Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.mft
File: xx85HWDhoTnMxCsXoyqVNj31z7A.mft (raw, json)
Hash identifier: 9JY9DfiEGnY1MTnV/eLpHv4CKLoYuVKveh+pyNxVyAU=
Subject key identifier: 50:19:A2:89:A9:40:72:05:06:8B:46:2F:79:8C:9B:58:E6:26:F4:A1
Authority key identifier: C7:1F:39:1D:60:E1:A1:39:CC:C4:2B:17:A3:2A:95:36:3D:F5:CF:B0
Certificate issuer: /CN=c71f391d60e1a139ccc42b17a32a95363df5cfb0
Certificate serial: 019CE8C9932F8BDA834082D55F453535EBF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xx85HWDhoTnMxCsXoyqVNj31z7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.mft
Manifest number: 0184
Signing time: Fri 13 Mar 2026 20:00:50 +0000
Manifest this update: Fri 13 Mar 2026 20:00:50 +0000
Manifest next update: Sat 14 Mar 2026 20:00:50 +0000
Files and hashes: 1: 5Ac1xGg2xzacy1Elgpwm7Fl9gOY.roa (hash: VWmcJPkpnJaJdz3GW3aT+bj0R6mJFxMSWGrX3LD0Zyk=)
2: xx85HWDhoTnMxCsXoyqVNj31z7A.crl (hash: FcOphDOc7jxW7GyPkxmyvXb3+hwrURqTy/xN66NDQlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/xx85HWDhoTnMxCsXoyqVNj31z7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e8:c9:93:2f:8b:da:83:40:82:d5:5f:45:35:35:eb:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c71f391d60e1a139ccc42b17a32a95363df5cfb0
Validity
Not Before: Mar 13 20:00:50 2026 GMT
Not After : Mar 14 20:00:50 2026 GMT
Subject: CN=5019a289a9407205068b462f798c9b58e626f4a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:47:e2:cc:8a:f7:eb:69:aa:c5:a6:81:e8:d1:
e8:50:df:4c:dc:f9:5a:07:21:e1:a5:cc:0b:c1:5e:
28:97:41:1f:44:3d:c5:b1:ea:63:9b:42:df:d4:d6:
d0:c7:16:81:59:3a:cf:6d:58:d3:7d:2d:09:c1:f8:
7b:6e:1c:c6:0b:fe:0b:7e:53:8b:81:04:34:39:61:
22:07:a9:2d:ce:cb:52:c6:5e:fb:1b:ff:b5:cd:98:
61:7a:46:8e:ed:cf:27:28:28:f5:c0:f0:1a:98:20:
50:10:e8:48:c6:3b:d3:0a:e6:40:3f:84:46:aa:a3:
92:cb:af:4a:d8:5a:d7:51:2a:04:ab:b7:a9:0a:ff:
3d:50:67:b7:76:ed:90:c1:9d:29:9d:a3:e6:75:c3:
11:e6:de:36:1f:46:f7:52:ab:08:7c:a5:2f:19:b4:
cb:97:65:5a:af:49:5f:d4:8a:9f:f3:a5:a1:69:33:
7b:56:5e:35:7a:37:98:0d:72:3f:3f:7f:cb:a9:9a:
af:5c:35:80:6d:87:e7:9a:a2:fe:fc:bf:5f:9b:ea:
fd:f6:ab:8a:fc:41:e7:75:c8:fc:e5:d7:6a:17:80:
a9:cb:41:da:5d:30:d4:4e:18:ef:58:84:a5:f0:eb:
40:fe:ec:ab:a0:7e:d9:e6:e8:d6:99:a2:2d:56:56:
ab:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:19:A2:89:A9:40:72:05:06:8B:46:2F:79:8C:9B:58:E6:26:F4:A1
X509v3 Authority Key Identifier:
keyid:C7:1F:39:1D:60:E1:A1:39:CC:C4:2B:17:A3:2A:95:36:3D:F5:CF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xx85HWDhoTnMxCsXoyqVNj31z7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ae:61:12:74:bf:b7:cd:bc:73:46:8b:b2:85:9b:21:51:64:
19:8c:15:7c:6d:8c:b2:91:78:55:bf:f4:a1:39:35:4a:9c:ee:
a6:55:c6:17:f6:4e:c5:45:7f:b3:fc:f0:06:ca:d5:1e:96:c4:
d0:cb:08:92:5f:1c:ca:e4:b7:c3:3f:58:35:14:90:0a:d1:99:
22:cd:30:cc:a7:25:3a:4e:1c:06:c7:f8:fe:54:78:3b:ca:88:
15:07:33:05:5e:7a:5d:f0:8d:7a:a9:6d:7e:01:88:ba:70:6e:
d2:4c:2e:12:3a:8e:6a:0d:d5:c3:44:9b:c3:a1:af:8d:a8:71:
01:1d:12:1b:ad:a2:e6:b1:4e:82:e0:6b:91:88:21:b0:72:5f:
f9:22:15:d5:da:fb:61:80:14:18:c7:b2:1b:a2:46:77:6d:3e:
af:85:ee:94:6a:6c:40:d1:e0:8c:40:e6:29:43:9d:ae:15:fe:
6c:42:aa:ac:8b:b4:6e:80:97:b0:8e:d7:a9:5f:81:a0:cb:48:
bd:2d:4f:80:14:c8:32:05:4e:d8:49:c7:1b:e8:6c:85:9b:8e:
71:f8:61:3f:f9:57:e4:51:96:c4:b6:3e:a3:f2:4b:3d:b5:76:
04:7d:12:94:ca:22:7b:95:11:1f:b4:d4:a7:60:78:60:c5:09:
2e:6a:f4:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzoyZMvi9qDQILVX0U1Nev4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3MWYzOTFkNjBlMWExMzljY2M0MmIxN2EzMmE5NTM2M2Rm
NWNmYjAwHhcNMjYwMzEzMjAwMDUwWhcNMjYwMzE0MjAwMDUwWjAzMTEwLwYDVQQD
Eyg1MDE5YTI4OWE5NDA3MjA1MDY4YjQ2MmY3OThjOWI1OGU2MjZmNGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkfizIr362mqxaaB6NHoUN9M3Pla
ByHhpcwLwV4ol0EfRD3Fsepjm0Lf1NbQxxaBWTrPbVjTfS0Jwfh7bhzGC/4LflOL
gQQ0OWEiB6ktzstSxl77G/+1zZhhekaO7c8nKCj1wPAamCBQEOhIxjvTCuZAP4RG
qqOSy69K2FrXUSoEq7epCv89UGe3du2QwZ0pnaPmdcMR5t42H0b3UqsIfKUvGbTL
l2Var0lf1Iqf86WhaTN7Vl41ejeYDXI/P3/LqZqvXDWAbYfnmqL+/L9fm+r99quK
/EHndcj85ddqF4Cpy0HaXTDUThjvWISl8OtA/uyroH7Z5ujWmaItVlar0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFAZoompQHIFBotGL3mMm1jmJvShMB8GA1UdIwQY
MBaAFMcfOR1g4aE5zMQrF6MqlTY99c+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHg4NUhXRGhvVG5NeENzWG95cVZOajMxejdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9kZTlmZmMtNDQ3Ny00ZTMwLTk1NzAt
NjU0MWNjMDA2ZWFjLzEveHg4NUhXRGhvVG5NeENzWG95cVZOajMxejdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9kZTlmZmMtNDQ3Ny00ZTMwLTk1NzAtNjU0MWNjMDA2ZWFj
LzEveHg4NUhXRGhvVG5NeENzWG95cVZOajMxejdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAea5hEnS/
t828c0aLsoWbIVFkGYwVfG2MspF4Vb/0oTk1SpzuplXGF/ZOxUV/s/zwBsrVHpbE
0MsIkl8cyuS3wz9YNRSQCtGZIs0wzKclOk4cBsf4/lR4O8qIFQczBV56XfCNeqlt
fgGIunBu0kwuEjqOag3Vw0Sbw6GvjahxAR0SG62i5rFOguBrkYghsHJf+SIV1dr7
YYAUGMeyG6JGd20+r4XulGpsQNHgjEDmKUOdrhX+bEKqrIu0boCXsI7XqV+BoMtI
vS1PgBTIMgVO2EnHG+hshZuOcfhhP/lX5FGWxLY+o/JLPbV2BH0SlMoie5URH7TU
p2B4YMUJLmr0SQ==
-----END CERTIFICATE-----
Generated at Sat Mar 14 00:18:26 2026 by rpki-client