Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft
File: XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft (raw, json)
Hash identifier: VWHSwOQcjupGDgaEyjXXSe6G9+oNnI42i3Zo+N9hxjQ=
Subject key identifier: 91:65:BF:D5:E1:75:02:10:71:51:ED:E2:74:07:87:02:48:82:5D:B5
Authority key identifier: 5E:35:ED:04:3C:8D:E1:51:BE:BD:C0:9D:FC:BF:FC:C7:DC:77:59:C7
Certificate issuer: /CN=5e35ed043c8de151bebdc09dfcbffcc7dc7759c7
Certificate serial: 019CAD59A44249420E2C0B1469FFE62D8454
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 07:00:58 +0000
Manifest this update: Mon 02 Mar 2026 07:00:58 +0000
Manifest next update: Tue 03 Mar 2026 07:00:58 +0000
Files and hashes: 1: XjXtBDyN4VG-vcCd_L_8x9x3Wcc.crl (hash: nO1dQzY7q140ipOON2r/thAsIpYO/atvfE0yFg0Opko=)
2: XzphqRpkRrzjOv5FtFqro4DwZLQ.roa (hash: h/AVe6fTP5tyOHDPmKSbzLzgs09QReFXbQnEVOq2pVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:a4:42:49:42:0e:2c:0b:14:69:ff:e6:2d:84:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e35ed043c8de151bebdc09dfcbffcc7dc7759c7
Validity
Not Before: Mar 2 07:00:58 2026 GMT
Not After : Mar 3 07:00:58 2026 GMT
Subject: CN=9165bfd5e17502107151ede27407870248825db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c7:7f:71:5c:91:cf:80:b5:97:d1:22:d7:87:
e3:8a:02:da:16:be:1f:ca:cd:42:11:a2:92:c1:93:
ed:ea:8a:9f:39:77:91:35:3b:88:f8:ef:60:9f:27:
3c:83:5f:a2:e8:10:23:d2:ba:84:e8:b4:b9:df:12:
ac:23:1a:4d:49:5b:1f:c5:e9:10:58:5b:57:0a:cc:
1d:e5:b1:00:a8:da:bd:0b:ab:b0:27:cd:12:99:bd:
4e:4f:cf:f3:d6:87:60:8a:50:bc:03:a0:b5:12:b9:
47:e0:c7:64:4b:53:8e:30:d5:4c:92:1a:e3:f6:ec:
bd:23:0d:56:ea:27:75:ea:fc:44:92:21:6f:34:68:
5b:8e:e6:95:a7:64:6f:31:08:95:13:ee:26:60:50:
dc:a7:0f:73:6e:ea:a1:61:25:60:b8:9d:c0:61:93:
55:02:12:9c:d2:26:d4:9e:f1:04:bd:98:8b:84:58:
1f:5b:61:71:3c:10:0e:96:59:cb:12:ad:12:ae:ed:
53:a4:a6:ff:1f:61:da:81:89:8a:77:5b:4d:ae:1d:
85:4d:81:2c:0f:82:fd:be:19:db:54:03:85:9d:ff:
1d:13:c6:b3:8f:39:da:c9:dc:95:63:51:59:25:a6:
92:25:30:f3:4d:2e:2e:e2:0c:0a:21:63:8e:40:e5:
82:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:65:BF:D5:E1:75:02:10:71:51:ED:E2:74:07:87:02:48:82:5D:B5
X509v3 Authority Key Identifier:
keyid:5E:35:ED:04:3C:8D:E1:51:BE:BD:C0:9D:FC:BF:FC:C7:DC:77:59:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:c3:08:eb:1b:b8:d0:a2:4c:f7:a3:65:54:03:e1:92:8c:73:
17:42:f5:3e:31:0b:70:fb:c6:4b:a2:e3:9c:07:36:ce:f2:3a:
bb:93:ac:1b:3b:fb:70:4e:ad:b9:d6:e3:1d:4e:b4:56:cb:3d:
5d:d0:71:fc:b4:35:ba:97:68:e8:63:f5:11:32:6a:58:76:03:
86:e5:3d:f2:55:3b:90:56:96:8f:83:42:cd:18:db:44:b5:b1:
7d:e5:69:46:cf:c4:0f:b5:65:0a:52:ce:e5:83:3d:be:44:63:
6b:ef:42:d5:8d:ec:99:13:66:78:09:14:e6:b4:be:f7:a1:8a:
c4:ea:21:9b:17:ec:19:8f:88:bc:70:50:a8:57:b6:40:23:65:
e4:76:c1:15:0b:0a:7e:df:7b:92:42:78:4e:f3:75:ed:55:b7:
e1:c8:5e:e0:ba:7e:d8:d0:07:01:28:6d:b2:ef:0c:af:28:14:
b0:35:28:55:7d:e5:1b:38:72:b2:36:b7:88:dd:31:19:74:a3:
a8:47:e0:8f:ff:2d:6d:44:81:2f:cf:88:ce:aa:f7:5a:34:c6:
42:9c:7f:ac:5d:41:7c:dd:3d:24:73:1f:9e:5e:f8:ee:bc:40:
08:1d:d1:ac:e2:3d:61:65:c5:86:74:cf:cf:29:db:e0:4a:04:
03:b4:d9:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWaRCSUIOLAsUaf/mLYRUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMzVlZDA0M2M4ZGUxNTFiZWJkYzA5ZGZjYmZmY2M3ZGM3
NzU5YzcwHhcNMjYwMzAyMDcwMDU4WhcNMjYwMzAzMDcwMDU4WjAzMTEwLwYDVQQD
Eyg5MTY1YmZkNWUxNzUwMjEwNzE1MWVkZTI3NDA3ODcwMjQ4ODI1ZGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Md/cVyRz4C1l9Ei14fjigLaFr4f
ys1CEaKSwZPt6oqfOXeRNTuI+O9gnyc8g1+i6BAj0rqE6LS53xKsIxpNSVsfxekQ
WFtXCswd5bEAqNq9C6uwJ80Smb1OT8/z1odgilC8A6C1ErlH4MdkS1OOMNVMkhrj
9uy9Iw1W6id16vxEkiFvNGhbjuaVp2RvMQiVE+4mYFDcpw9zbuqhYSVguJ3AYZNV
AhKc0ibUnvEEvZiLhFgfW2FxPBAOllnLEq0Sru1TpKb/H2HagYmKd1tNrh2FTYEs
D4L9vhnbVAOFnf8dE8azjznaydyVY1FZJaaSJTDzTS4u4gwKIWOOQOWCLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJFlv9XhdQIQcVHt4nQHhwJIgl21MB8GA1UdIwQY
MBaAFF417QQ8jeFRvr3Anfy//Mfcd1nHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGpYdEJEeU40VkctdmNDZF9MXzh4OXgzV2NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9lMTdmYTItNzg2Ni00ZmExLTk3MmIt
MTc3NjgxM2U3MjI0LzEvWGpYdEJEeU40VkctdmNDZF9MXzh4OXgzV2NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9lMTdmYTItNzg2Ni00ZmExLTk3MmItMTc3NjgxM2U3MjI0
LzEvWGpYdEJEeU40VkctdmNDZF9MXzh4OXgzV2NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAssMI6xu4
0KJM96NlVAPhkoxzF0L1PjELcPvGS6LjnAc2zvI6u5OsGzv7cE6tudbjHU60Vss9
XdBx/LQ1updo6GP1ETJqWHYDhuU98lU7kFaWj4NCzRjbRLWxfeVpRs/ED7VlClLO
5YM9vkRja+9C1Y3smRNmeAkU5rS+96GKxOohmxfsGY+IvHBQqFe2QCNl5HbBFQsK
ft97kkJ4TvN17VW34che4Lp+2NAHAShtsu8MrygUsDUoVX3lGzhysja3iN0xGXSj
qEfgj/8tbUSBL8+Izqr3WjTGQpx/rF1BfN09JHMfnl747rxACB3RrOI9YWXFhnTP
zynb4EoEA7TZaQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:02:55 2026 by rpki-client