Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
File: XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft (raw, json)
Hash identifier: lTixYb+TNRDAYvjbteK2rDv6XfiW8lPTgHZRxoBUMnw=
Subject key identifier: 77:BD:3E:04:A6:F1:FB:02:88:A0:A5:FA:B6:1E:47:2D:D1:8C:23:63
Authority key identifier: 5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
Certificate issuer: /CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
Certificate serial: 019CABD9E9FA341578BB99FD1D8EA608518C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
Manifest number: 0B11
Signing time: Mon 02 Mar 2026 00:01:50 +0000
Manifest this update: Mon 02 Mar 2026 00:01:50 +0000
Manifest next update: Tue 03 Mar 2026 00:01:50 +0000
Files and hashes: 1: MXmi4elQgkZloOXKc5KxZJXFILw.roa (hash: 4eGKiA6fp/86boDwfJeXXyGqjfCWRwxGmH0ShZjDAuQ=)
2: XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl (hash: dgy6vzrMt/ehpjv6r2iZeMH+OV+EM0nI1uTNVrhk6BY=)
3: taZbUsGibT55ZZu6Th_Go_ILjiU.roa (hash: d/WlzB5v4feaToE5n6krRnONbSIkTydQjlb9UBErHJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:e9:fa:34:15:78:bb:99:fd:1d:8e:a6:08:51:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
Validity
Not Before: Mar 2 00:01:50 2026 GMT
Not After : Mar 3 00:01:50 2026 GMT
Subject: CN=77bd3e04a6f1fb0288a0a5fab61e472dd18c2363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d1:c5:d5:2d:5f:97:dc:8b:ff:f2:7f:72:37:
81:63:c1:a2:97:c5:58:d3:18:f0:8b:fb:68:93:6e:
a6:c6:be:5c:b5:e3:9c:07:df:8e:08:ea:0c:7e:9c:
ad:fe:f0:10:b7:2e:41:3d:fe:31:4a:e7:0d:a2:b9:
4d:3e:24:1f:eb:d7:bc:e5:a6:64:07:4a:56:ea:7c:
5c:3c:4e:21:72:59:c3:15:56:fa:d8:a6:61:dc:9d:
72:0c:ee:f9:fb:d6:d8:52:bf:07:90:ce:5e:c2:9c:
8f:95:9f:9c:76:75:ab:67:69:29:96:4b:58:00:72:
53:c9:7b:0b:e3:43:db:98:cb:ba:8f:15:83:4c:41:
41:0d:55:36:3e:1a:19:ec:1d:8a:8f:62:e5:78:89:
80:2d:ad:93:64:50:dc:50:56:ed:2c:f7:5e:7f:0b:
c9:84:ef:f4:a5:75:a3:88:16:79:5b:cc:fe:d1:f4:
8b:fb:9a:11:63:bb:d9:70:30:f6:e8:d2:ae:18:3c:
f4:9c:91:d3:16:88:c3:92:d4:14:04:7d:6b:35:0f:
75:67:25:45:6b:dd:90:ab:6d:a2:40:84:5d:25:6d:
56:36:ef:a3:00:50:c5:3f:5f:f0:60:ed:73:9b:85:
a2:8f:5f:f4:8d:0a:44:f3:2f:c3:05:23:9d:81:ac:
14:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:BD:3E:04:A6:F1:FB:02:88:A0:A5:FA:B6:1E:47:2D:D1:8C:23:63
X509v3 Authority Key Identifier:
keyid:5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:57:c9:dd:2e:cd:9e:1d:4e:d6:69:75:bd:dc:5b:40:1c:fb:
46:30:6a:77:a1:bf:b1:6e:ae:ab:3b:b3:ff:34:a5:3e:c0:e3:
28:5c:df:57:bd:72:b9:ef:8a:64:d5:aa:c9:60:ab:83:27:c4:
23:a3:31:4f:49:6f:05:93:ec:d4:2f:47:d1:d9:ba:2a:17:67:
75:bc:85:fe:50:87:83:7a:34:fc:a0:4d:c7:de:f8:e3:e0:0d:
1d:ff:ec:b7:a1:fb:09:a9:9d:8a:b6:ec:35:6b:e6:45:ea:60:
a4:df:da:27:f5:b9:65:2c:32:8f:c6:1c:df:bc:21:a2:21:de:
17:41:15:af:2b:20:42:38:83:a0:8c:2d:f3:87:9d:e1:28:5c:
6f:52:70:96:49:a6:c8:21:43:4a:81:e7:03:7f:36:4c:05:f8:
a9:22:5a:8d:ab:ea:62:74:b8:a8:37:25:81:17:19:c5:26:21:
46:88:10:ef:50:1c:87:ab:c1:0f:3c:f4:9b:9f:48:d9:47:46:
a3:f2:24:63:05:46:d6:fb:8e:f4:40:d3:ed:c2:6f:e0:70:f7:
74:43:c0:0a:65:c4:f3:56:95:b8:27:83:33:50:01:40:e0:b1:
0b:3b:7f:d1:2a:62:e4:55:2f:43:d6:3d:41:7b:6b:b4:73:f8:
4b:3b:84:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2en6NBV4u5n9HY6mCFGMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjMzIzMTE5NTI1NjZkMWNlMThmMDg4ZThiYjZjZWFiZTdl
NzkzNWEwHhcNMjYwMzAyMDAwMTUwWhcNMjYwMzAzMDAwMTUwWjAzMTEwLwYDVQQD
Eyg3N2JkM2UwNGE2ZjFmYjAyODhhMGE1ZmFiNjFlNDcyZGQxOGMyMzYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotHF1S1fl9yL//J/cjeBY8Gil8VY
0xjwi/tok26mxr5cteOcB9+OCOoMfpyt/vAQty5BPf4xSucNorlNPiQf69e85aZk
B0pW6nxcPE4hclnDFVb62KZh3J1yDO75+9bYUr8HkM5ewpyPlZ+cdnWrZ2kplktY
AHJTyXsL40PbmMu6jxWDTEFBDVU2PhoZ7B2Kj2LleImALa2TZFDcUFbtLPdefwvJ
hO/0pXWjiBZ5W8z+0fSL+5oRY7vZcDD26NKuGDz0nJHTFojDktQUBH1rNQ91ZyVF
a92Qq22iQIRdJW1WNu+jAFDFP1/wYO1zm4Wij1/0jQpE8y/DBSOdgawUpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHe9PgSm8fsCiKCl+rYeRy3RjCNjMB8GA1UdIwQY
MBaAFFwyMRlSVm0c4Y8Ijou2zqvn55NaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWERJeEdWSldiUnpoandpT2k3Yk9xLWZuazFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC81ZGZkODktNGQ3OS00YmI2LThiZjMt
MGQzOGRkZGIwNzgwLzEvWERJeEdWSldiUnpoandpT2k3Yk9xLWZuazFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC81ZGZkODktNGQ3OS00YmI2LThiZjMtMGQzOGRkZGIwNzgw
LzEvWERJeEdWSldiUnpoandpT2k3Yk9xLWZuazFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXFfJ3S7N
nh1O1ml1vdxbQBz7RjBqd6G/sW6uqzuz/zSlPsDjKFzfV71yue+KZNWqyWCrgyfE
I6MxT0lvBZPs1C9H0dm6KhdndbyF/lCHg3o0/KBNx9744+ANHf/st6H7Camdirbs
NWvmRepgpN/aJ/W5ZSwyj8Yc37whoiHeF0EVrysgQjiDoIwt84ed4Shcb1Jwlkmm
yCFDSoHnA382TAX4qSJajavqYnS4qDclgRcZxSYhRogQ71Ach6vBDzz0m59I2UdG
o/IkYwVG1vuO9EDT7cJv4HD3dEPACmXE81aVuCeDM1ABQOCxCzt/0Spi5FUvQ9Y9
QXtrtHP4SzuE5A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:05:00 2026 by rpki-client