Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.mft
File: xT4qugUV7JDRCREGD88pI2123d8.mft (raw, json)
Hash identifier: WGtB8hG/rZtvnoWx4XXaUJHtz/yVBOctPTXQzCWtnL4=
Subject key identifier: 93:D6:48:BF:FB:68:18:60:7A:9E:2F:38:3B:08:77:22:FD:AF:1D:9E
Authority key identifier: C5:3E:2A:BA:05:15:EC:90:D1:09:11:06:0F:CF:29:23:6D:76:DD:DF
Certificate issuer: /CN=c53e2aba0515ec90d10911060fcf29236d76dddf
Certificate serial: 019CAD2275AF58DD9B50B3F10BAD846DF5F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xT4qugUV7JDRCREGD88pI2123d8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.mft
Manifest number: 0FFD
Signing time: Mon 02 Mar 2026 06:00:42 +0000
Manifest this update: Mon 02 Mar 2026 06:00:42 +0000
Manifest next update: Tue 03 Mar 2026 06:00:42 +0000
Files and hashes: 1: ub7YR9axa9vWtz1X_qFq5fbsHkk.roa (hash: JE4qOMRm4xEBU/PFIJ8QsUIFvLyYeHz3Zc+xrGXyYyQ=)
2: xT4qugUV7JDRCREGD88pI2123d8.crl (hash: opEK0XWjsUohHr+mAvvMUQPGCRsVrwxdUEy+jBptnms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xT4qugUV7JDRCREGD88pI2123d8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:75:af:58:dd:9b:50:b3:f1:0b:ad:84:6d:f5:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53e2aba0515ec90d10911060fcf29236d76dddf
Validity
Not Before: Mar 2 06:00:42 2026 GMT
Not After : Mar 3 06:00:42 2026 GMT
Subject: CN=93d648bffb6818607a9e2f383b087722fdaf1d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:5e:38:69:d3:5a:97:60:36:7a:c2:bb:f8:7c:
da:4f:50:c3:b4:b5:b7:4a:db:f6:7f:ad:1d:a9:53:
e8:d7:ee:a4:89:e5:bd:75:fb:d4:53:c2:03:ae:4a:
37:2b:11:a0:eb:ac:5a:c1:84:1c:b0:10:d6:b7:db:
f7:ca:dc:72:f0:29:72:06:5b:eb:de:11:26:de:be:
29:9d:3a:0c:98:33:bc:ed:81:1a:43:72:cd:f2:2f:
19:f2:6a:c2:51:4e:5b:21:d7:37:e0:23:26:d6:34:
5f:9c:6a:c3:30:3b:31:6a:35:c7:45:14:3b:34:f7:
06:ae:6d:63:a4:76:8d:18:95:f4:03:1c:59:c5:04:
99:34:83:b1:0b:d0:51:3f:62:e9:d0:3c:92:b0:90:
45:b8:7a:cf:37:f3:c5:6e:59:1d:85:01:17:69:93:
9a:cc:2a:f7:88:e0:c0:80:d5:45:df:fb:dc:ae:50:
16:d1:c4:45:a3:14:75:7f:5a:e5:2c:17:a4:81:88:
7d:aa:22:30:a7:29:2e:60:f6:21:db:58:9b:11:52:
71:60:c5:56:44:42:1b:55:33:bc:5f:58:19:52:61:
f1:c6:41:ee:34:74:5d:4f:71:6b:94:36:f5:53:23:
7e:59:e1:46:8e:63:0d:41:23:c7:11:8a:be:f1:d1:
04:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D6:48:BF:FB:68:18:60:7A:9E:2F:38:3B:08:77:22:FD:AF:1D:9E
X509v3 Authority Key Identifier:
keyid:C5:3E:2A:BA:05:15:EC:90:D1:09:11:06:0F:CF:29:23:6D:76:DD:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xT4qugUV7JDRCREGD88pI2123d8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:64:98:1d:ab:6e:b6:94:9f:6b:b1:e4:20:c3:82:46:a4:f5:
3a:5c:e3:ef:fe:a7:e5:b4:f9:b2:91:5a:ab:11:2f:82:a5:ba:
3e:77:87:bf:53:34:bb:fe:2a:3c:b6:26:d8:a4:0a:9f:58:ce:
bc:6a:c2:10:f3:5b:23:3b:65:f7:26:0c:26:7a:30:6d:18:cc:
d4:98:23:99:01:7b:4e:6a:f6:54:91:33:55:66:46:cb:23:b1:
d1:fd:99:d8:83:2a:5f:1c:70:9b:2e:bd:34:ac:b2:5f:3b:d0:
3e:2a:fd:bb:76:d4:6f:ef:f6:2c:d5:fa:f0:b5:be:b7:6c:2b:
a9:6c:48:0f:6f:9f:51:00:d9:0f:c1:58:2b:20:fc:db:ec:dc:
0f:d0:ec:52:ea:40:81:f0:7e:82:8f:51:24:23:8a:d9:24:83:
9f:29:2b:c0:d0:6c:c6:dc:a3:36:92:a4:54:40:c8:cf:2e:10:
cd:04:f7:1b:f4:81:fd:5e:f8:21:76:e1:31:da:b9:ce:73:5b:
c7:aa:c6:5b:9e:bf:69:2a:e3:63:4c:79:45:8b:9c:c0:b0:f0:
4c:80:ff:05:6f:18:28:5f:09:22:49:65:4c:b1:0c:25:97:36:
69:62:62:b9:84:b0:34:e9:c9:0b:14:29:4d:79:ac:73:a5:53:
15:9b:03:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytInWvWN2bULPxC62EbfX0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1M2UyYWJhMDUxNWVjOTBkMTA5MTEwNjBmY2YyOTIzNmQ3
NmRkZGYwHhcNMjYwMzAyMDYwMDQyWhcNMjYwMzAzMDYwMDQyWjAzMTEwLwYDVQQD
Eyg5M2Q2NDhiZmZiNjgxODYwN2E5ZTJmMzgzYjA4NzcyMmZkYWYxZDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5l44adNal2A2esK7+HzaT1DDtLW3
Stv2f60dqVPo1+6kieW9dfvUU8IDrko3KxGg66xawYQcsBDWt9v3ytxy8ClyBlvr
3hEm3r4pnToMmDO87YEaQ3LN8i8Z8mrCUU5bIdc34CMm1jRfnGrDMDsxajXHRRQ7
NPcGrm1jpHaNGJX0AxxZxQSZNIOxC9BRP2Lp0DySsJBFuHrPN/PFblkdhQEXaZOa
zCr3iODAgNVF3/vcrlAW0cRFoxR1f1rlLBekgYh9qiIwpykuYPYh21ibEVJxYMVW
REIbVTO8X1gZUmHxxkHuNHRdT3FrlDb1UyN+WeFGjmMNQSPHEYq+8dEEGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJPWSL/7aBhgep4vODsIdyL9rx2eMB8GA1UdIwQY
MBaAFMU+KroFFeyQ0QkRBg/PKSNtdt3fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFQ0cXVnVVY3SkRSQ1JFR0Q4OHBJMjEyM2Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85MDhhNjItZjRlMC00OTg1LTllMzQt
MTIwNTNhZGU5ZmFmLzEveFQ0cXVnVVY3SkRSQ1JFR0Q4OHBJMjEyM2Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi85MDhhNjItZjRlMC00OTg1LTllMzQtMTIwNTNhZGU5ZmFm
LzEveFQ0cXVnVVY3SkRSQ1JFR0Q4OHBJMjEyM2Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAImSYHatu
tpSfa7HkIMOCRqT1Olzj7/6n5bT5spFaqxEvgqW6PneHv1M0u/4qPLYm2KQKn1jO
vGrCEPNbIztl9yYMJnowbRjM1JgjmQF7Tmr2VJEzVWZGyyOx0f2Z2IMqXxxwmy69
NKyyXzvQPir9u3bUb+/2LNX68LW+t2wrqWxID2+fUQDZD8FYKyD82+zcD9DsUupA
gfB+go9RJCOK2SSDnykrwNBsxtyjNpKkVEDIzy4QzQT3G/SB/V74IXbhMdq5znNb
x6rGW56/aSrjY0x5RYucwLDwTID/BW8YKF8JIkllTLEMJZc2aWJiuYSwNOnJCxQp
TXmsc6VTFZsD3A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:54:07 2026 by rpki-client