Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
File: rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft (raw, json)
Hash identifier: HcHQaW5GRtrgChyxULJl8PigZnxNlFefzUAzo9bXXSY=
Subject key identifier: 72:1C:AE:F5:31:9F:9A:96:2F:E6:BB:BE:4F:F0:80:3C:9A:D0:D8:78
Authority key identifier: AF:12:1C:D6:E1:1D:A0:95:F8:56:D7:9D:EE:C4:69:D0:C6:35:84:94
Certificate issuer: /CN=af121cd6e11da095f856d79deec469d0c6358494
Certificate serial: 019CA9464320E9E6B62F4D185BDD1268C858
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
Manifest number: 1385
Signing time: Sun 01 Mar 2026 12:01:20 +0000
Manifest this update: Sun 01 Mar 2026 12:01:20 +0000
Manifest next update: Mon 02 Mar 2026 12:01:20 +0000
Files and hashes: 1: KzmoITHkJpLOR4Tlul5pobyRKM4.roa (hash: AsqRiFYDTCnKZFcWZmiW079vgPj+Gpml9bimn7NxEjY=)
2: LeESlSzWIvuQdTBNS-mk1tTyv7E.roa (hash: WD96tCmI2Z4zPrVkF6yX9hz40ljCQT+UIo7XuVxQtwE=)
3: rXLsHixYlq3Kcw9EvhZkSV4zLvI.roa (hash: xL1IzYaCYhuM2YhqoZfpmf/cRlZ3zbvhm0l28fnKcTk=)
4: rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl (hash: X+dc5DBAAZQ9ykr+F0JSSS1JcKqVTrnm1uCGm5Y8XVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:46:43:20:e9:e6:b6:2f:4d:18:5b:dd:12:68:c8:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af121cd6e11da095f856d79deec469d0c6358494
Validity
Not Before: Mar 1 12:01:20 2026 GMT
Not After : Mar 2 12:01:20 2026 GMT
Subject: CN=721caef5319f9a962fe6bbbe4ff0803c9ad0d878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:14:55:b5:c5:f0:ed:ec:5d:9d:ba:81:e1:58:
24:32:83:8e:dd:f2:9d:f8:c0:2c:02:71:ed:0c:f5:
72:17:48:1b:3b:ba:ab:0e:a7:b7:1b:91:d7:22:9d:
f8:1c:86:47:52:93:a8:fd:c6:43:73:0f:ee:97:57:
96:10:b9:00:a7:b6:6a:e7:8c:13:1f:1f:e0:05:6d:
cc:4b:9e:9e:26:a2:05:cb:ee:83:12:f2:ae:93:56:
28:c1:82:cb:ed:b5:96:7e:36:c0:1f:3c:b2:06:53:
e8:76:2c:b6:40:b8:ec:ad:44:9b:36:ab:09:a1:ca:
8e:51:f5:5d:b3:c8:6f:8f:5b:19:55:0e:45:10:94:
cc:f4:d5:b7:4c:d8:fb:b2:31:6b:94:c5:9b:b8:85:
88:9c:ec:f4:d9:44:1b:02:ea:f9:e6:57:7c:cc:79:
02:7f:ea:29:b1:de:84:25:04:7d:96:b0:c2:7d:88:
35:7c:46:3b:61:ba:b7:f7:93:f6:6d:d7:46:fc:27:
3e:5f:87:ca:d7:58:5b:ce:15:b9:b4:bb:e9:c1:3a:
8a:80:36:6b:27:19:a9:e1:8e:ee:98:28:ee:26:8c:
d5:3b:0c:a8:53:b7:af:c0:d8:49:a1:4b:ad:8c:15:
d0:a1:ef:7e:a7:e5:c4:44:40:2d:5d:21:ed:f4:df:
f9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:1C:AE:F5:31:9F:9A:96:2F:E6:BB:BE:4F:F0:80:3C:9A:D0:D8:78
X509v3 Authority Key Identifier:
keyid:AF:12:1C:D6:E1:1D:A0:95:F8:56:D7:9D:EE:C4:69:D0:C6:35:84:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:84:70:e5:f0:27:f5:e3:46:55:e9:78:32:ad:9b:d9:3e:9b:
b1:03:ee:0a:be:18:45:25:52:ef:b1:49:a4:c8:e5:1e:e2:42:
ef:2b:98:97:c6:2a:d8:42:db:2b:2f:15:e3:45:0f:9a:51:0c:
24:f8:8a:37:56:33:a1:d9:6d:be:3b:b5:fe:a8:d3:02:00:ca:
b6:fb:45:ac:70:f2:13:83:fb:22:05:df:78:f2:f1:42:a8:2f:
2e:3d:8a:91:b2:a0:cd:e3:58:38:7b:c8:b9:fb:d8:d1:b8:f7:
49:36:96:18:9a:db:2a:6a:57:44:58:4f:e2:63:56:57:6d:23:
3f:7d:ca:30:25:b5:45:27:e4:1a:98:f6:ed:99:85:fe:3e:da:
38:ae:70:b1:16:13:db:6d:f4:c1:e9:0b:cb:50:54:3d:9c:5d:
e6:7c:cb:a9:c6:91:05:21:c0:d9:0c:76:01:19:90:8c:14:25:
ec:22:2b:61:4e:2b:9b:e2:66:cb:d0:7b:09:e2:63:ae:43:ba:
39:80:ac:04:f0:fb:ae:87:12:01:38:2a:30:c1:20:2c:dd:cf:
38:6f:35:13:24:4d:2d:02:9c:5b:9a:a4:19:e2:8b:ce:68:de:
7c:99:f4:ef:ec:f4:9c:7f:f0:fb:50:35:d3:21:82:28:4e:5e:
54:82:dd:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypRkMg6ea2L00YW90SaMhYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMTIxY2Q2ZTExZGEwOTVmODU2ZDc5ZGVlYzQ2OWQwYzYz
NTg0OTQwHhcNMjYwMzAxMTIwMTIwWhcNMjYwMzAyMTIwMTIwWjAzMTEwLwYDVQQD
Eyg3MjFjYWVmNTMxOWY5YTk2MmZlNmJiYmU0ZmYwODAzYzlhZDBkODc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRRVtcXw7exdnbqB4VgkMoOO3fKd
+MAsAnHtDPVyF0gbO7qrDqe3G5HXIp34HIZHUpOo/cZDcw/ul1eWELkAp7Zq54wT
Hx/gBW3MS56eJqIFy+6DEvKuk1YowYLL7bWWfjbAHzyyBlPodiy2QLjsrUSbNqsJ
ocqOUfVds8hvj1sZVQ5FEJTM9NW3TNj7sjFrlMWbuIWInOz02UQbAur55ld8zHkC
f+opsd6EJQR9lrDCfYg1fEY7Ybq395P2bddG/Cc+X4fK11hbzhW5tLvpwTqKgDZr
Jxmp4Y7umCjuJozVOwyoU7evwNhJoUutjBXQoe9+p+XEREAtXSHt9N/54wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHIcrvUxn5qWL+a7vk/wgDya0Nh4MB8GA1UdIwQY
MBaAFK8SHNbhHaCV+FbXne7EadDGNYSUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnhJYzF1RWRvSlg0VnRlZDdzUnAwTVkxaEpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9mZDYwNjktNDE3OS00NWJlLWI4MmEt
YWYzZjc5NGFlNjA3LzEvcnhJYzF1RWRvSlg0VnRlZDdzUnAwTVkxaEpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9mZDYwNjktNDE3OS00NWJlLWI4MmEtYWYzZjc5NGFlNjA3
LzEvcnhJYzF1RWRvSlg0VnRlZDdzUnAwTVkxaEpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHoRw5fAn
9eNGVel4Mq2b2T6bsQPuCr4YRSVS77FJpMjlHuJC7yuYl8Yq2ELbKy8V40UPmlEM
JPiKN1Yzodltvju1/qjTAgDKtvtFrHDyE4P7IgXfePLxQqgvLj2KkbKgzeNYOHvI
ufvY0bj3STaWGJrbKmpXRFhP4mNWV20jP33KMCW1RSfkGpj27ZmF/j7aOK5wsRYT
2230wekLy1BUPZxd5nzLqcaRBSHA2Qx2ARmQjBQl7CIrYU4rm+Jmy9B7CeJjrkO6
OYCsBPD7rocSATgqMMEgLN3POG81EyRNLQKcW5qkGeKLzmjefJn07+z0nH/w+1A1
0yGCKE5eVILdIg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:57:30 2026 by rpki-client