Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
File: XTcKSLWfuBFJXxHElzRILyKxo5I.mft (raw, json)
Hash identifier: G84KHTqTl+92uIuybEq/TZ+9V4VVUoem410Rt783IcM=
Subject key identifier: 30:47:2B:EE:14:54:69:72:32:34:09:8B:CA:4B:04:13:4C:E9:6A:B4
Authority key identifier: 5D:37:0A:48:B5:9F:B8:11:49:5F:11:C4:97:34:48:2F:22:B1:A3:92
Certificate issuer: /CN=5d370a48b59fb811495f11c49734482f22b1a392
Certificate serial: 019CACEB7579B61740E2064894F3ACD057E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
Manifest number: 1550
Signing time: Mon 02 Mar 2026 05:00:38 +0000
Manifest this update: Mon 02 Mar 2026 05:00:38 +0000
Manifest next update: Tue 03 Mar 2026 05:00:38 +0000
Files and hashes: 1: IcvWLfVUU_qQmUluK1ZJPZKwDUE.roa (hash: 5KtWCkiCc0spLueO4XERS0KkPgjFXkSMZZzwBDaPptQ=)
2: XTcKSLWfuBFJXxHElzRILyKxo5I.crl (hash: W0izOuoCeTtdELtDi7n4ds008fsCCigXBUsAiMbCVK4=)
3: iTA00PhnwnNaKrIdb7Sf-BOFNWU.roa (hash: VqBJga5+IchMfnf1RmPYAK4MIX90SZMIG8XmiqppDnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:75:79:b6:17:40:e2:06:48:94:f3:ac:d0:57:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d370a48b59fb811495f11c49734482f22b1a392
Validity
Not Before: Mar 2 05:00:38 2026 GMT
Not After : Mar 3 05:00:38 2026 GMT
Subject: CN=30472bee145469723234098bca4b04134ce96ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e3:03:5f:af:5f:59:8d:02:b5:50:b8:2c:ed:
77:57:7e:13:9d:7b:7c:09:61:f7:80:df:4f:2d:b5:
46:d3:36:6e:74:79:13:ea:e5:79:ab:bd:5e:33:be:
29:21:b7:bc:68:92:ae:ca:db:8b:3d:08:7b:c5:07:
3d:ba:70:63:6f:35:4b:fa:ba:2f:84:3d:7c:49:5b:
5a:b1:80:95:f2:05:ea:54:b0:ee:ba:7f:2b:93:39:
73:1a:f8:13:fb:7a:4b:b1:f4:00:dc:ba:eb:86:4a:
08:f2:98:d2:22:33:46:63:52:27:fe:3a:05:2a:11:
db:c4:c0:2c:9d:a5:2a:f9:41:a9:6b:98:9a:5d:40:
ff:5c:b4:34:ad:8e:3f:76:c0:7c:cd:57:19:dd:be:
cd:cf:d8:6d:67:a4:8a:75:e9:b2:ce:a0:14:c0:ce:
5a:9f:cc:a1:5e:b6:8c:55:66:4d:46:f5:11:a4:84:
41:49:a3:ce:2c:c6:15:8f:a6:12:fc:d1:bd:58:3c:
90:e8:cc:2e:d1:c8:b6:d9:af:c7:b0:02:93:4e:4f:
8a:d8:c5:db:bd:eb:68:8f:28:d2:42:e3:63:d2:72:
d5:f4:92:1e:b8:2a:a4:87:b0:42:72:df:56:46:1f:
af:d4:af:31:2d:32:5c:12:f7:16:df:ae:e7:5b:44:
71:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:47:2B:EE:14:54:69:72:32:34:09:8B:CA:4B:04:13:4C:E9:6A:B4
X509v3 Authority Key Identifier:
keyid:5D:37:0A:48:B5:9F:B8:11:49:5F:11:C4:97:34:48:2F:22:B1:A3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:30:ff:bf:c8:c2:57:e2:4e:9a:bc:a3:2b:35:49:18:14:4f:
3b:a2:5b:c8:44:ab:8a:81:20:9f:64:86:c5:8e:e3:a7:54:8e:
6e:5e:87:64:50:dc:af:e9:cc:d8:02:f5:18:30:dd:8f:0e:bb:
19:5c:2d:4a:dd:30:96:bb:d0:1a:24:7c:39:74:ae:f2:18:ea:
47:d5:49:bc:c9:68:90:be:c9:d3:9f:f1:c3:4a:f5:6d:55:c0:
26:c9:4e:b6:16:84:02:18:fe:49:c4:e6:ba:2b:a4:92:06:93:
b4:8b:2e:68:22:12:60:7d:d1:85:19:57:2a:4a:45:bb:97:fc:
86:47:3b:0f:03:c7:64:f9:e1:52:dd:5a:f0:2e:85:15:4b:cc:
2d:06:42:70:a9:20:8e:d0:cd:42:0b:d0:cd:e2:d8:87:31:fe:
53:44:dd:67:fb:ae:f0:be:e0:ee:fd:a5:81:9e:d0:c0:b4:28:
b7:63:1f:3e:0f:65:8c:b7:3f:48:30:24:31:84:aa:4e:ef:1d:
08:48:99:70:45:a7:03:9c:45:a3:7d:3a:54:18:f1:60:42:3e:
68:0d:c8:b8:cf:07:b4:e0:1b:8c:a9:11:04:3c:1c:3f:45:05:
1d:c0:0d:2a:d7:8e:69:03:5e:e3:72:9c:da:c8:11:63:39:e1:
b5:ae:c3:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZys63V5thdA4gZIlPOs0FfnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkMzcwYTQ4YjU5ZmI4MTE0OTVmMTFjNDk3MzQ0ODJmMjJi
MWEzOTIwHhcNMjYwMzAyMDUwMDM4WhcNMjYwMzAzMDUwMDM4WjAzMTEwLwYDVQQD
EygzMDQ3MmJlZTE0NTQ2OTcyMzIzNDA5OGJjYTRiMDQxMzRjZTk2YWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+MDX69fWY0CtVC4LO13V34TnXt8
CWH3gN9PLbVG0zZudHkT6uV5q71eM74pIbe8aJKuytuLPQh7xQc9unBjbzVL+rov
hD18SVtasYCV8gXqVLDuun8rkzlzGvgT+3pLsfQA3LrrhkoI8pjSIjNGY1In/joF
KhHbxMAsnaUq+UGpa5iaXUD/XLQ0rY4/dsB8zVcZ3b7Nz9htZ6SKdemyzqAUwM5a
n8yhXraMVWZNRvURpIRBSaPOLMYVj6YS/NG9WDyQ6Mwu0ci22a/HsAKTTk+K2MXb
vetojyjSQuNj0nLV9JIeuCqkh7BCct9WRh+v1K8xLTJcEvcW367nW0RxqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDBHK+4UVGlyMjQJi8pLBBNM6Wq0MB8GA1UdIwQY
MBaAFF03Cki1n7gRSV8RxJc0SC8isaOSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFRjS1NMV2Z1QkZKWHhIRWx6UklMeUt4bzVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83MDg1OGEtNjM5NS00MDJkLTlhY2Ut
ZTI3MjAxMzAyNmI0LzEvWFRjS1NMV2Z1QkZKWHhIRWx6UklMeUt4bzVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS83MDg1OGEtNjM5NS00MDJkLTlhY2UtZTI3MjAxMzAyNmI0
LzEvWFRjS1NMV2Z1QkZKWHhIRWx6UklMeUt4bzVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKzD/v8jC
V+JOmryjKzVJGBRPO6JbyESrioEgn2SGxY7jp1SObl6HZFDcr+nM2AL1GDDdjw67
GVwtSt0wlrvQGiR8OXSu8hjqR9VJvMlokL7J05/xw0r1bVXAJslOthaEAhj+ScTm
uiukkgaTtIsuaCISYH3RhRlXKkpFu5f8hkc7DwPHZPnhUt1a8C6FFUvMLQZCcKkg
jtDNQgvQzeLYhzH+U0TdZ/uu8L7g7v2lgZ7QwLQot2MfPg9ljLc/SDAkMYSqTu8d
CEiZcEWnA5xFo306VBjxYEI+aA3IuM8HtOAbjKkRBDwcP0UFHcANKteOaQNe43Kc
2sgRYznhta7DRg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:20:51 2026 by rpki-client