Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft
File: X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft (raw, json)
Hash identifier: Z+Yx3VKm92RuZFyUEJrushr8dWrbEd6yQUNHFf276Vg=
Subject key identifier: FB:7F:8D:A3:76:E7:BF:64:D2:55:EA:16:83:CD:9D:75:91:9B:17:2C
Authority key identifier: 5F:71:79:EF:F5:E0:E6:7D:03:37:AA:89:12:F9:5A:68:7F:D4:40:89
Certificate issuer: /CN=5f7179eff5e0e67d0337aa8912f95a687fd44089
Certificate serial: 019CAD597D8B6DA85BBA176B0A700B1E30CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X3F57_Xg5n0DN6qJEvlaaH_UQIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft
Manifest number: 0748
Signing time: Mon 02 Mar 2026 07:00:48 +0000
Manifest this update: Mon 02 Mar 2026 07:00:48 +0000
Manifest next update: Tue 03 Mar 2026 07:00:48 +0000
Files and hashes: 1: Sp-Rp44m3Zt8RuuF6n5097S4ock.roa (hash: Lz4ywdxNN6CBi6o+N2fbgHtT/99fDk01I1Om7/73lR4=)
2: X3F57_Xg5n0DN6qJEvlaaH_UQIk.crl (hash: GSqBFA6P8yb1y4VXQMkq7g9luj68kI9lYlCYpZ3OJFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/X3F57_Xg5n0DN6qJEvlaaH_UQIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:7d:8b:6d:a8:5b:ba:17:6b:0a:70:0b:1e:30:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7179eff5e0e67d0337aa8912f95a687fd44089
Validity
Not Before: Mar 2 07:00:48 2026 GMT
Not After : Mar 3 07:00:48 2026 GMT
Subject: CN=fb7f8da376e7bf64d255ea1683cd9d75919b172c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4c:45:e4:b6:9c:28:01:3d:86:5b:25:84:41:
7b:49:de:8e:b2:68:c8:db:75:ea:de:c9:a0:ce:6b:
4d:e9:8e:c4:8b:fd:2b:0f:76:9c:35:65:70:da:12:
39:f6:27:b2:19:23:da:e2:35:7a:3d:56:3e:85:ae:
c1:d8:9f:74:61:67:d5:24:46:93:e5:d8:d8:d4:7c:
d1:34:2e:c1:63:93:ce:9d:e4:9c:e9:30:71:5a:fb:
55:6a:43:45:f3:fd:ad:c7:b8:6a:9c:cc:22:43:92:
3a:6e:e0:ae:b4:50:7e:de:ae:9a:b7:9b:14:bb:e9:
a3:8d:e1:8c:c7:ea:09:be:b2:64:67:19:d8:28:6d:
76:72:f5:06:a3:99:84:9d:4b:94:d2:2b:d1:06:82:
dd:af:a7:f4:8a:39:cc:78:4e:d3:d1:3a:d8:27:bf:
20:8d:5a:99:b4:54:3e:9f:c6:5f:31:92:29:d1:e1:
e0:c0:f5:5d:34:32:ed:0d:65:18:cd:04:e1:ce:a7:
a0:e8:89:bc:7f:50:de:d7:07:c8:05:1e:01:ad:c4:
b4:5b:40:86:ed:e0:e6:47:0f:8e:a1:e7:5b:57:57:
43:d5:a6:65:93:c0:15:86:9d:0f:b5:79:5d:0c:2e:
8b:ae:98:07:fd:db:84:c1:7b:80:bd:96:78:e6:b9:
04:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:7F:8D:A3:76:E7:BF:64:D2:55:EA:16:83:CD:9D:75:91:9B:17:2C
X509v3 Authority Key Identifier:
keyid:5F:71:79:EF:F5:E0:E6:7D:03:37:AA:89:12:F9:5A:68:7F:D4:40:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X3F57_Xg5n0DN6qJEvlaaH_UQIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:7c:35:84:b4:36:f2:ed:cf:74:08:d4:2f:13:20:84:86:aa:
cf:d9:ab:9c:8d:3c:c2:da:15:04:9c:b8:1b:b4:d0:e4:26:c2:
ee:57:f7:20:1b:46:9f:19:2d:8e:4a:67:36:85:e5:29:0a:5c:
69:09:68:c5:db:fc:4e:e4:dd:34:15:73:8d:82:d1:fb:63:c8:
9b:30:7d:fa:bd:1c:67:3c:cf:27:3f:85:a1:73:7c:f2:e3:b8:
62:d1:ea:af:34:11:31:9e:28:e2:b2:6a:ed:a6:f3:f5:19:6f:
0b:13:90:c9:16:f2:f0:52:d9:07:85:e7:6b:90:e4:61:5a:3d:
73:f2:ed:76:ac:15:27:63:07:ca:0a:03:e3:52:ca:55:5c:fc:
9b:c8:82:dc:aa:49:9a:02:58:2a:e5:25:e0:1a:ff:2c:d2:d4:
84:0b:2b:1f:32:42:21:c0:06:16:f6:1c:94:81:23:98:ab:6a:
aa:20:d2:e5:9b:44:2a:9f:8c:b8:75:01:04:67:40:ad:96:2e:
75:9a:df:c6:c5:a3:69:54:36:c3:3c:5d:e0:b7:ce:9b:aa:7b:
1f:05:3e:5a:9a:ff:56:df:17:0d:08:ab:f5:5a:e2:d2:38:02:
40:15:d9:90:91:2a:f9:3b:7a:3d:67:95:54:26:2e:e2:a3:ee:
73:36:55:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWX2LbahbuhdrCnALHjDOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmNzE3OWVmZjVlMGU2N2QwMzM3YWE4OTEyZjk1YTY4N2Zk
NDQwODkwHhcNMjYwMzAyMDcwMDQ4WhcNMjYwMzAzMDcwMDQ4WjAzMTEwLwYDVQQD
EyhmYjdmOGRhMzc2ZTdiZjY0ZDI1NWVhMTY4M2NkOWQ3NTkxOWIxNzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkxF5LacKAE9hlslhEF7Sd6OsmjI
23Xq3smgzmtN6Y7Ei/0rD3acNWVw2hI59ieyGSPa4jV6PVY+ha7B2J90YWfVJEaT
5djY1HzRNC7BY5POneSc6TBxWvtVakNF8/2tx7hqnMwiQ5I6buCutFB+3q6at5sU
u+mjjeGMx+oJvrJkZxnYKG12cvUGo5mEnUuU0ivRBoLdr6f0ijnMeE7T0TrYJ78g
jVqZtFQ+n8ZfMZIp0eHgwPVdNDLtDWUYzQThzqeg6Im8f1De1wfIBR4BrcS0W0CG
7eDmRw+OoedbV1dD1aZlk8AVhp0PtXldDC6LrpgH/duEwXuAvZZ45rkEkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPt/jaN2579k0lXqFoPNnXWRmxcsMB8GA1UdIwQY
MBaAFF9xee/14OZ9AzeqiRL5Wmh/1ECJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDNGNTdfWGc1bjBETjZxSkV2bGFhSF9VUUlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9jNDRkOTMtMTY5NS00YWIxLTkxNDIt
NDI5NmQ3YWJkM2QxLzEvWDNGNTdfWGc1bjBETjZxSkV2bGFhSF9VUUlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9jNDRkOTMtMTY5NS00YWIxLTkxNDItNDI5NmQ3YWJkM2Qx
LzEvWDNGNTdfWGc1bjBETjZxSkV2bGFhSF9VUUlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm3w1hLQ2
8u3PdAjULxMghIaqz9mrnI08wtoVBJy4G7TQ5CbC7lf3IBtGnxktjkpnNoXlKQpc
aQloxdv8TuTdNBVzjYLR+2PImzB9+r0cZzzPJz+FoXN88uO4YtHqrzQRMZ4o4rJq
7abz9RlvCxOQyRby8FLZB4Xna5DkYVo9c/LtdqwVJ2MHygoD41LKVVz8m8iC3KpJ
mgJYKuUl4Br/LNLUhAsrHzJCIcAGFvYclIEjmKtqqiDS5ZtEKp+MuHUBBGdArZYu
dZrfxsWjaVQ2wzxd4LfOm6p7HwU+Wpr/Vt8XDQir9Vri0jgCQBXZkJEq+Tt6PWeV
VCYu4qPuczZVRQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:38:59 2026 by rpki-client