Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft
File: xPHyFPsizFNhKPXeSqAXqHiA8oU.mft (raw, json)
Hash identifier: iy06sa3FoG5ImV+rdQ/76nUGuh8UulAvnZ5wj7ewuwc=
Subject key identifier: 88:B7:B7:F4:B4:61:DD:3D:E3:F5:53:AE:B6:63:BD:8A:82:A6:A0:9D
Authority key identifier: C4:F1:F2:14:FB:22:CC:53:61:28:F5:DE:4A:A0:17:A8:78:80:F2:85
Certificate issuer: /CN=c4f1f214fb22cc536128f5de4aa017a87880f285
Certificate serial: 019D3AC23D757D72461B47435CF2BAB0DEBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPHyFPsizFNhKPXeSqAXqHiA8oU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft
Manifest number: 09FC
Signing time: Sun 29 Mar 2026 18:01:41 +0000
Manifest this update: Sun 29 Mar 2026 18:01:41 +0000
Manifest next update: Mon 30 Mar 2026 18:01:41 +0000
Files and hashes: 1: 1K1Um4B_fpW1GkCf_gBrii6dk-U.roa (hash: /YNif+CPSNTVk1hV3V7FBKNaBXD9ZU/xIRYCuPXwkd4=)
2: xPHyFPsizFNhKPXeSqAXqHiA8oU.crl (hash: u2yACBy6JXqx6aar1BX8YZPSIUgExc9UXXRo+BKUDK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPHyFPsizFNhKPXeSqAXqHiA8oU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c2:3d:75:7d:72:46:1b:47:43:5c:f2:ba:b0:de:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4f1f214fb22cc536128f5de4aa017a87880f285
Validity
Not Before: Mar 29 18:01:41 2026 GMT
Not After : Mar 30 18:01:41 2026 GMT
Subject: CN=88b7b7f4b461dd3de3f553aeb663bd8a82a6a09d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4d:19:ca:4e:78:67:8d:00:03:98:c4:25:33:
3e:bc:b5:9d:a9:e6:31:39:f4:3c:7b:01:6c:2b:14:
39:09:58:7c:2e:88:1c:9b:a0:54:c0:e1:1f:47:70:
57:1e:16:fc:d1:b6:5d:29:61:fb:0f:62:09:51:ef:
8b:94:e5:7b:cc:1e:ad:81:c4:04:6a:02:50:d6:f5:
dc:ff:67:99:41:b2:b9:d2:48:03:be:2e:89:38:1a:
c2:56:6c:07:b1:7f:5a:96:58:fe:be:0b:e2:d7:de:
fb:08:f0:ae:70:0d:dd:d3:66:e2:45:ab:cf:40:30:
0c:ec:19:d3:35:dc:1c:c1:5d:66:b4:fb:6a:17:7b:
92:3b:39:54:dd:60:eb:0f:ea:92:b6:50:41:08:23:
76:80:71:61:a7:ff:0d:75:e6:19:da:f2:07:ee:a0:
8a:72:f3:81:b1:8f:b7:5d:13:85:5f:28:4c:b6:83:
b4:91:c7:cc:6b:66:e2:8e:57:cd:72:27:d9:fd:48:
a0:33:ba:b1:5c:d8:0f:85:71:d5:37:e4:d7:af:99:
76:df:12:20:73:c2:32:9a:42:c2:7f:10:c9:72:7f:
25:e8:3b:d2:27:a7:0b:d3:91:3c:37:3d:22:0e:86:
6d:62:ab:4c:15:74:f0:32:71:88:c4:ee:62:a1:a6:
c0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B7:B7:F4:B4:61:DD:3D:E3:F5:53:AE:B6:63:BD:8A:82:A6:A0:9D
X509v3 Authority Key Identifier:
keyid:C4:F1:F2:14:FB:22:CC:53:61:28:F5:DE:4A:A0:17:A8:78:80:F2:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPHyFPsizFNhKPXeSqAXqHiA8oU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:69:48:6f:5a:29:3c:8d:7a:99:60:f4:55:b4:10:ed:9d:9c:
dd:8f:1a:6f:a2:5e:9d:bd:22:39:5e:d5:19:9c:bc:f3:00:b3:
f6:ed:95:8e:ba:34:a9:62:c0:7a:99:69:0d:47:fc:45:f8:d4:
24:fe:3a:04:ad:ec:5a:25:6d:fd:0d:4e:51:4a:a0:b5:35:73:
ec:01:ce:53:69:9a:ae:b2:9c:ac:5f:d4:b5:0d:bc:82:33:98:
ab:bb:f0:01:3f:13:0b:a5:43:30:d4:7a:bd:fe:5a:af:da:f5:
15:a1:6f:e3:cd:2d:98:2a:d2:ef:08:59:9b:cc:d0:1f:a0:10:
3e:3b:e8:c8:87:6c:22:5b:70:e4:b5:ea:4b:9e:83:05:02:c1:
58:e2:e9:bc:8c:15:b4:94:08:3e:3a:1a:81:d1:40:86:22:98:
db:97:6d:2b:ce:7f:82:88:c6:2d:53:6b:a1:06:ea:dc:db:d8:
5f:2e:e1:c5:5c:71:e1:28:bf:18:28:f4:15:a1:a5:9e:f0:c7:
d1:29:e3:18:e0:c8:2d:d1:1d:4b:0b:d8:88:1d:c0:d3:31:85:
6b:37:4f:96:60:e5:0a:51:d7:b4:d3:81:41:7c:82:20:9a:8e:
5d:a8:06:a6:76:49:05:ef:35:b1:fb:42:67:20:7b:0f:8e:0c:
a1:5e:c2:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06wj11fXJGG0dDXPK6sN67MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZjFmMjE0ZmIyMmNjNTM2MTI4ZjVkZTRhYTAxN2E4Nzg4
MGYyODUwHhcNMjYwMzI5MTgwMTQxWhcNMjYwMzMwMTgwMTQxWjAzMTEwLwYDVQQD
Eyg4OGI3YjdmNGI0NjFkZDNkZTNmNTUzYWViNjYzYmQ4YTgyYTZhMDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsU0Zyk54Z40AA5jEJTM+vLWdqeYx
OfQ8ewFsKxQ5CVh8Logcm6BUwOEfR3BXHhb80bZdKWH7D2IJUe+LlOV7zB6tgcQE
agJQ1vXc/2eZQbK50kgDvi6JOBrCVmwHsX9allj+vgvi1977CPCucA3d02biRavP
QDAM7BnTNdwcwV1mtPtqF3uSOzlU3WDrD+qStlBBCCN2gHFhp/8NdeYZ2vIH7qCK
cvOBsY+3XROFXyhMtoO0kcfMa2bijlfNcifZ/UigM7qxXNgPhXHVN+TXr5l23xIg
c8IymkLCfxDJcn8l6DvSJ6cL05E8Nz0iDoZtYqtMFXTwMnGIxO5ioabA4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIi3t/S0Yd094/VTrrZjvYqCpqCdMB8GA1UdIwQY
MBaAFMTx8hT7IsxTYSj13kqgF6h4gPKFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFBIeUZQc2l6Rk5oS1BYZVNxQVhxSGlBOG9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9lMmIzNDktZTc5Ni00ODY1LTgwNDAt
ZWNmNGY0MjBjOThhLzEveFBIeUZQc2l6Rk5oS1BYZVNxQVhxSGlBOG9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9lMmIzNDktZTc5Ni00ODY1LTgwNDAtZWNmNGY0MjBjOThh
LzEveFBIeUZQc2l6Rk5oS1BYZVNxQVhxSGlBOG9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEmlIb1op
PI16mWD0VbQQ7Z2c3Y8ab6Jenb0iOV7VGZy88wCz9u2Vjro0qWLAeplpDUf8RfjU
JP46BK3sWiVt/Q1OUUqgtTVz7AHOU2marrKcrF/UtQ28gjOYq7vwAT8TC6VDMNR6
vf5ar9r1FaFv480tmCrS7whZm8zQH6AQPjvoyIdsIltw5LXqS56DBQLBWOLpvIwV
tJQIPjoagdFAhiKY25dtK85/gojGLVNroQbq3NvYXy7hxVxx4Si/GCj0FaGlnvDH
0SnjGODILdEdSwvYiB3A0zGFazdPlmDlClHXtNOBQXyCIJqOXagGpnZJBe81sftC
ZyB7D44MoV7Ccw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 20:23:22 2026 by rpki-client