Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
File: xhaXFtCuZAaHAxQKo3MON4j91MY.mft (raw, json)
Hash identifier: XGchlrkjNV95FDN1iUV+0e1wUrjIvbp1RSs6SHeTodE=
Subject key identifier: C9:A8:3F:46:5A:D1:02:A0:DD:05:DC:2D:AF:67:07:EE:40:12:D2:11
Authority key identifier: C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
Certificate issuer: /CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Certificate serial: 019CACB510119EC2F65791C7EB99991AD779
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
Manifest number: 15B4
Signing time: Mon 02 Mar 2026 04:01:13 +0000
Manifest this update: Mon 02 Mar 2026 04:01:13 +0000
Manifest next update: Tue 03 Mar 2026 04:01:13 +0000
Files and hashes: 1: FWP58ajjb0tkpM-YIjMEubI9eHI.roa (hash: 8d5KqUUs2iCVjFLb2FSp+rBEK2zv9joKO9sjvkw4TqU=)
2: xhaXFtCuZAaHAxQKo3MON4j91MY.crl (hash: 4WzUUPBMWAbgrW2FYMdoF6kkJ9b8YRuzfUvT/roQApo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:10:11:9e:c2:f6:57:91:c7:eb:99:99:1a:d7:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Validity
Not Before: Mar 2 04:01:13 2026 GMT
Not After : Mar 3 04:01:13 2026 GMT
Subject: CN=c9a83f465ad102a0dd05dc2daf6707ee4012d211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:28:ee:4b:8c:b5:d7:56:cb:90:c6:20:e9:9b:
8b:f4:b7:9d:9f:9b:32:ff:bb:39:a3:ca:ab:b5:0a:
a6:31:ee:47:d1:4a:ed:c6:07:56:f9:5e:aa:63:1c:
26:ce:8e:0d:87:bf:35:27:51:0a:d3:10:27:24:c8:
a1:43:e4:13:9e:e6:52:45:65:ab:b9:af:68:c2:f0:
1f:ff:75:e5:7b:ca:12:ef:76:e0:15:57:f5:f3:77:
77:41:f7:71:cd:ed:00:49:22:00:4e:85:e7:71:3a:
b6:82:34:da:46:a1:1f:57:52:99:c5:1e:d2:37:52:
bf:f5:4c:f1:c9:73:d3:68:59:24:7a:23:38:75:69:
4d:71:ba:54:62:e2:f2:95:5a:c1:f1:ef:a0:3c:8e:
08:35:8b:fc:ec:8a:cc:76:89:36:f2:a6:62:3e:d8:
81:4d:92:59:0e:37:5b:5e:4b:c5:32:18:42:29:05:
75:ed:80:67:bf:a2:fb:d2:eb:a7:d4:97:f3:25:86:
21:7b:ba:88:65:9a:68:51:8e:35:6d:a9:a7:47:a2:
eb:04:d7:89:7b:63:0f:fd:74:5b:2d:97:ce:0e:10:
24:87:07:bc:bc:f7:71:8d:c7:b7:3a:bc:f8:c0:11:
53:a3:2b:cd:33:ff:62:d2:7f:69:87:d5:f1:ad:05:
08:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A8:3F:46:5A:D1:02:A0:DD:05:DC:2D:AF:67:07:EE:40:12:D2:11
X509v3 Authority Key Identifier:
keyid:C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:57:90:a4:0d:b6:20:1c:2d:8c:8f:bd:95:07:66:9e:1f:8c:
2b:0e:5b:2c:9c:15:60:49:aa:3b:30:29:2b:27:7e:a5:c1:f2:
50:87:59:22:9f:9c:cb:4a:6f:c8:62:3d:e6:36:58:e8:9c:32:
5a:1b:e3:74:26:07:29:fc:2b:c0:66:d3:50:86:c8:85:49:65:
eb:4e:31:02:ea:e1:00:2f:ce:2b:97:53:15:ff:45:5a:fe:bd:
fd:b7:a0:89:87:8a:2f:7f:41:44:13:31:5e:66:5a:52:20:1a:
68:b6:ef:e5:42:89:ce:27:9e:7a:3d:b9:20:b3:ee:1b:a1:61:
ac:5d:2a:6f:90:e0:ed:ff:ae:19:70:86:7e:28:d7:5a:38:0d:
60:bc:df:2c:13:0a:2b:16:ac:a8:10:f9:83:7c:47:e7:5c:7a:
22:65:3f:f6:81:4f:f3:b7:05:84:6b:96:d2:cc:20:e6:8e:5c:
91:fd:51:c3:ad:b5:12:c3:6f:a0:78:07:fe:d1:88:2d:a2:0f:
34:d6:b3:48:c0:48:18:3a:a9:9a:e2:c7:a7:f3:e8:1b:f7:1a:
65:46:ce:b7:d5:04:bc:1b:e7:34:d7:d7:08:24:1b:41:46:bc:
41:4f:80:4b:9d:4a:45:48:82:0d:58:93:fb:07:9c:4f:b3:d4:
76:81:a6:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystRARnsL2V5HH65mZGtd5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTY5NzE2ZDBhZTY0MDY4NzAzMTQwYWEzNzMwZTM3ODhm
ZGQ0YzYwHhcNMjYwMzAyMDQwMTEzWhcNMjYwMzAzMDQwMTEzWjAzMTEwLwYDVQQD
EyhjOWE4M2Y0NjVhZDEwMmEwZGQwNWRjMmRhZjY3MDdlZTQwMTJkMjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSjuS4y111bLkMYg6ZuL9Ledn5sy
/7s5o8qrtQqmMe5H0UrtxgdW+V6qYxwmzo4Nh781J1EK0xAnJMihQ+QTnuZSRWWr
ua9owvAf/3Xle8oS73bgFVf183d3Qfdxze0ASSIAToXncTq2gjTaRqEfV1KZxR7S
N1K/9UzxyXPTaFkkeiM4dWlNcbpUYuLylVrB8e+gPI4INYv87IrMdok28qZiPtiB
TZJZDjdbXkvFMhhCKQV17YBnv6L70uun1JfzJYYhe7qIZZpoUY41bamnR6LrBNeJ
e2MP/XRbLZfODhAkhwe8vPdxjce3Orz4wBFToyvNM/9i0n9ph9XxrQUIXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMmoP0Za0QKg3QXcLa9nB+5AEtIRMB8GA1UdIwQY
MBaAFMYWlxbQrmQGhwMUCqNzDjeI/dTGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhhWEZ0Q3VaQWFIQXhRS28zTU9ONGo5MU1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC80MDA2ODUtZjQ4ZS00YWI5LThlM2Yt
MDQyNDQ2YjcwZmIxLzEveGhhWEZ0Q3VaQWFIQXhRS28zTU9ONGo5MU1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC80MDA2ODUtZjQ4ZS00YWI5LThlM2YtMDQyNDQ2YjcwZmIx
LzEveGhhWEZ0Q3VaQWFIQXhRS28zTU9ONGo5MU1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN1eQpA22
IBwtjI+9lQdmnh+MKw5bLJwVYEmqOzApKyd+pcHyUIdZIp+cy0pvyGI95jZY6Jwy
WhvjdCYHKfwrwGbTUIbIhUll604xAurhAC/OK5dTFf9FWv69/begiYeKL39BRBMx
XmZaUiAaaLbv5UKJzieeej25ILPuG6FhrF0qb5Dg7f+uGXCGfijXWjgNYLzfLBMK
KxasqBD5g3xH51x6ImU/9oFP87cFhGuW0swg5o5ckf1Rw621EsNvoHgH/tGILaIP
NNazSMBIGDqpmuLHp/PoG/caZUbOt9UEvBvnNNfXCCQbQUa8QU+AS51KRUiCDViT
+wecT7PUdoGmlw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:58:02 2026 by rpki-client