Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/b5670f-e44b-43c5-ab87-45dd9369f9b3/1/xVqjXdtQyQQ17M-VH024QHtsnJE.mft
File: xVqjXdtQyQQ17M-VH024QHtsnJE.mft (raw, json)
Hash identifier: /N85RmV+HIAMlKpqnVIB05pbCtBo4f2UDYLM1zcbM0E=
Subject key identifier: 3A:74:CA:23:84:C7:DC:A3:98:DE:02:10:E8:49:E6:1F:F6:C3:F3:C5
Authority key identifier: C5:5A:A3:5D:DB:50:C9:04:35:EC:CF:95:1F:4D:B8:40:7B:6C:9C:91
Certificate issuer: /CN=c55aa35ddb50c90435eccf951f4db8407b6c9c91
Certificate serial: 019D37F7124968B427C58F19C2BB0D2FC722
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVqjXdtQyQQ17M-VH024QHtsnJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/b5670f-e44b-43c5-ab87-45dd9369f9b3/1/xVqjXdtQyQQ17M-VH024QHtsnJE.mft
Manifest number: 01A7
Signing time: Sun 29 Mar 2026 05:00:31 +0000
Manifest this update: Sun 29 Mar 2026 05:00:31 +0000
Manifest next update: Mon 30 Mar 2026 05:00:31 +0000
Files and hashes: 1: PWWIG4LFihwC0tiBHzi-D4CEW_E.roa (hash: SR2uMY0kQkiFCnLExGCvtuv0+u2NPrli7yd2uObCdE0=)
2: xVqjXdtQyQQ17M-VH024QHtsnJE.crl (hash: k4eotlP/8ymOAxxiWqF2nCUSLoteR5ilg8cxQ95Pa7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/b5670f-e44b-43c5-ab87-45dd9369f9b3/1/xVqjXdtQyQQ17M-VH024QHtsnJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/b5670f-e44b-43c5-ab87-45dd9369f9b3/1/xVqjXdtQyQQ17M-VH024QHtsnJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVqjXdtQyQQ17M-VH024QHtsnJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:12:49:68:b4:27:c5:8f:19:c2:bb:0d:2f:c7:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c55aa35ddb50c90435eccf951f4db8407b6c9c91
Validity
Not Before: Mar 29 05:00:31 2026 GMT
Not After : Mar 30 05:00:31 2026 GMT
Subject: CN=3a74ca2384c7dca398de0210e849e61ff6c3f3c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c2:1c:4d:f1:ea:be:38:9d:df:b8:f5:3e:b5:
f6:03:54:61:52:86:55:9c:47:12:f7:4d:14:eb:d9:
61:5e:bd:bd:9c:f1:fb:ac:ca:87:de:3d:b6:8f:1e:
1b:94:70:aa:b0:19:c6:a0:ea:e5:41:d3:7e:42:db:
6f:eb:4e:ae:94:1a:08:f9:e2:48:a0:f4:e2:81:9e:
f2:53:a5:e0:42:fc:a4:ad:cd:93:c2:3a:37:0a:61:
1c:af:5a:c9:57:6d:eb:50:33:49:33:a7:21:20:af:
bb:db:2f:68:c0:41:30:68:bb:56:2d:6d:c6:18:8e:
50:50:13:ed:40:98:2c:99:a4:a9:5e:fd:dd:e4:f5:
24:9c:ea:5d:d2:17:98:49:89:c3:65:c1:96:14:92:
88:8f:26:44:bf:37:0b:4b:46:9f:1b:ae:21:a2:c3:
26:30:d3:7e:cd:ad:ac:ad:21:83:b3:d8:50:30:2b:
d2:9f:5f:61:bd:57:d1:68:90:39:c4:43:f1:13:0d:
df:47:55:29:6f:9d:f0:ee:3c:13:5e:e5:54:92:38:
3c:d5:57:05:6a:63:ec:ff:f7:a4:20:44:1d:f1:b8:
f0:ef:7d:39:a6:56:a6:1f:4e:94:c9:bd:06:72:3a:
7d:35:51:c4:a2:46:b5:05:09:5c:e3:06:ef:98:e0:
5b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:74:CA:23:84:C7:DC:A3:98:DE:02:10:E8:49:E6:1F:F6:C3:F3:C5
X509v3 Authority Key Identifier:
keyid:C5:5A:A3:5D:DB:50:C9:04:35:EC:CF:95:1F:4D:B8:40:7B:6C:9C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVqjXdtQyQQ17M-VH024QHtsnJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/b5670f-e44b-43c5-ab87-45dd9369f9b3/1/xVqjXdtQyQQ17M-VH024QHtsnJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/b5670f-e44b-43c5-ab87-45dd9369f9b3/1/xVqjXdtQyQQ17M-VH024QHtsnJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:cc:3b:ae:30:6a:10:06:7c:96:88:13:69:41:bd:f9:f3:3d:
fc:c1:6d:cc:dd:45:d6:14:44:58:ba:77:2f:b6:32:17:de:8d:
e1:e8:ed:de:b3:13:32:40:2f:fc:8f:6f:cd:54:59:8e:c7:08:
c0:44:78:88:e1:1c:54:45:b7:bb:72:28:93:bd:07:e3:38:94:
19:e5:2a:56:da:ec:d9:2a:77:c9:90:1f:f6:9b:8c:23:3b:de:
51:8a:ab:a7:88:df:88:13:df:41:19:39:1c:6c:55:23:9d:16:
03:bd:47:ee:9e:fe:63:23:9b:1d:83:6c:09:0b:6f:48:e6:f9:
6c:4e:03:c9:d5:b7:5e:54:6e:ba:4a:71:2c:2e:f0:53:5e:44:
c8:1d:75:17:a6:63:12:06:d9:03:80:fc:b5:d3:0b:7b:c1:f2:
be:f7:2f:60:08:0c:0c:96:3c:d1:4f:a9:b7:f6:d8:90:ca:3f:
5a:8d:38:5d:cb:e9:d0:a5:46:fd:a5:05:bc:56:55:86:97:0b:
42:58:b3:02:1c:c1:a0:7d:aa:f9:c9:63:9f:37:06:77:93:d7:
69:8e:31:77:05:6c:b7:36:d2:3f:31:21:dd:10:8d:19:ac:38:
7d:d7:47:03:25:08:3e:8d:07:b5:a9:6e:96:1b:f0:fe:69:ce:
31:a1:44:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039xJJaLQnxY8ZwrsNL8ciMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NWFhMzVkZGI1MGM5MDQzNWVjY2Y5NTFmNGRiODQwN2I2
YzljOTEwHhcNMjYwMzI5MDUwMDMxWhcNMjYwMzMwMDUwMDMxWjAzMTEwLwYDVQQD
EygzYTc0Y2EyMzg0YzdkY2EzOThkZTAyMTBlODQ5ZTYxZmY2YzNmM2M1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8IcTfHqvjid37j1PrX2A1RhUoZV
nEcS900U69lhXr29nPH7rMqH3j22jx4blHCqsBnGoOrlQdN+Qttv606ulBoI+eJI
oPTigZ7yU6XgQvykrc2Twjo3CmEcr1rJV23rUDNJM6chIK+72y9owEEwaLtWLW3G
GI5QUBPtQJgsmaSpXv3d5PUknOpd0heYSYnDZcGWFJKIjyZEvzcLS0afG64hosMm
MNN+za2srSGDs9hQMCvSn19hvVfRaJA5xEPxEw3fR1Upb53w7jwTXuVUkjg81VcF
amPs//ekIEQd8bjw7305plamH06Uyb0Gcjp9NVHEoka1BQlc4wbvmOBbXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDp0yiOEx9yjmN4CEOhJ5h/2w/PFMB8GA1UdIwQY
MBaAFMVao13bUMkENezPlR9NuEB7bJyRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFZxalhkdFF5UVExN00tVkgwMjRRSHRzbkpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9iNTY3MGYtZTQ0Yi00M2M1LWFiODct
NDVkZDkzNjlmOWIzLzEveFZxalhkdFF5UVExN00tVkgwMjRRSHRzbkpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9iNTY3MGYtZTQ0Yi00M2M1LWFiODctNDVkZDkzNjlmOWIz
LzEveFZxalhkdFF5UVExN00tVkgwMjRRSHRzbkpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ8w7rjBq
EAZ8logTaUG9+fM9/MFtzN1F1hREWLp3L7YyF96N4ejt3rMTMkAv/I9vzVRZjscI
wER4iOEcVEW3u3Iok70H4ziUGeUqVtrs2Sp3yZAf9puMIzveUYqrp4jfiBPfQRk5
HGxVI50WA71H7p7+YyObHYNsCQtvSOb5bE4DydW3XlRuukpxLC7wU15EyB11F6Zj
EgbZA4D8tdMLe8HyvvcvYAgMDJY80U+pt/bYkMo/Wo04Xcvp0KVG/aUFvFZVhpcL
QlizAhzBoH2q+cljnzcGd5PXaY4xdwVstzbSPzEh3RCNGaw4fddHAyUIPo0Htalu
lhvw/mnOMaFE4w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:16 2026 by rpki-client