Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
File: xKPrF197V5BsgPUI4V9j4D8Lfvg.mft (raw, json)
Hash identifier: tLXrpxWeBx3RQ0GwYAwIkf21sKQRzbU447b3qT+fx1w=
Subject key identifier: E2:7B:3F:C7:5B:CD:D3:F3:FC:B2:10:D9:B2:C5:B5:27:1D:24:98:FC
Authority key identifier: C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8
Certificate issuer: /CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8
Certificate serial: 019CAB34175884E6D31080ABFFE9EA5AAF1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
Manifest number: 17E3
Signing time: Sun 01 Mar 2026 21:00:43 +0000
Manifest this update: Sun 01 Mar 2026 21:00:43 +0000
Manifest next update: Mon 02 Mar 2026 21:00:43 +0000
Files and hashes: 1: mTuVuiw3HM2pBIheqITWSq5I3n0.roa (hash: Ipl/v3cZkycb4zTv5tbg7JdjHKPt6S5to0wny64/QVQ=)
2: xKPrF197V5BsgPUI4V9j4D8Lfvg.crl (hash: +T7po9+Sg6rk7UXTBTtG+66pugZ5zxldb7uX1wYZ7uw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:17:58:84:e6:d3:10:80:ab:ff:e9:ea:5a:af:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8
Validity
Not Before: Mar 1 21:00:43 2026 GMT
Not After : Mar 2 21:00:43 2026 GMT
Subject: CN=e27b3fc75bcdd3f3fcb210d9b2c5b5271d2498fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a2:05:c1:ea:8e:6e:24:e3:fc:f6:61:11:2a:
20:ba:26:58:6d:0f:5e:33:23:d2:c7:99:c2:1d:43:
41:bf:28:1e:63:74:f7:dd:81:75:62:a5:7a:26:4e:
22:f7:e1:7f:e1:2a:52:d6:4c:14:8b:43:62:78:cf:
95:98:8d:76:c4:a6:0f:a7:4e:38:53:65:37:dd:c0:
f4:ff:10:8f:52:85:7f:60:b0:7a:57:c1:7b:34:3a:
f9:d4:5d:ac:4e:61:72:c8:63:7b:3b:fc:e3:2b:4f:
5d:58:7c:3f:3d:1a:e9:fc:69:8b:ac:c3:ea:98:4c:
ae:61:57:0e:8b:e8:e9:14:8b:22:35:c0:15:2c:df:
4e:21:30:67:8f:df:06:98:dc:ac:e4:36:2b:cd:5a:
0d:8e:61:02:6e:0b:16:8f:95:ea:8e:43:78:d6:70:
4e:a0:71:ce:e0:4f:97:36:26:2a:a1:a0:53:ce:dc:
da:43:5d:9e:0b:44:c4:5a:6f:04:f6:c5:c4:e7:fb:
59:1d:67:dd:a9:29:94:f1:2b:58:c0:8f:a8:70:45:
93:40:58:46:c4:8c:56:77:86:86:4b:0c:e0:b9:7d:
d9:9a:ec:c4:32:67:3b:6d:26:80:13:c7:41:99:8b:
14:68:ab:7f:5e:ee:95:fe:d0:4e:d7:f4:6f:89:da:
27:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:7B:3F:C7:5B:CD:D3:F3:FC:B2:10:D9:B2:C5:B5:27:1D:24:98:FC
X509v3 Authority Key Identifier:
keyid:C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:7e:9c:4d:80:2e:37:94:cd:24:f5:bb:1b:95:8b:c5:51:d7:
8c:37:ac:88:a6:d7:52:06:98:db:35:6e:d9:ee:f4:cb:14:c1:
69:74:f4:5f:27:78:da:df:37:56:51:9b:84:61:37:94:66:23:
5e:d1:15:d6:59:6c:c8:e1:bb:24:c8:21:5d:e5:8b:76:48:98:
9a:ba:05:0f:01:51:01:b4:98:2b:2e:b6:fa:a6:44:6f:8e:69:
74:20:9e:2d:8f:d9:9f:24:cf:9f:ff:63:29:e2:a0:b6:34:dd:
e1:6c:43:96:1d:5a:43:ba:fb:cb:6f:12:b3:1d:c3:35:ba:1c:
4a:25:70:70:c9:29:fa:db:d4:ca:f5:4e:e2:05:9d:27:9f:0c:
12:3d:a1:5f:08:d3:f9:54:0b:c5:07:fd:e7:49:ec:2b:c4:93:
d5:2c:db:5f:9a:da:71:7c:f4:49:50:8c:54:43:41:aa:26:f0:
2d:16:42:bc:65:08:39:b7:d6:36:9a:96:7f:fa:e7:7d:e0:d8:
64:7c:99:80:16:6d:d2:0f:cf:d8:b7:65:10:d5:ed:06:94:70:
16:43:12:c1:db:17:c5:3f:62:42:ef:78:13:0d:a4:e4:8a:0c:
7c:32:69:45:59:d9:83:2b:46:f4:c5:f4:78:e8:bb:67:10:19:
9d:65:50:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNBdYhObTEICr/+nqWq8eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0YTNlYjE3NWY3YjU3OTA2YzgwZjUwOGUxNWY2M2UwM2Yw
YjdlZjgwHhcNMjYwMzAxMjEwMDQzWhcNMjYwMzAyMjEwMDQzWjAzMTEwLwYDVQQD
EyhlMjdiM2ZjNzViY2RkM2YzZmNiMjEwZDliMmM1YjUyNzFkMjQ5OGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKIFweqObiTj/PZhESoguiZYbQ9e
MyPSx5nCHUNBvygeY3T33YF1YqV6Jk4i9+F/4SpS1kwUi0NieM+VmI12xKYPp044
U2U33cD0/xCPUoV/YLB6V8F7NDr51F2sTmFyyGN7O/zjK09dWHw/PRrp/GmLrMPq
mEyuYVcOi+jpFIsiNcAVLN9OITBnj98GmNys5DYrzVoNjmECbgsWj5XqjkN41nBO
oHHO4E+XNiYqoaBTztzaQ12eC0TEWm8E9sXE5/tZHWfdqSmU8StYwI+ocEWTQFhG
xIxWd4aGSwzguX3ZmuzEMmc7bSaAE8dBmYsUaKt/Xu6V/tBO1/RvidonWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOJ7P8dbzdPz/LIQ2bLFtScdJJj8MB8GA1UdIwQY
MBaAFMSj6xdfe1eQbID1COFfY+A/C374MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEtQckYxOTdWNUJzZ1BVSTRWOWo0RDhMZnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS83Zjc3YmQtYjMwMi00OTMzLWE1Zjkt
ZmNiNGQyMGJjZDc1LzEveEtQckYxOTdWNUJzZ1BVSTRWOWo0RDhMZnZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS83Zjc3YmQtYjMwMi00OTMzLWE1ZjktZmNiNGQyMGJjZDc1
LzEveEtQckYxOTdWNUJzZ1BVSTRWOWo0RDhMZnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlX6cTYAu
N5TNJPW7G5WLxVHXjDesiKbXUgaY2zVu2e70yxTBaXT0Xyd42t83VlGbhGE3lGYj
XtEV1llsyOG7JMghXeWLdkiYmroFDwFRAbSYKy62+qZEb45pdCCeLY/ZnyTPn/9j
KeKgtjTd4WxDlh1aQ7r7y28Ssx3DNbocSiVwcMkp+tvUyvVO4gWdJ58MEj2hXwjT
+VQLxQf950nsK8ST1SzbX5racXz0SVCMVENBqibwLRZCvGUIObfWNpqWf/rnfeDY
ZHyZgBZt0g/P2LdlENXtBpRwFkMSwdsXxT9iQu94Ew2k5IoMfDJpRVnZgytG9MX0
eOi7ZxAZnWVQuQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:41:01 2026 by rpki-client