Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
File: XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft (raw, json)
Hash identifier: XC+xUmpTAfBku+5gv+7EaBv/2Fzd1qnOALWOaRsIRVE=
Subject key identifier: 33:47:71:2E:8A:85:4C:58:AD:6A:D1:D1:3F:DB:9A:67:B5:4E:9F:73
Authority key identifier: 5E:05:CB:67:20:9B:BD:19:83:F4:32:77:16:52:3E:B1:77:7F:D4:FA
Certificate issuer: /CN=5e05cb67209bbd1983f4327716523eb1777fd4fa
Certificate serial: 019CAB34027864FD0FB9D0B4C9BE842DD85A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 21:00:38 +0000
Manifest this update: Sun 01 Mar 2026 21:00:38 +0000
Manifest next update: Mon 02 Mar 2026 21:00:38 +0000
Files and hashes: 1: 4PuIVLEIj4zZmZW-uUpD3PaA49w.roa (hash: ywwR6jVCoJoX2GD3atJ7KKAi8JK9J3yhYoAwj8Jfgz4=)
2: XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl (hash: tejL7wgvq47I9NVY1wY8riL+lggDsOQF1DeglGx1lUU=)
3: rVLmDTrtM8fRD2YrBcUhwt9PtiE.roa (hash: qzKX309DgizvFnW/1CNilCV4HRwfLRrE8VOSlsECFro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:02:78:64:fd:0f:b9:d0:b4:c9:be:84:2d:d8:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e05cb67209bbd1983f4327716523eb1777fd4fa
Validity
Not Before: Mar 1 21:00:38 2026 GMT
Not After : Mar 2 21:00:38 2026 GMT
Subject: CN=3347712e8a854c58ad6ad1d13fdb9a67b54e9f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:53:42:f2:c4:5b:6b:4a:96:cd:56:90:67:7d:
6f:c5:4a:3c:15:57:bb:75:9f:7b:34:f6:56:7b:87:
3e:b6:bd:db:7c:5e:9d:a8:2c:57:7b:bd:9a:c4:88:
3c:2d:1e:5d:b2:9b:0e:f6:b5:7a:63:27:a8:48:ca:
3b:07:7c:c1:be:b9:9a:63:20:79:e2:5a:b4:4a:fc:
c8:77:c6:dc:d7:8e:9b:86:b9:81:71:78:2e:a5:d4:
26:37:9b:77:90:8e:6f:65:d3:67:f7:23:1e:db:4c:
09:20:74:5d:fc:0b:4a:08:4f:fc:ad:4e:bd:ac:2a:
fb:cb:81:4b:25:e6:3a:4f:7c:a8:19:97:6e:37:d0:
82:25:66:77:a3:21:f7:46:4d:4f:6d:66:03:c5:c9:
f8:bc:5c:47:35:b1:d4:92:67:7b:37:9a:dc:db:5c:
d7:e0:83:d2:95:0d:e5:2d:a9:d7:80:fb:e1:a5:cc:
cb:f4:8f:8b:b6:40:a8:c2:4b:28:e2:b4:c8:db:20:
89:03:3c:24:70:43:98:60:b6:b1:c7:fb:0f:20:96:
36:19:c7:79:18:5d:5c:f2:76:23:38:ea:3b:a2:a6:
d9:e4:41:cc:a8:51:b4:53:62:4e:68:a0:3f:33:0d:
9a:22:69:76:14:7e:a9:8b:fe:d7:ad:23:a2:6c:cb:
08:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:47:71:2E:8A:85:4C:58:AD:6A:D1:D1:3F:DB:9A:67:B5:4E:9F:73
X509v3 Authority Key Identifier:
keyid:5E:05:CB:67:20:9B:BD:19:83:F4:32:77:16:52:3E:B1:77:7F:D4:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:11:14:fb:9a:77:6e:20:2a:85:b5:c4:3a:1b:d3:1e:6e:b3:
05:fa:38:0d:00:93:81:2d:26:cf:73:ba:09:d1:62:3e:3e:3c:
86:de:9e:e8:d3:ea:47:f3:fe:44:41:e6:a4:da:21:e7:0d:a8:
33:1f:a9:e5:72:01:a6:99:ca:ca:99:b0:ba:3b:26:be:f5:bf:
66:2f:f0:82:ba:69:ee:34:7d:b1:94:8a:dd:1c:e4:55:52:6d:
c7:c6:7f:90:0a:bb:cb:c7:64:17:33:6d:9b:0d:0f:b6:52:8c:
1e:02:15:14:d1:cb:84:6c:b9:e1:d6:63:05:90:31:90:ec:79:
19:45:e0:38:ed:ce:ae:e0:16:5b:ac:25:bb:26:67:b8:50:43:
48:39:92:08:3a:70:a7:aa:24:6a:f5:f2:ae:ae:86:6c:7f:16:
fc:0d:8a:a4:30:e8:7b:0f:c2:d3:e8:b8:16:b9:c9:1c:51:d3:
b5:65:96:b3:72:2f:be:0e:48:cc:cb:57:90:90:78:8b:08:9c:
92:30:69:8e:62:04:4d:34:ce:54:b7:82:e9:4d:11:bb:e2:b5:
07:8a:de:5d:f3:a6:70:77:ff:3a:f3:62:a1:de:67:f2:77:11:
eb:aa:b6:73:e6:bd:08:9f:3a:dd:b1:ee:44:25:65:5a:bb:65:
e8:62:16:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNAJ4ZP0PudC0yb6ELdhaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMDVjYjY3MjA5YmJkMTk4M2Y0MzI3NzE2NTIzZWIxNzc3
ZmQ0ZmEwHhcNMjYwMzAxMjEwMDM4WhcNMjYwMzAyMjEwMDM4WjAzMTEwLwYDVQQD
EygzMzQ3NzEyZThhODU0YzU4YWQ2YWQxZDEzZmRiOWE2N2I1NGU5ZjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1NC8sRba0qWzVaQZ31vxUo8FVe7
dZ97NPZWe4c+tr3bfF6dqCxXe72axIg8LR5dspsO9rV6YyeoSMo7B3zBvrmaYyB5
4lq0SvzId8bc146bhrmBcXgupdQmN5t3kI5vZdNn9yMe20wJIHRd/AtKCE/8rU69
rCr7y4FLJeY6T3yoGZduN9CCJWZ3oyH3Rk1PbWYDxcn4vFxHNbHUkmd7N5rc21zX
4IPSlQ3lLanXgPvhpczL9I+LtkCowkso4rTI2yCJAzwkcEOYYLaxx/sPIJY2Gcd5
GF1c8nYjOOo7oqbZ5EHMqFG0U2JOaKA/Mw2aIml2FH6pi/7XrSOibMsIKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDNHcS6KhUxYrWrR0T/bmme1Tp9zMB8GA1UdIwQY
MBaAFF4Fy2cgm70Zg/QydxZSPrF3f9T6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGdYTFp5Q2J2Um1EOURKM0ZsSS1zWGRfMVBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS85Y2EwZGYtZDQ3NC00MGNkLTg2ODgt
MTcxNTkxOTU2N2M5LzEvWGdYTFp5Q2J2Um1EOURKM0ZsSS1zWGRfMVBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS85Y2EwZGYtZDQ3NC00MGNkLTg2ODgtMTcxNTkxOTU2N2M5
LzEvWGdYTFp5Q2J2Um1EOURKM0ZsSS1zWGRfMVBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdxEU+5p3
biAqhbXEOhvTHm6zBfo4DQCTgS0mz3O6CdFiPj48ht6e6NPqR/P+REHmpNoh5w2o
Mx+p5XIBppnKypmwujsmvvW/Zi/wgrpp7jR9sZSK3RzkVVJtx8Z/kAq7y8dkFzNt
mw0PtlKMHgIVFNHLhGy54dZjBZAxkOx5GUXgOO3OruAWW6wluyZnuFBDSDmSCDpw
p6okavXyrq6GbH8W/A2KpDDoew/C0+i4FrnJHFHTtWWWs3Ivvg5IzMtXkJB4iwic
kjBpjmIETTTOVLeC6U0Ru+K1B4reXfOmcHf/OvNiod5n8ncR66q2c+a9CJ863bHu
RCVlWrtl6GIW3Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:46:55 2026 by rpki-client