Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
File: X8JHQzBLf9mgZdIs2JzalQReJpw.mft (raw, json)
Hash identifier: kiXY3FWbNePPQ8enII6yqqF2DeCD/PYH06QiIftgJYs=
Subject key identifier: 3A:67:34:D0:05:96:CD:E8:EB:13:53:08:88:8D:97:A9:09:FF:92:C9
Authority key identifier: 5F:C2:47:43:30:4B:7F:D9:A0:65:D2:2C:D8:9C:DA:95:04:5E:26:9C
Certificate issuer: /CN=5fc24743304b7fd9a065d22cd89cda95045e269c
Certificate serial: 019CACB515CED99B08DA32897AD4E1AD0E94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 04:01:14 +0000
Manifest this update: Mon 02 Mar 2026 04:01:14 +0000
Manifest next update: Tue 03 Mar 2026 04:01:14 +0000
Files and hashes: 1: X8JHQzBLf9mgZdIs2JzalQReJpw.crl (hash: gFfGTPFf4SiLtv466E4PMKuwKIhrJBsPcG4ULeltZmc=)
2: mde2iraZFBwTbp97_tvjs2IMwjU.roa (hash: Q0iRTXsb5myu//hBM4zbKFOJNKJsTWjqhNvukcS55wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:15:ce:d9:9b:08:da:32:89:7a:d4:e1:ad:0e:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc24743304b7fd9a065d22cd89cda95045e269c
Validity
Not Before: Mar 2 04:01:14 2026 GMT
Not After : Mar 3 04:01:14 2026 GMT
Subject: CN=3a6734d00596cde8eb135308888d97a909ff92c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5a:02:35:b1:9d:91:c5:55:5b:a5:2c:0c:23:
93:b4:51:54:97:62:ce:fd:d5:e8:92:13:72:08:e6:
6f:77:b5:8f:a0:58:3d:82:c4:0a:c5:3e:c2:e0:ee:
6d:e4:ff:d1:36:43:5c:4e:a0:80:d0:e3:25:b0:a2:
12:1e:77:2b:31:98:b5:2a:d5:24:d2:07:a8:9c:0f:
c9:94:22:5b:20:fc:37:d6:76:46:9e:41:00:d7:c2:
fc:5f:dd:5e:58:0b:21:d1:b5:8f:56:5c:5c:7b:aa:
39:96:aa:1a:7e:88:bf:b4:da:ad:58:e0:b5:bd:e5:
f8:96:13:1b:1a:f4:03:27:2d:76:42:09:ab:bc:cf:
73:95:16:7d:ba:93:64:f8:ea:f4:50:37:56:21:5b:
38:4a:91:80:29:84:68:fa:bf:0c:61:a7:8b:cb:f8:
36:94:d6:8b:d7:7b:01:3d:c5:84:c1:4b:a5:aa:ad:
aa:4e:c1:9e:71:f4:66:0f:78:60:ab:e6:e6:8a:6f:
29:e6:2d:aa:0e:28:b6:d4:5c:82:04:13:0d:f6:07:
94:0b:ce:86:e6:ba:73:e1:2c:1f:84:fd:6d:f9:6f:
b2:83:c9:df:b5:bf:aa:80:61:2a:4b:93:ff:b5:63:
98:7d:3a:a0:2a:97:07:75:8d:b2:02:11:8e:1f:c9:
ef:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:67:34:D0:05:96:CD:E8:EB:13:53:08:88:8D:97:A9:09:FF:92:C9
X509v3 Authority Key Identifier:
keyid:5F:C2:47:43:30:4B:7F:D9:A0:65:D2:2C:D8:9C:DA:95:04:5E:26:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:99:26:40:6e:4f:42:23:c1:d7:bb:5d:47:0c:b2:b0:66:ea:
44:eb:25:c7:9c:3b:16:fd:0a:50:ca:87:29:52:6a:94:59:b6:
be:9d:ef:35:68:57:1f:32:d3:36:a0:76:b6:a7:ec:85:93:28:
b3:84:1e:00:aa:e7:c5:14:47:8b:8d:d7:e4:ed:af:22:ae:c9:
72:24:01:63:5e:e5:31:90:fa:f6:f0:4d:5e:d5:a9:5a:25:f0:
31:6c:32:48:c2:ab:bc:54:0d:9b:19:cb:a2:59:ad:ef:c0:21:
16:c8:85:72:6e:a2:b6:41:62:ba:7f:17:9f:4a:58:62:9b:84:
bc:47:dd:6c:0b:be:1b:fe:e4:d9:2a:71:c7:ba:87:ea:61:fa:
ad:98:5d:ef:c7:0a:c3:01:50:50:13:3c:e5:a9:d8:98:06:b4:
8f:6a:ca:65:39:2b:45:fb:58:e3:d0:04:96:69:c0:f8:25:5c:
68:42:15:c9:bf:16:53:17:10:8c:07:8e:82:69:13:61:fa:b8:
51:ca:21:8f:80:04:f2:5f:64:bf:fd:0b:60:0e:56:67:1b:46:
a6:77:ca:ac:f3:07:27:3c:a1:83:40:e2:c4:95:30:b3:d1:43:
61:4d:fb:1c:29:81:77:d8:a9:32:87:49:87:a8:e2:17:e6:8d:
24:5f:64:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystRXO2ZsI2jKJetThrQ6UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYzI0NzQzMzA0YjdmZDlhMDY1ZDIyY2Q4OWNkYTk1MDQ1
ZTI2OWMwHhcNMjYwMzAyMDQwMTE0WhcNMjYwMzAzMDQwMTE0WjAzMTEwLwYDVQQD
EygzYTY3MzRkMDA1OTZjZGU4ZWIxMzUzMDg4ODhkOTdhOTA5ZmY5MmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVoCNbGdkcVVW6UsDCOTtFFUl2LO
/dXokhNyCOZvd7WPoFg9gsQKxT7C4O5t5P/RNkNcTqCA0OMlsKISHncrMZi1KtUk
0geonA/JlCJbIPw31nZGnkEA18L8X91eWAsh0bWPVlxce6o5lqoafoi/tNqtWOC1
veX4lhMbGvQDJy12QgmrvM9zlRZ9upNk+Or0UDdWIVs4SpGAKYRo+r8MYaeLy/g2
lNaL13sBPcWEwUulqq2qTsGecfRmD3hgq+bmim8p5i2qDii21FyCBBMN9geUC86G
5rpz4SwfhP1t+W+yg8nftb+qgGEqS5P/tWOYfTqgKpcHdY2yAhGOH8nvGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDpnNNAFls3o6xNTCIiNl6kJ/5LJMB8GA1UdIwQY
MBaAFF/CR0MwS3/ZoGXSLNic2pUEXiacMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDhKSFF6QkxmOW1nWmRJczJKemFsUVJlSnB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9lNWEyYzctMDQ1My00OGJhLWIxMGMt
MGJhOTY3OWRlMmU2LzEvWDhKSFF6QkxmOW1nWmRJczJKemFsUVJlSnB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9lNWEyYzctMDQ1My00OGJhLWIxMGMtMGJhOTY3OWRlMmU2
LzEvWDhKSFF6QkxmOW1nWmRJczJKemFsUVJlSnB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAZkmQG5P
QiPB17tdRwyysGbqROslx5w7Fv0KUMqHKVJqlFm2vp3vNWhXHzLTNqB2tqfshZMo
s4QeAKrnxRRHi43X5O2vIq7JciQBY17lMZD69vBNXtWpWiXwMWwySMKrvFQNmxnL
olmt78AhFsiFcm6itkFiun8Xn0pYYpuEvEfdbAu+G/7k2Spxx7qH6mH6rZhd78cK
wwFQUBM85anYmAa0j2rKZTkrRftY49AElmnA+CVcaEIVyb8WUxcQjAeOgmkTYfq4
Ucohj4AE8l9kv/0LYA5WZxtGpnfKrPMHJzyhg0DixJUws9FDYU37HCmBd9ipModJ
h6jiF+aNJF9kgA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:20:21 2026 by rpki-client