Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
File: XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft (raw, json)
Hash identifier: WFErHnikk4CG+l6p7woJt5Vu/irr0yjF6zi2QzUdwVg=
Subject key identifier: 79:92:05:C3:F5:A0:BA:56:2C:D4:FE:D9:B0:E9:6E:57:0C:45:B0:FE
Authority key identifier: 5E:06:6D:E9:82:9B:76:1E:DC:E1:71:E8:EA:3C:59:35:E4:4F:4E:9A
Certificate issuer: /CN=5e066de9829b761edce171e8ea3c5935e44f4e9a
Certificate serial: 019CABD9A3ADCCDB22BD5CA164534534BCF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
Manifest number: 077C
Signing time: Mon 02 Mar 2026 00:01:32 +0000
Manifest this update: Mon 02 Mar 2026 00:01:32 +0000
Manifest next update: Tue 03 Mar 2026 00:01:32 +0000
Files and hashes: 1: O9do_tpuJS2IYg238tFeLgPwuLo.roa (hash: inPkQd2M/OOC4cE+kZAGV36qocuoxkiJ2VIdZgql1s8=)
2: OQMR_FkQfBmNWWsOByMgzVQchtc.roa (hash: E+VXuwQXys0IVzb1O36G+Zcgxr0/sBSG/vjRsxKVhO0=)
3: XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl (hash: 6xqcXL/Yv25rgTZ8oc/cVLiP8qwBXeWFjBTvRJyBuf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:a3:ad:cc:db:22:bd:5c:a1:64:53:45:34:bc:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e066de9829b761edce171e8ea3c5935e44f4e9a
Validity
Not Before: Mar 2 00:01:32 2026 GMT
Not After : Mar 3 00:01:32 2026 GMT
Subject: CN=799205c3f5a0ba562cd4fed9b0e96e570c45b0fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:61:3e:04:01:df:a9:57:33:03:b3:31:a7:ee:
89:32:70:15:6f:72:e1:d0:48:50:3a:fa:3b:8e:29:
fa:31:30:d2:0b:58:d6:f5:89:d4:71:76:49:06:4a:
24:de:bf:32:47:7e:72:22:ca:eb:36:a4:07:79:56:
2a:86:87:89:b1:91:41:ea:1c:c2:3a:22:e4:e1:0e:
f5:67:50:b3:78:95:8c:11:69:55:50:20:eb:6c:24:
df:0d:9d:bb:0c:6f:d7:f0:9d:4f:24:1f:fa:a8:1d:
cd:9b:26:9b:20:89:b3:9f:7e:39:e1:7a:e8:1e:f9:
4f:bc:f8:b9:ba:b2:bd:65:b0:4f:48:ea:03:6c:fe:
02:3d:46:a8:ec:75:ca:00:7d:40:c0:5d:02:5e:1a:
cc:f8:5b:2f:8e:05:8f:a1:b0:63:f2:46:01:96:3d:
79:8a:a1:e3:b5:bc:06:28:f5:7f:9d:a1:90:8a:7c:
42:5d:19:e7:c6:ed:d3:ae:85:72:e5:e5:49:5e:c1:
fa:97:e4:d0:7b:19:89:b3:7e:1f:af:92:0d:55:71:
d7:4c:a3:df:a5:62:94:fb:2d:b3:ce:f8:fe:ef:12:
8e:cb:4e:2b:57:72:f3:33:e5:7b:76:e8:7e:48:65:
ba:20:6a:91:ba:6c:a5:8d:1d:84:5c:2d:fe:bd:ac:
85:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:92:05:C3:F5:A0:BA:56:2C:D4:FE:D9:B0:E9:6E:57:0C:45:B0:FE
X509v3 Authority Key Identifier:
keyid:5E:06:6D:E9:82:9B:76:1E:DC:E1:71:E8:EA:3C:59:35:E4:4F:4E:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:8c:57:40:4d:5b:e8:cc:a3:80:54:f2:f6:c6:b5:f3:a0:7f:
61:a8:ea:71:af:2f:0a:a8:2b:23:c8:93:84:b7:67:96:ea:c8:
c4:d9:49:0c:16:b6:33:df:d1:24:ad:52:7c:25:b0:14:c1:c5:
2b:37:47:7a:91:61:1e:dd:14:f5:0b:76:8e:ad:33:01:49:e8:
aa:94:7f:40:30:4f:09:3c:6a:21:ec:de:22:38:92:c4:c0:5a:
de:65:2e:6a:c9:97:77:ea:38:f9:4b:5a:ef:48:94:ce:97:bb:
c3:7f:02:5a:a1:18:97:af:5e:80:b2:4d:d0:99:18:5b:19:bd:
4c:31:7f:5f:92:28:6b:7f:ec:7c:7e:4f:ed:c9:3f:92:6c:46:
68:b9:57:2c:a7:51:89:da:cf:83:0f:ff:70:46:21:e7:60:fb:
ff:4c:2a:f1:2c:01:5b:21:50:1c:f8:e9:51:2c:4d:08:3a:a7:
5e:61:6d:10:2f:ab:12:6c:d0:ec:2a:f7:4b:5b:a0:89:44:63:
53:d4:6e:11:8e:92:8b:e3:10:4f:0b:ce:ec:3e:e9:2c:b9:74:
ff:72:5e:ef:b7:c1:0e:cc:3e:b4:0a:60:1f:92:ed:17:8f:3b:
03:05:c0:32:1b:08:d1:ed:de:f2:64:fe:20:9c:b3:60:a2:45:
9b:5f:dd:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2aOtzNsivVyhZFNFNLzzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMDY2ZGU5ODI5Yjc2MWVkY2UxNzFlOGVhM2M1OTM1ZTQ0
ZjRlOWEwHhcNMjYwMzAyMDAwMTMyWhcNMjYwMzAzMDAwMTMyWjAzMTEwLwYDVQQD
Eyg3OTkyMDVjM2Y1YTBiYTU2MmNkNGZlZDliMGU5NmU1NzBjNDViMGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02E+BAHfqVczA7Mxp+6JMnAVb3Lh
0EhQOvo7jin6MTDSC1jW9YnUcXZJBkok3r8yR35yIsrrNqQHeVYqhoeJsZFB6hzC
OiLk4Q71Z1CzeJWMEWlVUCDrbCTfDZ27DG/X8J1PJB/6qB3NmyabIImzn3454Xro
HvlPvPi5urK9ZbBPSOoDbP4CPUao7HXKAH1AwF0CXhrM+FsvjgWPobBj8kYBlj15
iqHjtbwGKPV/naGQinxCXRnnxu3TroVy5eVJXsH6l+TQexmJs34fr5INVXHXTKPf
pWKU+y2zzvj+7xKOy04rV3LzM+V7duh+SGW6IGqRumyljR2EXC3+vayFfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHmSBcP1oLpWLNT+2bDpblcMRbD+MB8GA1UdIwQY
MBaAFF4GbemCm3Ye3OFx6Oo8WTXkT06aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGdadDZZS2JkaDdjNFhIbzZqeFpOZVJQVHBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jYWM5YzQtZjliYi00NmQ0LWJiNjIt
NDc1YWRmM2FhN2IxLzEvWGdadDZZS2JkaDdjNFhIbzZqeFpOZVJQVHBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9jYWM5YzQtZjliYi00NmQ0LWJiNjItNDc1YWRmM2FhN2Ix
LzEvWGdadDZZS2JkaDdjNFhIbzZqeFpOZVJQVHBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIIxXQE1b
6MyjgFTy9sa186B/Yajqca8vCqgrI8iThLdnlurIxNlJDBa2M9/RJK1SfCWwFMHF
KzdHepFhHt0U9Qt2jq0zAUnoqpR/QDBPCTxqIezeIjiSxMBa3mUuasmXd+o4+Uta
70iUzpe7w38CWqEYl69egLJN0JkYWxm9TDF/X5Ioa3/sfH5P7ck/kmxGaLlXLKdR
idrPgw//cEYh52D7/0wq8SwBWyFQHPjpUSxNCDqnXmFtEC+rEmzQ7Cr3S1ugiURj
U9RuEY6Si+MQTwvO7D7pLLl0/3Je77fBDsw+tApgH5LtF487AwXAMhsI0e3e8mT+
IJyzYKJFm1/dIQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:00:37 2026 by rpki-client