Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
File: x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft (raw, json)
Hash identifier: sZPKtyWbc9DuZBF4X+bf0Bcg8n2hUVoaEngSQOQpDh0=
Subject key identifier: 02:E2:B0:80:D0:12:B0:DE:9C:DF:DF:C8:47:C7:D0:F9:D2:FA:7F:22
Authority key identifier: C7:D9:14:62:C4:DC:1D:F6:A8:A3:A9:7A:1A:EE:57:A0:CC:14:EF:BA
Certificate issuer: /CN=c7d91462c4dc1df6a8a3a97a1aee57a0cc14efba
Certificate serial: 019CAAC68193CE3067315842626D0203C7D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9kUYsTcHfaoo6l6Gu5XoMwU77o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
Manifest number: 1649
Signing time: Sun 01 Mar 2026 19:01:01 +0000
Manifest this update: Sun 01 Mar 2026 19:01:01 +0000
Manifest next update: Mon 02 Mar 2026 19:01:01 +0000
Files and hashes: 1: XKs6KgfU6aQLIAOaUuz9aSWnClo.roa (hash: vxBudXeCf0peWMd7lO7aysk2NB+ZqNxmrMni5vjOPPQ=)
2: x9kUYsTcHfaoo6l6Gu5XoMwU77o.crl (hash: fd5mJwnFwkbLdyDnUKSTYJy0lPEB12ZaIdPi+1M2Q9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
rsync://rpki.ripe.net/repository/DEFAULT/x9kUYsTcHfaoo6l6Gu5XoMwU77o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:81:93:ce:30:67:31:58:42:62:6d:02:03:c7:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7d91462c4dc1df6a8a3a97a1aee57a0cc14efba
Validity
Not Before: Mar 1 19:01:01 2026 GMT
Not After : Mar 2 19:01:01 2026 GMT
Subject: CN=02e2b080d012b0de9cdfdfc847c7d0f9d2fa7f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:df:93:69:2b:0c:44:45:c9:f7:5c:b7:26:c9:
37:c1:55:10:d5:06:ed:81:30:f5:94:7c:6f:20:7d:
0e:5d:2b:4c:96:ad:d7:38:09:ee:4f:f4:26:f9:6b:
58:c8:86:e8:53:54:0f:4e:25:43:1a:2d:4d:16:56:
13:57:16:c6:c5:b9:8c:11:04:1a:5e:1a:cc:6f:ee:
fb:b9:72:49:1f:f8:5e:a0:54:66:18:11:2c:93:ce:
43:63:93:ae:64:63:ba:a9:7c:68:9c:11:cf:43:bf:
64:bc:65:33:09:c1:96:85:cb:79:79:80:51:08:4e:
18:3f:1a:ab:81:7e:45:67:a8:c2:3b:3e:92:2c:38:
7a:9c:ea:99:48:62:17:5b:29:f6:96:f4:bb:24:49:
17:75:c3:3f:10:b3:f3:15:92:52:34:93:51:80:db:
83:73:db:56:9b:65:b6:84:7d:b1:ae:51:de:5e:e3:
69:81:a1:43:3e:2a:23:3b:42:0d:9c:8c:86:ae:ec:
06:84:64:06:f3:ec:39:d6:ee:a8:b7:6f:ff:f2:d3:
31:63:1b:a4:82:02:7b:44:b6:ee:bf:88:1b:64:ca:
53:d2:4f:f2:4a:0e:1c:5e:e5:32:f3:6a:b6:97:0c:
22:89:41:69:f8:6c:54:08:d5:04:62:3b:45:03:3f:
f3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E2:B0:80:D0:12:B0:DE:9C:DF:DF:C8:47:C7:D0:F9:D2:FA:7F:22
X509v3 Authority Key Identifier:
keyid:C7:D9:14:62:C4:DC:1D:F6:A8:A3:A9:7A:1A:EE:57:A0:CC:14:EF:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9kUYsTcHfaoo6l6Gu5XoMwU77o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:d1:12:9b:6e:83:40:30:54:37:0a:6e:a6:d1:aa:76:3d:c4:
11:13:d1:7a:e5:e5:df:05:45:fd:fc:45:b1:26:21:72:82:5c:
9d:b1:46:ec:53:cd:f3:93:d8:6c:27:8b:94:5a:f5:c8:ba:49:
54:89:58:47:73:3b:38:68:94:a0:10:e4:b9:29:08:3c:4d:1b:
7f:f1:fa:4a:b5:08:55:97:6e:8e:2e:39:33:e2:85:b0:68:7e:
36:a6:19:bd:53:eb:77:70:c9:cd:0c:45:c1:04:27:a5:2d:3e:
d8:cc:0d:63:e9:11:54:67:19:da:88:c5:91:6b:1d:98:71:2f:
80:1b:6c:c5:40:bd:02:4d:b5:4f:f1:6d:92:3a:ba:36:4b:27:
87:26:16:ad:c3:d6:9d:e8:a6:da:d3:00:1c:8b:68:93:5b:62:
d3:dd:37:01:8d:65:f6:58:b1:ff:04:a2:77:33:32:c8:39:ff:
a6:86:bb:c5:72:5a:55:d5:5c:6a:a7:7d:7c:ce:b7:0a:74:d5:
24:a9:f1:80:d5:ec:ee:b4:4a:a9:b8:08:a5:ce:91:6f:b4:8b:
4f:3f:a7:50:87:77:91:14:8b:99:e4:d8:4a:a1:16:1a:5b:61:
d4:f8:73:a7:6c:5d:bd:d8:c7:e6:30:a1:ef:44:a1:fa:65:4b:
1a:38:e8:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxoGTzjBnMVhCYm0CA8fSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ZDkxNDYyYzRkYzFkZjZhOGEzYTk3YTFhZWU1N2EwY2Mx
NGVmYmEwHhcNMjYwMzAxMTkwMTAxWhcNMjYwMzAyMTkwMTAxWjAzMTEwLwYDVQQD
EygwMmUyYjA4MGQwMTJiMGRlOWNkZmRmYzg0N2M3ZDBmOWQyZmE3ZjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1t+TaSsMREXJ91y3Jsk3wVUQ1Qbt
gTD1lHxvIH0OXStMlq3XOAnuT/Qm+WtYyIboU1QPTiVDGi1NFlYTVxbGxbmMEQQa
XhrMb+77uXJJH/heoFRmGBEsk85DY5OuZGO6qXxonBHPQ79kvGUzCcGWhct5eYBR
CE4YPxqrgX5FZ6jCOz6SLDh6nOqZSGIXWyn2lvS7JEkXdcM/ELPzFZJSNJNRgNuD
c9tWm2W2hH2xrlHeXuNpgaFDPiojO0INnIyGruwGhGQG8+w51u6ot2//8tMxYxuk
ggJ7RLbuv4gbZMpT0k/ySg4cXuUy82q2lwwiiUFp+GxUCNUEYjtFAz/zuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFALisIDQErDenN/fyEfH0PnS+n8iMB8GA1UdIwQY
MBaAFMfZFGLE3B32qKOpehruV6DMFO+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDlrVVlzVGNIZmFvbzZsNkd1NVhvTXdVNzdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8zMThhMjMtMjg3Ni00NmEyLWFmNzIt
MzQ5N2Y3ZTJkZTYyLzEveDlrVVlzVGNIZmFvbzZsNkd1NVhvTXdVNzdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8zMThhMjMtMjg3Ni00NmEyLWFmNzItMzQ5N2Y3ZTJkZTYy
LzEveDlrVVlzVGNIZmFvbzZsNkd1NVhvTXdVNzdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh9ESm26D
QDBUNwpuptGqdj3EERPReuXl3wVF/fxFsSYhcoJcnbFG7FPN85PYbCeLlFr1yLpJ
VIlYR3M7OGiUoBDkuSkIPE0bf/H6SrUIVZduji45M+KFsGh+NqYZvVPrd3DJzQxF
wQQnpS0+2MwNY+kRVGcZ2ojFkWsdmHEvgBtsxUC9Ak21T/Ftkjq6NksnhyYWrcPW
neim2tMAHItok1ti0903AY1l9lix/wSidzMyyDn/poa7xXJaVdVcaqd9fM63CnTV
JKnxgNXs7rRKqbgIpc6Rb7SLTz+nUId3kRSLmeTYSqEWGlth1Phzp2xdvdjH5jCh
70Sh+mVLGjjouQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:03:06 2026 by rpki-client