Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
File: Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft (raw, json)
Hash identifier: B10ercJgu8pBbolJVC7cPReqwTYFD06dBY2MGpneYKc=
Subject key identifier: CB:9D:CC:74:25:01:FD:61:54:09:5B:7D:ED:8D:D0:98:C6:38:6E:88
Authority key identifier: 5D:ED:D6:B0:E3:6F:4B:D8:F1:D5:7E:26:CC:1C:2D:18:C6:99:3C:04
Certificate issuer: /CN=5dedd6b0e36f4bd8f1d57e26cc1c2d18c6993c04
Certificate serial: 019D375260D3EB21615A2CB2AD9F6F1AC8C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
Manifest number: 0E74
Signing time: Sun 29 Mar 2026 02:00:38 +0000
Manifest this update: Sun 29 Mar 2026 02:00:38 +0000
Manifest next update: Mon 30 Mar 2026 02:00:38 +0000
Files and hashes: 1: Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl (hash: ChDgKRwewauavaegRZnjKrxhQiJLNx/GxgsKRxU4oJ4=)
2: qvDZMPgKFD7gi5Q44AZYhiZ--Ig.roa (hash: cmgO04c2D3BrRGS4WvX7cY6GozgnK7NT0TwhEs+74Kg=)
3: uKoRxEv3mOldDEo6fDHAk9yg0S8.roa (hash: 4hEUcG83yfbcyvkKT/jDeEV25ZBIHXMO6CdGZ2yW5wU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:60:d3:eb:21:61:5a:2c:b2:ad:9f:6f:1a:c8:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dedd6b0e36f4bd8f1d57e26cc1c2d18c6993c04
Validity
Not Before: Mar 29 02:00:38 2026 GMT
Not After : Mar 30 02:00:38 2026 GMT
Subject: CN=cb9dcc742501fd6154095b7ded8dd098c6386e88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9a:08:ae:6b:32:00:5f:53:b0:01:f0:89:da:
1a:c0:2a:84:c7:91:4e:11:b0:f0:f8:51:c1:66:db:
89:ed:ba:e6:42:81:80:4f:df:86:66:9c:e7:28:f8:
1a:6a:cc:b6:6f:35:04:dd:3a:97:a2:d8:ba:de:07:
9d:55:f4:19:29:1b:79:ab:b1:df:c8:9e:38:31:52:
98:a2:4c:0e:7c:3a:61:e5:ad:82:da:56:10:c4:77:
fe:86:c7:30:27:e8:05:d0:e8:76:a7:74:af:c0:ef:
ec:67:ef:77:e7:cd:b9:e8:f3:54:1e:5c:42:96:50:
93:ce:af:bd:15:9d:94:72:88:3f:83:6c:2a:91:dc:
d6:a0:3b:82:78:6d:cb:d9:92:e3:20:a3:a4:0d:92:
03:52:f4:93:6c:25:af:e5:0c:6f:11:b7:5a:ac:77:
8d:e0:d3:bb:e9:0d:5c:16:c2:ee:71:8a:a7:e8:37:
84:9d:a0:43:d2:18:b2:86:e5:f5:85:d2:b7:4e:36:
6c:d6:a9:34:e9:c4:74:b0:11:1c:3a:f7:9a:3a:f4:
b5:e8:4c:82:a8:35:5a:d6:14:cd:88:62:7a:c4:7c:
89:7d:68:17:8b:fd:a5:62:13:88:4c:ed:17:f5:34:
1b:71:66:e0:60:aa:6c:8d:76:f1:cc:f9:f8:98:dc:
50:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:9D:CC:74:25:01:FD:61:54:09:5B:7D:ED:8D:D0:98:C6:38:6E:88
X509v3 Authority Key Identifier:
keyid:5D:ED:D6:B0:E3:6F:4B:D8:F1:D5:7E:26:CC:1C:2D:18:C6:99:3C:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:c4:98:7d:ea:6a:30:1b:05:70:0e:ea:ca:6b:99:83:49:21:
11:61:de:21:cd:fd:12:0d:bc:99:ef:e5:0b:4e:0b:55:a9:2c:
df:34:ee:16:5b:6b:5d:c2:46:06:14:df:b6:d2:41:fa:fd:88:
a5:cd:2d:83:2f:bb:61:83:0f:63:f9:2b:5a:94:fc:2d:dd:59:
0c:92:e3:92:fb:ec:71:27:8f:c8:2c:59:d3:04:49:01:63:c6:
91:47:2c:81:90:a0:5d:d9:16:10:e8:c4:c2:36:b3:cd:16:fa:
3e:ed:c4:ce:05:53:38:b5:58:cf:ad:e0:ad:51:7f:20:61:fd:
17:5d:1c:c8:f2:37:0e:f5:09:ec:56:a3:e6:b0:22:0b:73:0d:
39:a4:87:28:2b:35:5c:7e:d6:74:e6:dc:6b:fa:11:27:68:92:
b6:25:ba:5d:82:f2:2b:39:5b:ec:2d:4b:6a:42:4f:41:04:61:
64:53:88:2b:41:8f:cf:3c:67:cf:d1:00:92:aa:2a:5b:da:30:
74:60:20:d8:27:db:2c:26:70:5f:15:83:20:33:7b:da:4b:c7:
d6:c6:13:e4:a2:09:6b:b0:2f:e9:23:31:80:6d:41:6f:10:89:
8b:b6:94:01:30:5b:d4:8b:5b:e2:1c:bc:95:85:ec:8a:14:85:
8f:03:a3:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UmDT6yFhWiyyrZ9vGsjCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZWRkNmIwZTM2ZjRiZDhmMWQ1N2UyNmNjMWMyZDE4YzY5
OTNjMDQwHhcNMjYwMzI5MDIwMDM4WhcNMjYwMzMwMDIwMDM4WjAzMTEwLwYDVQQD
EyhjYjlkY2M3NDI1MDFmZDYxNTQwOTViN2RlZDhkZDA5OGM2Mzg2ZTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZoIrmsyAF9TsAHwidoawCqEx5FO
EbDw+FHBZtuJ7brmQoGAT9+GZpznKPgaasy2bzUE3TqXoti63gedVfQZKRt5q7Hf
yJ44MVKYokwOfDph5a2C2lYQxHf+hscwJ+gF0Oh2p3SvwO/sZ+9358256PNUHlxC
llCTzq+9FZ2Ucog/g2wqkdzWoDuCeG3L2ZLjIKOkDZIDUvSTbCWv5QxvEbdarHeN
4NO76Q1cFsLucYqn6DeEnaBD0hiyhuX1hdK3TjZs1qk06cR0sBEcOveaOvS16EyC
qDVa1hTNiGJ6xHyJfWgXi/2lYhOITO0X9TQbcWbgYKpsjXbxzPn4mNxQJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMudzHQlAf1hVAlbfe2N0JjGOG6IMB8GA1UdIwQY
MBaAFF3t1rDjb0vY8dV+JswcLRjGmTwEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGUzV3NPTnZTOWp4MVg0bXpCd3RHTWFaUEFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9mMDNjZGMtMjk0NS00MDhjLTg4ODkt
YzY5ODcxZjVkMzA1LzEvWGUzV3NPTnZTOWp4MVg0bXpCd3RHTWFaUEFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9mMDNjZGMtMjk0NS00MDhjLTg4ODktYzY5ODcxZjVkMzA1
LzEvWGUzV3NPTnZTOWp4MVg0bXpCd3RHTWFaUEFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn8SYfepq
MBsFcA7qymuZg0khEWHeIc39Eg28me/lC04LVaks3zTuFltrXcJGBhTfttJB+v2I
pc0tgy+7YYMPY/krWpT8Ld1ZDJLjkvvscSePyCxZ0wRJAWPGkUcsgZCgXdkWEOjE
wjazzRb6Pu3EzgVTOLVYz63grVF/IGH9F10cyPI3DvUJ7Faj5rAiC3MNOaSHKCs1
XH7WdObca/oRJ2iStiW6XYLyKzlb7C1LakJPQQRhZFOIK0GPzzxnz9EAkqoqW9ow
dGAg2CfbLCZwXxWDIDN72kvH1sYT5KIJa7Av6SMxgG1BbxCJi7aUATBb1Itb4hy8
lYXsihSFjwOjnw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:16 2026 by rpki-client