Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft
File: XNTi_CtB6FbbpbpiI1umQaDYG0g.mft (raw, json)
Hash identifier: 0xs4HVMiLQ5dsNgP9uRl1OxZDmS8MMjrt4HgZ3JUla8=
Subject key identifier: 13:96:C3:46:F3:C5:14:40:DF:DD:B8:9C:A5:FC:52:9A:D2:AC:2E:C7
Authority key identifier: 5C:D4:E2:FC:2B:41:E8:56:DB:A5:BA:62:23:5B:A6:41:A0:D8:1B:48
Certificate issuer: /CN=5cd4e2fc2b41e856dba5ba62235ba641a0d81b48
Certificate serial: 019CAA58F40DE9839D7F50D51FF8B8A4E845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNTi_CtB6FbbpbpiI1umQaDYG0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft
Manifest number: 17D9
Signing time: Sun 01 Mar 2026 17:01:22 +0000
Manifest this update: Sun 01 Mar 2026 17:01:22 +0000
Manifest next update: Mon 02 Mar 2026 17:01:22 +0000
Files and hashes: 1: V8ZoCsWD9muj8NjFFgc6JWYGaJQ.roa (hash: ry1QmNgsoyY18ZwPnwsZ1kzSR5GRuG7sj4PvQ3AErOM=)
2: XNTi_CtB6FbbpbpiI1umQaDYG0g.crl (hash: zcn89zKWQl0ErjFw4rPwS7R/2DjCghqG54TKjYOqUHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNTi_CtB6FbbpbpiI1umQaDYG0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:f4:0d:e9:83:9d:7f:50:d5:1f:f8:b8:a4:e8:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd4e2fc2b41e856dba5ba62235ba641a0d81b48
Validity
Not Before: Mar 1 17:01:22 2026 GMT
Not After : Mar 2 17:01:22 2026 GMT
Subject: CN=1396c346f3c51440dfddb89ca5fc529ad2ac2ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:08:a8:f7:30:bd:74:85:76:6d:88:10:7f:44:
c4:41:d7:92:9b:dc:7b:0a:d5:2f:fe:5f:c8:ee:a2:
49:0e:8f:17:00:d1:41:d8:dd:74:e6:47:0d:2d:cc:
92:26:8d:1b:d3:bc:df:90:10:32:4c:47:c8:aa:66:
82:86:2d:1d:30:87:18:d0:15:d7:e3:57:40:e9:c0:
b9:be:68:68:42:9f:37:ab:e3:43:73:60:df:38:42:
34:17:02:65:12:d2:b4:a6:55:45:08:00:e4:0b:24:
81:c0:2d:be:59:e5:bc:77:06:44:ec:c8:46:5e:1d:
43:04:c3:6e:89:c8:c2:f7:9a:b8:a4:15:c5:b0:ed:
8b:3d:a7:8b:42:5e:d5:c6:ac:07:42:0c:58:bc:05:
6a:c1:6b:16:a9:90:a6:28:52:98:b6:32:60:0e:fc:
3f:47:ea:fd:6c:3b:67:5d:88:ce:98:7d:8c:c1:75:
9b:15:c0:f0:a6:d7:58:e3:88:20:5a:04:16:c8:ff:
44:f2:fc:55:9c:69:bd:97:84:8f:ce:a0:f1:ca:1a:
40:16:04:29:fe:a0:9d:5c:53:8d:98:6d:19:d2:52:
49:69:c0:f0:f6:ec:a0:91:d8:71:91:24:86:ec:b9:
00:0d:13:dc:10:26:0e:ca:42:1a:1a:93:5f:2e:81:
3b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:96:C3:46:F3:C5:14:40:DF:DD:B8:9C:A5:FC:52:9A:D2:AC:2E:C7
X509v3 Authority Key Identifier:
keyid:5C:D4:E2:FC:2B:41:E8:56:DB:A5:BA:62:23:5B:A6:41:A0:D8:1B:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNTi_CtB6FbbpbpiI1umQaDYG0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ed:e2:44:bf:ab:77:e5:40:ac:03:1e:9d:31:be:b5:29:9c:
95:d8:c0:9e:22:73:50:e2:44:23:cb:24:bd:28:43:62:3c:b4:
06:7a:cc:07:d1:83:20:aa:db:9a:af:63:fa:52:60:0c:10:8b:
d6:85:6b:d7:a8:c5:bd:2e:03:8b:8f:8d:21:e5:bf:3c:83:45:
f5:13:1d:15:3e:04:7a:ac:59:97:e8:5c:8f:b2:d7:ca:06:39:
3d:bf:93:b5:17:fd:a1:6b:6f:4c:d8:5c:f3:8e:f6:10:12:28:
71:72:ef:8b:93:c1:4c:04:d7:b3:c8:bd:1b:00:6d:bb:70:bb:
21:45:7d:aa:1f:40:b5:79:a6:87:37:ba:60:11:8d:e0:1f:55:
cd:53:4a:8d:0e:44:bc:ff:47:62:9b:be:93:89:a4:f2:ea:9d:
d9:cc:b8:94:e9:51:84:e4:17:77:dd:91:d4:b9:2c:b4:1b:99:
d8:e5:0e:20:08:14:eb:59:64:ef:c7:69:fb:ab:39:d8:df:51:
9b:21:eb:01:a0:d2:62:0c:07:c0:bd:e2:7e:eb:dc:3e:cc:b1:
b2:9d:00:16:0b:70:c0:a5:d3:be:a8:c2:f0:92:20:9c:4b:e0:
fe:20:91:4e:10:35:4f:79:1f:35:42:6a:66:47:d4:6b:f2:7f:
e6:3a:18:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWPQN6YOdf1DVH/i4pOhFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZDRlMmZjMmI0MWU4NTZkYmE1YmE2MjIzNWJhNjQxYTBk
ODFiNDgwHhcNMjYwMzAxMTcwMTIyWhcNMjYwMzAyMTcwMTIyWjAzMTEwLwYDVQQD
EygxMzk2YzM0NmYzYzUxNDQwZGZkZGI4OWNhNWZjNTI5YWQyYWMyZWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwio9zC9dIV2bYgQf0TEQdeSm9x7
CtUv/l/I7qJJDo8XANFB2N105kcNLcySJo0b07zfkBAyTEfIqmaChi0dMIcY0BXX
41dA6cC5vmhoQp83q+NDc2DfOEI0FwJlEtK0plVFCADkCySBwC2+WeW8dwZE7MhG
Xh1DBMNuicjC95q4pBXFsO2LPaeLQl7VxqwHQgxYvAVqwWsWqZCmKFKYtjJgDvw/
R+r9bDtnXYjOmH2MwXWbFcDwptdY44ggWgQWyP9E8vxVnGm9l4SPzqDxyhpAFgQp
/qCdXFONmG0Z0lJJacDw9uygkdhxkSSG7LkADRPcECYOykIaGpNfLoE7LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBOWw0bzxRRA3924nKX8UprSrC7HMB8GA1UdIwQY
MBaAFFzU4vwrQehW26W6YiNbpkGg2BtIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWE5UaV9DdEI2RmJicGJwaUkxdW1RYURZRzBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8yMzY5YjgtOGQ4Mi00MTU3LWI2NWYt
MTYzY2Q4YmJmNDMxLzEvWE5UaV9DdEI2RmJicGJwaUkxdW1RYURZRzBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8yMzY5YjgtOGQ4Mi00MTU3LWI2NWYtMTYzY2Q4YmJmNDMx
LzEvWE5UaV9DdEI2RmJicGJwaUkxdW1RYURZRzBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM+3iRL+r
d+VArAMenTG+tSmcldjAniJzUOJEI8skvShDYjy0BnrMB9GDIKrbmq9j+lJgDBCL
1oVr16jFvS4Di4+NIeW/PINF9RMdFT4EeqxZl+hcj7LXygY5Pb+TtRf9oWtvTNhc
8472EBIocXLvi5PBTATXs8i9GwBtu3C7IUV9qh9AtXmmhze6YBGN4B9VzVNKjQ5E
vP9HYpu+k4mk8uqd2cy4lOlRhOQXd92R1LkstBuZ2OUOIAgU61lk78dp+6s52N9R
myHrAaDSYgwHwL3ifuvcPsyxsp0AFgtwwKXTvqjC8JIgnEvg/iCRThA1T3kfNUJq
ZkfUa/J/5joYtg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:38:04 2026 by rpki-client