Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft
File: xCl41TJpj7IIQPlCsCR8Acj1eLI.mft (raw, json)
Hash identifier: 8p8wRo25uhFr6FscGaUd/3+YD6E1zWVh9Q0u43S93X0=
Subject key identifier: D4:26:1A:18:FC:F9:7D:4D:50:00:21:31:A7:A6:BC:5E:6D:62:E0:BE
Authority key identifier: C4:29:78:D5:32:69:8F:B2:08:40:F9:42:B0:24:7C:01:C8:F5:78:B2
Certificate issuer: /CN=c42978d532698fb20840f942b0247c01c8f578b2
Certificate serial: 019CAE3522333DCA14FB5C44FEA89FEA254E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCl41TJpj7IIQPlCsCR8Acj1eLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft
Manifest number: 1536
Signing time: Mon 02 Mar 2026 11:00:43 +0000
Manifest this update: Mon 02 Mar 2026 11:00:43 +0000
Manifest next update: Tue 03 Mar 2026 11:00:43 +0000
Files and hashes: 1: cIW1NaRR4MnpEAYWVEYRn3myJ7A.roa (hash: 2eOp6aCZfu2yFIk/ZDyv7dqr0KWAjWjEtDLzMW5xaqg=)
2: xCl41TJpj7IIQPlCsCR8Acj1eLI.crl (hash: TYQpsqcMjdpy3DHN5V5OilbFz3ZPxRxd+skgOGtn8wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xCl41TJpj7IIQPlCsCR8Acj1eLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:22:33:3d:ca:14:fb:5c:44:fe:a8:9f:ea:25:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42978d532698fb20840f942b0247c01c8f578b2
Validity
Not Before: Mar 2 11:00:43 2026 GMT
Not After : Mar 3 11:00:43 2026 GMT
Subject: CN=d4261a18fcf97d4d50002131a7a6bc5e6d62e0be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:32:c8:03:b8:33:84:8d:b9:28:5a:2b:cf:5c:
e8:22:9d:2a:47:f0:d7:95:2d:5e:31:75:46:d6:6a:
38:be:80:07:08:75:80:7c:e4:65:ab:96:7f:66:20:
ac:15:13:f7:e2:37:2a:7e:66:7a:20:40:42:84:c4:
28:6f:22:b3:95:68:4a:82:5a:42:33:1f:e6:43:24:
82:ae:ca:b1:75:97:6c:c4:fe:55:6e:b1:2b:91:84:
28:ae:08:49:0e:9c:74:48:24:9d:0e:a6:a0:cd:ed:
44:2b:51:3d:aa:3f:c5:11:00:b8:f4:a3:ec:ba:51:
ad:c9:64:c3:6c:40:f7:dc:af:3b:43:54:e1:87:81:
a2:fe:a9:a9:de:a5:15:78:c7:84:d9:71:35:b4:22:
d7:c8:4c:d0:61:51:5a:b5:53:33:3d:1b:6c:1a:58:
5a:ae:cc:05:cf:92:8f:a6:22:08:1d:df:5b:9d:9a:
0d:b3:3c:08:be:6e:09:d1:30:a9:63:e6:aa:da:66:
19:0a:91:3e:22:a6:fb:8b:12:af:be:f2:0d:3b:15:
80:d9:30:17:0f:59:8b:ea:a6:b0:9e:0e:c9:6f:72:
6c:f5:d8:9a:d7:94:d7:96:ea:07:6e:1e:bd:b5:14:
5c:5a:48:5a:82:b6:ba:76:56:ea:da:91:ad:38:13:
5e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:26:1A:18:FC:F9:7D:4D:50:00:21:31:A7:A6:BC:5E:6D:62:E0:BE
X509v3 Authority Key Identifier:
keyid:C4:29:78:D5:32:69:8F:B2:08:40:F9:42:B0:24:7C:01:C8:F5:78:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCl41TJpj7IIQPlCsCR8Acj1eLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:ca:7a:db:c1:6f:de:6c:54:35:e6:42:9f:24:c0:f3:ba:e7:
ae:b9:0e:11:3a:a3:3c:f5:53:cc:64:63:0b:2c:0e:90:c9:6b:
7c:43:ab:a3:d1:9b:8e:a3:e1:f6:17:9f:79:01:73:c9:d2:cf:
57:56:7b:22:f0:01:2f:b7:6f:68:cb:be:b1:64:59:d5:a9:fe:
db:b3:9a:68:9f:5a:af:c5:d6:4e:c1:cf:1c:12:7b:55:48:44:
83:55:df:cd:f4:0c:7d:40:2e:73:e6:6d:24:07:90:82:cb:7f:
21:d9:03:0d:a1:68:7d:31:f0:2b:c5:57:45:58:d9:44:5a:d2:
07:7a:f7:66:59:34:21:2f:52:91:b2:36:89:25:91:50:5b:8b:
32:87:1b:6e:d0:07:bd:01:66:96:4b:82:07:d1:cd:78:d3:f8:
34:83:27:3d:f3:c8:9f:77:0a:63:7d:69:7e:9b:d4:a4:1e:41:
97:1c:a4:93:16:4a:8f:2b:86:4e:0b:88:7a:ce:de:52:dd:81:
8e:c9:20:87:98:44:b5:ba:69:7b:b1:f9:5d:23:7c:83:c9:1e:
35:08:6f:e5:2c:ce:62:87:08:7b:cf:ea:fd:d9:99:dc:e6:11:
02:04:70:6a:24:4c:b3:d8:a8:94:52:a0:28:75:1e:4b:3c:1f:
a8:92:8f:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuNSIzPcoU+1xE/qif6iVOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0Mjk3OGQ1MzI2OThmYjIwODQwZjk0MmIwMjQ3YzAxYzhm
NTc4YjIwHhcNMjYwMzAyMTEwMDQzWhcNMjYwMzAzMTEwMDQzWjAzMTEwLwYDVQQD
EyhkNDI2MWExOGZjZjk3ZDRkNTAwMDIxMzFhN2E2YmM1ZTZkNjJlMGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTLIA7gzhI25KForz1zoIp0qR/DX
lS1eMXVG1mo4voAHCHWAfORlq5Z/ZiCsFRP34jcqfmZ6IEBChMQobyKzlWhKglpC
Mx/mQySCrsqxdZdsxP5VbrErkYQorghJDpx0SCSdDqagze1EK1E9qj/FEQC49KPs
ulGtyWTDbED33K87Q1Thh4Gi/qmp3qUVeMeE2XE1tCLXyEzQYVFatVMzPRtsGlha
rswFz5KPpiIIHd9bnZoNszwIvm4J0TCpY+aq2mYZCpE+Iqb7ixKvvvINOxWA2TAX
D1mL6qawng7Jb3Js9dia15TXluoHbh69tRRcWkhagra6dlbq2pGtOBNe3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQmGhj8+X1NUAAhMaemvF5tYuC+MB8GA1UdIwQY
MBaAFMQpeNUyaY+yCED5QrAkfAHI9XiyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveENsNDFUSnBqN0lJUVBsQ3NDUjhBY2oxZUxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9lZGQ3YWYtMmZmMC00NWRjLWIxNGIt
NzdkNTE2YmU3YTg3LzEveENsNDFUSnBqN0lJUVBsQ3NDUjhBY2oxZUxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9lZGQ3YWYtMmZmMC00NWRjLWIxNGItNzdkNTE2YmU3YTg3
LzEveENsNDFUSnBqN0lJUVBsQ3NDUjhBY2oxZUxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoMp628Fv
3mxUNeZCnyTA87rnrrkOETqjPPVTzGRjCywOkMlrfEOro9GbjqPh9hefeQFzydLP
V1Z7IvABL7dvaMu+sWRZ1an+27OaaJ9ar8XWTsHPHBJ7VUhEg1XfzfQMfUAuc+Zt
JAeQgst/IdkDDaFofTHwK8VXRVjZRFrSB3r3Zlk0IS9SkbI2iSWRUFuLMocbbtAH
vQFmlkuCB9HNeNP4NIMnPfPIn3cKY31pfpvUpB5BlxykkxZKjyuGTguIes7eUt2B
jskgh5hEtbppe7H5XSN8g8keNQhv5SzOYocIe8/q/dmZ3OYRAgRwaiRMs9iolFKg
KHUeSzwfqJKP9g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:55:47 2026 by rpki-client