Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
File: XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft (raw, json)
Hash identifier: vvjY6TseSOyoWEhjMYDEeSz9VSr0OJPPKFPitLYuTGI=
Subject key identifier: B8:8E:38:68:F9:69:42:0A:57:14:D4:03:C7:5A:2B:25:82:71:49:C8
Authority key identifier: 5E:42:C3:56:12:F4:5A:F4:11:03:52:0A:F2:76:1C:DA:A5:1E:3A:A4
Certificate issuer: /CN=5e42c35612f45af41103520af2761cdaa51e3aa4
Certificate serial: 019CAD9083FABC4EDB4FA87EF97B3C84D5AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
Manifest number: 1746
Signing time: Mon 02 Mar 2026 08:00:55 +0000
Manifest this update: Mon 02 Mar 2026 08:00:55 +0000
Manifest next update: Tue 03 Mar 2026 08:00:55 +0000
Files and hashes: 1: XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl (hash: BOQ9YZcgp+/drJaZKRUD0RE2FzkK773U14HmU5LNojk=)
2: kk41E9wK0dMNp3UzVD82jZ-Xu_A.roa (hash: uelRjQS+f/j8WooWIB3/Gzm3JA/8BAj3iz0X2FN7kXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:83:fa:bc:4e:db:4f:a8:7e:f9:7b:3c:84:d5:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e42c35612f45af41103520af2761cdaa51e3aa4
Validity
Not Before: Mar 2 08:00:55 2026 GMT
Not After : Mar 3 08:00:55 2026 GMT
Subject: CN=b88e3868f969420a5714d403c75a2b25827149c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9a:7c:67:c6:2a:c4:81:6f:2c:b9:cb:ed:c9:
41:f5:07:ec:ee:e8:11:31:5d:0b:70:77:41:1d:07:
52:5b:23:c8:ec:2a:e8:c1:6f:2a:0e:2a:a6:1e:d8:
4e:84:c0:05:5f:ce:5a:46:bc:13:0f:c9:7e:80:cb:
ad:0e:da:d7:5c:3b:a1:f1:68:d3:0c:52:92:37:76:
05:e2:f0:dc:bd:ae:cf:65:bc:ca:d8:c9:1a:c7:84:
6f:e4:cf:b6:01:99:ce:fc:c0:84:ef:26:11:5a:50:
e2:18:64:63:69:68:83:50:b3:62:1b:0b:4f:e8:cb:
e3:a6:28:ae:8c:86:73:c7:e9:7e:93:f1:4c:59:c0:
a8:e5:61:a5:8b:33:24:04:e9:c4:70:f7:b3:da:c5:
4f:95:61:55:bd:50:24:dc:ce:bf:09:96:44:98:fc:
17:98:ea:37:26:f7:c8:cc:d8:44:95:23:ae:5d:ac:
61:1c:36:96:9a:12:92:99:52:01:f3:8c:03:53:9a:
e7:32:f8:af:5d:01:4d:4e:9d:8e:f7:e3:79:7d:fc:
ad:8e:99:80:af:04:17:58:2c:b4:42:ee:1f:11:81:
36:bb:e5:21:71:91:36:43:78:37:5d:73:d7:cf:00:
c0:38:b0:33:5f:10:f0:5b:d4:53:e3:fa:d4:ff:11:
61:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:8E:38:68:F9:69:42:0A:57:14:D4:03:C7:5A:2B:25:82:71:49:C8
X509v3 Authority Key Identifier:
keyid:5E:42:C3:56:12:F4:5A:F4:11:03:52:0A:F2:76:1C:DA:A5:1E:3A:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:5c:dc:f3:ca:aa:04:3b:c8:a5:e7:80:57:78:5b:c7:ed:e1:
70:bc:93:89:3e:03:2b:07:a3:a8:6e:51:10:68:29:bf:b8:78:
03:95:e3:22:40:34:0d:ac:6a:aa:8b:0c:d9:3f:bd:74:64:c2:
95:70:59:b6:6e:a1:22:e9:ab:82:f3:50:cf:34:c8:b8:de:9b:
5d:07:51:be:0c:ec:78:f7:20:1a:8f:d2:8d:e6:98:7a:d6:f7:
47:b5:4a:b2:d1:36:2c:2b:a4:db:fc:57:70:de:30:c1:de:f7:
06:74:ae:da:77:7b:1f:f3:68:e6:d1:f9:67:10:7c:78:2f:29:
f5:34:19:51:d0:d7:fc:e6:f5:2a:79:e0:e7:89:d4:83:05:3a:
fc:4c:f8:93:e7:89:0b:c5:c0:0f:02:64:67:72:09:97:6c:00:
1d:e0:2d:3e:12:6d:a8:59:e5:28:68:e0:a5:72:92:1c:63:d3:
df:66:d8:3d:be:30:d2:71:87:8b:95:a3:73:21:e7:81:92:a3:
04:5c:fe:08:6c:46:17:e4:44:91:68:73:93:e8:be:4c:a4:88:
97:bd:8a:44:2e:ac:c6:9a:9b:a2:e1:91:cb:2d:18:24:35:ec:
3f:eb:ad:cb:ae:82:14:7f:28:a6:05:41:9e:dc:be:87:af:f2:
78:9e:9e:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytkIP6vE7bT6h++Xs8hNWvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNDJjMzU2MTJmNDVhZjQxMTAzNTIwYWYyNzYxY2RhYTUx
ZTNhYTQwHhcNMjYwMzAyMDgwMDU1WhcNMjYwMzAzMDgwMDU1WjAzMTEwLwYDVQQD
EyhiODhlMzg2OGY5Njk0MjBhNTcxNGQ0MDNjNzVhMmIyNTgyNzE0OWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Zp8Z8YqxIFvLLnL7clB9Qfs7ugR
MV0LcHdBHQdSWyPI7CrowW8qDiqmHthOhMAFX85aRrwTD8l+gMutDtrXXDuh8WjT
DFKSN3YF4vDcva7PZbzK2Mkax4Rv5M+2AZnO/MCE7yYRWlDiGGRjaWiDULNiGwtP
6MvjpiiujIZzx+l+k/FMWcCo5WGlizMkBOnEcPez2sVPlWFVvVAk3M6/CZZEmPwX
mOo3JvfIzNhElSOuXaxhHDaWmhKSmVIB84wDU5rnMvivXQFNTp2O9+N5ffytjpmA
rwQXWCy0Qu4fEYE2u+UhcZE2Q3g3XXPXzwDAOLAzXxDwW9RT4/rU/xFhlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLiOOGj5aUIKVxTUA8daKyWCcUnIMB8GA1UdIwQY
MBaAFF5Cw1YS9Fr0EQNSCvJ2HNqlHjqkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGtMRFZoTDBXdlFSQTFJSzhuWWMycVVlT3FRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC82NzQ0OTYtOTdiZC00ZWIwLWE4ODYt
ODIxMTk5NzhkNmJiLzEvWGtMRFZoTDBXdlFSQTFJSzhuWWMycVVlT3FRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC82NzQ0OTYtOTdiZC00ZWIwLWE4ODYtODIxMTk5NzhkNmJi
LzEvWGtMRFZoTDBXdlFSQTFJSzhuWWMycVVlT3FRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAglzc88qq
BDvIpeeAV3hbx+3hcLyTiT4DKwejqG5REGgpv7h4A5XjIkA0DaxqqosM2T+9dGTC
lXBZtm6hIumrgvNQzzTIuN6bXQdRvgzsePcgGo/SjeaYetb3R7VKstE2LCuk2/xX
cN4wwd73BnSu2nd7H/No5tH5ZxB8eC8p9TQZUdDX/Ob1Knng54nUgwU6/Ez4k+eJ
C8XADwJkZ3IJl2wAHeAtPhJtqFnlKGjgpXKSHGPT32bYPb4w0nGHi5WjcyHngZKj
BFz+CGxGF+REkWhzk+i+TKSIl72KRC6sxpqbouGRyy0YJDXsP+uty66CFH8opgVB
nty+h6/yeJ6eyw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:54:50 2026 by rpki-client