Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/b2598f-0631-4b5a-afe5-5ad9864532a7/1/xC4WYonhwfw6mLVFQLzHMUbXSII.mft
File: xC4WYonhwfw6mLVFQLzHMUbXSII.mft (raw, json)
Hash identifier: HjqRXS6J6DUjzwAW5XPaaWbJgyNJ+xAgLXiqMYEgxMU=
Subject key identifier: D3:90:5D:E0:6B:DE:D9:BA:5D:29:64:37:F0:56:07:AE:41:3A:49:2C
Authority key identifier: C4:2E:16:62:89:E1:C1:FC:3A:98:B5:45:40:BC:C7:31:46:D7:48:82
Certificate issuer: /CN=c42e166289e1c1fc3a98b54540bcc73146d74882
Certificate serial: 019CB02418601F138B01110D7FC2B85F293C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xC4WYonhwfw6mLVFQLzHMUbXSII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/b2598f-0631-4b5a-afe5-5ad9864532a7/1/xC4WYonhwfw6mLVFQLzHMUbXSII.mft
Manifest number: 48
Signing time: Mon 02 Mar 2026 20:01:21 +0000
Manifest this update: Mon 02 Mar 2026 20:01:21 +0000
Manifest next update: Tue 03 Mar 2026 20:01:21 +0000
Files and hashes: 1: a5S2srHSsVmy5QkfkP_kc6cHShI.roa (hash: ci+zS+UEhLvr/I+Sc8XYpFmTIebXAv14ygCxwUbUvI8=)
2: xC4WYonhwfw6mLVFQLzHMUbXSII.crl (hash: jDc6Re78uroIi/0GSEFnTeQdg/bQzx7VOq2DuVp04fk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/b2598f-0631-4b5a-afe5-5ad9864532a7/1/xC4WYonhwfw6mLVFQLzHMUbXSII.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/b2598f-0631-4b5a-afe5-5ad9864532a7/1/xC4WYonhwfw6mLVFQLzHMUbXSII.mft
rsync://rpki.ripe.net/repository/DEFAULT/xC4WYonhwfw6mLVFQLzHMUbXSII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 20:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:24:18:60:1f:13:8b:01:11:0d:7f:c2:b8:5f:29:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42e166289e1c1fc3a98b54540bcc73146d74882
Validity
Not Before: Mar 2 20:01:21 2026 GMT
Not After : Mar 3 20:01:21 2026 GMT
Subject: CN=d3905de06bded9ba5d296437f05607ae413a492c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:20:9c:ac:e2:cf:91:80:9b:f7:8b:67:8e:34:
ce:fb:87:81:42:35:9a:96:33:82:28:22:f9:10:bd:
a6:08:c0:72:3e:c5:4e:0e:5b:54:59:22:ed:0c:30:
c0:39:1d:6a:a5:6f:04:13:11:d9:4e:f1:c9:d3:9e:
b6:d6:cd:ed:fb:f9:ce:8a:d7:83:4a:a1:04:b9:f5:
79:b2:1a:92:d8:8e:fb:da:fd:6d:cc:33:01:22:76:
d5:8d:9b:ff:e5:d7:7a:88:2c:14:0c:e2:0a:93:47:
85:1a:7a:1b:5e:bd:f4:b7:a5:96:7a:14:32:50:17:
7f:ce:a6:f8:2a:98:6d:11:e4:f7:00:28:29:3b:ab:
78:a5:37:2e:c5:c2:63:4b:9f:b9:24:ee:f1:d8:00:
14:22:a6:bc:e4:be:f9:67:e2:ab:6e:5f:45:3c:03:
ea:57:ed:76:e5:61:58:d4:02:5a:38:55:50:e8:c4:
7c:a8:7b:fa:e8:7d:40:7b:0f:77:ad:37:d3:23:82:
0a:0e:42:80:50:5a:da:c7:55:4a:ad:5e:a4:9d:d2:
5c:f2:c9:d5:36:1c:6e:73:22:37:70:57:60:dc:84:
33:90:83:b6:13:92:4a:fe:1c:01:7c:f4:83:e3:2d:
73:a1:16:2f:fd:9d:f4:ac:11:5d:ac:90:1b:70:02:
8f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:90:5D:E0:6B:DE:D9:BA:5D:29:64:37:F0:56:07:AE:41:3A:49:2C
X509v3 Authority Key Identifier:
keyid:C4:2E:16:62:89:E1:C1:FC:3A:98:B5:45:40:BC:C7:31:46:D7:48:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xC4WYonhwfw6mLVFQLzHMUbXSII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b2598f-0631-4b5a-afe5-5ad9864532a7/1/xC4WYonhwfw6mLVFQLzHMUbXSII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b2598f-0631-4b5a-afe5-5ad9864532a7/1/xC4WYonhwfw6mLVFQLzHMUbXSII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:c1:f0:8d:f2:3c:a8:40:e4:05:a3:bd:82:f5:26:2b:80:28:
c9:dc:e7:2f:65:25:cf:d3:06:00:14:b2:21:ea:00:cd:c9:9b:
c0:b9:86:0b:7a:4a:2a:8f:cd:e6:78:9d:a9:4a:2d:a0:5b:6d:
43:fd:65:bc:ea:88:d3:4c:fb:83:e3:b1:49:86:db:8b:ef:41:
c8:7c:ea:1a:59:d3:96:4e:d9:84:d8:fc:92:98:df:9e:ad:23:
9f:58:78:61:7d:e8:50:ae:57:92:2c:46:7b:06:51:d3:e2:44:
8a:a5:b5:74:7b:ff:59:e3:f2:b0:be:e2:a4:1a:c6:f5:8d:46:
f1:e5:3f:ff:09:e3:28:af:0a:b8:96:aa:28:84:43:fc:f6:06:
42:d3:d0:8b:ad:5d:2d:91:6a:8e:17:8b:a2:b1:ed:1b:e6:27:
63:b8:c3:1a:b8:c1:73:e6:22:fa:aa:eb:45:ef:29:a5:96:f8:
5c:3f:65:ff:20:44:6d:a0:7b:f1:fa:5f:14:8a:8d:38:a8:3d:
38:38:7c:f7:c3:c5:14:a8:1d:f8:47:5d:24:58:20:6b:8b:c3:
8f:11:43:4f:5b:ba:17:b2:b3:d7:94:11:ba:ef:65:82:36:21:
e0:b2:47:9b:37:3e:2f:3d:36:06:d2:6d:8b:cf:90:12:4e:a9:
29:fb:47:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZywJBhgHxOLARENf8K4Xyk8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0MmUxNjYyODllMWMxZmMzYTk4YjU0NTQwYmNjNzMxNDZk
NzQ4ODIwHhcNMjYwMzAyMjAwMTIxWhcNMjYwMzAzMjAwMTIxWjAzMTEwLwYDVQQD
EyhkMzkwNWRlMDZiZGVkOWJhNWQyOTY0MzdmMDU2MDdhZTQxM2E0OTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiCcrOLPkYCb94tnjjTO+4eBQjWa
ljOCKCL5EL2mCMByPsVODltUWSLtDDDAOR1qpW8EExHZTvHJ05621s3t+/nOiteD
SqEEufV5shqS2I772v1tzDMBInbVjZv/5dd6iCwUDOIKk0eFGnobXr30t6WWehQy
UBd/zqb4KphtEeT3ACgpO6t4pTcuxcJjS5+5JO7x2AAUIqa85L75Z+Krbl9FPAPq
V+125WFY1AJaOFVQ6MR8qHv66H1Aew93rTfTI4IKDkKAUFrax1VKrV6kndJc8snV
NhxucyI3cFdg3IQzkIO2E5JK/hwBfPSD4y1zoRYv/Z30rBFdrJAbcAKPewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNOQXeBr3tm6XSlkN/BWB65BOkksMB8GA1UdIwQY
MBaAFMQuFmKJ4cH8Opi1RUC8xzFG10iCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEM0V1lvbmh3Znc2bUxWRlFMekhNVWJYU0lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9iMjU5OGYtMDYzMS00YjVhLWFmZTUt
NWFkOTg2NDUzMmE3LzEveEM0V1lvbmh3Znc2bUxWRlFMekhNVWJYU0lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9iMjU5OGYtMDYzMS00YjVhLWFmZTUtNWFkOTg2NDUzMmE3
LzEveEM0V1lvbmh3Znc2bUxWRlFMekhNVWJYU0lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABcHwjfI8
qEDkBaO9gvUmK4AoydznL2Ulz9MGABSyIeoAzcmbwLmGC3pKKo/N5nidqUotoFtt
Q/1lvOqI00z7g+OxSYbbi+9ByHzqGlnTlk7ZhNj8kpjfnq0jn1h4YX3oUK5XkixG
ewZR0+JEiqW1dHv/WePysL7ipBrG9Y1G8eU//wnjKK8KuJaqKIRD/PYGQtPQi61d
LZFqjheLorHtG+YnY7jDGrjBc+Yi+qrrRe8ppZb4XD9l/yBEbaB78fpfFIqNOKg9
ODh898PFFKgd+EddJFgga4vDjxFDT1u6F7Kz15QRuu9lgjYh4LJHmzc+Lz02BtJt
i8+QEk6pKftHLQ==
-----END CERTIFICATE-----
Generated at Tue Mar 3 01:56:29 2026 by rpki-client