Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
File: X1B54OWHxH_xTSAhEvTu94sHhJE.mft (raw, json)
Hash identifier: wz1DXiK2Ym17DYtdttTnEkyTP2LWJFQPnJF52V+LNsk=
Subject key identifier: 49:AA:4F:A5:27:13:15:8D:EF:03:63:47:3F:BB:B2:99:36:14:5B:B8
Authority key identifier: 5F:50:79:E0:E5:87:C4:7F:F1:4D:20:21:12:F4:EE:F7:8B:07:84:91
Certificate issuer: /CN=5f5079e0e587c47ff14d202112f4eef78b078491
Certificate serial: 019CE334E5CDC858DE0E7862A328D6AE8D96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
Manifest number: 0A86
Signing time: Thu 12 Mar 2026 18:00:20 +0000
Manifest this update: Thu 12 Mar 2026 18:00:20 +0000
Manifest next update: Fri 13 Mar 2026 18:00:20 +0000
Files and hashes: 1: 7bGl1Xdi6Pm1X1Ab1Zfe3WxrCvQ.roa (hash: WitY0IfqjKazmEtgATl+1ViOVRltHmA3RLHFAZFUngo=)
2: X1B54OWHxH_xTSAhEvTu94sHhJE.crl (hash: DtxSj9cY4fCrAbHyUL87UW8o8cH7HB4boZjhTOarGXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 18:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:34:e5:cd:c8:58:de:0e:78:62:a3:28:d6:ae:8d:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5079e0e587c47ff14d202112f4eef78b078491
Validity
Not Before: Mar 12 18:00:20 2026 GMT
Not After : Mar 13 18:00:20 2026 GMT
Subject: CN=49aa4fa52713158def0363473fbbb29936145bb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:13:67:78:f2:d6:1d:69:ff:0b:51:5a:dd:da:
ec:26:3b:b0:8b:7c:a6:d6:6a:7a:5d:56:20:eb:a9:
ce:e5:8f:80:93:ea:1c:8a:66:f0:21:e0:d5:b0:23:
83:0e:4a:b0:3e:c8:26:13:f0:8f:b3:3d:24:19:72:
02:9c:d2:dc:62:56:d3:79:66:24:61:a4:32:0c:d2:
bf:f9:c7:36:1c:1d:4f:df:90:85:fc:6b:28:e2:29:
cf:ae:8c:23:0d:9f:72:15:e4:ad:8a:02:7a:ce:ae:
a8:a5:5e:dd:98:79:e9:2c:b9:4e:fd:26:ea:27:23:
f9:ab:d2:d7:75:92:48:31:57:3f:a4:73:9c:e5:b4:
84:0b:00:e1:0e:9f:9c:73:ac:d3:39:d0:bb:cb:bf:
7c:a6:43:fe:f8:a2:ae:0c:ab:41:4d:d8:71:5a:dd:
1a:3c:83:f6:b4:af:17:21:c7:38:22:c6:1f:57:e9:
7f:cc:0f:97:a3:76:95:b3:40:44:15:ce:ad:09:9b:
32:59:3e:1c:da:9b:c0:f0:08:05:9c:2b:a3:8f:e4:
34:4c:c1:e5:0a:58:43:c5:8b:cb:c6:d8:ab:b5:77:
4b:28:71:07:21:07:35:b0:f7:1e:5f:6e:b4:89:48:
9f:fb:de:99:89:b9:0e:95:b0:7c:c5:7a:17:4b:6c:
ad:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:AA:4F:A5:27:13:15:8D:EF:03:63:47:3F:BB:B2:99:36:14:5B:B8
X509v3 Authority Key Identifier:
keyid:5F:50:79:E0:E5:87:C4:7F:F1:4D:20:21:12:F4:EE:F7:8B:07:84:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:8c:02:69:22:a4:9f:78:48:a1:97:72:12:43:f5:e4:96:06:
a9:28:66:e0:b4:a5:c5:1f:d7:72:86:d9:17:ab:06:c0:17:8e:
fc:22:fd:31:ce:3d:25:3c:67:90:61:7a:43:98:44:f0:26:90:
b2:75:24:30:1f:16:90:cb:3e:e0:fe:da:0e:83:28:b1:6e:2d:
95:4d:ab:38:63:59:75:ae:a0:51:ec:37:21:44:4d:5a:0d:b5:
bf:ec:09:16:31:4a:d6:d3:58:21:e7:76:9f:b8:db:1e:e3:d4:
60:bb:88:93:91:14:c5:95:42:7d:b9:99:6d:3c:85:ee:11:4a:
04:79:17:90:05:f5:e2:19:a2:81:bc:f2:38:5a:22:66:37:7f:
54:df:fc:91:ce:c8:22:01:d0:75:0a:72:b2:ab:74:d5:87:6a:
66:32:7b:5e:d5:25:22:bc:65:2c:dc:0a:ea:fd:c5:e4:ae:84:
db:de:24:94:83:a5:7e:62:73:6f:27:0f:df:26:35:e5:db:86:
99:71:0f:b4:0c:e6:a2:89:5b:fc:fc:a9:91:46:96:48:2a:ca:
47:8f:1f:60:4a:58:37:f4:8a:97:a1:20:38:a6:4e:ac:04:3e:
55:2d:c5:7e:74:7f:a0:f0:6c:7d:e2:fb:6f:b6:86:9b:30:0a:
a2:5a:a5:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzjNOXNyFjeDnhioyjWro2WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmNTA3OWUwZTU4N2M0N2ZmMTRkMjAyMTEyZjRlZWY3OGIw
Nzg0OTEwHhcNMjYwMzEyMTgwMDIwWhcNMjYwMzEzMTgwMDIwWjAzMTEwLwYDVQQD
Eyg0OWFhNGZhNTI3MTMxNThkZWYwMzYzNDczZmJiYjI5OTM2MTQ1YmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRNnePLWHWn/C1Fa3drsJjuwi3ym
1mp6XVYg66nO5Y+Ak+ocimbwIeDVsCODDkqwPsgmE/CPsz0kGXICnNLcYlbTeWYk
YaQyDNK/+cc2HB1P35CF/Gso4inProwjDZ9yFeStigJ6zq6opV7dmHnpLLlO/Sbq
JyP5q9LXdZJIMVc/pHOc5bSECwDhDp+cc6zTOdC7y798pkP++KKuDKtBTdhxWt0a
PIP2tK8XIcc4IsYfV+l/zA+Xo3aVs0BEFc6tCZsyWT4c2pvA8AgFnCujj+Q0TMHl
ClhDxYvLxtirtXdLKHEHIQc1sPceX260iUif+96ZibkOlbB8xXoXS2ytDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEmqT6UnExWN7wNjRz+7spk2FFu4MB8GA1UdIwQY
MBaAFF9QeeDlh8R/8U0gIRL07veLB4SRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDFCNTRPV0h4SF94VFNBaEV2VHU5NHNIaEpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9lMzc4YjItODg2NC00NzEwLTk2NzQt
MWZjOGY3NmE4MDZhLzEvWDFCNTRPV0h4SF94VFNBaEV2VHU5NHNIaEpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9lMzc4YjItODg2NC00NzEwLTk2NzQtMWZjOGY3NmE4MDZh
LzEvWDFCNTRPV0h4SF94VFNBaEV2VHU5NHNIaEpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcIwCaSKk
n3hIoZdyEkP15JYGqShm4LSlxR/XcobZF6sGwBeO/CL9Mc49JTxnkGF6Q5hE8CaQ
snUkMB8WkMs+4P7aDoMosW4tlU2rOGNZda6gUew3IURNWg21v+wJFjFK1tNYIed2
n7jbHuPUYLuIk5EUxZVCfbmZbTyF7hFKBHkXkAX14hmigbzyOFoiZjd/VN/8kc7I
IgHQdQpysqt01YdqZjJ7XtUlIrxlLNwK6v3F5K6E294klIOlfmJzbycP3yY15duG
mXEPtAzmoolb/PypkUaWSCrKR48fYEpYN/SKl6EgOKZOrAQ+VS3FfnR/oPBsfeL7
b7aGmzAKolqlFQ==
-----END CERTIFICATE-----
Generated at Fri Mar 13 01:48:16 2026 by rpki-client