Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
File: X99RbJXdbrLR2d1ODgMobBkR9uE.mft (raw, json)
Hash identifier: UwR6X1TbcJE2XWMUzgdjpxmhQCVIETlIplMbLgW5uRg=
Subject key identifier: 02:77:52:9F:A7:31:DC:ED:D8:59:AC:9C:C9:1B:6E:8E:17:17:F1:B3
Authority key identifier: 5F:DF:51:6C:95:DD:6E:B2:D1:D9:DD:4E:0E:03:28:6C:19:11:F6:E1
Certificate issuer: /CN=5fdf516c95dd6eb2d1d9dd4e0e03286c1911f6e1
Certificate serial: 019CABA21D97A2B25D5852A3A1B04237F5AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 23:00:54 +0000
Manifest this update: Sun 01 Mar 2026 23:00:54 +0000
Manifest next update: Mon 02 Mar 2026 23:00:54 +0000
Files and hashes: 1: O58aCTrbE5lgm64c310ntztX4Wk.roa (hash: 0T3h+C9Xr6EOTPtS+HVLjRGd+kBq9kMPTWwsY3303pg=)
2: X99RbJXdbrLR2d1ODgMobBkR9uE.crl (hash: uqvyK6lSWPf1xCWf6FC6JiIhr+TPlQwxgxYXGkJxZkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:1d:97:a2:b2:5d:58:52:a3:a1:b0:42:37:f5:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fdf516c95dd6eb2d1d9dd4e0e03286c1911f6e1
Validity
Not Before: Mar 1 23:00:54 2026 GMT
Not After : Mar 2 23:00:54 2026 GMT
Subject: CN=0277529fa731dcedd859ac9cc91b6e8e1717f1b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e8:03:91:23:b5:ae:7b:47:19:8b:66:6e:32:
c3:df:0c:d0:a0:a4:8b:bd:de:d7:69:eb:c9:19:a1:
53:f6:98:eb:fc:3e:f0:18:d2:60:1d:da:18:0f:bf:
41:63:71:ec:aa:b4:a3:0b:55:c2:ad:b3:82:2c:87:
23:fc:26:61:5c:24:8c:f5:0e:9a:72:23:74:01:da:
4c:b1:80:5a:32:f0:de:a4:0f:ce:4f:ff:44:7e:fa:
6a:be:86:e4:32:ed:51:4e:44:fb:f6:02:8f:8a:98:
28:ed:83:8c:ff:80:35:13:52:d0:27:7f:63:5d:05:
7c:1d:eb:98:d2:cb:6e:7f:5b:47:ab:86:d8:3d:ae:
05:49:d5:1b:64:2a:a8:ab:4d:77:00:c9:50:7c:c0:
2b:12:7f:55:fa:13:95:d7:f4:36:71:1b:65:3b:42:
93:4b:ec:29:8c:bb:e7:aa:d2:2f:6d:20:92:7a:aa:
c3:cc:65:ab:02:61:d4:8c:a4:6d:67:d0:04:55:30:
9c:4d:51:26:80:c2:61:11:54:70:2c:51:39:8b:43:
f4:03:37:55:ee:0a:c5:24:a0:d4:6f:3f:f5:ac:1c:
52:ee:11:e0:76:37:cc:24:3b:6c:87:87:a7:45:84:
c9:ed:77:3d:7e:cd:21:04:e1:a2:08:0d:8a:e6:ed:
5e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:77:52:9F:A7:31:DC:ED:D8:59:AC:9C:C9:1B:6E:8E:17:17:F1:B3
X509v3 Authority Key Identifier:
keyid:5F:DF:51:6C:95:DD:6E:B2:D1:D9:DD:4E:0E:03:28:6C:19:11:F6:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:47:c1:db:16:80:55:3d:1e:7c:88:a2:4f:33:c4:f3:be:e0:
d6:1a:1b:a7:f6:ec:ed:96:a7:ae:95:76:72:32:85:88:e4:42:
5f:13:48:7e:c6:98:a2:c1:7b:0a:23:9b:10:f6:0f:7d:4a:12:
44:85:59:af:ff:99:5b:64:6b:09:f7:da:5f:b4:09:94:cd:96:
bb:64:18:32:7a:5d:df:0c:90:7b:3e:60:e1:94:25:c2:35:65:
fb:64:dc:10:8b:57:68:73:cb:ef:7a:b8:b6:b4:5d:b5:a2:d1:
42:51:6e:1d:4a:a5:ba:c6:16:25:d2:c7:58:94:1d:57:2e:97:
60:c0:15:50:c0:a2:cf:58:62:c3:9d:d1:84:84:43:2f:a5:1c:
ae:6a:c5:67:e6:ea:2e:9b:2b:7d:06:e7:1e:1c:63:f9:4c:3a:
f2:3c:81:75:5e:48:8c:77:82:c3:11:50:fe:0c:65:a8:77:54:
74:72:95:97:51:b3:ab:84:8b:2e:46:4a:4a:eb:cd:f7:87:dd:
7e:5b:ad:e6:b8:52:d4:4c:7c:ab:b5:de:37:91:ce:26:e2:05:
43:51:23:4a:86:8f:26:19:eb:2e:6a:af:0f:6a:c1:43:1e:5b:
ac:e3:c8:71:5a:35:1c:4f:d1:b2:96:c9:27:e2:07:fe:ef:17:
25:05:0d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:28:39 2026 by rpki-client