Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft
File: XnzrnJMcsXleInriyGR1UTrkkVw.mft (raw, json)
Hash identifier: nYpX7MrqVSyRSH2YCV5+STdyju8Erq2puqH5DowUBNE=
Subject key identifier: 14:D9:DB:D0:CF:FA:A1:51:1E:8A:C0:FC:0A:C3:72:AA:30:BC:86:F1
Authority key identifier: 5E:7C:EB:9C:93:1C:B1:79:5E:22:7A:E2:C8:64:75:51:3A:E4:91:5C
Certificate issuer: /CN=5e7ceb9c931cb1795e227ae2c86475513ae4915c
Certificate serial: 019CAAC6148F579961591784321C54F978A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnzrnJMcsXleInriyGR1UTrkkVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 19:00:33 +0000
Manifest this update: Sun 01 Mar 2026 19:00:33 +0000
Manifest next update: Mon 02 Mar 2026 19:00:33 +0000
Files and hashes: 1: XnzrnJMcsXleInriyGR1UTrkkVw.crl (hash: OjxrK0qHVqUamtz5QM2zOiN7oTGj4O/4aWhoK9IfOhE=)
2: b2Q2Eat3_cux0yjgVGOzDFtgpic.roa (hash: jMq1XWA6LmE8jKy6nS6lDU5q1VTY7iuwpA5ReXp7Ws0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XnzrnJMcsXleInriyGR1UTrkkVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:14:8f:57:99:61:59:17:84:32:1c:54:f9:78:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7ceb9c931cb1795e227ae2c86475513ae4915c
Validity
Not Before: Mar 1 19:00:33 2026 GMT
Not After : Mar 2 19:00:33 2026 GMT
Subject: CN=14d9dbd0cffaa1511e8ac0fc0ac372aa30bc86f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9b:cc:62:0d:5f:4a:0a:5f:8c:e0:96:d7:af:
68:e7:17:f0:cd:40:67:06:b4:02:cf:fe:9f:7c:9f:
a7:1f:33:db:5c:73:d2:f8:c4:c5:18:c2:c1:6e:5d:
b1:32:b8:79:4b:88:3e:67:66:a9:5d:16:4c:18:4f:
5f:1e:07:51:ef:c8:da:2f:c6:99:b4:37:c9:41:9d:
c4:3a:e8:00:a9:8e:e8:96:f8:fe:28:54:13:2d:fc:
c3:1b:71:64:36:29:f9:68:dd:29:24:5e:f0:2c:f7:
99:92:8b:e9:42:a8:ec:d0:2d:60:8f:28:ea:9e:bc:
88:6c:cc:d0:3f:2e:79:c8:08:48:51:70:51:87:37:
a3:0a:aa:e9:af:55:c9:1a:e9:82:ac:e2:68:d7:03:
87:10:5c:ed:48:77:f6:df:73:c1:88:da:99:cb:65:
7a:c7:07:f9:6d:a3:51:d8:f1:f1:d5:06:40:e3:7c:
a1:3c:bf:75:d2:7a:a9:f4:4f:77:d2:be:bc:f4:58:
dd:85:5c:65:2d:d2:82:6c:3b:66:98:e1:88:58:46:
55:f9:9b:40:45:ac:8d:10:23:27:7d:a7:e5:f9:f4:
4c:76:6d:ec:7f:68:ba:f1:ba:47:b0:2a:93:ec:37:
15:33:d5:d9:07:01:dd:e1:83:5f:f2:38:65:05:86:
f8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D9:DB:D0:CF:FA:A1:51:1E:8A:C0:FC:0A:C3:72:AA:30:BC:86:F1
X509v3 Authority Key Identifier:
keyid:5E:7C:EB:9C:93:1C:B1:79:5E:22:7A:E2:C8:64:75:51:3A:E4:91:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnzrnJMcsXleInriyGR1UTrkkVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:d6:ca:3e:2f:71:44:95:24:21:73:6e:bf:0c:0b:47:88:3e:
6f:05:8b:27:cc:e8:5b:dc:eb:05:4e:6b:33:8a:45:e1:31:f4:
74:1f:9b:56:22:e9:c6:8f:e1:89:13:1e:e2:3a:8e:a8:83:3a:
3c:1a:89:cb:48:b7:76:b6:8c:df:2b:53:13:93:3c:a6:4b:da:
6d:22:60:97:26:d1:cf:14:98:8a:4d:74:0c:9e:80:cb:3c:a4:
73:d1:88:a1:9b:b2:2d:ec:7f:0f:d7:df:b6:cf:3a:fc:0d:d8:
ea:00:ee:2f:cf:94:7b:70:98:ef:47:b3:f7:e6:28:26:69:22:
30:43:84:f8:f0:5a:9e:fb:15:e8:06:d4:50:c8:55:fb:f0:c2:
60:8e:f7:aa:55:3a:66:2e:bb:5e:e7:a2:aa:ef:49:81:81:00:
93:eb:5c:de:ea:b8:d0:66:86:70:27:af:fe:43:b8:72:a6:7c:
a1:97:0a:b6:0b:01:ad:8c:6a:16:68:e7:b9:1a:43:6d:23:b0:
94:36:d5:3c:35:f1:22:31:b3:73:46:c1:e1:be:8d:eb:37:f4:
ee:be:fe:13:2b:1d:39:ef:01:0f:f7:3d:d2:11:17:67:80:f5:
7f:29:f5:ac:7e:e5:94:93:f0:a5:f4:a9:85:a4:b1:20:57:19:
08:eb:87:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxhSPV5lhWReEMhxU+XiiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlN2NlYjljOTMxY2IxNzk1ZTIyN2FlMmM4NjQ3NTUxM2Fl
NDkxNWMwHhcNMjYwMzAxMTkwMDMzWhcNMjYwMzAyMTkwMDMzWjAzMTEwLwYDVQQD
EygxNGQ5ZGJkMGNmZmFhMTUxMWU4YWMwZmMwYWMzNzJhYTMwYmM4NmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJvMYg1fSgpfjOCW169o5xfwzUBn
BrQCz/6ffJ+nHzPbXHPS+MTFGMLBbl2xMrh5S4g+Z2apXRZMGE9fHgdR78jaL8aZ
tDfJQZ3EOugAqY7olvj+KFQTLfzDG3FkNin5aN0pJF7wLPeZkovpQqjs0C1gjyjq
nryIbMzQPy55yAhIUXBRhzejCqrpr1XJGumCrOJo1wOHEFztSHf233PBiNqZy2V6
xwf5baNR2PHx1QZA43yhPL910nqp9E930r689FjdhVxlLdKCbDtmmOGIWEZV+ZtA
RayNECMnfafl+fRMdm3sf2i68bpHsCqT7DcVM9XZBwHd4YNf8jhlBYb4JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBTZ29DP+qFRHorA/ArDcqowvIbxMB8GA1UdIwQY
MBaAFF5865yTHLF5XiJ64shkdVE65JFcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG56cm5KTWNzWGxlSW5yaXlHUjFVVHJra1Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS83MjI3MDMtMDZhNy00ZmJkLTkzMGYt
MjQyMmFiZjM0MmFjLzEvWG56cm5KTWNzWGxlSW5yaXlHUjFVVHJra1Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS83MjI3MDMtMDZhNy00ZmJkLTkzMGYtMjQyMmFiZjM0MmFj
LzEvWG56cm5KTWNzWGxlSW5yaXlHUjFVVHJra1Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS9bKPi9x
RJUkIXNuvwwLR4g+bwWLJ8zoW9zrBU5rM4pF4TH0dB+bViLpxo/hiRMe4jqOqIM6
PBqJy0i3draM3ytTE5M8pkvabSJglybRzxSYik10DJ6Ayzykc9GIoZuyLex/D9ff
ts86/A3Y6gDuL8+Ue3CY70ez9+YoJmkiMEOE+PBanvsV6AbUUMhV+/DCYI73qlU6
Zi67Xueiqu9JgYEAk+tc3uq40GaGcCev/kO4cqZ8oZcKtgsBrYxqFmjnuRpDbSOw
lDbVPDXxIjGzc0bB4b6N6zf07r7+EysdOe8BD/c90hEXZ4D1fyn1rH7llJPwpfSp
haSxIFcZCOuH6g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:26:58 2026 by rpki-client