Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
File: xJsfdrtbrG0MeWukcTDHaLHHOxw.mft (raw, json)
Hash identifier: 2+qFjIDUU6Ie81wq32Mufo2+du2egbWVnUvFT6MuWlU=
Subject key identifier: 21:55:93:29:79:2D:68:0F:F5:C0:90:55:1E:05:27:83:C1:EC:86:C2
Authority key identifier: C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C
Certificate issuer: /CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
Certificate serial: 019CEAEE9FBC11AC4C6BFB017CF8BBB27193
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
Manifest number: 1866
Signing time: Sat 14 Mar 2026 06:00:32 +0000
Manifest this update: Sat 14 Mar 2026 06:00:32 +0000
Manifest next update: Sun 15 Mar 2026 06:00:32 +0000
Files and hashes: 1: Ng0DQWDHTBmFSx5wv3FJ35llgcs.roa (hash: rjml5J5gqgFMe9KzjlWTkxUk0orx3tU+r2zl+R9xROo=)
2: wcLWWQG314JWSm8pfpN9yL_5EII.roa (hash: D4VS38hxLq9k1urmiJ5Azd8OYDvuYJ5hUnqD5WiA9F0=)
3: xJsfdrtbrG0MeWukcTDHaLHHOxw.crl (hash: WJz2ohC4g0MPcai0zfU4C2YRMop7v1VGxE7ZB/qrEc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ea:ee:9f:bc:11:ac:4c:6b:fb:01:7c:f8:bb:b2:71:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
Validity
Not Before: Mar 14 06:00:32 2026 GMT
Not After : Mar 15 06:00:32 2026 GMT
Subject: CN=21559329792d680ff5c090551e052783c1ec86c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:6d:c0:48:d3:ad:d0:1d:6d:19:b6:fd:21:6f:
7d:25:7a:47:b1:22:ac:78:83:58:c7:b4:84:b9:fd:
9f:99:08:79:16:c5:9c:06:f1:4f:20:e2:53:ae:bd:
d8:65:07:8c:c7:a0:1b:9f:e8:11:81:70:1f:2c:ba:
5f:cf:0e:65:3a:c7:10:cb:89:51:45:9b:36:31:84:
78:05:d4:e5:9f:c1:72:64:4a:d2:64:cc:1b:b0:b7:
cf:96:f0:22:4d:08:f2:dd:74:89:e9:34:07:58:61:
00:74:b9:7c:e5:ed:4a:9c:6c:7a:24:ca:5c:a1:ec:
f4:09:d2:ce:a8:69:76:03:36:92:17:54:bf:d5:00:
0c:92:b0:ce:3d:d6:5d:0d:94:64:9e:d2:76:7a:34:
9c:2d:a9:db:b5:71:64:31:63:89:09:41:4a:3f:65:
9f:d3:30:61:10:68:8b:4b:ea:8c:a0:b6:0b:19:ea:
e7:c6:a0:e5:2d:75:47:ea:ca:ac:7a:54:9a:bf:d7:
ba:d2:e1:5f:86:f8:f2:ea:81:17:04:87:1b:2b:0c:
fb:46:5b:34:df:a6:55:0d:50:4b:06:ee:7d:f4:6d:
ac:33:84:d9:1d:f7:30:59:b2:24:3c:b4:27:80:5f:
39:03:72:eb:67:85:76:ee:17:56:73:d7:78:57:cd:
69:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:55:93:29:79:2D:68:0F:F5:C0:90:55:1E:05:27:83:C1:EC:86:C2
X509v3 Authority Key Identifier:
keyid:C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:e7:c1:4e:46:06:6b:6e:23:5d:f6:e5:25:a1:86:67:0d:26:
78:e3:c3:44:1e:61:b1:84:ab:d9:80:d9:db:fe:6e:4c:a4:91:
bd:18:a2:9d:f4:be:3c:22:a1:d9:a7:2f:c7:04:ad:42:5d:2d:
90:21:80:a1:60:58:5d:36:8e:5e:74:ad:0d:7b:7e:8c:47:a3:
fb:08:0e:ea:ef:26:82:73:42:ee:38:b5:97:d9:94:4b:c6:24:
b4:3c:71:ea:0b:4f:8f:5d:25:4e:0d:02:0c:a4:b3:1d:d7:84:
95:18:ec:bd:f4:92:08:40:a2:0c:6c:8a:fe:23:71:44:ca:75:
60:1e:a4:c3:f4:61:ae:ed:e5:28:d5:7f:3f:57:62:15:9b:61:
04:8f:8a:34:fb:43:b7:67:3a:3e:69:b2:21:5b:65:a5:04:ff:
e2:5a:89:08:6e:34:bb:f6:42:2c:00:9f:cd:0c:d7:b6:7d:23:
4d:bd:53:8d:d9:fd:f3:ff:35:5b:3c:3e:05:92:4c:5d:e2:f3:
fe:89:46:75:29:54:d4:bc:8c:98:3e:f9:b8:3b:64:b9:fe:87:
8f:ec:4f:6d:c2:1f:f8:39:67:c0:dd:96:12:78:59:55:3a:a9:
f2:23:d2:97:f7:0b:6c:c0:3c:24:44:fb:ff:68:e4:ae:93:4e:
c6:c8:dc:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzq7p+8EaxMa/sBfPi7snGTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0OWIxZjc2YmI1YmFjNmQwYzc5NmJhNDcxMzBjNzY4YjFj
NzNiMWMwHhcNMjYwMzE0MDYwMDMyWhcNMjYwMzE1MDYwMDMyWjAzMTEwLwYDVQQD
EygyMTU1OTMyOTc5MmQ2ODBmZjVjMDkwNTUxZTA1Mjc4M2MxZWM4NmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5m3ASNOt0B1tGbb9IW99JXpHsSKs
eINYx7SEuf2fmQh5FsWcBvFPIOJTrr3YZQeMx6Abn+gRgXAfLLpfzw5lOscQy4lR
RZs2MYR4BdTln8FyZErSZMwbsLfPlvAiTQjy3XSJ6TQHWGEAdLl85e1KnGx6JMpc
oez0CdLOqGl2AzaSF1S/1QAMkrDOPdZdDZRkntJ2ejScLanbtXFkMWOJCUFKP2Wf
0zBhEGiLS+qMoLYLGernxqDlLXVH6sqselSav9e60uFfhvjy6oEXBIcbKwz7Rls0
36ZVDVBLBu599G2sM4TZHfcwWbIkPLQngF85A3LrZ4V27hdWc9d4V81pfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCFVkyl5LWgP9cCQVR4FJ4PB7IbCMB8GA1UdIwQY
MBaAFMSbH3a7W6xtDHlrpHEwx2ixxzscMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEpzZmRydGJyRzBNZVd1a2NUREhhTEhIT3h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi84Njg2Y2QtMWYxYy00ODQ1LTgxMmQt
NGFkNDAzNWZhZTdiLzEveEpzZmRydGJyRzBNZVd1a2NUREhhTEhIT3h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi84Njg2Y2QtMWYxYy00ODQ1LTgxMmQtNGFkNDAzNWZhZTdi
LzEveEpzZmRydGJyRzBNZVd1a2NUREhhTEhIT3h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACefBTkYG
a24jXfblJaGGZw0meOPDRB5hsYSr2YDZ2/5uTKSRvRiinfS+PCKh2acvxwStQl0t
kCGAoWBYXTaOXnStDXt+jEej+wgO6u8mgnNC7ji1l9mUS8YktDxx6gtPj10lTg0C
DKSzHdeElRjsvfSSCECiDGyK/iNxRMp1YB6kw/Rhru3lKNV/P1diFZthBI+KNPtD
t2c6PmmyIVtlpQT/4lqJCG40u/ZCLACfzQzXtn0jTb1Tjdn98/81Wzw+BZJMXeLz
/olGdSlU1LyMmD75uDtkuf6Hj+xPbcIf+DlnwN2WEnhZVTqp8iPSl/cLbMA8JET7
/2jkrpNOxsjc1A==
-----END CERTIFICATE-----
Generated at Sat Mar 14 10:27:57 2026 by rpki-client