Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
File: X4KumjBKwILBiiiRZm9kzugdXKg.mft (raw, json)
Hash identifier: Oe5UcJ+hafts/bRjpZrDWNz59nKMveJx0ijLKbYWPtM=
Subject key identifier: AF:84:F2:72:2D:12:95:A4:DC:EC:6C:A2:98:56:77:88:73:96:30:26
Authority key identifier: 5F:82:AE:9A:30:4A:C0:82:C1:8A:28:91:66:6F:64:CE:E8:1D:5C:A8
Certificate issuer: /CN=5f82ae9a304ac082c18a2891666f64cee81d5ca8
Certificate serial: 019CAF7EDAB9E624F527F50FF9D6208E4109
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
Manifest number: 0FAE
Signing time: Mon 02 Mar 2026 17:00:52 +0000
Manifest this update: Mon 02 Mar 2026 17:00:52 +0000
Manifest next update: Tue 03 Mar 2026 17:00:52 +0000
Files and hashes: 1: FpMR3_wbyPoQ3SpLC3msQFuHBCc.roa (hash: mnRTyPfeR1b8jfxG5BpoCLK6zLk4lmp1OJjO9At2igc=)
2: X4KumjBKwILBiiiRZm9kzugdXKg.crl (hash: mXS1NPn7OIUOXmy5lyXMtR+Yq5e42QHv/3o0/G/t5LE=)
3: YcE6ReHh6unnU83H-TjyslkyeUw.roa (hash: McwZCMtZVwtttRxvoSUbvLr+7AkamJmadn/zlM3onqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:7e:da:b9:e6:24:f5:27:f5:0f:f9:d6:20:8e:41:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f82ae9a304ac082c18a2891666f64cee81d5ca8
Validity
Not Before: Mar 2 17:00:52 2026 GMT
Not After : Mar 3 17:00:52 2026 GMT
Subject: CN=af84f2722d1295a4dcec6ca29856778873963026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bb:c8:c2:df:92:ec:3d:93:31:83:0b:de:bc:
2e:1e:4f:2c:8b:ce:72:8e:67:7c:35:48:de:c1:5e:
f5:57:fd:ae:d1:75:2f:30:20:47:f0:0b:6c:e4:22:
d2:bb:e0:7e:7e:27:87:a4:81:6b:1f:4e:af:eb:dc:
3d:d0:73:26:22:20:0c:24:f1:02:32:ad:94:20:ec:
4c:17:d5:c1:b4:a1:1b:a0:1b:f4:5a:86:7e:3f:e1:
7f:ef:04:86:99:e7:8f:35:6d:27:23:dd:82:69:9a:
3b:ef:b5:0d:23:82:17:ad:26:4b:5a:0b:9b:4c:fd:
0a:70:d7:f0:08:72:ff:58:f4:28:4e:a2:cf:b4:bc:
6e:f8:2a:5d:38:ec:68:bc:d8:bd:ea:f6:b2:63:88:
e8:80:36:0c:e8:f2:e0:68:8d:4e:ac:4a:61:4f:1a:
c7:8f:f2:5e:46:24:8e:94:86:bb:72:96:4f:e9:ee:
52:a2:84:b3:ca:62:7a:50:cb:1a:6b:61:a2:57:5f:
f1:ac:27:5a:4f:ad:5e:83:56:b1:fe:ec:4c:ae:dc:
19:51:b0:53:ea:da:55:a0:ed:29:1e:af:ef:e3:a0:
f0:ec:f5:34:21:7e:ac:8b:d4:58:bc:e3:c2:6b:4e:
19:45:9c:50:af:90:39:42:3b:f2:e2:65:b3:0f:b2:
71:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:84:F2:72:2D:12:95:A4:DC:EC:6C:A2:98:56:77:88:73:96:30:26
X509v3 Authority Key Identifier:
keyid:5F:82:AE:9A:30:4A:C0:82:C1:8A:28:91:66:6F:64:CE:E8:1D:5C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:c7:ba:ed:4e:bf:84:72:00:68:f3:b4:4a:bf:3d:ee:19:61:
a6:0e:98:4b:ce:48:08:09:c1:bb:f0:9d:0b:31:1e:8f:84:61:
e5:e6:e5:23:06:b2:71:d9:e6:e7:01:12:4a:ca:fd:a5:6f:f2:
c6:d7:14:ea:26:21:36:64:dd:8c:b5:af:62:e2:f5:dd:0a:6b:
3d:c0:bd:8a:8d:96:ad:dc:b7:4a:04:94:91:d7:1e:76:47:d5:
e7:7e:a6:e5:86:9a:8d:cc:64:51:88:e8:eb:de:ae:29:26:a6:
78:1c:6e:47:96:d3:9f:6e:d7:87:21:8f:28:a3:e5:49:97:e3:
b5:ab:be:b6:cf:6f:94:d9:66:29:ec:e1:cc:16:4f:62:db:ba:
6f:f6:98:84:ea:e8:5d:53:84:0c:7e:1c:35:66:6b:c6:15:2d:
0e:e9:f0:cf:e0:a2:ea:aa:fc:69:7c:14:66:5a:38:71:c9:ca:
da:f4:57:15:f0:da:f5:5f:38:fc:9d:ac:e6:dc:2e:a2:9d:55:
e3:3c:c1:37:d4:ae:49:93:4a:a8:49:d7:fe:d9:1e:ae:00:92:
07:b0:d8:9a:20:18:ec:d3:d3:fa:93:55:35:76:4c:c2:ce:ce:
97:7d:b0:17:a9:8f:62:00:11:d0:61:74:bf:0b:c0:e3:2a:dc:
d8:97:c0:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyvftq55iT1J/UP+dYgjkEJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmODJhZTlhMzA0YWMwODJjMThhMjg5MTY2NmY2NGNlZTgx
ZDVjYTgwHhcNMjYwMzAyMTcwMDUyWhcNMjYwMzAzMTcwMDUyWjAzMTEwLwYDVQQD
EyhhZjg0ZjI3MjJkMTI5NWE0ZGNlYzZjYTI5ODU2Nzc4ODczOTYzMDI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbvIwt+S7D2TMYML3rwuHk8si85y
jmd8NUjewV71V/2u0XUvMCBH8Ats5CLSu+B+fieHpIFrH06v69w90HMmIiAMJPEC
Mq2UIOxMF9XBtKEboBv0WoZ+P+F/7wSGmeePNW0nI92CaZo777UNI4IXrSZLWgub
TP0KcNfwCHL/WPQoTqLPtLxu+CpdOOxovNi96vayY4jogDYM6PLgaI1OrEphTxrH
j/JeRiSOlIa7cpZP6e5SooSzymJ6UMsaa2GiV1/xrCdaT61eg1ax/uxMrtwZUbBT
6tpVoO0pHq/v46Dw7PU0IX6si9RYvOPCa04ZRZxQr5A5Qjvy4mWzD7Jx5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK+E8nItEpWk3OxsophWd4hzljAmMB8GA1UdIwQY
MBaAFF+CrpowSsCCwYookWZvZM7oHVyoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDRLdW1qQkt3SUxCaWlpUlptOWt6dWdkWEtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9kNmRiZDgtNjQ2Ni00OGQwLWE1OTct
M2VjNDQ3MzEwZGZiLzEvWDRLdW1qQkt3SUxCaWlpUlptOWt6dWdkWEtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9kNmRiZDgtNjQ2Ni00OGQwLWE1OTctM2VjNDQ3MzEwZGZi
LzEvWDRLdW1qQkt3SUxCaWlpUlptOWt6dWdkWEtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhMe67U6/
hHIAaPO0Sr897hlhpg6YS85ICAnBu/CdCzEej4Rh5eblIwaycdnm5wESSsr9pW/y
xtcU6iYhNmTdjLWvYuL13QprPcC9io2Wrdy3SgSUkdcedkfV536m5YaajcxkUYjo
696uKSameBxuR5bTn27XhyGPKKPlSZfjtau+ts9vlNlmKezhzBZPYtu6b/aYhOro
XVOEDH4cNWZrxhUtDunwz+Ci6qr8aXwUZlo4ccnK2vRXFfDa9V84/J2s5twuop1V
4zzBN9SuSZNKqEnX/tkergCSB7DYmiAY7NPT+pNVNXZMws7Ol32wF6mPYgAR0GF0
vwvA4yrc2JfAUQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:13:33 2026 by rpki-client