Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/d71ef8-4b98-400a-89ee-c61bf7749df5/1/XEXOsYsUpzcoK3WvC6Fs_9emq64.mft
File: XEXOsYsUpzcoK3WvC6Fs_9emq64.mft (raw, json)
Hash identifier: pookkq2qF+hHZJalDfdHlLLiFjqePca9lZ0Pga59xpI=
Subject key identifier: AC:A5:0C:B7:7B:A6:8B:D8:82:A9:F3:6A:CA:83:A6:54:81:74:EE:76
Authority key identifier: 5C:45:CE:B1:8B:14:A7:37:28:2B:75:AF:0B:A1:6C:FF:D7:A6:AB:AE
Certificate issuer: /CN=5c45ceb18b14a737282b75af0ba16cffd7a6abae
Certificate serial: 019CAAFD0E04CE37A1312B18F69C804229AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEXOsYsUpzcoK3WvC6Fs_9emq64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/d71ef8-4b98-400a-89ee-c61bf7749df5/1/XEXOsYsUpzcoK3WvC6Fs_9emq64.mft
Manifest number: 0EDE
Signing time: Sun 01 Mar 2026 20:00:36 +0000
Manifest this update: Sun 01 Mar 2026 20:00:36 +0000
Manifest next update: Mon 02 Mar 2026 20:00:36 +0000
Files and hashes: 1: XEXOsYsUpzcoK3WvC6Fs_9emq64.crl (hash: Nm0nRswvKKszXMaWt/O0CbDT3Dwvj/uel0ULFWnX0nw=)
2: eBNuMo07R9Rok08GU5ID6cj0SjA.roa (hash: j6Q0bMuqq65JKWtLWZGUVMSHVDu2JJZS79yRoP4Slq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/d71ef8-4b98-400a-89ee-c61bf7749df5/1/XEXOsYsUpzcoK3WvC6Fs_9emq64.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/d71ef8-4b98-400a-89ee-c61bf7749df5/1/XEXOsYsUpzcoK3WvC6Fs_9emq64.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEXOsYsUpzcoK3WvC6Fs_9emq64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:0e:04:ce:37:a1:31:2b:18:f6:9c:80:42:29:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c45ceb18b14a737282b75af0ba16cffd7a6abae
Validity
Not Before: Mar 1 20:00:36 2026 GMT
Not After : Mar 2 20:00:36 2026 GMT
Subject: CN=aca50cb77ba68bd882a9f36aca83a6548174ee76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ea:c8:5c:44:5f:80:13:d5:03:56:a7:ee:a2:
79:cd:8d:f4:40:b4:9e:64:13:48:f9:11:ac:58:01:
94:30:e0:6f:c6:eb:b8:41:fc:42:64:87:07:71:1a:
a8:d3:28:b3:b2:51:71:e3:45:70:aa:7b:26:7a:60:
ee:15:c3:69:11:86:e1:22:af:73:dd:67:68:2e:db:
5d:bc:a3:e3:79:eb:f2:94:7a:91:89:18:e9:fe:19:
09:a3:98:21:02:41:a5:b9:0b:c5:2f:9d:ea:ab:a5:
ae:1c:42:90:00:db:c7:3e:05:41:0c:10:9e:12:2e:
69:ba:a2:34:5d:71:bc:5a:b2:74:88:a3:7a:e7:82:
b1:94:f8:7b:51:f4:90:06:f3:e4:40:dd:d3:c8:65:
93:ea:e1:d1:e4:b9:75:40:26:4d:92:42:bd:39:1f:
0f:16:6e:fc:1e:15:9e:74:a2:95:19:56:0a:43:a4:
1c:d8:ad:74:db:0f:2b:4c:13:b1:d4:16:06:27:11:
0c:ab:a8:9b:02:85:e7:09:d8:61:28:7c:75:b5:d7:
97:18:cf:c1:97:21:b1:cb:74:3b:10:fd:29:26:63:
99:be:6b:5e:c6:85:b1:03:5a:ed:3d:de:67:42:be:
bf:5d:e4:89:db:c7:fd:37:c8:4a:18:79:bb:14:f6:
e3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A5:0C:B7:7B:A6:8B:D8:82:A9:F3:6A:CA:83:A6:54:81:74:EE:76
X509v3 Authority Key Identifier:
keyid:5C:45:CE:B1:8B:14:A7:37:28:2B:75:AF:0B:A1:6C:FF:D7:A6:AB:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEXOsYsUpzcoK3WvC6Fs_9emq64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d71ef8-4b98-400a-89ee-c61bf7749df5/1/XEXOsYsUpzcoK3WvC6Fs_9emq64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d71ef8-4b98-400a-89ee-c61bf7749df5/1/XEXOsYsUpzcoK3WvC6Fs_9emq64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:97:95:6e:1b:39:50:8c:6f:0e:20:4c:61:53:1b:87:b0:e7:
98:24:34:a4:7c:14:c8:b5:7a:f1:a1:3c:81:a7:26:21:05:ac:
5c:44:9b:23:1c:31:3b:8f:dd:a5:c8:9b:b5:d7:d3:c9:3a:14:
2e:33:f1:c5:24:2d:2d:21:0c:31:82:41:bb:63:16:0a:5b:9a:
87:df:1e:68:f8:b9:44:c8:71:12:9d:a1:38:4d:4a:d4:e2:e5:
e2:44:62:b8:1b:22:74:f9:d9:46:21:ee:b1:f3:87:d7:6d:e9:
bd:4b:7d:07:79:61:c1:9b:fe:e1:05:2f:42:9b:46:2d:88:82:
2e:9f:1c:19:44:3b:10:f1:dc:0a:7e:62:97:2e:6e:1a:73:76:
2b:28:37:e7:d2:09:59:b3:48:72:96:44:82:5c:6d:42:92:e1:
57:b0:1b:25:54:6e:1c:da:85:5c:71:00:25:6f:1a:71:4d:40:
94:5c:75:18:30:d0:e0:9a:27:0a:ff:dc:fb:24:f7:24:57:2e:
4e:8c:8e:cd:b8:86:3d:a8:04:dd:27:52:d3:86:f9:3d:6c:41:
83:2d:5c:4c:d0:06:f8:e8:82:ff:e6:1a:1d:c2:9c:d7:47:1e:
4f:2e:67:82:1e:02:af:fd:fd:5f:dd:6f:c1:c5:99:c1:d8:37:
cc:80:31:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/Q4EzjehMSsY9pyAQimqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNDVjZWIxOGIxNGE3MzcyODJiNzVhZjBiYTE2Y2ZmZDdh
NmFiYWUwHhcNMjYwMzAxMjAwMDM2WhcNMjYwMzAyMjAwMDM2WjAzMTEwLwYDVQQD
EyhhY2E1MGNiNzdiYTY4YmQ4ODJhOWYzNmFjYTgzYTY1NDgxNzRlZTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAserIXERfgBPVA1an7qJ5zY30QLSe
ZBNI+RGsWAGUMOBvxuu4QfxCZIcHcRqo0yizslFx40VwqnsmemDuFcNpEYbhIq9z
3WdoLttdvKPjeevylHqRiRjp/hkJo5ghAkGluQvFL53qq6WuHEKQANvHPgVBDBCe
Ei5puqI0XXG8WrJ0iKN654KxlPh7UfSQBvPkQN3TyGWT6uHR5Ll1QCZNkkK9OR8P
Fm78HhWedKKVGVYKQ6Qc2K102w8rTBOx1BYGJxEMq6ibAoXnCdhhKHx1tdeXGM/B
lyGxy3Q7EP0pJmOZvmtexoWxA1rtPd5nQr6/XeSJ28f9N8hKGHm7FPbjEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKylDLd7povYgqnzasqDplSBdO52MB8GA1UdIwQY
MBaAFFxFzrGLFKc3KCt1rwuhbP/XpquuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEVYT3NZc1VwemNvSzNXdkM2RnNfOWVtcTY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9kNzFlZjgtNGI5OC00MDBhLTg5ZWUt
YzYxYmY3NzQ5ZGY1LzEvWEVYT3NZc1VwemNvSzNXdkM2RnNfOWVtcTY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9kNzFlZjgtNGI5OC00MDBhLTg5ZWUtYzYxYmY3NzQ5ZGY1
LzEvWEVYT3NZc1VwemNvSzNXdkM2RnNfOWVtcTY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAapeVbhs5
UIxvDiBMYVMbh7DnmCQ0pHwUyLV68aE8gacmIQWsXESbIxwxO4/dpcibtdfTyToU
LjPxxSQtLSEMMYJBu2MWCluah98eaPi5RMhxEp2hOE1K1OLl4kRiuBsidPnZRiHu
sfOH123pvUt9B3lhwZv+4QUvQptGLYiCLp8cGUQ7EPHcCn5ily5uGnN2Kyg359IJ
WbNIcpZEglxtQpLhV7AbJVRuHNqFXHEAJW8acU1AlFx1GDDQ4JonCv/c+yT3JFcu
ToyOzbiGPagE3SdS04b5PWxBgy1cTNAG+OiC/+YaHcKc10ceTy5ngh4Cr/39X91v
wcWZwdg3zIAxVQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:42:42 2026 by rpki-client