Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.mft
File: _XjxP_qS8HTr5VfSotKa0Noz5dg.mft (raw, json)
Hash identifier: 9gWdljlzi+QTnRHkGEw1xFxuT6Gt1cOzucUxi+sJaPk=
Subject key identifier: 84:0A:6C:39:53:3D:6B:FB:7C:EE:36:F4:E1:A8:6A:D3:D5:27:FC:E7
Authority key identifier: FD:78:F1:3F:FA:92:F0:74:EB:E5:57:D2:A2:D2:9A:D0:DA:33:E5:D8
Certificate issuer: /CN=fd78f13ffa92f074ebe557d2a2d29ad0da33e5d8
Certificate serial: 019CAD5967429B24C9C6C17EB447350F266A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_XjxP_qS8HTr5VfSotKa0Noz5dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.mft
Manifest number: 0DA0
Signing time: Mon 02 Mar 2026 07:00:43 +0000
Manifest this update: Mon 02 Mar 2026 07:00:43 +0000
Manifest next update: Tue 03 Mar 2026 07:00:43 +0000
Files and hashes: 1: H7yvjO1PteMvFud2cVf980xvhOM.roa (hash: RhQsj0SDsU/JKqzjG9Bf/mkgnMQmL8vD/s9sreGOu30=)
2: _XjxP_qS8HTr5VfSotKa0Noz5dg.crl (hash: JQVE7claSeuaz8m8da9m/wXjPHblwsilV1OZ/NnSy+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_XjxP_qS8HTr5VfSotKa0Noz5dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:67:42:9b:24:c9:c6:c1:7e:b4:47:35:0f:26:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd78f13ffa92f074ebe557d2a2d29ad0da33e5d8
Validity
Not Before: Mar 2 07:00:43 2026 GMT
Not After : Mar 3 07:00:43 2026 GMT
Subject: CN=840a6c39533d6bfb7cee36f4e1a86ad3d527fce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f4:2c:20:66:6c:96:03:a9:12:1d:32:e9:e2:
40:f0:6b:68:dd:cc:09:0f:d8:f4:2f:70:70:dd:89:
7f:d0:40:17:e7:ca:11:1b:07:15:c8:04:dd:ca:36:
43:e6:5a:5c:75:54:26:58:81:ee:04:6f:37:8d:17:
57:3f:d1:d8:06:db:74:6b:11:6f:3c:1d:09:aa:bb:
03:50:e9:cf:1f:a1:89:e1:19:4d:0b:b5:d1:3b:7c:
59:56:6f:d2:02:95:56:90:ba:cc:c6:4a:1b:62:fe:
6e:e2:ad:2e:25:72:9e:86:47:d3:ab:40:1e:af:8a:
7f:a0:6b:51:b2:76:25:c0:d7:eb:ba:59:be:72:af:
ff:20:0a:27:38:16:79:ef:9d:ce:d3:8e:86:71:cf:
08:16:51:63:89:4b:d4:50:2a:d9:9e:b4:df:a3:7c:
3e:79:1e:69:c6:94:94:ef:34:87:7a:90:94:b3:df:
f5:98:93:17:78:84:6d:8a:bb:f1:29:6d:88:1b:65:
95:ba:f7:e5:55:24:a9:8e:ad:af:ae:1e:a7:42:8c:
98:e6:67:1e:05:ea:47:83:0f:e9:85:4c:cf:72:af:
a8:b3:65:f2:cf:02:02:65:67:6a:81:5f:c1:96:97:
22:71:21:7e:0d:b7:60:d7:78:d8:ff:40:d4:eb:48:
5d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:0A:6C:39:53:3D:6B:FB:7C:EE:36:F4:E1:A8:6A:D3:D5:27:FC:E7
X509v3 Authority Key Identifier:
keyid:FD:78:F1:3F:FA:92:F0:74:EB:E5:57:D2:A2:D2:9A:D0:DA:33:E5:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_XjxP_qS8HTr5VfSotKa0Noz5dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:59:8d:ee:0a:60:a9:f4:0c:f9:31:8d:88:c3:96:4f:a9:d2:
89:23:ec:f5:70:44:9f:f0:e3:62:2a:61:35:64:b9:49:44:56:
5b:6b:26:35:f0:a1:55:c9:cc:fe:f4:63:82:24:81:b6:80:4d:
81:f6:b3:75:6f:02:e6:c4:24:5a:83:9b:2d:c2:21:5f:61:94:
1e:d1:51:eb:55:58:c7:b1:59:85:bf:19:e8:1b:5c:66:e5:30:
c9:c6:9d:c0:57:00:8e:3d:50:e2:cf:94:f9:c4:e3:2b:b6:49:
0e:f3:02:6d:eb:a9:f4:2f:3c:52:3c:d4:5a:8c:84:6f:e9:d6:
b5:b7:e6:a1:ec:9f:58:46:09:8e:1c:b3:c9:e3:59:f3:49:8b:
39:81:24:3d:55:87:83:b4:51:8e:af:54:52:a1:19:6f:1f:97:
8d:fa:f3:50:7c:56:da:ff:3f:b0:dc:37:5f:70:22:a6:d9:49:
98:94:83:5b:dd:32:16:d6:f3:17:16:aa:ba:ba:fa:f4:4b:88:
c0:bc:d4:3f:f7:50:e8:97:b7:f6:1a:e5:46:72:05:ac:c1:4b:
be:6c:cc:a2:09:65:b6:fd:5c:af:e6:46:24:ed:37:c5:b5:4c:
1b:3e:f0:b8:ae:8b:00:ef:68:3e:f3:9e:d9:49:e9:d6:80:e0:
a5:20:f4:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWWdCmyTJxsF+tEc1DyZqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkNzhmMTNmZmE5MmYwNzRlYmU1NTdkMmEyZDI5YWQwZGEz
M2U1ZDgwHhcNMjYwMzAyMDcwMDQzWhcNMjYwMzAzMDcwMDQzWjAzMTEwLwYDVQQD
Eyg4NDBhNmMzOTUzM2Q2YmZiN2NlZTM2ZjRlMWE4NmFkM2Q1MjdmY2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6vQsIGZslgOpEh0y6eJA8Gto3cwJ
D9j0L3Bw3Yl/0EAX58oRGwcVyATdyjZD5lpcdVQmWIHuBG83jRdXP9HYBtt0axFv
PB0JqrsDUOnPH6GJ4RlNC7XRO3xZVm/SApVWkLrMxkobYv5u4q0uJXKehkfTq0Ae
r4p/oGtRsnYlwNfrulm+cq//IAonOBZ5753O046Gcc8IFlFjiUvUUCrZnrTfo3w+
eR5pxpSU7zSHepCUs9/1mJMXeIRtirvxKW2IG2WVuvflVSSpjq2vrh6nQoyY5mce
BepHgw/phUzPcq+os2XyzwICZWdqgV/BlpcicSF+Dbdg13jY/0DU60hdRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIQKbDlTPWv7fO429OGoatPVJ/znMB8GA1UdIwQY
MBaAFP148T/6kvB06+VX0qLSmtDaM+XYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1hqeFBfcVM4SFRyNVZmU290S2EwTm96NWRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9lNDFjMzQtMDI1Mi00NzE4LTlmM2Qt
ZmRmMDExOGNjMDE2LzEvX1hqeFBfcVM4SFRyNVZmU290S2EwTm96NWRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9lNDFjMzQtMDI1Mi00NzE4LTlmM2QtZmRmMDExOGNjMDE2
LzEvX1hqeFBfcVM4SFRyNVZmU290S2EwTm96NWRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMVmN7gpg
qfQM+TGNiMOWT6nSiSPs9XBEn/DjYiphNWS5SURWW2smNfChVcnM/vRjgiSBtoBN
gfazdW8C5sQkWoObLcIhX2GUHtFR61VYx7FZhb8Z6BtcZuUwycadwFcAjj1Q4s+U
+cTjK7ZJDvMCbeup9C88UjzUWoyEb+nWtbfmoeyfWEYJjhyzyeNZ80mLOYEkPVWH
g7RRjq9UUqEZbx+XjfrzUHxW2v8/sNw3X3AiptlJmJSDW90yFtbzFxaqurr69EuI
wLzUP/dQ6Je39hrlRnIFrMFLvmzMoglltv1cr+ZGJO03xbVMGz7wuK6LAO9oPvOe
2Unp1oDgpSD0qQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:43:57 2026 by rpki-client