Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.mft
File: S_xaKUEPH_z03ipacFj1FiCzC3k.mft (raw, json)
Hash identifier: 91JRhVsbroSS+mPyNGIRdb0v9Kje5aZfJOyTSUV1bUA=
Subject key identifier: 44:8C:96:52:2E:78:F1:CB:7A:85:B0:0F:16:12:59:6F:E1:64:1E:D7
Authority key identifier: 4B:FC:5A:29:41:0F:1F:FC:F4:DE:2A:5A:70:58:F5:16:20:B3:0B:79
Certificate issuer: /CN=4bfc5a29410f1ffcf4de2a5a7058f51620b30b79
Certificate serial: 019CABD9EEE0BEBC1514EAF407EEDDA5C8FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_xaKUEPH_z03ipacFj1FiCzC3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.mft
Manifest number: 0FF9
Signing time: Mon 02 Mar 2026 00:01:52 +0000
Manifest this update: Mon 02 Mar 2026 00:01:52 +0000
Manifest next update: Tue 03 Mar 2026 00:01:52 +0000
Files and hashes: 1: S_xaKUEPH_z03ipacFj1FiCzC3k.crl (hash: GYOxR746bpcvUXwH7DCLHvq9of3jyDrt9VMkbBr4WZQ=)
2: fcl-EttwXxzdVTjzavFgoRNlwJI.roa (hash: aFrd+hEOx0zldgqlIlCbagrbwCzJhdbfMgtfzgPtR+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_xaKUEPH_z03ipacFj1FiCzC3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:ee:e0:be:bc:15:14:ea:f4:07:ee:dd:a5:c8:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bfc5a29410f1ffcf4de2a5a7058f51620b30b79
Validity
Not Before: Mar 2 00:01:52 2026 GMT
Not After : Mar 3 00:01:52 2026 GMT
Subject: CN=448c96522e78f1cb7a85b00f1612596fe1641ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b7:3e:ad:7a:ec:66:21:2f:97:24:ee:57:23:
94:b5:05:a8:b0:7e:58:77:de:e7:d8:b1:20:86:2e:
77:89:c8:a3:6f:b7:7d:cc:2a:4c:fc:7c:ae:51:bb:
cf:8f:3d:7b:b9:74:51:14:5f:30:de:75:10:62:77:
d3:5e:56:d5:de:3a:bf:ac:29:66:3e:1a:51:ce:f4:
9b:30:7a:c6:4c:7e:05:e5:55:54:a0:ef:de:09:9d:
33:10:80:ba:ea:80:45:91:14:f3:7e:b0:28:23:c0:
cd:6b:78:a9:ef:03:c0:da:cf:99:3b:98:ba:65:4e:
66:be:1c:7d:c4:50:ae:f7:8e:36:1c:0e:20:73:36:
01:8b:b4:e4:e8:56:90:f0:ba:45:d8:39:47:59:30:
e6:c1:20:bb:4e:2c:9b:12:95:9b:31:37:55:40:26:
d3:45:00:38:51:b6:e5:08:60:7e:fe:05:1b:e7:52:
91:d0:7e:ea:94:6d:a7:d7:8e:30:c9:5e:30:a4:bb:
e4:69:88:aa:79:49:23:33:87:bb:04:22:6b:b1:99:
b6:8e:8c:59:d6:cb:8a:37:3b:71:54:fc:ae:4d:71:
bf:cb:a7:b7:5e:e1:24:0d:35:58:2e:99:2b:e7:01:
e0:98:e8:13:8f:c0:73:1d:46:4a:f2:83:e0:36:29:
21:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:8C:96:52:2E:78:F1:CB:7A:85:B0:0F:16:12:59:6F:E1:64:1E:D7
X509v3 Authority Key Identifier:
keyid:4B:FC:5A:29:41:0F:1F:FC:F4:DE:2A:5A:70:58:F5:16:20:B3:0B:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_xaKUEPH_z03ipacFj1FiCzC3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:17:e0:d2:9c:ee:ea:f0:62:77:7d:c6:d9:7b:66:eb:e3:4f:
e0:23:d6:87:62:10:1a:4d:f5:e9:91:41:16:b3:06:2c:29:74:
f4:ea:30:05:8c:28:f1:00:05:e7:77:b8:48:fa:27:06:f2:66:
0e:43:1c:8c:0b:24:b5:47:49:89:ef:06:3b:6c:2a:4b:fc:ed:
ff:82:3f:01:64:55:b2:0e:fc:c2:36:ab:d6:69:04:d8:bd:e9:
d7:0e:9b:6e:53:85:08:b5:e0:79:34:49:63:e4:66:69:68:32:
4a:e1:65:e5:ca:5d:7b:4d:a0:5a:b9:63:1a:de:e0:0a:47:08:
2f:3c:db:5d:ec:05:6d:69:f1:64:d7:e6:9e:23:4d:97:05:45:
13:6e:c2:e5:08:89:64:09:1f:e2:0b:d0:1c:b9:46:4e:d4:e5:
b4:b7:3e:89:bf:44:4a:29:65:83:72:af:9f:bb:ef:84:38:b5:
c3:89:15:c8:9b:0d:dd:19:7b:25:ed:9c:34:3d:36:0c:e0:7f:
07:8a:ed:8f:15:f1:d0:57:91:14:94:e7:c2:05:a2:7b:62:71:
32:ba:d9:60:11:86:ee:cb:7d:f3:fd:32:69:44:43:10:e5:60:
8a:07:46:8a:26:2a:52:42:8c:e2:17:1d:85:c9:66:9e:e4:d0:
08:2c:88:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2e7gvrwVFOr0B+7dpcj8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZmM1YTI5NDEwZjFmZmNmNGRlMmE1YTcwNThmNTE2MjBi
MzBiNzkwHhcNMjYwMzAyMDAwMTUyWhcNMjYwMzAzMDAwMTUyWjAzMTEwLwYDVQQD
Eyg0NDhjOTY1MjJlNzhmMWNiN2E4NWIwMGYxNjEyNTk2ZmUxNjQxZWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLc+rXrsZiEvlyTuVyOUtQWosH5Y
d97n2LEghi53icijb7d9zCpM/HyuUbvPjz17uXRRFF8w3nUQYnfTXlbV3jq/rClm
PhpRzvSbMHrGTH4F5VVUoO/eCZ0zEIC66oBFkRTzfrAoI8DNa3ip7wPA2s+ZO5i6
ZU5mvhx9xFCu9442HA4gczYBi7Tk6FaQ8LpF2DlHWTDmwSC7TiybEpWbMTdVQCbT
RQA4UbblCGB+/gUb51KR0H7qlG2n144wyV4wpLvkaYiqeUkjM4e7BCJrsZm2joxZ
1suKNztxVPyuTXG/y6e3XuEkDTVYLpkr5wHgmOgTj8BzHUZK8oPgNikhMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFESMllIuePHLeoWwDxYSWW/hZB7XMB8GA1UdIwQY
MBaAFEv8WilBDx/89N4qWnBY9RYgswt5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU194YUtVRVBIX3owM2lwYWNGajFGaUN6QzNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8zYjJiZmQtNjBlYi00Y2JmLTlmN2Yt
MTM2MjU3ZTMwNzZlLzEvU194YUtVRVBIX3owM2lwYWNGajFGaUN6QzNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8zYjJiZmQtNjBlYi00Y2JmLTlmN2YtMTM2MjU3ZTMwNzZl
LzEvU194YUtVRVBIX3owM2lwYWNGajFGaUN6QzNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAghfg0pzu
6vBid33G2Xtm6+NP4CPWh2IQGk316ZFBFrMGLCl09OowBYwo8QAF53e4SPonBvJm
DkMcjAsktUdJie8GO2wqS/zt/4I/AWRVsg78wjar1mkE2L3p1w6bblOFCLXgeTRJ
Y+RmaWgySuFl5cpde02gWrljGt7gCkcILzzbXewFbWnxZNfmniNNlwVFE27C5QiJ
ZAkf4gvQHLlGTtTltLc+ib9ESillg3Kvn7vvhDi1w4kVyJsN3Rl7Je2cND02DOB/
B4rtjxXx0FeRFJTnwgWie2JxMrrZYBGG7st98/0yaURDEOVgigdGiiYqUkKM4hcd
hclmnuTQCCyI3g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:10 2026 by rpki-client