Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
File: x1eZ_0M1t7GucYjt-lP9fiE-shY.mft (raw, json)
Hash identifier: t3yMxIBRND5I7mblTD4bJpiJ9j/nFp9XXdlDKfw0f2s=
Subject key identifier: 93:9B:AA:43:D4:FC:F4:E5:68:83:08:2B:5D:25:86:14:BA:74:E2:76
Authority key identifier: C7:57:99:FF:43:35:B7:B1:AE:71:88:ED:FA:53:FD:7E:21:3E:B2:16
Certificate issuer: /CN=c75799ff4335b7b1ae7188edfa53fd7e213eb216
Certificate serial: 019CAD22506C085131B2FC258D66DBC76BBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
Manifest number: 17CA
Signing time: Mon 02 Mar 2026 06:00:32 +0000
Manifest this update: Mon 02 Mar 2026 06:00:32 +0000
Manifest next update: Tue 03 Mar 2026 06:00:32 +0000
Files and hashes: 1: 7wQkjJzOFmhj4SlVLo-x26w_WTc.roa (hash: uBOYkM28EcQ5gB0Rh8GkUGQb+Ga2UZ8JgAHYGzfSXXI=)
2: uabo7ndnRWzy9MUqP3Ih5P2gxe8.roa (hash: j629zk7F2qIP3WUGuPA4LCpVgjs/1/AZWtVe090YvCY=)
3: x1eZ_0M1t7GucYjt-lP9fiE-shY.crl (hash: 8k8zLh0yOAbxfoEN+puvA2w1HeL16XWOmLhPmi/oMXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:50:6c:08:51:31:b2:fc:25:8d:66:db:c7:6b:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c75799ff4335b7b1ae7188edfa53fd7e213eb216
Validity
Not Before: Mar 2 06:00:32 2026 GMT
Not After : Mar 3 06:00:32 2026 GMT
Subject: CN=939baa43d4fcf4e56883082b5d258614ba74e276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:07:32:40:77:cd:10:ec:63:6b:9d:8e:c7:c5:
11:85:1f:c8:06:52:26:8f:1d:5e:2a:f2:0e:70:8a:
f6:27:12:28:db:b6:5d:00:c9:8f:97:4e:11:31:a5:
c8:b9:bb:a2:26:13:b4:e7:30:52:f7:e4:fa:72:ef:
d5:d0:a9:d4:c1:ec:9d:2b:5e:64:5a:54:2a:a6:95:
ee:ec:41:50:6e:8a:e3:11:f7:3d:a9:e4:c5:6f:1e:
ac:1b:64:5d:19:83:e4:44:00:6e:b1:8b:0f:f3:67:
a9:21:50:9b:90:58:e4:7c:64:91:87:b4:c3:1c:18:
d6:c8:52:3f:3e:ef:e0:9e:34:9f:39:1c:94:de:72:
e3:b9:7c:66:0d:b5:58:1f:38:38:bd:c0:53:73:c6:
5c:6d:37:0f:1f:2f:91:8d:d8:38:7f:f1:be:51:0c:
40:40:05:c4:0b:0f:43:88:50:6d:72:3f:a7:79:46:
09:34:8d:8c:8f:57:1d:32:98:71:75:37:14:9e:2b:
98:0e:3e:46:b7:e1:82:a1:f9:ac:89:81:fb:a9:4b:
b0:cd:fc:fd:f9:0e:a3:f9:af:a7:eb:a0:19:af:7b:
8d:21:98:fd:19:0f:77:03:e0:06:06:8f:8d:62:5c:
85:c3:60:43:35:fb:62:fe:5b:e7:45:3b:ca:bd:2f:
df:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:9B:AA:43:D4:FC:F4:E5:68:83:08:2B:5D:25:86:14:BA:74:E2:76
X509v3 Authority Key Identifier:
keyid:C7:57:99:FF:43:35:B7:B1:AE:71:88:ED:FA:53:FD:7E:21:3E:B2:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:62:3a:83:b1:af:40:62:f0:5f:09:66:5b:c7:ef:4d:52:1a:
c7:ce:ec:27:63:b3:29:0d:61:05:7c:6c:70:59:2b:12:02:09:
2c:cd:6c:ad:8d:2e:0d:76:01:27:85:db:cb:49:69:f6:eb:a1:
93:88:2f:4d:68:9d:9b:fd:a7:ee:cf:24:51:7e:ca:73:1e:7a:
f6:f2:46:3a:a1:d4:3b:5e:16:d6:43:5d:d1:7b:2c:74:5b:8e:
25:b1:4d:74:92:f8:99:97:4f:cb:3c:04:db:e5:e6:32:cb:ba:
48:78:59:c0:1d:78:8e:99:37:7e:7c:d5:a3:94:62:7b:54:e1:
42:50:42:90:fc:f1:e2:97:50:c9:28:2a:0a:96:bd:2d:c2:7a:
54:b9:eb:0c:da:bc:d9:1a:34:0e:2c:ac:95:25:e1:4d:26:19:
bf:18:df:74:2a:6a:05:ae:e6:a2:29:95:83:c1:bc:33:cf:20:
8a:7f:b2:a7:12:93:bd:af:41:80:d7:d7:52:64:5d:63:a4:6e:
3d:23:b7:5a:40:a1:bc:c6:35:74:47:6a:d4:2e:29:1b:84:25:
5d:02:ad:8a:b6:b0:d6:d0:a9:1b:64:f5:12:e1:64:f1:ae:65:
7e:ab:b4:0d:ca:80:fa:81:a9:36:04:30:a5:67:8f:70:e0:43:
19:4a:35:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytIlBsCFExsvwljWbbx2u+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NTc5OWZmNDMzNWI3YjFhZTcxODhlZGZhNTNmZDdlMjEz
ZWIyMTYwHhcNMjYwMzAyMDYwMDMyWhcNMjYwMzAzMDYwMDMyWjAzMTEwLwYDVQQD
Eyg5MzliYWE0M2Q0ZmNmNGU1Njg4MzA4MmI1ZDI1ODYxNGJhNzRlMjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwcyQHfNEOxja52Ox8URhR/IBlIm
jx1eKvIOcIr2JxIo27ZdAMmPl04RMaXIubuiJhO05zBS9+T6cu/V0KnUweydK15k
WlQqppXu7EFQborjEfc9qeTFbx6sG2RdGYPkRABusYsP82epIVCbkFjkfGSRh7TD
HBjWyFI/Pu/gnjSfORyU3nLjuXxmDbVYHzg4vcBTc8ZcbTcPHy+Rjdg4f/G+UQxA
QAXECw9DiFBtcj+neUYJNI2Mj1cdMphxdTcUniuYDj5Gt+GCofmsiYH7qUuwzfz9
+Q6j+a+n66AZr3uNIZj9GQ93A+AGBo+NYlyFw2BDNfti/lvnRTvKvS/fvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJObqkPU/PTlaIMIK10lhhS6dOJ2MB8GA1UdIwQY
MBaAFMdXmf9DNbexrnGI7fpT/X4hPrIWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDFlWl8wTTF0N0d1Y1lqdC1sUDlmaUUtc2hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xZTRjMDMtZjYxOS00N2EzLTgxYmQt
MzZlZjdhZWViZTNiLzEveDFlWl8wTTF0N0d1Y1lqdC1sUDlmaUUtc2hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8xZTRjMDMtZjYxOS00N2EzLTgxYmQtMzZlZjdhZWViZTNi
LzEveDFlWl8wTTF0N0d1Y1lqdC1sUDlmaUUtc2hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJGI6g7Gv
QGLwXwlmW8fvTVIax87sJ2OzKQ1hBXxscFkrEgIJLM1srY0uDXYBJ4Xby0lp9uuh
k4gvTWidm/2n7s8kUX7Kcx569vJGOqHUO14W1kNd0XssdFuOJbFNdJL4mZdPyzwE
2+XmMsu6SHhZwB14jpk3fnzVo5Rie1ThQlBCkPzx4pdQySgqCpa9LcJ6VLnrDNq8
2Ro0DiyslSXhTSYZvxjfdCpqBa7moimVg8G8M88gin+ypxKTva9BgNfXUmRdY6Ru
PSO3WkChvMY1dEdq1C4pG4QlXQKtiraw1tCpG2T1EuFk8a5lfqu0DcqA+oGpNgQw
pWePcOBDGUo1pA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:38:46 2026 by rpki-client