Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.mft
File: xeP39AwQDf_bGBIccmGZ6FgExYU.mft (raw, json)
Hash identifier: foTaeK+DzgXU1aor0RwJTyANhpW5Q73b5iyJfhl+7o0=
Subject key identifier: F9:34:5B:DE:4D:A1:90:B8:6C:5D:3E:18:4F:4A:A8:08:79:0E:7F:7F
Authority key identifier: C5:E3:F7:F4:0C:10:0D:FF:DB:18:12:1C:72:61:99:E8:58:04:C5:85
Certificate issuer: /CN=c5e3f7f40c100dffdb18121c726199e85804c585
Certificate serial: 019CABD97A031E0F9127EEA72F21CBD46F8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeP39AwQDf_bGBIccmGZ6FgExYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 00:01:22 +0000
Manifest this update: Mon 02 Mar 2026 00:01:22 +0000
Manifest next update: Tue 03 Mar 2026 00:01:22 +0000
Files and hashes: 1: nItQAnIAzb9o-_NFZpkYT1kwfQ4.roa (hash: Yl7knjFB/hvlbYhFm7QXcfKUixHSHJRe7GQrQlY6cTA=)
2: xeP39AwQDf_bGBIccmGZ6FgExYU.crl (hash: 3twote5t0Y8F5ODhpXtkUZ0+y+37df6AOjyhHpO7fPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xeP39AwQDf_bGBIccmGZ6FgExYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:7a:03:1e:0f:91:27:ee:a7:2f:21:cb:d4:6f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5e3f7f40c100dffdb18121c726199e85804c585
Validity
Not Before: Mar 2 00:01:22 2026 GMT
Not After : Mar 3 00:01:22 2026 GMT
Subject: CN=f9345bde4da190b86c5d3e184f4aa808790e7f7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ee:f5:10:b9:21:9f:ac:0e:79:a7:e4:a7:e4:
42:1f:98:ef:bc:29:df:6e:89:98:78:96:b4:21:fb:
b0:d6:6b:46:e2:ee:06:61:e3:4c:3b:fb:73:7c:ac:
f3:a8:6f:a5:a8:84:97:2e:08:47:cd:46:21:0d:03:
2c:b6:9d:53:6f:2d:61:dc:38:a4:e4:74:76:1b:77:
ef:f2:c0:20:76:85:f6:1a:e9:ad:db:43:04:d3:53:
32:90:29:59:00:59:14:b1:ee:c7:3d:6d:9e:88:7c:
c6:e9:e6:2b:99:77:e2:d3:fe:28:42:b7:5d:de:9b:
0d:c3:d9:34:56:a6:7f:c6:02:37:5a:30:0d:53:37:
fa:cf:f8:2c:70:50:13:3d:f1:96:c1:3a:3f:5a:fd:
5b:6f:1b:c3:47:3f:79:e9:11:e4:b4:52:3d:47:1f:
e1:74:77:74:3e:d0:e3:2e:8f:87:94:de:64:28:db:
fb:05:32:da:d4:73:9f:c4:ed:f0:b2:0e:b9:94:66:
4c:df:8d:cb:a7:97:7f:e6:05:06:62:bb:2b:e7:aa:
9b:79:12:37:c9:f1:0f:27:af:58:08:4f:ec:98:27:
f1:ef:6f:27:45:c9:16:25:28:24:85:dc:76:53:94:
5d:d1:60:e1:d6:1b:f5:30:c0:cb:09:57:a2:e5:77:
a4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:34:5B:DE:4D:A1:90:B8:6C:5D:3E:18:4F:4A:A8:08:79:0E:7F:7F
X509v3 Authority Key Identifier:
keyid:C5:E3:F7:F4:0C:10:0D:FF:DB:18:12:1C:72:61:99:E8:58:04:C5:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeP39AwQDf_bGBIccmGZ6FgExYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:fd:49:fc:f9:72:cd:a3:ae:aa:f2:18:6e:a9:b6:42:03:70:
f8:97:11:6f:57:c2:4b:3c:f8:88:8e:82:24:59:13:7f:05:6d:
dd:05:1e:33:1d:90:35:03:ac:18:11:18:88:f5:cb:8a:c3:a3:
7d:52:29:29:04:15:81:ec:f3:b9:a4:a8:5b:b8:bf:8e:45:91:
4f:6f:f0:09:26:ae:99:52:99:28:bd:8f:8d:f8:1e:7d:f3:79:
b1:22:d5:a4:0e:66:59:30:dc:22:b9:a6:17:34:bc:15:54:05:
40:5b:df:ec:17:b9:d4:24:05:6d:15:b6:48:80:2b:8a:87:0a:
d2:72:f2:37:b9:fe:a2:2d:3b:fb:32:2d:4d:f2:02:17:d4:65:
99:94:34:9b:81:3c:7e:c0:5b:ab:ba:ea:e2:a2:bf:e0:bc:14:
b1:f2:c2:c0:67:14:5f:9b:1d:ac:ca:db:fb:24:13:8f:41:dc:
4e:c3:73:f9:97:ca:b1:c1:4e:26:5e:23:9a:65:97:87:87:12:
b0:1e:55:db:71:f2:9b:45:b2:de:65:23:83:71:c8:ce:5b:48:
b2:34:cc:ce:fa:86:a6:13:34:50:67:ab:56:09:3f:0b:a5:46:
e7:45:ed:fc:c0:15:be:a6:d1:6c:b8:df:5e:68:b5:ab:55:e4:
4b:40:08:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2XoDHg+RJ+6nLyHL1G+KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1ZTNmN2Y0MGMxMDBkZmZkYjE4MTIxYzcyNjE5OWU4NTgw
NGM1ODUwHhcNMjYwMzAyMDAwMTIyWhcNMjYwMzAzMDAwMTIyWjAzMTEwLwYDVQQD
EyhmOTM0NWJkZTRkYTE5MGI4NmM1ZDNlMTg0ZjRhYTgwODc5MGU3ZjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuO71ELkhn6wOeafkp+RCH5jvvCnf
bomYeJa0Ifuw1mtG4u4GYeNMO/tzfKzzqG+lqISXLghHzUYhDQMstp1Tby1h3Dik
5HR2G3fv8sAgdoX2Gumt20ME01MykClZAFkUse7HPW2eiHzG6eYrmXfi0/4oQrdd
3psNw9k0VqZ/xgI3WjANUzf6z/gscFATPfGWwTo/Wv1bbxvDRz956RHktFI9Rx/h
dHd0PtDjLo+HlN5kKNv7BTLa1HOfxO3wsg65lGZM343Lp5d/5gUGYrsr56qbeRI3
yfEPJ69YCE/smCfx728nRckWJSgkhdx2U5Rd0WDh1hv1MMDLCVei5XekEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPk0W95NoZC4bF0+GE9KqAh5Dn9/MB8GA1UdIwQY
MBaAFMXj9/QMEA3/2xgSHHJhmehYBMWFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGVQMzlBd1FEZl9iR0JJY2NtR1o2RmdFeFlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lYWY2ZWQtYmFmNC00MWJmLTlmMjIt
N2Q5NzJlMWQyZTYxLzEveGVQMzlBd1FEZl9iR0JJY2NtR1o2RmdFeFlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9lYWY2ZWQtYmFmNC00MWJmLTlmMjItN2Q5NzJlMWQyZTYx
LzEveGVQMzlBd1FEZl9iR0JJY2NtR1o2RmdFeFlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfv1J/Ply
zaOuqvIYbqm2QgNw+JcRb1fCSzz4iI6CJFkTfwVt3QUeMx2QNQOsGBEYiPXLisOj
fVIpKQQVgezzuaSoW7i/jkWRT2/wCSaumVKZKL2PjfgeffN5sSLVpA5mWTDcIrmm
FzS8FVQFQFvf7Be51CQFbRW2SIAriocK0nLyN7n+oi07+zItTfICF9RlmZQ0m4E8
fsBbq7rq4qK/4LwUsfLCwGcUX5sdrMrb+yQTj0HcTsNz+ZfKscFOJl4jmmWXh4cS
sB5V23Hym0Wy3mUjg3HIzltIsjTMzvqGphM0UGerVgk/C6VG50Xt/MAVvqbRbLjf
Xmi1q1XkS0AIXQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:25:08 2026 by rpki-client