Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
File: x6trIlTkVzCq-kWrUZcyA2FLtsw.mft (raw, json)
Hash identifier: y3hkKii2o2IhEm6kckDR/UFq/gKxTPDZ7meL8jF9ftU=
Subject key identifier: D3:A7:24:CD:8F:A8:14:06:73:5C:01:D0:B6:5C:C3:E2:9C:DB:03:81
Authority key identifier: C7:AB:6B:22:54:E4:57:30:AA:FA:45:AB:51:97:32:03:61:4B:B6:CC
Certificate issuer: /CN=c7ab6b2254e45730aafa45ab51973203614bb6cc
Certificate serial: 019D3A1D06D92732C3AA96949547D5E45848
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
Manifest number: 15D3
Signing time: Sun 29 Mar 2026 15:01:13 +0000
Manifest this update: Sun 29 Mar 2026 15:01:13 +0000
Manifest next update: Mon 30 Mar 2026 15:01:13 +0000
Files and hashes: 1: YOiCbjbkGoimIbW3nkdcU24V058.roa (hash: jiSJ+O2fFYcLK2VQfO+2IbVyopzNGD9QLV+WZmnKJXk=)
2: qiIZeyX9IxKh6T92ERJD5iYwHJM.roa (hash: wrTzp4KmTWE2/mdXpqaffqeTXDKkOFMqbZCBTP+Yqzg=)
3: x6trIlTkVzCq-kWrUZcyA2FLtsw.crl (hash: IKrV0mz8N47xVEfcc6RK2b1nGQr+fCVon2Z/g76OXsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1d:06:d9:27:32:c3:aa:96:94:95:47:d5:e4:58:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ab6b2254e45730aafa45ab51973203614bb6cc
Validity
Not Before: Mar 29 15:01:13 2026 GMT
Not After : Mar 30 15:01:13 2026 GMT
Subject: CN=d3a724cd8fa81406735c01d0b65cc3e29cdb0381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:68:86:9d:2d:35:cf:54:49:a2:ec:05:ff:98:
ff:a0:6a:49:0a:4d:c5:d8:b0:9e:a4:e6:89:37:36:
ec:97:a3:50:a6:a6:83:5a:00:78:f4:a4:19:71:94:
e1:e4:86:d2:84:d2:2d:03:88:9c:56:d4:ed:ea:49:
37:60:57:5b:bb:1b:df:aa:16:7d:70:0a:85:dc:97:
52:50:89:e8:5d:54:2f:c2:31:3e:85:2f:1a:dc:b1:
a3:82:79:6b:1c:c6:aa:57:44:cb:98:25:ba:00:d8:
c8:c1:86:5e:98:c3:8f:54:01:df:e4:68:59:7c:9b:
2d:eb:d6:58:a7:f8:e3:13:f5:52:6f:d8:59:1e:63:
51:bb:8c:dc:1a:b9:57:3b:1d:53:53:dc:bc:ec:f3:
2d:1f:69:26:17:32:1a:1a:58:9b:77:e1:b1:f5:5f:
00:ee:58:52:1f:39:87:7d:1b:9a:e4:b4:cc:39:ce:
82:97:d4:96:ce:3f:64:43:b7:fb:3b:1e:6b:09:38:
8a:83:85:28:a2:29:44:f5:68:ac:38:18:ec:59:ab:
59:44:f7:a1:10:59:44:bc:55:d6:aa:65:eb:3a:a1:
a4:d9:db:0e:48:cb:06:26:9b:a6:b9:48:e1:b9:69:
40:1b:4a:58:41:f6:e9:01:33:6a:f6:35:50:e5:f4:
2e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A7:24:CD:8F:A8:14:06:73:5C:01:D0:B6:5C:C3:E2:9C:DB:03:81
X509v3 Authority Key Identifier:
keyid:C7:AB:6B:22:54:E4:57:30:AA:FA:45:AB:51:97:32:03:61:4B:B6:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:f6:78:88:3a:d2:c6:38:32:a6:af:10:7c:e9:13:9f:91:b7:
c5:56:85:b1:5e:0e:85:24:cf:61:7e:a4:cf:75:df:86:a6:56:
3b:3e:69:6a:c7:e3:e1:b1:90:bf:f8:29:35:8c:a7:4a:24:1c:
aa:28:41:c5:00:0f:18:a7:bd:b7:2c:71:d6:55:56:e4:50:76:
a1:d5:31:73:48:a8:ae:0c:80:2c:f5:b1:23:8a:63:2f:84:d7:
e7:b9:6e:1c:89:8e:58:fe:9f:32:31:06:f2:73:2f:c5:82:8d:
aa:21:b7:7f:18:84:03:1c:24:7a:8b:f4:17:3e:82:00:a0:5d:
97:ad:03:a3:f7:51:db:a1:5d:58:74:b5:c0:6a:f9:1e:d7:e3:
7f:db:84:cc:d7:92:31:eb:d2:c2:04:f6:4f:9d:43:38:03:0b:
3a:5a:93:f2:5b:16:83:61:ff:22:48:f8:0e:5b:6a:ff:c8:30:
be:29:d2:74:19:8c:1d:6c:30:7c:ac:d4:5e:e4:65:29:42:a3:
dc:f8:27:38:92:35:7b:1e:d4:31:21:68:37:43:ac:da:1a:34:
8f:15:79:e1:9d:7b:4d:30:3d:ee:02:94:04:04:9a:e2:87:89:
ce:2f:a0:29:bf:d8:2f:3d:07:cf:51:86:f4:70:b0:ae:02:e7:
a0:e9:52:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06HQbZJzLDqpaUlUfV5FhIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3YWI2YjIyNTRlNDU3MzBhYWZhNDVhYjUxOTczMjAzNjE0
YmI2Y2MwHhcNMjYwMzI5MTUwMTEzWhcNMjYwMzMwMTUwMTEzWjAzMTEwLwYDVQQD
EyhkM2E3MjRjZDhmYTgxNDA2NzM1YzAxZDBiNjVjYzNlMjljZGIwMzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WiGnS01z1RJouwF/5j/oGpJCk3F
2LCepOaJNzbsl6NQpqaDWgB49KQZcZTh5IbShNItA4icVtTt6kk3YFdbuxvfqhZ9
cAqF3JdSUInoXVQvwjE+hS8a3LGjgnlrHMaqV0TLmCW6ANjIwYZemMOPVAHf5GhZ
fJst69ZYp/jjE/VSb9hZHmNRu4zcGrlXOx1TU9y87PMtH2kmFzIaGlibd+Gx9V8A
7lhSHzmHfRua5LTMOc6Cl9SWzj9kQ7f7Ox5rCTiKg4UooilE9WisOBjsWatZRPeh
EFlEvFXWqmXrOqGk2dsOSMsGJpumuUjhuWlAG0pYQfbpATNq9jVQ5fQuyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNOnJM2PqBQGc1wB0LZcw+Kc2wOBMB8GA1UdIwQY
MBaAFMerayJU5FcwqvpFq1GXMgNhS7bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDZ0cklsVGtWekNxLWtXclVaY3lBMkZMdHN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8zM2I2OWQtZjRjYS00M2FhLTk3ODAt
MWQ1NWQ1OTI5Y2VjLzEveDZ0cklsVGtWekNxLWtXclVaY3lBMkZMdHN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy8zM2I2OWQtZjRjYS00M2FhLTk3ODAtMWQ1NWQ1OTI5Y2Vj
LzEveDZ0cklsVGtWekNxLWtXclVaY3lBMkZMdHN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGfZ4iDrS
xjgypq8QfOkTn5G3xVaFsV4OhSTPYX6kz3XfhqZWOz5pasfj4bGQv/gpNYynSiQc
qihBxQAPGKe9tyxx1lVW5FB2odUxc0iorgyALPWxI4pjL4TX57luHImOWP6fMjEG
8nMvxYKNqiG3fxiEAxwkeov0Fz6CAKBdl60Do/dR26FdWHS1wGr5Htfjf9uEzNeS
MevSwgT2T51DOAMLOlqT8lsWg2H/Ikj4Dltq/8gwvinSdBmMHWwwfKzUXuRlKUKj
3PgnOJI1ex7UMSFoN0Os2ho0jxV54Z17TTA97gKUBASa4oeJzi+gKb/YLz0Hz1GG
9HCwrgLnoOlSTA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:35 2026 by rpki-client