Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
File: xhKt-r-RXfMxmJNYCM8N-XONyoc.mft (raw, json)
Hash identifier: mDYRFFclsb0ndwwb+Iq71wB9CVtbc5JeqNjqoYT9kNc=
Subject key identifier: 00:E9:5F:5F:81:EE:C5:25:10:73:08:1C:30:D0:AB:11:3D:50:15:B9
Authority key identifier: C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87
Certificate issuer: /CN=c612adfabf915df33198935808cf0df9738dca87
Certificate serial: 019CAEDA0828DE32F3C2732EEC097F44216D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
Manifest number: 184B
Signing time: Mon 02 Mar 2026 14:00:50 +0000
Manifest this update: Mon 02 Mar 2026 14:00:50 +0000
Manifest next update: Tue 03 Mar 2026 14:00:50 +0000
Files and hashes: 1: 8bjq5CLAkMYnJtGthdYrockLCPY.roa (hash: eDG4zg9ilYUKjh0gJA5+ITJl6INuXH1V6df209hapIs=)
2: xhKt-r-RXfMxmJNYCM8N-XONyoc.crl (hash: NRG+L6elujse6raYZk913C4MHBN+QJNbdlRAegcil8c=)
3: y6q-4aOfHflX0pozAnd7z21SiEw.roa (hash: BNrcMKA3+AgY/9eYfHPZuG3AM/va4c4zSTiZb/uHiLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:da:08:28:de:32:f3:c2:73:2e:ec:09:7f:44:21:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c612adfabf915df33198935808cf0df9738dca87
Validity
Not Before: Mar 2 14:00:50 2026 GMT
Not After : Mar 3 14:00:50 2026 GMT
Subject: CN=00e95f5f81eec5251073081c30d0ab113d5015b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:30:ea:69:a7:84:8d:22:93:77:c5:7a:e7:83:
f8:d4:e6:4e:55:ff:ca:79:e2:99:d7:37:02:6c:7a:
0d:46:0c:63:89:12:3c:bd:ea:c4:74:df:99:5b:38:
3c:98:1c:70:88:9a:cd:e8:60:e9:ca:e4:10:98:52:
be:70:0f:03:b1:f0:ff:6d:53:31:59:13:cd:43:a5:
29:8a:e4:c4:45:00:eb:43:67:ab:1a:46:1d:de:c7:
8b:30:c7:19:f4:98:95:cd:56:4b:f5:3b:eb:ff:eb:
18:a3:54:a5:9c:6f:0b:94:23:b2:68:32:53:67:2f:
db:ba:63:ee:ef:57:15:4e:26:3f:db:0a:6d:5f:09:
1a:11:e6:32:a3:b0:6b:09:46:e8:01:e9:b5:6f:e3:
11:2e:50:4c:28:e7:2a:b7:1b:19:7a:81:60:bc:d2:
d0:75:0c:a5:d0:07:0e:9f:45:62:35:be:90:b8:08:
e4:ae:e7:f9:99:9b:e5:4c:66:ba:f4:eb:7a:9f:77:
77:0c:87:f4:7e:b0:84:30:6b:8c:ce:bd:5d:b1:fd:
e5:2c:c7:aa:e2:e1:10:41:74:13:ad:51:3c:42:0d:
e9:e6:c1:27:8d:5c:06:45:7c:f7:7b:83:02:e9:71:
a1:72:5a:6a:52:03:00:31:51:e7:71:f7:f6:e7:c3:
09:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E9:5F:5F:81:EE:C5:25:10:73:08:1C:30:D0:AB:11:3D:50:15:B9
X509v3 Authority Key Identifier:
keyid:C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ff:b0:ae:78:d8:23:1e:8d:77:58:21:cb:ed:b8:b2:5f:c9:
cc:d0:7a:71:87:ac:a5:ca:02:18:2b:9b:79:a1:e5:09:cc:da:
fa:9c:65:9e:50:18:de:ac:6c:97:bf:85:f6:4a:99:7b:32:2d:
e9:17:b7:94:f0:63:3f:3a:bc:a3:e5:47:6c:3f:a3:9b:30:71:
a6:f4:ea:64:3f:a5:3d:34:83:a7:b2:0e:b9:56:a2:ae:11:f0:
cd:bf:2f:30:83:9c:8e:01:dc:b3:30:45:ac:d9:9d:4f:17:37:
c9:c4:8b:07:6b:0a:ba:80:92:92:92:62:a4:71:d8:9f:f5:28:
b6:24:93:4a:e4:59:58:50:dd:b2:e3:50:e4:47:50:e3:b2:9a:
ce:22:07:ab:8b:ed:52:94:f6:73:fa:bd:d9:9b:f2:1e:07:23:
2a:49:f7:6b:c4:83:38:67:8f:18:d3:94:d2:f7:a7:96:6f:83:
1b:eb:3a:45:3a:d8:45:5f:c9:47:d5:5c:e5:3f:01:cc:ff:e0:
73:40:a1:c2:0b:f0:92:39:aa:16:2a:fb:95:9f:a8:0d:bd:14:
a2:d6:c3:44:bc:20:bd:b3:0c:06:58:bb:b8:91:4a:fe:07:7b:
83:6d:9a:8a:a1:6a:9e:31:5b:74:b1:76:26:0a:98:8d:60:02:
4a:ed:e0:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyu2ggo3jLzwnMu7Al/RCFtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTJhZGZhYmY5MTVkZjMzMTk4OTM1ODA4Y2YwZGY5NzM4
ZGNhODcwHhcNMjYwMzAyMTQwMDUwWhcNMjYwMzAzMTQwMDUwWjAzMTEwLwYDVQQD
EygwMGU5NWY1ZjgxZWVjNTI1MTA3MzA4MWMzMGQwYWIxMTNkNTAxNWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjDqaaeEjSKTd8V654P41OZOVf/K
eeKZ1zcCbHoNRgxjiRI8verEdN+ZWzg8mBxwiJrN6GDpyuQQmFK+cA8DsfD/bVMx
WRPNQ6UpiuTERQDrQ2erGkYd3seLMMcZ9JiVzVZL9Tvr/+sYo1SlnG8LlCOyaDJT
Zy/bumPu71cVTiY/2wptXwkaEeYyo7BrCUboAem1b+MRLlBMKOcqtxsZeoFgvNLQ
dQyl0AcOn0ViNb6QuAjkruf5mZvlTGa69Ot6n3d3DIf0frCEMGuMzr1dsf3lLMeq
4uEQQXQTrVE8Qg3p5sEnjVwGRXz3e4MC6XGhclpqUgMAMVHncff258MJewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFADpX1+B7sUlEHMIHDDQqxE9UBW5MB8GA1UdIwQY
MBaAFMYSrfq/kV3zMZiTWAjPDflzjcqHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhLdC1yLVJYZk14bUpOWUNNOE4tWE9OeW9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zMGFiMTgtZDM3OS00YWM3LWE5MDgt
ODFhNDZmNGY2ZDVhLzEveGhLdC1yLVJYZk14bUpOWUNNOE4tWE9OeW9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8zMGFiMTgtZDM3OS00YWM3LWE5MDgtODFhNDZmNGY2ZDVh
LzEveGhLdC1yLVJYZk14bUpOWUNNOE4tWE9OeW9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO/+wrnjY
Ix6Nd1ghy+24sl/JzNB6cYespcoCGCubeaHlCcza+pxlnlAY3qxsl7+F9kqZezIt
6Re3lPBjPzq8o+VHbD+jmzBxpvTqZD+lPTSDp7IOuVairhHwzb8vMIOcjgHcszBF
rNmdTxc3ycSLB2sKuoCSkpJipHHYn/UotiSTSuRZWFDdsuNQ5EdQ47KaziIHq4vt
UpT2c/q92ZvyHgcjKkn3a8SDOGePGNOU0venlm+DG+s6RTrYRV/JR9Vc5T8BzP/g
c0ChwgvwkjmqFir7lZ+oDb0UotbDRLwgvbMMBli7uJFK/gd7g22aiqFqnjFbdLF2
JgqYjWACSu3gbQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:50:57 2026 by rpki-client