Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.mft
File: XOsOvYeLd9QvLKndCPcMMjxdA9s.mft (raw, json)
Hash identifier: m9/ejFiHJgGJttgc3u9mXx95hXNLXe7PJvPq+gSr7AI=
Subject key identifier: 78:B9:93:8D:5B:5F:40:07:FF:CD:FD:36:5F:DA:73:02:1A:79:D7:08
Authority key identifier: 5C:EB:0E:BD:87:8B:77:D4:2F:2C:A9:DD:08:F7:0C:32:3C:5D:03:DB
Certificate issuer: /CN=5ceb0ebd878b77d42f2ca9dd08f70c323c5d03db
Certificate serial: 019CAEA3CCE6D4CA72F6FFD23114E29717A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XOsOvYeLd9QvLKndCPcMMjxdA9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.mft
Manifest number: 1167
Signing time: Mon 02 Mar 2026 13:01:36 +0000
Manifest this update: Mon 02 Mar 2026 13:01:36 +0000
Manifest next update: Tue 03 Mar 2026 13:01:36 +0000
Files and hashes: 1: 3dTGZIR5xNjpUjR4hZwNlOd2Bsc.roa (hash: f2BLKcRZVhnRXkQ4qW92OvGurLauRFZKARhH1pRyUeg=)
2: XOsOvYeLd9QvLKndCPcMMjxdA9s.crl (hash: WHdDWWoMDHRgAYM/1biUiF8xJTBucgmEffFWGdNf/hw=)
3: f-TtHG-5pZXW87X0GbscTUNU96w.roa (hash: lCxogCHK18lqz8wrch+QF7zhq9f/HEWgIBotwp+AlGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XOsOvYeLd9QvLKndCPcMMjxdA9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:cc:e6:d4:ca:72:f6:ff:d2:31:14:e2:97:17:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ceb0ebd878b77d42f2ca9dd08f70c323c5d03db
Validity
Not Before: Mar 2 13:01:36 2026 GMT
Not After : Mar 3 13:01:36 2026 GMT
Subject: CN=78b9938d5b5f4007ffcdfd365fda73021a79d708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7a:f0:c5:76:f4:07:53:d6:d4:84:b0:df:63:
28:f9:60:30:dc:e6:60:27:2c:6a:f2:a9:54:d6:2c:
90:be:f8:b1:47:fe:d7:1c:81:6e:8c:bb:e2:c9:b0:
ce:2b:06:44:bb:87:fb:77:f5:e4:94:da:e4:b2:eb:
a3:f6:ac:03:07:2d:ff:af:65:be:00:78:06:6a:eb:
09:a8:0e:be:d0:98:cf:25:7b:1e:c9:b0:66:63:cd:
86:82:34:45:48:5f:e3:1a:75:52:a2:68:6e:1b:60:
f4:a1:4b:da:7e:4b:43:c9:7d:30:2d:c0:ea:4d:ac:
1a:59:18:98:d3:ab:d3:4c:59:de:4a:b0:8c:eb:17:
af:57:08:1e:f4:08:69:13:c3:aa:a0:08:78:f1:07:
94:e5:54:0b:5f:c8:ad:b9:0e:8c:bc:bf:03:5d:2c:
a9:f6:ba:7c:81:38:34:b4:04:07:e2:fa:df:69:72:
15:e3:ea:77:fc:4e:1e:ff:be:43:45:8e:7c:7e:55:
87:28:a1:6a:08:0e:f1:fe:97:3e:89:3b:93:7b:0f:
a5:7c:5a:91:53:26:d4:0d:7d:48:b8:f7:8d:0c:c1:
c0:00:db:27:44:e5:38:62:69:a6:13:b2:3c:59:dc:
bd:0a:11:53:fe:5d:36:96:9b:08:a7:b5:c1:b5:ba:
6b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B9:93:8D:5B:5F:40:07:FF:CD:FD:36:5F:DA:73:02:1A:79:D7:08
X509v3 Authority Key Identifier:
keyid:5C:EB:0E:BD:87:8B:77:D4:2F:2C:A9:DD:08:F7:0C:32:3C:5D:03:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XOsOvYeLd9QvLKndCPcMMjxdA9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:69:83:4a:0b:af:46:88:4a:d7:93:18:a5:c1:f1:bf:1f:f8:
3d:4e:e6:d1:c7:1f:8f:0e:73:32:20:8c:4a:d4:3f:50:6a:2e:
f1:e0:e5:25:5d:de:66:97:fb:e0:69:38:75:da:d7:7f:d5:77:
c2:43:b8:13:66:49:5f:97:9c:5b:e2:b3:85:80:d7:bf:22:e0:
b0:48:7e:7e:91:07:95:f1:73:70:f7:c9:55:94:40:29:0e:69:
29:60:db:38:d1:8d:e6:b4:d4:ba:ab:8a:62:54:92:84:8a:8b:
74:dc:4b:29:42:0a:37:3d:e9:d4:b6:2a:6b:76:08:78:a1:a7:
50:3b:17:dc:6d:69:46:6b:d1:e5:61:97:94:31:ea:8f:11:27:
90:e2:65:43:25:e3:25:17:bc:f5:76:5e:c8:e5:24:99:d1:ad:
66:52:ca:0b:77:a6:80:a9:e0:52:0e:b7:50:60:1e:14:19:83:
ea:1c:49:7e:a3:dd:38:33:e1:ed:90:6a:06:47:48:bc:d1:23:
6f:85:77:15:bd:b9:d9:36:76:59:20:46:6e:b5:13:23:16:40:
f6:9b:1b:e4:21:05:e7:0e:af:4b:96:99:d9:39:e3:b5:8a:9b:
09:4f:0c:d4:05:70:f2:79:57:70:90:8c:f1:31:0d:12:00:6d:
ab:bc:83:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuo8zm1Mpy9v/SMRTilxegMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZWIwZWJkODc4Yjc3ZDQyZjJjYTlkZDA4ZjcwYzMyM2M1
ZDAzZGIwHhcNMjYwMzAyMTMwMTM2WhcNMjYwMzAzMTMwMTM2WjAzMTEwLwYDVQQD
Eyg3OGI5OTM4ZDViNWY0MDA3ZmZjZGZkMzY1ZmRhNzMwMjFhNzlkNzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nrwxXb0B1PW1ISw32Mo+WAw3OZg
Jyxq8qlU1iyQvvixR/7XHIFujLviybDOKwZEu4f7d/XklNrksuuj9qwDBy3/r2W+
AHgGausJqA6+0JjPJXseybBmY82GgjRFSF/jGnVSomhuG2D0oUvafktDyX0wLcDq
TawaWRiY06vTTFneSrCM6xevVwge9AhpE8OqoAh48QeU5VQLX8ituQ6MvL8DXSyp
9rp8gTg0tAQH4vrfaXIV4+p3/E4e/75DRY58flWHKKFqCA7x/pc+iTuTew+lfFqR
UybUDX1IuPeNDMHAANsnROU4YmmmE7I8Wdy9ChFT/l02lpsIp7XBtbprPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHi5k41bX0AH/839Nl/acwIaedcIMB8GA1UdIwQY
MBaAFFzrDr2Hi3fULyyp3Qj3DDI8XQPbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWE9zT3ZZZUxkOVF2TEtuZENQY01NanhkQTlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8zZTcyZWQtMWQ2NS00OTgyLWFkOWEt
OWMzNzQ3OGE1OTNmLzEvWE9zT3ZZZUxkOVF2TEtuZENQY01NanhkQTlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8zZTcyZWQtMWQ2NS00OTgyLWFkOWEtOWMzNzQ3OGE1OTNm
LzEvWE9zT3ZZZUxkOVF2TEtuZENQY01NanhkQTlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl2mDSguv
RohK15MYpcHxvx/4PU7m0ccfjw5zMiCMStQ/UGou8eDlJV3eZpf74Gk4ddrXf9V3
wkO4E2ZJX5ecW+KzhYDXvyLgsEh+fpEHlfFzcPfJVZRAKQ5pKWDbONGN5rTUuquK
YlSShIqLdNxLKUIKNz3p1LYqa3YIeKGnUDsX3G1pRmvR5WGXlDHqjxEnkOJlQyXj
JRe89XZeyOUkmdGtZlLKC3emgKngUg63UGAeFBmD6hxJfqPdODPh7ZBqBkdIvNEj
b4V3Fb252TZ2WSBGbrUTIxZA9psb5CEF5w6vS5aZ2TnjtYqbCU8M1AVw8nlXcJCM
8TENEgBtq7yDBg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:25:25 2026 by rpki-client