Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
File: _xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft (raw, json)
Hash identifier: b0vfCC8/NwR1smh3fLYImGyUWAXQy3vYa34PUHwcOnw=
Subject key identifier: 6F:05:1D:F6:D1:14:A5:05:62:E6:E1:91:C5:EA:3B:8E:E4:C1:F2:38
Authority key identifier: FF:1A:0A:75:54:38:57:03:97:4A:E1:5E:F9:47:BC:54:C0:B8:9C:95
Certificate issuer: /CN=ff1a0a7554385703974ae15ef947bc54c0b89c95
Certificate serial: 019CAC0FE113B0C9BC03A7416EDF58ECFEBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
Manifest number: 0660
Signing time: Mon 02 Mar 2026 01:00:47 +0000
Manifest this update: Mon 02 Mar 2026 01:00:47 +0000
Manifest next update: Tue 03 Mar 2026 01:00:47 +0000
Files and hashes: 1: _xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl (hash: eU+2bKXjSjxr3clynicxG7W6i8Ephm88C18c1gtjKGU=)
2: zIooxkz42P8_5ReZHQIQQDyh_E0.roa (hash: vHG8nX4oJh4/M/Rbe7SvWBLoOWc7PYioObPqt6DtUuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:e1:13:b0:c9:bc:03:a7:41:6e:df:58:ec:fe:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1a0a7554385703974ae15ef947bc54c0b89c95
Validity
Not Before: Mar 2 01:00:47 2026 GMT
Not After : Mar 3 01:00:47 2026 GMT
Subject: CN=6f051df6d114a50562e6e191c5ea3b8ee4c1f238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:64:ef:e5:90:6c:6a:94:12:3f:70:d7:f0:4b:
bd:3c:6d:90:e9:d5:ea:24:a5:b8:4e:f2:40:01:7e:
7b:5a:84:e1:17:09:8d:e1:86:1a:75:20:b0:9a:d8:
cb:70:b8:fa:f9:5c:48:19:c0:b1:20:50:9f:83:e3:
5c:b7:e6:5e:28:24:df:63:15:6c:e9:c7:f3:44:f5:
6a:f5:29:73:4d:d5:de:59:82:26:0b:00:50:eb:02:
bc:22:0e:a6:5b:29:ff:35:20:16:72:6a:41:db:44:
a7:b8:ff:d2:5e:3f:b3:12:a7:d2:99:af:a0:11:ab:
2b:6f:87:15:10:ec:37:fb:f7:66:8a:e2:63:4f:24:
ef:72:22:a6:d9:9d:e6:56:75:19:b1:9c:93:03:33:
73:6a:50:1b:2c:06:cf:5a:a9:53:de:79:f1:36:c5:
26:d0:0e:a3:ca:76:fc:42:a0:98:ea:08:84:48:33:
e1:e4:4f:ef:f9:57:1a:a3:5c:e0:3a:df:85:0c:c6:
e1:00:c5:e9:47:32:f8:87:fb:51:78:07:e0:5c:4d:
b1:bd:1a:03:d4:74:2f:8b:10:61:1a:5b:03:53:f4:
fd:4c:fb:f2:33:47:54:bd:87:e5:19:c9:43:23:cd:
05:4d:47:35:cd:9c:c9:32:0b:32:91:70:1d:ad:e4:
31:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:05:1D:F6:D1:14:A5:05:62:E6:E1:91:C5:EA:3B:8E:E4:C1:F2:38
X509v3 Authority Key Identifier:
keyid:FF:1A:0A:75:54:38:57:03:97:4A:E1:5E:F9:47:BC:54:C0:B8:9C:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:6b:fa:9d:a2:29:87:88:ae:2c:ed:1e:05:2e:1a:da:ec:43:
2f:52:34:99:60:60:2a:cb:7f:28:e8:b1:c9:ca:38:72:4e:3f:
f6:6a:0a:3b:d9:de:d7:c6:8a:f4:e0:06:85:dc:53:7d:70:ab:
96:38:e4:c5:61:d7:1d:3c:d6:5b:0c:fc:f2:3a:5d:67:6b:f2:
36:1e:0b:9a:ac:0c:a0:25:ff:1f:c3:e0:30:e2:da:b3:ae:eb:
79:74:dd:9b:28:41:7d:16:75:ca:8a:ed:06:ca:25:62:ae:db:
e4:ce:18:64:d6:74:ca:2b:cd:5d:c9:10:dc:bc:d5:cf:5a:ea:
91:8c:3a:69:e7:93:0d:d8:9b:d0:ca:9c:40:cb:4f:c7:2b:0e:
45:e3:83:6c:4b:39:0c:91:19:97:d3:ab:7f:28:d6:a6:44:3a:
32:2f:2e:8c:04:98:6c:c0:36:9e:b3:1e:de:16:6d:cf:53:6b:
9c:87:0e:de:6c:e2:f2:da:dd:ea:bd:72:87:76:15:7d:ab:e3:
21:45:3c:dc:4e:b3:4d:2e:40:36:4b:a1:9a:84:a1:ca:8e:70:
b8:54:f3:8b:21:bf:9b:d2:b7:7a:b3:79:94:b4:8b:1c:77:9d:
2e:09:c8:03:d7:07:17:dd:7e:cc:66:d2:73:b3:42:aa:0e:a9:
a4:25:2a:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysD+ETsMm8A6dBbt9Y7P6/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMWEwYTc1NTQzODU3MDM5NzRhZTE1ZWY5NDdiYzU0YzBi
ODljOTUwHhcNMjYwMzAyMDEwMDQ3WhcNMjYwMzAzMDEwMDQ3WjAzMTEwLwYDVQQD
Eyg2ZjA1MWRmNmQxMTRhNTA1NjJlNmUxOTFjNWVhM2I4ZWU0YzFmMjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmTv5ZBsapQSP3DX8Eu9PG2Q6dXq
JKW4TvJAAX57WoThFwmN4YYadSCwmtjLcLj6+VxIGcCxIFCfg+Nct+ZeKCTfYxVs
6cfzRPVq9SlzTdXeWYImCwBQ6wK8Ig6mWyn/NSAWcmpB20SnuP/SXj+zEqfSma+g
Easrb4cVEOw3+/dmiuJjTyTvciKm2Z3mVnUZsZyTAzNzalAbLAbPWqlT3nnxNsUm
0A6jynb8QqCY6giESDPh5E/v+Vcao1zgOt+FDMbhAMXpRzL4h/tReAfgXE2xvRoD
1HQvixBhGlsDU/T9TPvyM0dUvYflGclDI80FTUc1zZzJMgsykXAdreQx/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG8FHfbRFKUFYubhkcXqO47kwfI4MB8GA1UdIwQY
MBaAFP8aCnVUOFcDl0rhXvlHvFTAuJyVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3hvS2RWUTRWd09YU3VGZS1VZThWTUM0bkpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8yNjkyOTAtNTlmZi00MjMzLThmYTAt
Mjc1NTBiMjE5NTA3LzEvX3hvS2RWUTRWd09YU3VGZS1VZThWTUM0bkpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy8yNjkyOTAtNTlmZi00MjMzLThmYTAtMjc1NTBiMjE5NTA3
LzEvX3hvS2RWUTRWd09YU3VGZS1VZThWTUM0bkpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIGv6naIp
h4iuLO0eBS4a2uxDL1I0mWBgKst/KOixyco4ck4/9moKO9ne18aK9OAGhdxTfXCr
ljjkxWHXHTzWWwz88jpdZ2vyNh4LmqwMoCX/H8PgMOLas67reXTdmyhBfRZ1yort
BsolYq7b5M4YZNZ0yivNXckQ3LzVz1rqkYw6aeeTDdib0MqcQMtPxysOReODbEs5
DJEZl9OrfyjWpkQ6Mi8ujASYbMA2nrMe3hZtz1NrnIcO3mzi8trd6r1yh3YVfavj
IUU83E6zTS5ANkuhmoShyo5wuFTziyG/m9K3erN5lLSLHHedLgnIA9cHF91+zGbS
c7NCqg6ppCUq+g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:38:44 2026 by rpki-client