Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft
File: xPHyFPsizFNhKPXeSqAXqHiA8oU.mft (raw, json)
Hash identifier: QGpkexlOmlNmB/CVS6NVSj5fyQoQMD9VJyFmFVxPSn8=
Subject key identifier: 54:77:EF:ED:B1:FA:BA:BE:6C:88:10:45:40:FE:BA:CD:F0:9A:59:A0
Authority key identifier: C4:F1:F2:14:FB:22:CC:53:61:28:F5:DE:4A:A0:17:A8:78:80:F2:85
Certificate issuer: /CN=c4f1f214fb22cc536128f5de4aa017a87880f285
Certificate serial: 019CABD90A6B8E11FC74AE1B1D0117702EBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPHyFPsizFNhKPXeSqAXqHiA8oU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft
Manifest number: 09B2
Signing time: Mon 02 Mar 2026 00:00:53 +0000
Manifest this update: Mon 02 Mar 2026 00:00:53 +0000
Manifest next update: Tue 03 Mar 2026 00:00:53 +0000
Files and hashes: 1: 1K1Um4B_fpW1GkCf_gBrii6dk-U.roa (hash: /YNif+CPSNTVk1hV3V7FBKNaBXD9ZU/xIRYCuPXwkd4=)
2: xPHyFPsizFNhKPXeSqAXqHiA8oU.crl (hash: GP5oiGw6l3Eep0kD2CK6luuj0FNeVrimAhQA/ogbIds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPHyFPsizFNhKPXeSqAXqHiA8oU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:0a:6b:8e:11:fc:74:ae:1b:1d:01:17:70:2e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4f1f214fb22cc536128f5de4aa017a87880f285
Validity
Not Before: Mar 2 00:00:53 2026 GMT
Not After : Mar 3 00:00:53 2026 GMT
Subject: CN=5477efedb1fababe6c88104540febacdf09a59a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1a:c3:d3:22:e6:6e:de:b7:38:a1:f3:1d:0e:
29:57:46:7d:8d:6b:93:b3:56:bc:91:cc:43:68:9f:
e3:00:2a:ff:33:5b:03:df:51:c7:23:89:ca:c1:fd:
e3:91:2b:36:d4:0b:55:3f:69:2c:9b:fe:f3:5a:af:
85:cc:3c:4b:4c:dd:4c:91:4d:04:96:0b:3f:31:2c:
a4:5b:dc:93:f5:6f:bf:ef:23:fc:50:72:97:ae:9a:
4e:53:30:c0:6b:f3:6a:22:e3:b3:1a:51:e9:3a:ae:
d5:ae:ce:43:49:63:73:61:07:d0:78:37:3d:da:c1:
cb:c7:e3:0f:8f:7c:88:e6:33:61:a9:57:85:8b:1c:
f2:12:d1:e3:e1:c9:6e:b1:0f:5a:e7:f3:b9:96:db:
ee:c7:ea:f2:fd:da:9e:e4:29:fd:8a:cd:4b:ec:91:
8d:3a:33:63:79:3f:e9:56:11:07:ae:2b:f4:c6:97:
47:2b:a5:14:4b:a2:78:87:cf:46:a7:97:8d:5d:9f:
d1:99:ae:1a:e0:37:e3:7d:39:d1:f3:ea:c1:bd:c3:
d2:3a:70:be:9f:ff:c6:fb:c7:0e:81:4b:25:27:7d:
75:f9:0a:a2:b5:7c:55:4f:2c:81:cb:6a:75:95:02:
3b:63:15:40:8a:f1:96:9e:62:85:ef:58:14:e3:63:
27:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:77:EF:ED:B1:FA:BA:BE:6C:88:10:45:40:FE:BA:CD:F0:9A:59:A0
X509v3 Authority Key Identifier:
keyid:C4:F1:F2:14:FB:22:CC:53:61:28:F5:DE:4A:A0:17:A8:78:80:F2:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPHyFPsizFNhKPXeSqAXqHiA8oU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:b6:8f:20:10:f7:14:86:d5:e5:fa:13:0d:32:c7:8c:19:69:
6e:48:92:2b:18:da:83:d2:8b:b7:4a:16:ba:36:bf:1f:36:38:
56:7a:30:88:31:78:a3:be:36:70:ab:b9:16:8b:cc:ac:e1:4a:
27:04:b6:66:36:0f:72:89:e1:4b:3b:5d:c2:7e:bf:f8:24:b1:
37:22:d2:89:69:3c:a4:9f:c3:b7:70:6f:3e:69:81:e1:19:a5:
c2:81:40:ec:37:13:a1:45:ec:f0:70:8e:f1:7a:62:4d:fd:c3:
f5:6c:c7:ea:1e:d1:1c:a2:75:5a:1f:ce:39:48:72:23:7f:04:
e5:a2:91:c5:07:71:ba:ef:6f:a9:ff:ab:38:34:90:c2:9e:e6:
b9:77:5f:7d:c2:d0:67:ea:7a:33:d2:1b:94:6f:5b:75:c7:dd:
8d:36:3c:a2:d6:7a:e6:0d:a4:7f:fe:e6:51:48:bd:79:59:f0:
7e:9d:66:ad:57:02:2a:7e:8a:fd:75:96:35:7a:3b:56:43:cd:
63:cb:9e:a6:11:ca:1c:70:e0:01:ea:67:0f:23:d1:9f:c4:d9:
43:8c:63:cf:c0:6d:7a:cb:41:75:91:c2:67:b4:66:3e:42:36:
59:13:c8:11:8d:2b:2e:17:69:6a:bc:cd:4a:f9:4d:c3:45:0a:
14:79:93:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2QprjhH8dK4bHQEXcC66MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZjFmMjE0ZmIyMmNjNTM2MTI4ZjVkZTRhYTAxN2E4Nzg4
MGYyODUwHhcNMjYwMzAyMDAwMDUzWhcNMjYwMzAzMDAwMDUzWjAzMTEwLwYDVQQD
Eyg1NDc3ZWZlZGIxZmFiYWJlNmM4ODEwNDU0MGZlYmFjZGYwOWE1OWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRrD0yLmbt63OKHzHQ4pV0Z9jWuT
s1a8kcxDaJ/jACr/M1sD31HHI4nKwf3jkSs21AtVP2ksm/7zWq+FzDxLTN1MkU0E
lgs/MSykW9yT9W+/7yP8UHKXrppOUzDAa/NqIuOzGlHpOq7Vrs5DSWNzYQfQeDc9
2sHLx+MPj3yI5jNhqVeFixzyEtHj4clusQ9a5/O5ltvux+ry/dqe5Cn9is1L7JGN
OjNjeT/pVhEHriv0xpdHK6UUS6J4h89Gp5eNXZ/Rma4a4DfjfTnR8+rBvcPSOnC+
n//G+8cOgUslJ311+QqitXxVTyyBy2p1lQI7YxVAivGWnmKF71gU42MnAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFR37+2x+rq+bIgQRUD+us3wmlmgMB8GA1UdIwQY
MBaAFMTx8hT7IsxTYSj13kqgF6h4gPKFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFBIeUZQc2l6Rk5oS1BYZVNxQVhxSGlBOG9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9lMmIzNDktZTc5Ni00ODY1LTgwNDAt
ZWNmNGY0MjBjOThhLzEveFBIeUZQc2l6Rk5oS1BYZVNxQVhxSGlBOG9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9lMmIzNDktZTc5Ni00ODY1LTgwNDAtZWNmNGY0MjBjOThh
LzEveFBIeUZQc2l6Rk5oS1BYZVNxQVhxSGlBOG9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHbaPIBD3
FIbV5foTDTLHjBlpbkiSKxjag9KLt0oWuja/HzY4VnowiDF4o742cKu5FovMrOFK
JwS2ZjYPconhSztdwn6/+CSxNyLSiWk8pJ/Dt3BvPmmB4RmlwoFA7DcToUXs8HCO
8XpiTf3D9WzH6h7RHKJ1Wh/OOUhyI38E5aKRxQdxuu9vqf+rODSQwp7muXdffcLQ
Z+p6M9IblG9bdcfdjTY8otZ65g2kf/7mUUi9eVnwfp1mrVcCKn6K/XWWNXo7VkPN
Y8uephHKHHDgAepnDyPRn8TZQ4xjz8BtestBdZHCZ7RmPkI2WRPIEY0rLhdparzN
SvlNw0UKFHmTiQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:28:45 2026 by rpki-client