Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft
File: xb14VKoFD9blUPx80CtVhzC_u3o.mft (raw, json)
Hash identifier: TID/m9wIoJ4MJ2C6CYYbMavbXrY0Hf2gRBr6ItQoFb8=
Subject key identifier: A7:F8:1D:BF:6C:0A:D3:89:20:83:FD:72:B2:AD:45:0B:83:9B:C0:56
Authority key identifier: C5:BD:78:54:AA:05:0F:D6:E5:50:FC:7C:D0:2B:55:87:30:BF:BB:7A
Certificate issuer: /CN=c5bd7854aa050fd6e550fc7cd02b558730bfbb7a
Certificate serial: 019CAE352337CA36311C6089FB5DB2572260
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xb14VKoFD9blUPx80CtVhzC_u3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft
Manifest number: 0796
Signing time: Mon 02 Mar 2026 11:00:43 +0000
Manifest this update: Mon 02 Mar 2026 11:00:43 +0000
Manifest next update: Tue 03 Mar 2026 11:00:43 +0000
Files and hashes: 1: CQU1i8i4vqvuY4KqJGZlaSLhz1o.roa (hash: CuYb2a2XddVX7SxALr1d1KIhl+UGwYzhtlyXuVxbI4M=)
2: xb14VKoFD9blUPx80CtVhzC_u3o.crl (hash: j0ddF54qpJZymR7rJg8iQXoKWMIoC/uwPW1Nng+lKLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/xb14VKoFD9blUPx80CtVhzC_u3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:23:37:ca:36:31:1c:60:89:fb:5d:b2:57:22:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5bd7854aa050fd6e550fc7cd02b558730bfbb7a
Validity
Not Before: Mar 2 11:00:43 2026 GMT
Not After : Mar 3 11:00:43 2026 GMT
Subject: CN=a7f81dbf6c0ad3892083fd72b2ad450b839bc056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ae:19:12:eb:38:82:e3:9e:6c:96:83:fc:00:
ca:bb:d2:92:57:69:b7:4c:99:40:0b:86:1f:b6:90:
55:19:b0:a8:eb:5e:20:e1:9d:43:2b:ae:f7:2b:8a:
7d:78:c5:c0:30:3a:6d:b2:67:02:39:50:18:95:12:
c9:be:91:b7:48:5f:72:ac:68:fa:96:97:3e:d1:4e:
b6:55:93:c0:c1:f0:01:62:29:c1:fd:19:31:86:42:
52:65:01:e3:12:fc:a2:10:a4:92:e4:cf:85:8c:ee:
0f:66:b7:e6:41:43:18:d1:c6:51:8b:16:ae:5a:33:
e0:0c:f6:55:28:e2:dc:8f:a8:72:d3:7a:c5:54:3d:
82:ad:87:84:03:b4:73:d0:7e:0c:e6:34:9c:e5:d7:
28:6d:31:cb:e8:25:47:5b:7e:b8:b6:0c:5f:25:8c:
c6:28:21:5b:77:5a:67:a1:d0:11:2e:61:f9:d2:8a:
82:9e:8a:f7:2c:70:f0:ee:0d:5d:e5:4f:38:9f:80:
53:f3:e9:90:74:9b:59:fb:9f:14:08:65:8d:fb:7b:
d6:8c:dc:b2:be:d3:58:8b:9c:e4:13:49:ee:20:38:
a0:5c:9f:14:c8:ca:e4:3c:df:5c:5f:03:47:26:fc:
ef:1d:a3:61:0e:e1:41:6a:a1:c2:9b:20:06:86:0d:
9f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F8:1D:BF:6C:0A:D3:89:20:83:FD:72:B2:AD:45:0B:83:9B:C0:56
X509v3 Authority Key Identifier:
keyid:C5:BD:78:54:AA:05:0F:D6:E5:50:FC:7C:D0:2B:55:87:30:BF:BB:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xb14VKoFD9blUPx80CtVhzC_u3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:5e:cc:4e:0d:02:96:d9:31:39:ad:75:70:ad:38:82:f6:78:
00:f7:b4:48:f3:80:de:c2:b5:6f:bd:d4:46:5a:db:9f:1a:70:
e6:bf:8e:e3:d3:06:22:f7:29:be:c2:74:a1:81:d8:a2:b1:e3:
a0:96:7d:9f:bf:62:b1:e1:a2:f7:e8:40:76:49:54:1b:cb:35:
68:74:c4:59:9a:f2:81:e4:95:b2:8f:28:12:2c:38:7d:f0:eb:
01:1e:33:4b:0a:df:cb:ba:9a:69:dd:47:05:99:76:dc:cf:6e:
ef:d9:85:1c:5d:1e:01:ad:b2:54:05:9e:4f:68:a0:25:b6:18:
16:58:73:22:e4:ed:af:27:2e:21:ea:18:1b:b0:35:09:aa:cb:
a0:2b:4c:0b:ee:dd:c2:93:a7:ca:e5:3d:e5:d7:63:44:03:20:
e6:f5:b8:78:a8:d5:2c:45:0a:92:26:61:fc:c9:b0:aa:91:28:
f5:fd:d3:1b:db:8b:cf:4b:65:67:6c:f6:a5:f1:73:65:3a:de:
44:63:7d:24:f1:4b:ae:65:af:8e:8e:3d:3a:9c:6c:2b:3c:dc:
dc:65:23:6c:06:d2:72:88:02:6e:fa:87:cc:c1:36:95:77:76:
aa:75:fd:79:6b:9d:13:3a:82:ea:75:e8:d4:e9:89:44:8b:eb:
31:b6:bd:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuNSM3yjYxHGCJ+12yVyJgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1YmQ3ODU0YWEwNTBmZDZlNTUwZmM3Y2QwMmI1NTg3MzBi
ZmJiN2EwHhcNMjYwMzAyMTEwMDQzWhcNMjYwMzAzMTEwMDQzWjAzMTEwLwYDVQQD
EyhhN2Y4MWRiZjZjMGFkMzg5MjA4M2ZkNzJiMmFkNDUwYjgzOWJjMDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz64ZEus4guOebJaD/ADKu9KSV2m3
TJlAC4YftpBVGbCo614g4Z1DK673K4p9eMXAMDptsmcCOVAYlRLJvpG3SF9yrGj6
lpc+0U62VZPAwfABYinB/RkxhkJSZQHjEvyiEKSS5M+FjO4PZrfmQUMY0cZRixau
WjPgDPZVKOLcj6hy03rFVD2CrYeEA7Rz0H4M5jSc5dcobTHL6CVHW364tgxfJYzG
KCFbd1pnodARLmH50oqCnor3LHDw7g1d5U84n4BT8+mQdJtZ+58UCGWN+3vWjNyy
vtNYi5zkE0nuIDigXJ8UyMrkPN9cXwNHJvzvHaNhDuFBaqHCmyAGhg2f/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKf4Hb9sCtOJIIP9crKtRQuDm8BWMB8GA1UdIwQY
MBaAFMW9eFSqBQ/W5VD8fNArVYcwv7t6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGIxNFZLb0ZEOWJsVVB4ODBDdFZoekNfdTNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8zZjY2NDAtNWQ4Mi00YWM2LTkzODkt
NmZmMWQ0MjdkOTcxLzEveGIxNFZLb0ZEOWJsVVB4ODBDdFZoekNfdTNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS8zZjY2NDAtNWQ4Mi00YWM2LTkzODktNmZmMWQ0MjdkOTcx
LzEveGIxNFZLb0ZEOWJsVVB4ODBDdFZoekNfdTNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAF7MTg0C
ltkxOa11cK04gvZ4APe0SPOA3sK1b73URlrbnxpw5r+O49MGIvcpvsJ0oYHYorHj
oJZ9n79iseGi9+hAdklUG8s1aHTEWZrygeSVso8oEiw4ffDrAR4zSwrfy7qaad1H
BZl23M9u79mFHF0eAa2yVAWeT2igJbYYFlhzIuTtrycuIeoYG7A1CarLoCtMC+7d
wpOnyuU95ddjRAMg5vW4eKjVLEUKkiZh/MmwqpEo9f3TG9uLz0tlZ2z2pfFzZTre
RGN9JPFLrmWvjo49OpxsKzzc3GUjbAbScogCbvqHzME2lXd2qnX9eWudEzqC6nXo
1OmJRIvrMba9Jw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:40:54 2026 by rpki-client