Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
File: xBxyIe3jr17pLjIGry8YvQENXdk.mft (raw, json)
Hash identifier: nCGVtme+dgWfpS+DoHEVyDUQfpNNZlQFXf/FMnmxCpg=
Subject key identifier: 52:7F:B2:22:63:83:43:81:1B:8C:B9:36:79:A3:C4:AD:49:1B:8D:C5
Authority key identifier: C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
Certificate issuer: /CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Certificate serial: 019CADC83C84F861F385048BC48C4FEE9E75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
Manifest number: 17AA
Signing time: Mon 02 Mar 2026 09:01:46 +0000
Manifest this update: Mon 02 Mar 2026 09:01:46 +0000
Manifest next update: Tue 03 Mar 2026 09:01:46 +0000
Files and hashes: 1: 0GQvydNnvltwCYU4Ip_UMWYTxxY.roa (hash: LhV5AD4zlFaWyl3gf5xKjG4cuVjXMxEqjf7rizI3yyc=)
2: BfDjCxQZpVIvWuHPpUF1014sxPo.roa (hash: xAMeCUjUJk50I2+3B3yRzk6L+sK+RxuSoLFdPe8pfMM=)
3: XWrjWShl8ZOcp09LK2_ONhgHsKY.roa (hash: AC5IcqCMeXfvwYRIiyyOeZ/CwhWtUU1oEh3vKTXLGOA=)
4: YTvzQsFBXRxpZjxppqCZCxmRPYQ.roa (hash: t3YG10sy6vB+Qag/g3AGHLoljWVvm1G3KkmY9lIG3vE=)
5: aRUSUeQ8jMxodN7YT76VVlAnkYc.roa (hash: kW/ZEynMRGdhc2qvAiSVXrvlJhdBKDD65FvfwCuJ9qI=)
6: meWMB7mMCO2YGDQEgDBAeOkKxbU.roa (hash: 5uVBi/vJg+ul9fevZEzoy7ePbW0P4h1Oq+CpG62Daig=)
7: umcl7WnZK20q_yk2qfdqCvl0gZc.roa (hash: a3iwx7aEh16G880sgnY2R852Jz2/uGuPT/7WcJXbeQc=)
8: xBxyIe3jr17pLjIGry8YvQENXdk.crl (hash: GLA0D1+ZATln2VplcEINvQwM3YGcEiCJ384daeJXWZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:3c:84:f8:61:f3:85:04:8b:c4:8c:4f:ee:9e:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Validity
Not Before: Mar 2 09:01:46 2026 GMT
Not After : Mar 3 09:01:46 2026 GMT
Subject: CN=527fb222638343811b8cb93679a3c4ad491b8dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:46:f1:d5:af:c4:f8:11:05:83:96:1a:72:d6:
27:b5:f4:b9:6f:29:11:17:11:5c:f8:3b:6e:19:0c:
2f:0a:85:4a:41:d6:53:33:46:9b:0f:0d:5e:ef:38:
82:2f:bf:42:cd:51:83:60:c4:85:52:e4:ff:85:31:
05:7b:d2:fe:5a:d3:67:12:2e:52:0d:9f:c0:26:a7:
75:f3:7e:8c:5c:62:d3:74:5b:b3:c1:00:cd:7b:ea:
6a:98:0f:c2:d0:6c:ee:db:14:8c:c1:1a:79:f9:7f:
dc:00:bf:8f:ae:79:bf:c9:b6:48:e0:e8:e7:e3:8c:
71:56:2b:ef:1d:b6:da:2d:ec:87:5d:f4:22:b8:d9:
84:18:b0:8f:b5:74:33:9b:a3:9e:23:e0:be:2a:20:
83:de:a6:05:f4:37:96:a5:48:c8:95:be:43:8c:fc:
2b:6e:4c:43:27:69:b6:41:b2:5f:47:ff:b4:fe:c4:
bd:65:6b:a7:a3:93:95:60:6d:ae:14:6f:bd:7e:1b:
d0:63:f7:42:d9:d1:79:71:ac:37:6e:7f:49:d6:0a:
f0:dc:22:02:aa:0e:61:1e:34:d1:d5:30:1e:99:d0:
35:47:ae:a5:b2:3e:07:e0:02:c2:68:6b:55:74:35:
b3:e1:ab:00:a5:76:65:8b:01:79:16:c5:57:8b:44:
db:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:7F:B2:22:63:83:43:81:1B:8C:B9:36:79:A3:C4:AD:49:1B:8D:C5
X509v3 Authority Key Identifier:
keyid:C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:de:e4:ad:db:99:71:81:bd:71:3c:e6:bf:9f:f2:81:c4:b4:
a8:96:2b:02:a7:67:50:48:4b:8f:98:a1:a9:a8:32:3f:f6:17:
d9:cd:33:46:8d:2d:5a:16:70:9a:0b:b4:a0:d6:01:fd:0b:49:
b8:f8:c5:15:48:0e:65:88:18:dd:23:b9:70:cb:5b:98:48:95:
ae:4e:c5:3b:78:29:0a:b5:bd:a4:6b:77:f5:36:f4:7c:52:52:
f1:88:14:3d:2f:55:e9:0f:59:66:41:ae:30:4d:6c:e2:bb:ab:
33:2c:ef:04:51:20:c0:66:3d:c5:dd:85:ed:24:a1:e8:43:72:
e3:83:08:a3:fd:ef:e1:99:9c:78:fb:ce:7e:ca:04:9d:7f:04:
8e:4e:5d:83:2c:9b:a6:5d:db:ff:0c:4b:b7:c2:bd:f0:5c:49:
70:3c:46:31:0d:56:4e:c2:49:c8:5f:17:05:f6:f9:be:e0:88:
36:b7:7d:46:b8:e0:99:73:60:74:b8:59:ad:9c:22:77:33:ec:
2c:ab:7c:db:d8:59:67:9f:b1:4d:96:e2:1a:04:de:34:0b:8c:
32:0a:70:70:33:aa:34:9c:91:ae:dc:9e:0f:67:ca:d4:7a:ad:
6c:d3:15:57:1d:1f:62:5c:6e:1b:56:b3:3d:d6:74:4a:0e:0b:
0b:be:7c:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytyDyE+GHzhQSLxIxP7p51MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0MWM3MjIxZWRlM2FmNWVlOTJlMzIwNmFmMmYxOGJkMDEw
ZDVkZDkwHhcNMjYwMzAyMDkwMTQ2WhcNMjYwMzAzMDkwMTQ2WjAzMTEwLwYDVQQD
Eyg1MjdmYjIyMjYzODM0MzgxMWI4Y2I5MzY3OWEzYzRhZDQ5MWI4ZGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEbx1a/E+BEFg5YactYntfS5bykR
FxFc+DtuGQwvCoVKQdZTM0abDw1e7ziCL79CzVGDYMSFUuT/hTEFe9L+WtNnEi5S
DZ/AJqd1836MXGLTdFuzwQDNe+pqmA/C0Gzu2xSMwRp5+X/cAL+Prnm/ybZI4Ojn
44xxVivvHbbaLeyHXfQiuNmEGLCPtXQzm6OeI+C+KiCD3qYF9DeWpUjIlb5DjPwr
bkxDJ2m2QbJfR/+0/sS9ZWuno5OVYG2uFG+9fhvQY/dC2dF5caw3bn9J1grw3CIC
qg5hHjTR1TAemdA1R66lsj4H4ALCaGtVdDWz4asApXZliwF5FsVXi0TbBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFJ/siJjg0OBG4y5NnmjxK1JG43FMB8GA1UdIwQY
MBaAFMQcciHt469e6S4yBq8vGL0BDV3ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEJ4eUllM2pyMTdwTGpJR3J5OFl2UUVOWGRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9lOTliMzUtOGNmNi00OTM0LWE1OTEt
OTkzMGYyMTk0YTBlLzEveEJ4eUllM2pyMTdwTGpJR3J5OFl2UUVOWGRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9lOTliMzUtOGNmNi00OTM0LWE1OTEtOTkzMGYyMTk0YTBl
LzEveEJ4eUllM2pyMTdwTGpJR3J5OFl2UUVOWGRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzt7krduZ
cYG9cTzmv5/ygcS0qJYrAqdnUEhLj5ihqagyP/YX2c0zRo0tWhZwmgu0oNYB/QtJ
uPjFFUgOZYgY3SO5cMtbmEiVrk7FO3gpCrW9pGt39Tb0fFJS8YgUPS9V6Q9ZZkGu
ME1s4rurMyzvBFEgwGY9xd2F7SSh6ENy44MIo/3v4ZmcePvOfsoEnX8Ejk5dgyyb
pl3b/wxLt8K98FxJcDxGMQ1WTsJJyF8XBfb5vuCINrd9RrjgmXNgdLhZrZwidzPs
LKt829hZZ5+xTZbiGgTeNAuMMgpwcDOqNJyRrtyeD2fK1HqtbNMVVx0fYlxuG1az
PdZ0Sg4LC758eA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:10:17 2026 by rpki-client