6:6e:
05:98:3b:80:7b:c4:50:d2:26:47:6b:db:15:ae:b2:
68:29:b3:ef:12:07:ce:91:66:dc:c8:ad:d0:fd:80:
1e:12:0f:71:d6:dd:97:3c:52:e7:7a:ab:02:a5:80:
b9:c4:e1:c9:57:b7:21:ca:90:33:f4:3a:74:74:a4:
dc:17:6f:3e:ce:da:af:21:7b:59:e7:fb:02:17:53:
ce:29:5c:4b:fe:3b:25:6f:7a:ba:bd:24:2d:10:9d:
01:67:3f:38:20:79:34:a1:a1:97:3b:f4:7f:26:f9:
88:e2:cc:72:2d:78:c5:d1:49:36:26:63:64:70:0f:
2b:96:cb:6a:f0:bb:a0:17:3e:08:7f:1d:4a:4c:16:
0f:5d:71:4e:e4:84:6b:6a:87:a8:87:f0:8a:b3:7d:
f5:96:42:77:ea:63:4b:fe:fb:65:28:20:03:26:69:
b0:05:b3:c8:99:99:34:f6:f6:11:ca:73:4e:6c:fe:
d3:f0:ad:83:bd:7f:2c:90:95:05:fe:ee:7c:6b:a5:
82:78:de:99:72:74:0e:a7:0e:2c:75:46:b8:9c:19:
5a:8f:cc:69:42:49:d3:d9:9c:f8:9b:86:bf:a4:7b:
15:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:81:93:69:50:28:32:5D:AD:B2:41:1D:05:CD:76:D8:8E:54:15:C4
X509v3 Authority Key Identifier:
keyid:C5:34:35:F4:BE:2C:54:3B:F3:48:3E:37:7F:80:31:4D:28:23:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTQ19L4sVDvzSD43f4AxTSgjAYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:eb:d0:93:4a:cc:2e:d8:2f:a0:cd:d9:06:29:32:ac:10:80:
cf:9b:04:ed:f1:1d:ac:61:02:56:2f:e5:bb:81:16:c7:6f:97:
ee:58:98:66:26:c3:ea:61:ef:0a:78:c6:76:aa:ea:f5:94:a0:
5b:2e:5d:0f:a4:cc:31:36:1b:04:42:92:ec:fe:16:fa:22:97:
2b:78:ff:48:77:65:51:e7:0f:39:55:1a:2c:fb:42:c5:9b:e1:
16:39:90:78:62:4f:2b:b7:f3:a7:c0:68:97:78:1b:11:3c:50:
c3:1e:a9:d3:8e:1a:e9:27:8f:dd:1c:e5:3b:f9:6e:76:45:f2:
1a:f9:ff:bc:97:99:c0:52:ca:bc:e2:da:35:ad:22:33:20:5c:
4c:d1:56:9b:a7:60:5a:fc:fd:0a:ac:bd:d4:97:61:2c:b0:69:
01:41:4e:7a:53:5b:61:a5:02:bc:db:90:00:d7:6d:ba:8a:99:
b9:cb:15:e4:e4:d6:bc:00:19:04:ac:1a:be:50:8c:44:54:fd:
68:74:5a:30:7a:76:12:9f:97:48:d5:e8:a4:7e:68:ea:d4:98:
10:b2:a9:98:f7:71:39:67:4f:b3:e4:27:8d:8a:e1:98:4d:06:
ab:23:7d:47:11:79:c9:d1:de:f9:44:74:6a:8c:01:1b:73:02:
03:35:96:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UmtbMg6FMa2hYZ9p6amSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MzQzNWY0YmUyYzU0M2JmMzQ4M2UzNzdmODAzMTRkMjgy
MzAxODQwHhcNMjYwMzI5MDIwMDQxWhcNMjYwMzMwMDIwMDQxWjAzMTEwLwYDVQQD
EyhjNDgxOTM2OTUwMjgzMjVkYWRiMjQxMWQwNWNkNzZkODhlNTQxNWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOd7fTsKZViOzd4nqq3atBlWYlLr
wjUcOYV95m4FmDuAe8RQ0iZHa9sVrrJoKbPvEgfOkWbcyK3Q/YAeEg9x1t2XPFLn
eqsCpYC5xOHJV7chypAz9Dp0dKTcF28+ztqvIXtZ5/sCF1POKVxL/jslb3q6vSQt
EJ0BZz84IHk0oaGXO/R/JvmI4sxyLXjF0Uk2JmNkcA8rlstq8LugFz4Ifx1KTBYP
XXFO5IRraoeoh/CKs331lkJ36mNL/vtlKCADJmmwBbPImZk09vYRynNObP7T8K2D
vX8skJUF/u58a6WCeN6ZcnQOpw4sdUa4nBlaj8xpQknT2Zz4m4a/pHsVWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMSBk2lQKDJdrbJBHQXNdtiOVBXEMB8GA1UdIwQY
MBaAFMU0NfS+LFQ780g+N3+AMU0oIwGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFRRMTlMNHNWRHZ6U0Q0M2Y0QXhUU2dqQVlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS80M2Y2MDctYTdmNC00OTg1LWI2ZWIt
OWY0ZmU0Y2QwMjQ2LzEveFRRMTlMNHNWRHZ6U0Q0M2Y0QXhUU2dqQVlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS80M2Y2MDctYTdmNC00OTg1LWI2ZWItOWY0ZmU0Y2QwMjQ2
LzEveFRRMTlMNHNWRHZ6U0Q0M2Y0QXhUU2dqQVlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoevQk0rM
LtgvoM3ZBikyrBCAz5sE7fEdrGECVi/lu4EWx2+X7liYZibD6mHvCnjGdqrq9ZSg
Wy5dD6TMMTYbBEKS7P4W+iKXK3j/SHdlUecPOVUaLPtCxZvhFjmQeGJPK7fzp8Bo
l3gbETxQwx6p044a6SeP3RzlO/ludkXyGvn/vJeZwFLKvOLaNa0iMyBcTNFWm6dg
Wvz9Cqy91JdhLLBpAUFOelNbYaUCvNuQANdtuoqZucsV5OTWvAAZBKwavlCMRFT9
aHRaMHp2Ep+XSNXopH5o6tSYELKpmPdxOWdPs+QnjYrhmE0GqyN9RxF5ydHe+UR0
aowBG3MCAzWW7Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:51 2026 by rpki-client