Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
File: xRGedSADkvGi8IvpkHMtgEeyiwk.mft (raw, json)
Hash identifier: DrnsQGUeFNHhRDAYyWqcmiRVeJT0L6NbIChOSKt9aYk=
Subject key identifier: B4:2E:6E:5F:A2:C6:9F:19:2E:1F:90:BC:C7:88:1B:85:33:6D:3F:D7
Authority key identifier: C5:11:9E:75:20:03:92:F1:A2:F0:8B:E9:90:73:2D:80:47:B2:8B:09
Certificate issuer: /CN=c5119e75200392f1a2f08be990732d8047b28b09
Certificate serial: 019CAAFD0CE45C01EDC9BC0ECB4792407FC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 20:00:36 +0000
Manifest this update: Sun 01 Mar 2026 20:00:36 +0000
Manifest next update: Mon 02 Mar 2026 20:00:36 +0000
Files and hashes: 1: 5anfbEI-jaspGpdleX4CIuBsAPM.roa (hash: Hflhls/SMNWgATvG3eTRW4iTnqTJ1x1t05I3Ae6Iogc=)
2: xRGedSADkvGi8IvpkHMtgEeyiwk.crl (hash: CABEgVXLrQy6KesNxN1xd2zGrktMIK1Jlb0Qc18qiq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:0c:e4:5c:01:ed:c9:bc:0e:cb:47:92:40:7f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5119e75200392f1a2f08be990732d8047b28b09
Validity
Not Before: Mar 1 20:00:36 2026 GMT
Not After : Mar 2 20:00:36 2026 GMT
Subject: CN=b42e6e5fa2c69f192e1f90bcc7881b85336d3fd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:34:92:55:41:55:3d:15:ba:b6:df:2f:72:5d:
28:29:43:d7:f4:09:fb:46:e8:2c:9f:91:e3:56:2a:
c4:f2:fa:0f:1c:d4:72:45:ec:11:2b:3d:15:de:54:
ff:dc:8e:52:f5:b9:08:db:df:7e:a3:88:38:39:34:
93:ea:0f:ad:47:f3:37:3d:61:e9:ab:33:f1:cb:52:
e7:8a:f2:03:4b:5c:ee:eb:a3:dc:8c:4e:38:9a:e7:
ee:a5:3d:ca:9d:a9:39:8f:21:cd:0d:65:0d:d8:8b:
4c:b2:8c:f9:26:a9:29:1a:15:1b:4e:14:c4:9c:02:
10:99:d1:6c:73:3e:e8:36:1d:de:75:ce:17:d7:9d:
56:06:31:43:ef:91:2a:58:ce:1c:61:a5:97:28:05:
a1:d3:e3:36:b4:1f:29:75:ec:12:87:fc:e3:18:c0:
38:8b:33:a0:ad:f2:26:0b:5e:e0:18:f1:c0:7c:f2:
22:94:e8:8d:c2:aa:bd:38:3c:7c:04:63:61:2a:54:
3e:db:14:b2:98:8d:89:e3:1c:2a:5c:e0:01:0d:8e:
7c:9b:60:f6:c9:ed:f3:71:2f:9e:e2:45:32:66:84:
23:e1:d0:46:ee:23:ed:1f:63:84:12:f5:dc:37:54:
9a:b4:b0:ee:d0:5f:db:a9:f9:40:40:e5:06:13:12:
96:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:2E:6E:5F:A2:C6:9F:19:2E:1F:90:BC:C7:88:1B:85:33:6D:3F:D7
X509v3 Authority Key Identifier:
keyid:C5:11:9E:75:20:03:92:F1:A2:F0:8B:E9:90:73:2D:80:47:B2:8B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:65:f7:cf:c2:fb:d7:fc:94:cc:ff:f8:87:d7:0c:e3:28:b2:
c2:fd:95:27:1e:a9:a4:82:11:96:98:14:bb:b4:ad:be:82:5a:
54:c9:f0:10:29:19:33:83:07:c9:34:e9:f4:bb:f4:a7:b7:e8:
7c:f8:bf:cb:c7:07:83:39:13:73:57:e4:19:86:34:5c:18:45:
64:eb:b1:4d:4b:a4:0e:35:93:c4:81:a7:19:e8:c6:60:fd:25:
ec:41:25:8a:2a:96:1b:08:42:da:4b:0c:fa:9f:f0:e4:bb:41:
46:58:12:86:75:24:1c:08:a0:17:8a:9a:32:51:13:ff:83:7a:
ed:68:aa:1b:35:3e:27:61:43:28:24:4c:72:cd:5c:7c:bc:3a:
ed:e6:a9:0c:a2:c7:7d:a2:b7:07:48:44:27:b5:4f:1e:e2:a7:
18:9e:9b:ae:3f:a9:6a:2c:8e:da:b7:f1:e4:35:f7:13:8e:37:
85:06:4e:93:ca:36:e4:b1:17:b3:58:7b:13:67:3a:32:ea:df:
e7:13:cc:95:a9:4d:3f:6a:36:0a:35:92:6e:af:48:28:23:8d:
65:68:da:10:74:67:42:6f:79:83:d6:83:a1:6b:8e:bf:8a:c9:
ac:cc:3b:5a:c9:26:ac:7a:1b:c4:75:46:fb:8b:65:0b:09:8a:
01:ec:e1:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/QzkXAHtybwOy0eSQH/AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MTE5ZTc1MjAwMzkyZjFhMmYwOGJlOTkwNzMyZDgwNDdi
MjhiMDkwHhcNMjYwMzAxMjAwMDM2WhcNMjYwMzAyMjAwMDM2WjAzMTEwLwYDVQQD
EyhiNDJlNmU1ZmEyYzY5ZjE5MmUxZjkwYmNjNzg4MWI4NTMzNmQzZmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDSSVUFVPRW6tt8vcl0oKUPX9An7
Rugsn5HjVirE8voPHNRyRewRKz0V3lT/3I5S9bkI299+o4g4OTST6g+tR/M3PWHp
qzPxy1LnivIDS1zu66PcjE44mufupT3Knak5jyHNDWUN2ItMsoz5JqkpGhUbThTE
nAIQmdFscz7oNh3edc4X151WBjFD75EqWM4cYaWXKAWh0+M2tB8pdewSh/zjGMA4
izOgrfImC17gGPHAfPIilOiNwqq9ODx8BGNhKlQ+2xSymI2J4xwqXOABDY58m2D2
ye3zcS+e4kUyZoQj4dBG7iPtH2OEEvXcN1SatLDu0F/bqflAQOUGExKW1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQubl+ixp8ZLh+QvMeIG4UzbT/XMB8GA1UdIwQY
MBaAFMURnnUgA5LxovCL6ZBzLYBHsosJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFJHZWRTQURrdkdpOEl2cGtITXRnRWV5aXdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8zMjBiYWYtNTlkYy00NmEyLWFmN2Qt
ZDgxOWNlZDVkMzVhLzEveFJHZWRTQURrdkdpOEl2cGtITXRnRWV5aXdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy8zMjBiYWYtNTlkYy00NmEyLWFmN2QtZDgxOWNlZDVkMzVh
LzEveFJHZWRTQURrdkdpOEl2cGtITXRnRWV5aXdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa2X3z8L7
1/yUzP/4h9cM4yiywv2VJx6ppIIRlpgUu7StvoJaVMnwECkZM4MHyTTp9Lv0p7fo
fPi/y8cHgzkTc1fkGYY0XBhFZOuxTUukDjWTxIGnGejGYP0l7EEliiqWGwhC2ksM
+p/w5LtBRlgShnUkHAigF4qaMlET/4N67WiqGzU+J2FDKCRMcs1cfLw67eapDKLH
faK3B0hEJ7VPHuKnGJ6brj+paiyO2rfx5DX3E443hQZOk8o25LEXs1h7E2c6Murf
5xPMlalNP2o2CjWSbq9IKCONZWjaEHRnQm95g9aDoWuOv4rJrMw7WskmrHobxHVG
+4tlCwmKAezhNA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:43:34 2026 by rpki-client