Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft
File: xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft (raw, json)
Hash identifier: xe/qije+aFA3fFU/8vH6RcjktZkVFuJAHXgwS7UTuvo=
Subject key identifier: CD:40:E4:CF:18:3D:35:C1:CC:72:DB:76:3B:59:6B:52:D6:57:A1:40
Authority key identifier: C5:0E:EA:13:07:21:E9:CD:19:76:FD:7E:0F:34:C9:6D:F6:EA:C6:B0
Certificate issuer: /CN=c50eea130721e9cd1976fd7e0f34c96df6eac6b0
Certificate serial: 019CAAC63D9EB07E51F7662DF86B1E1F8DBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft
Manifest number: 05A9
Signing time: Sun 01 Mar 2026 19:00:44 +0000
Manifest this update: Sun 01 Mar 2026 19:00:44 +0000
Manifest next update: Mon 02 Mar 2026 19:00:44 +0000
Files and hashes: 1: 2DuCV_W-U_DjGo5XDf9E-S3sShM.roa (hash: cc9HcaIk4ywCecPBpWCavoWGQGYzOyoXbURNvhX6CYg=)
2: UF4pzZ4nyW6OV0vWDdSDtWl2FC4.roa (hash: i7rT7fXaiMm+2WOfWQg8Ficq8leAUCxuWRS6LiqQgSo=)
3: xQ7qEwch6c0Zdv1-DzTJbfbqxrA.crl (hash: qv5FyMXYAUOjOIOSizLn9zpow2IrIApZzDSSABgBxbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:3d:9e:b0:7e:51:f7:66:2d:f8:6b:1e:1f:8d:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50eea130721e9cd1976fd7e0f34c96df6eac6b0
Validity
Not Before: Mar 1 19:00:44 2026 GMT
Not After : Mar 2 19:00:44 2026 GMT
Subject: CN=cd40e4cf183d35c1cc72db763b596b52d657a140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e5:a3:e4:4c:44:f2:de:3f:04:59:2b:23:1c:
9f:32:46:b4:3d:fe:ae:c1:72:20:17:fb:54:4e:15:
73:81:38:c1:22:f2:6d:4b:66:67:a5:50:fc:09:c2:
46:fe:9a:75:42:f3:ab:cc:c9:49:b4:3e:e4:97:19:
be:a5:78:52:09:0e:c1:9c:5b:a9:de:f2:23:fa:71:
61:c2:e6:de:52:43:b8:8b:5a:47:62:7e:d8:29:a3:
8c:73:1d:45:28:a4:81:03:7e:5d:85:4d:30:ef:f5:
7c:01:a6:b1:d9:a9:25:b8:8a:03:7e:42:e4:78:8e:
6d:6d:50:75:73:82:da:11:c5:2a:1b:d6:a6:9e:29:
39:d0:8a:ec:cb:d2:fc:05:f0:3f:0a:0f:b9:d3:80:
b6:b6:e2:05:60:e3:b0:46:ca:81:9b:87:eb:05:f3:
19:6a:68:df:1c:f0:01:1a:3d:53:fe:0b:58:d7:c2:
c2:94:e5:53:77:b6:4d:09:71:07:df:e8:74:03:e9:
b2:1d:6a:ea:5e:4e:85:7e:81:2c:ff:df:aa:3a:4e:
9f:c2:ae:bc:00:ed:a8:76:5a:33:8b:97:df:8c:b8:
33:53:53:24:04:76:93:5e:e6:9c:eb:78:1e:21:b9:
15:c5:7e:19:2a:a9:41:fe:0a:b2:03:06:81:14:27:
a3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:40:E4:CF:18:3D:35:C1:CC:72:DB:76:3B:59:6B:52:D6:57:A1:40
X509v3 Authority Key Identifier:
keyid:C5:0E:EA:13:07:21:E9:CD:19:76:FD:7E:0F:34:C9:6D:F6:EA:C6:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:b2:a9:8f:36:21:d4:3a:52:0a:4f:10:4d:3e:76:21:86:ef:
30:ca:a3:60:53:4b:64:42:52:71:07:6a:d5:69:42:38:e2:ba:
77:08:4b:2e:49:73:cd:1f:43:a5:6b:5b:d5:ac:8d:75:02:08:
fb:21:36:c6:76:ff:b8:37:1e:7f:b4:f3:87:02:f9:f1:ea:dc:
a6:5e:70:9d:c8:d8:e9:c9:43:a7:e9:35:56:54:85:31:1b:02:
c2:59:ae:5e:e5:69:90:9e:43:b8:0f:d9:61:d8:e5:03:ba:25:
00:88:fd:c8:5b:8e:ea:29:db:55:ea:40:8b:c9:bc:c8:55:11:
e0:e2:1a:b3:42:11:6d:70:58:c5:57:8d:5e:52:cd:51:dd:39:
d2:c4:88:41:b9:5d:66:16:22:99:a7:38:ac:af:52:8c:0e:a2:
7b:0a:16:9c:f5:48:0a:67:7c:da:3a:b1:50:d4:86:ad:78:a4:
41:59:f8:a1:5a:54:be:a3:8b:97:b4:75:6e:b4:b0:22:7a:b4:
6e:dd:5c:b9:22:a7:40:ac:d7:c8:6a:ea:8d:5f:9b:80:ad:78:
5e:80:55:a7:0f:2b:d7:8e:b4:e6:bc:2a:86:7d:6b:e5:1c:fa:
4f:2c:a5:f0:ea:8b:78:df:25:41:0c:01:1d:b2:9f:cc:89:d2:
dc:85:c0:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxj2esH5R92Yt+GseH42/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MGVlYTEzMDcyMWU5Y2QxOTc2ZmQ3ZTBmMzRjOTZkZjZl
YWM2YjAwHhcNMjYwMzAxMTkwMDQ0WhcNMjYwMzAyMTkwMDQ0WjAzMTEwLwYDVQQD
EyhjZDQwZTRjZjE4M2QzNWMxY2M3MmRiNzYzYjU5NmI1MmQ2NTdhMTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4uWj5ExE8t4/BFkrIxyfMka0Pf6u
wXIgF/tUThVzgTjBIvJtS2ZnpVD8CcJG/pp1QvOrzMlJtD7klxm+pXhSCQ7BnFup
3vIj+nFhwubeUkO4i1pHYn7YKaOMcx1FKKSBA35dhU0w7/V8Aaax2akluIoDfkLk
eI5tbVB1c4LaEcUqG9amnik50Irsy9L8BfA/Cg+504C2tuIFYOOwRsqBm4frBfMZ
amjfHPABGj1T/gtY18LClOVTd7ZNCXEH3+h0A+myHWrqXk6FfoEs/9+qOk6fwq68
AO2odlozi5ffjLgzU1MkBHaTXuac63geIbkVxX4ZKqlB/gqyAwaBFCejJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM1A5M8YPTXBzHLbdjtZa1LWV6FAMB8GA1UdIwQY
MBaAFMUO6hMHIenNGXb9fg80yW326sawMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFE3cUV3Y2g2YzBaZHYxLUR6VEpiZmJxeHJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC84Yjc4NjctMGE3MC00NGNhLTgxZmQt
NjNmNWZlMTEwZTc2LzEveFE3cUV3Y2g2YzBaZHYxLUR6VEpiZmJxeHJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC84Yjc4NjctMGE3MC00NGNhLTgxZmQtNjNmNWZlMTEwZTc2
LzEveFE3cUV3Y2g2YzBaZHYxLUR6VEpiZmJxeHJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL7KpjzYh
1DpSCk8QTT52IYbvMMqjYFNLZEJScQdq1WlCOOK6dwhLLklzzR9DpWtb1ayNdQII
+yE2xnb/uDcef7TzhwL58ercpl5wncjY6clDp+k1VlSFMRsCwlmuXuVpkJ5DuA/Z
YdjlA7olAIj9yFuO6inbVepAi8m8yFUR4OIas0IRbXBYxVeNXlLNUd050sSIQbld
ZhYimac4rK9SjA6iewoWnPVICmd82jqxUNSGrXikQVn4oVpUvqOLl7R1brSwInq0
bt1cuSKnQKzXyGrqjV+bgK14XoBVpw8r14605rwqhn1r5Rz6Tyyl8OqLeN8lQQwB
HbKfzInS3IXArw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:54:27 2026 by rpki-client