Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft
File: X4rRNUEr-QQb5f0I50okEg2z7sc.mft (raw, json)
Hash identifier: 8nNYVeOlBnbn24u+uyVsk4yRTgu8CzcRrennCKNxbWU=
Subject key identifier: 62:7C:0B:E6:BA:89:3B:C4:DF:24:54:29:49:F1:9F:8A:46:77:27:E5
Authority key identifier: 5F:8A:D1:35:41:2B:F9:04:1B:E5:FD:08:E7:4A:24:12:0D:B3:EE:C7
Certificate issuer: /CN=5f8ad135412bf9041be5fd08e74a24120db3eec7
Certificate serial: 019CABD9C200F48FE7D22F30AE31CE1AC798
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4rRNUEr-QQb5f0I50okEg2z7sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft
Manifest number: 0C99
Signing time: Mon 02 Mar 2026 00:01:40 +0000
Manifest this update: Mon 02 Mar 2026 00:01:40 +0000
Manifest next update: Tue 03 Mar 2026 00:01:40 +0000
Files and hashes: 1: X4rRNUEr-QQb5f0I50okEg2z7sc.crl (hash: gRZpISrl1kaVSFpNtwus1Vw9V7X10AvOFvRy8Y+pGII=)
2: s48bE7zPFBsdxI3PwTkDcvxFl10.roa (hash: LCQZLSRk+w6NsXbM56XYTWWTkMECSvsvXOz9oSXfsiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/X4rRNUEr-QQb5f0I50okEg2z7sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:c2:00:f4:8f:e7:d2:2f:30:ae:31:ce:1a:c7:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f8ad135412bf9041be5fd08e74a24120db3eec7
Validity
Not Before: Mar 2 00:01:40 2026 GMT
Not After : Mar 3 00:01:40 2026 GMT
Subject: CN=627c0be6ba893bc4df24542949f19f8a467727e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d1:4e:e5:b6:6a:78:ce:9f:e1:41:d3:a1:ba:
1b:89:38:37:b5:1b:2f:74:d6:6d:c4:b3:97:b1:94:
21:ed:75:bf:ae:98:f1:c3:25:e1:cc:bc:d5:44:63:
8c:6d:26:e7:2b:b2:fa:94:c3:68:41:9b:35:08:2c:
45:b2:40:fb:e0:13:b8:4b:2f:d8:4d:f1:bd:2a:ab:
63:8c:94:64:27:1c:70:82:88:ea:af:4f:c5:d4:ce:
70:76:fb:71:b0:95:4b:2c:08:99:fd:43:28:ef:e0:
5a:1b:42:5c:92:32:17:ca:be:f0:21:f3:8b:68:11:
0e:78:83:fe:47:f9:bb:53:59:26:e4:91:9c:8f:93:
14:15:c5:62:ec:0c:ce:db:c6:5d:55:a2:83:13:06:
af:cb:30:5d:b6:d2:56:16:2d:a8:fa:a3:62:28:8a:
80:d2:53:f6:75:eb:f3:54:ed:12:e8:bb:f2:b8:56:
36:8b:83:ce:3b:e4:1d:8e:3d:08:d7:df:1f:77:b6:
57:71:c6:86:e1:ca:af:c8:af:02:fe:82:b8:07:3b:
ab:50:6b:72:91:e6:5d:ac:70:05:df:6d:18:05:37:
33:42:28:65:46:c8:5c:a5:af:36:23:35:b5:ba:0e:
b8:ae:ba:02:03:17:2d:78:1c:7a:b0:65:50:1d:2a:
45:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:7C:0B:E6:BA:89:3B:C4:DF:24:54:29:49:F1:9F:8A:46:77:27:E5
X509v3 Authority Key Identifier:
keyid:5F:8A:D1:35:41:2B:F9:04:1B:E5:FD:08:E7:4A:24:12:0D:B3:EE:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4rRNUEr-QQb5f0I50okEg2z7sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:c5:07:28:4f:e6:18:0f:74:52:96:1e:59:2c:bd:67:41:a8:
4e:47:90:a8:1c:db:86:0a:60:cb:81:ed:e2:7a:10:27:24:8d:
08:61:22:9b:14:c4:d5:a3:75:aa:59:95:96:2b:40:82:7a:04:
26:ae:b4:29:2b:73:18:dc:f1:04:fa:73:5f:bd:8b:3c:93:68:
79:77:1f:8f:7e:1a:fb:2f:77:78:d1:e1:88:3e:24:23:67:5e:
4a:98:69:dd:97:94:f7:4e:c1:e0:83:5e:43:8e:a0:e1:60:05:
cf:72:47:de:cb:91:61:d2:a1:38:48:ac:5f:24:68:91:e8:bc:
9a:be:fe:83:08:fe:d1:55:96:da:1c:27:24:f5:f4:0f:1f:15:
b5:94:3d:ba:c2:3b:37:3e:04:28:c4:1e:67:b0:bc:2e:63:75:
50:ea:e1:c5:45:ce:07:86:96:14:fc:62:44:20:dc:07:c9:8d:
8f:c4:a1:a1:80:b0:db:3d:fe:e3:d5:64:2a:ac:77:ae:6c:e1:
55:6e:ce:6e:9d:ff:6e:d5:b6:a9:8d:3c:e8:c0:41:c3:fd:cb:
ed:34:52:07:0c:05:22:94:d2:67:49:8e:5f:81:02:2e:01:d1:
00:38:d9:b5:21:e2:e3:57:bc:8b:1b:8c:f8:08:19:de:82:c4:
ac:39:e9:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2cIA9I/n0i8wrjHOGseYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmOGFkMTM1NDEyYmY5MDQxYmU1ZmQwOGU3NGEyNDEyMGRi
M2VlYzcwHhcNMjYwMzAyMDAwMTQwWhcNMjYwMzAzMDAwMTQwWjAzMTEwLwYDVQQD
Eyg2MjdjMGJlNmJhODkzYmM0ZGYyNDU0Mjk0OWYxOWY4YTQ2NzcyN2U1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptFO5bZqeM6f4UHTobobiTg3tRsv
dNZtxLOXsZQh7XW/rpjxwyXhzLzVRGOMbSbnK7L6lMNoQZs1CCxFskD74BO4Sy/Y
TfG9KqtjjJRkJxxwgojqr0/F1M5wdvtxsJVLLAiZ/UMo7+BaG0JckjIXyr7wIfOL
aBEOeIP+R/m7U1km5JGcj5MUFcVi7AzO28ZdVaKDEwavyzBdttJWFi2o+qNiKIqA
0lP2devzVO0S6LvyuFY2i4POO+Qdjj0I198fd7ZXccaG4cqvyK8C/oK4BzurUGty
keZdrHAF320YBTczQihlRshcpa82IzW1ug64rroCAxcteBx6sGVQHSpFhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGJ8C+a6iTvE3yRUKUnxn4pGdyflMB8GA1UdIwQY
MBaAFF+K0TVBK/kEG+X9COdKJBINs+7HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDRyUk5VRXItUVFiNWYwSTUwb2tFZzJ6N3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9lM2VmYzgtNWYxZC00ZWI4LTk3MjAt
Mzc5NzMzYWIzOGNkLzEvWDRyUk5VRXItUVFiNWYwSTUwb2tFZzJ6N3NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9lM2VmYzgtNWYxZC00ZWI4LTk3MjAtMzc5NzMzYWIzOGNk
LzEvWDRyUk5VRXItUVFiNWYwSTUwb2tFZzJ6N3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY8UHKE/m
GA90UpYeWSy9Z0GoTkeQqBzbhgpgy4Ht4noQJySNCGEimxTE1aN1qlmVlitAgnoE
Jq60KStzGNzxBPpzX72LPJNoeXcfj34a+y93eNHhiD4kI2deSphp3ZeU907B4INe
Q46g4WAFz3JH3suRYdKhOEisXyRokei8mr7+gwj+0VWW2hwnJPX0Dx8VtZQ9usI7
Nz4EKMQeZ7C8LmN1UOrhxUXOB4aWFPxiRCDcB8mNj8ShoYCw2z3+49VkKqx3rmzh
VW7Obp3/btW2qY086MBBw/3L7TRSBwwFIpTSZ0mOX4ECLgHRADjZtSHi41e8ixuM
+AgZ3oLErDnpGg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:05:55 2026 by rpki-client