Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
File: xNinONTBPEpnevUSdbqEyLNtyc4.mft (raw, json)
Hash identifier: h2j1qrx3xnbyddmv+pBrKVkrjIsahF+qwjX3FIenuJI=
Subject key identifier: A1:04:74:F5:D6:1D:DB:BF:E8:B8:19:2F:A4:7C:0B:F7:8B:6E:44:66
Authority key identifier: C4:D8:A7:38:D4:C1:3C:4A:67:7A:F5:12:75:BA:84:C8:B3:6D:C9:CE
Certificate issuer: /CN=c4d8a738d4c13c4a677af51275ba84c8b36dc9ce
Certificate serial: 019D37F702FFEA0F7BE851184E3D6F3E4682
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNinONTBPEpnevUSdbqEyLNtyc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
Manifest number: 1820
Signing time: Sun 29 Mar 2026 05:00:28 +0000
Manifest this update: Sun 29 Mar 2026 05:00:28 +0000
Manifest next update: Mon 30 Mar 2026 05:00:28 +0000
Files and hashes: 1: xNinONTBPEpnevUSdbqEyLNtyc4.crl (hash: Y3gGHv51g8NEr5+cuV4s9UtdXrRKZD22gbFsyGqbl/E=)
2: z8ur_dlixhHr86qHsQK2VwEFLVU.roa (hash: wwiX0Abxg7HH3i+7n0HaT1GyWyASGat8jETXDQw59Ao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xNinONTBPEpnevUSdbqEyLNtyc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:02:ff:ea:0f:7b:e8:51:18:4e:3d:6f:3e:46:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4d8a738d4c13c4a677af51275ba84c8b36dc9ce
Validity
Not Before: Mar 29 05:00:28 2026 GMT
Not After : Mar 30 05:00:28 2026 GMT
Subject: CN=a10474f5d61ddbbfe8b8192fa47c0bf78b6e4466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:bc:4e:3a:97:f1:05:ea:12:f0:bc:47:86:44:
fe:7b:eb:9e:0e:09:6a:a4:64:e0:27:1b:33:23:82:
42:74:64:ab:bc:7f:56:50:7b:26:25:d8:32:1c:bc:
c2:a1:ca:a4:f8:23:fb:ed:8e:b6:0b:74:0f:ff:df:
29:2e:8b:da:d8:90:25:25:e7:51:f5:50:02:69:04:
85:e7:b9:be:7d:b5:2a:6c:32:dd:4d:3e:bd:1c:12:
cf:e2:9d:6c:8c:fb:d1:7b:f4:58:eb:a3:d8:1e:6c:
6d:66:2d:f0:20:f4:02:45:fe:65:93:6c:91:ef:eb:
c4:bb:7f:6f:70:6e:a4:66:b3:0a:93:fc:ab:df:74:
19:e5:d0:3a:13:96:68:50:f1:ea:54:fb:e6:2c:d5:
15:4f:28:35:ae:fb:47:75:85:1d:17:10:6f:46:0c:
50:7a:68:ea:74:86:1a:2f:96:6c:c4:4e:f1:e0:cb:
52:ef:a8:b2:e0:cb:be:21:f5:1a:dc:60:3b:35:00:
11:c0:7b:13:4d:23:cb:1d:bc:af:37:0a:ca:56:f1:
8b:d4:f6:e1:8c:eb:71:92:b9:a5:17:de:a2:01:a6:
c6:3b:3b:3f:1e:c3:70:e1:13:ba:fc:d1:74:4c:d7:
d0:46:68:ac:ae:77:14:9b:01:2f:63:30:09:4e:5a:
19:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:04:74:F5:D6:1D:DB:BF:E8:B8:19:2F:A4:7C:0B:F7:8B:6E:44:66
X509v3 Authority Key Identifier:
keyid:C4:D8:A7:38:D4:C1:3C:4A:67:7A:F5:12:75:BA:84:C8:B3:6D:C9:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNinONTBPEpnevUSdbqEyLNtyc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:71:8e:ee:f1:59:1c:ce:0d:ba:3f:cc:6b:75:82:bb:38:83:
e7:0d:5f:df:fc:f8:b3:26:da:08:23:f8:09:73:96:e5:0e:58:
2b:fa:24:4f:99:e4:d8:45:c9:68:03:b2:34:39:e5:69:b4:b9:
17:7c:45:9d:dd:79:73:69:6c:e0:56:4d:73:3d:70:a2:96:b9:
1d:9f:e3:95:37:4c:1f:ce:38:e8:19:e7:7d:d6:84:08:b5:82:
0a:96:cc:99:03:89:66:3c:0d:02:50:0b:a5:a7:2a:ae:bd:6a:
d2:97:41:ce:c0:65:11:a1:e4:18:05:c8:b3:0e:b8:81:bf:a5:
8e:f5:b6:da:3d:93:97:45:c5:e4:d5:52:7e:08:c0:d9:00:fb:
02:ab:7a:5b:f5:43:53:17:0e:14:01:bc:d9:94:6c:6a:1b:5b:
8a:21:c8:75:fb:23:c4:76:37:c1:ef:4a:f6:71:08:89:78:21:
9a:70:c2:79:19:94:44:56:3a:7f:ac:05:c9:17:bc:ed:d8:7a:
38:82:e1:b5:f0:e7:d3:ac:2f:a9:2c:52:1c:5e:84:af:98:15:
84:d6:97:01:75:ec:73:9a:77:95:4e:74:6d:d8:ef:ef:72:11:
ef:09:cb:ce:88:04:b6:2d:b5:ff:8c:bd:63:d3:04:41:20:15:
9c:3b:ae:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039wL/6g976FEYTj1vPkaCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZDhhNzM4ZDRjMTNjNGE2NzdhZjUxMjc1YmE4NGM4YjM2
ZGM5Y2UwHhcNMjYwMzI5MDUwMDI4WhcNMjYwMzMwMDUwMDI4WjAzMTEwLwYDVQQD
EyhhMTA0NzRmNWQ2MWRkYmJmZThiODE5MmZhNDdjMGJmNzhiNmU0NDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7LxOOpfxBeoS8LxHhkT+e+ueDglq
pGTgJxszI4JCdGSrvH9WUHsmJdgyHLzCocqk+CP77Y62C3QP/98pLova2JAlJedR
9VACaQSF57m+fbUqbDLdTT69HBLP4p1sjPvRe/RY66PYHmxtZi3wIPQCRf5lk2yR
7+vEu39vcG6kZrMKk/yr33QZ5dA6E5ZoUPHqVPvmLNUVTyg1rvtHdYUdFxBvRgxQ
emjqdIYaL5ZsxE7x4MtS76iy4Mu+IfUa3GA7NQARwHsTTSPLHbyvNwrKVvGL1Pbh
jOtxkrmlF96iAabGOzs/HsNw4RO6/NF0TNfQRmisrncUmwEvYzAJTloZWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKEEdPXWHdu/6LgZL6R8C/eLbkRmMB8GA1UdIwQY
MBaAFMTYpzjUwTxKZ3r1EnW6hMizbcnOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE5pbk9OVEJQRXBuZXZVU2RicUV5TE50eWM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS83MTVhZGUtOWRhZS00MTUxLTgxOWYt
YWY2MmM4NDY1ZGFiLzEveE5pbk9OVEJQRXBuZXZVU2RicUV5TE50eWM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS83MTVhZGUtOWRhZS00MTUxLTgxOWYtYWY2MmM4NDY1ZGFi
LzEveE5pbk9OVEJQRXBuZXZVU2RicUV5TE50eWM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADXGO7vFZ
HM4Nuj/Ma3WCuziD5w1f3/z4sybaCCP4CXOW5Q5YK/okT5nk2EXJaAOyNDnlabS5
F3xFnd15c2ls4FZNcz1wopa5HZ/jlTdMH8446BnnfdaECLWCCpbMmQOJZjwNAlAL
pacqrr1q0pdBzsBlEaHkGAXIsw64gb+ljvW22j2Tl0XF5NVSfgjA2QD7Aqt6W/VD
UxcOFAG82ZRsahtbiiHIdfsjxHY3we9K9nEIiXghmnDCeRmURFY6f6wFyRe87dh6
OILhtfDn06wvqSxSHF6Er5gVhNaXAXXsc5p3lU50bdjv73IR7wnLzogEti21/4y9
Y9MEQSAVnDuuNA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:02:10 2026 by rpki-client