Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.mft
File: 1XgxwfXmACVCvOut7yQSithG6vk.mft (raw, json)
Hash identifier: 6VK7tnjUrMB2VhwzaMs28dGbQSuySi2+W7LJWQux7Kw=
Subject key identifier: 46:DA:9F:41:36:0C:D9:01:9C:3D:84:34:13:A7:F1:B9:D5:23:2A:9C
Authority key identifier: D5:78:31:C1:F5:E6:00:25:42:BC:EB:AD:EF:24:12:8A:D8:46:EA:F9
Certificate issuer: /CN=d57831c1f5e6002542bcebadef24128ad846eaf9
Certificate serial: 019CAAC6E1B65890A360488CDB136BB6363D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1XgxwfXmACVCvOut7yQSithG6vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.mft
Manifest number: 0309
Signing time: Sun 01 Mar 2026 19:01:26 +0000
Manifest this update: Sun 01 Mar 2026 19:01:26 +0000
Manifest next update: Mon 02 Mar 2026 19:01:26 +0000
Files and hashes: 1: 1XgxwfXmACVCvOut7yQSithG6vk.crl (hash: THrPZeUwzmSzm2sw0R+XIVDFJbXV+YLWggjVSE5hHVU=)
2: edoHN6_JsP-n0lJvF27iJ8eI6P4.roa (hash: 8NDkYnaMysyzTRQRKzPfGA1yeZmwSTwDWWtshuRs65s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1XgxwfXmACVCvOut7yQSithG6vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:e1:b6:58:90:a3:60:48:8c:db:13:6b:b6:36:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d57831c1f5e6002542bcebadef24128ad846eaf9
Validity
Not Before: Mar 1 19:01:26 2026 GMT
Not After : Mar 2 19:01:26 2026 GMT
Subject: CN=46da9f41360cd9019c3d843413a7f1b9d5232a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:93:39:6f:12:9e:76:d0:b8:e8:f6:a4:df:67:
01:aa:00:46:c1:a6:15:a5:67:36:48:b7:59:c6:a7:
3a:85:e7:43:1f:07:21:63:7f:ba:c4:e0:d3:03:4f:
51:de:a9:4d:97:d7:11:88:ae:e9:a4:a6:30:0d:cd:
0f:ee:c6:eb:c1:53:f5:6a:5a:8a:cf:89:69:c3:2c:
cc:03:5f:c0:d2:f5:b7:4c:b0:5e:58:06:d6:f8:ff:
eb:67:89:9d:39:63:32:a9:34:9d:ac:18:04:0c:0d:
28:0b:94:21:6c:bf:07:db:34:28:9a:62:f8:10:bb:
8a:02:b7:49:4a:dd:90:60:b4:52:68:6d:0b:f5:34:
fe:64:35:56:86:d5:a7:49:2e:a1:3d:19:08:1d:4e:
30:75:66:1a:f0:69:97:77:da:cc:c0:01:a8:7a:b4:
ce:9c:b1:b9:b9:d4:78:b1:88:71:81:73:cc:c8:54:
06:50:0f:8e:08:ed:a7:11:e8:2e:db:2b:ad:89:4e:
f4:40:da:d0:89:95:bb:19:e4:14:ae:2c:f2:6e:89:
7f:f1:b4:e5:c5:9d:f5:d7:6f:41:ab:32:dd:d8:ed:
38:17:47:d0:42:d4:01:85:d9:8c:7d:00:99:20:7b:
9b:51:f6:22:cf:db:6c:2a:85:fd:76:d5:0b:1a:ec:
84:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:DA:9F:41:36:0C:D9:01:9C:3D:84:34:13:A7:F1:B9:D5:23:2A:9C
X509v3 Authority Key Identifier:
keyid:D5:78:31:C1:F5:E6:00:25:42:BC:EB:AD:EF:24:12:8A:D8:46:EA:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1XgxwfXmACVCvOut7yQSithG6vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:24:25:35:c8:eb:6a:5a:31:d2:03:1a:5a:39:e7:de:b0:14:
bb:af:ca:be:39:ab:df:b8:1b:05:c3:87:5d:e5:57:1c:c0:12:
7c:0a:d3:16:59:45:52:c1:62:cf:c5:c5:7f:0a:eb:fd:6a:48:
66:c1:06:50:d3:91:75:9e:c4:85:66:69:bb:5d:f1:92:ca:05:
7b:a5:05:f6:67:88:bd:03:81:f6:9f:41:c4:40:09:62:65:8f:
7c:7e:69:34:56:e3:e1:b2:12:65:84:3a:fd:2d:08:d4:f6:97:
1f:49:2b:d8:ce:5f:49:d3:4c:62:30:dd:3d:ce:8f:bd:1f:83:
73:ef:84:47:ae:29:3f:33:78:ca:1c:ce:6b:89:0e:d6:5e:fc:
a2:5f:f2:ac:97:82:1f:0f:a8:c8:90:77:d5:99:e5:f3:ca:33:
b5:cf:62:27:01:5f:67:1f:6f:68:44:23:67:65:6c:58:c0:9f:
3a:ff:f0:5e:36:2c:db:17:c2:c8:e7:5b:9c:4f:36:9c:00:d3:
e2:18:b6:c1:71:91:16:f3:14:cc:50:74:1a:0b:b9:0c:d6:a1:
7f:91:f1:7b:cc:27:54:71:fd:a1:5a:59:ed:3b:ca:95:28:00:
75:60:92:1b:d3:6d:91:d5:22:11:df:f1:d5:45:b5:a8:57:aa:
33:25:41:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxuG2WJCjYEiM2xNrtjY9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NzgzMWMxZjVlNjAwMjU0MmJjZWJhZGVmMjQxMjhhZDg0
NmVhZjkwHhcNMjYwMzAxMTkwMTI2WhcNMjYwMzAyMTkwMTI2WjAzMTEwLwYDVQQD
Eyg0NmRhOWY0MTM2MGNkOTAxOWMzZDg0MzQxM2E3ZjFiOWQ1MjMyYTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypM5bxKedtC46Pak32cBqgBGwaYV
pWc2SLdZxqc6hedDHwchY3+6xODTA09R3qlNl9cRiK7ppKYwDc0P7sbrwVP1alqK
z4lpwyzMA1/A0vW3TLBeWAbW+P/rZ4mdOWMyqTSdrBgEDA0oC5QhbL8H2zQommL4
ELuKArdJSt2QYLRSaG0L9TT+ZDVWhtWnSS6hPRkIHU4wdWYa8GmXd9rMwAGoerTO
nLG5udR4sYhxgXPMyFQGUA+OCO2nEegu2yutiU70QNrQiZW7GeQUrizybol/8bTl
xZ31129BqzLd2O04F0fQQtQBhdmMfQCZIHubUfYiz9tsKoX9dtULGuyE5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEban0E2DNkBnD2ENBOn8bnVIyqcMB8GA1UdIwQY
MBaAFNV4McH15gAlQrzrre8kEorYRur5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVhneHdmWG1BQ1ZDdk91dDd5UVNpdGhHNnZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9iMTk2NGEtMzBhZS00NDgyLTg0NWQt
NzQ2MzY1ZGJhNWJiLzEvMVhneHdmWG1BQ1ZDdk91dDd5UVNpdGhHNnZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9iMTk2NGEtMzBhZS00NDgyLTg0NWQtNzQ2MzY1ZGJhNWJi
LzEvMVhneHdmWG1BQ1ZDdk91dDd5UVNpdGhHNnZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAACQlNcjr
alox0gMaWjnn3rAUu6/Kvjmr37gbBcOHXeVXHMASfArTFllFUsFiz8XFfwrr/WpI
ZsEGUNORdZ7EhWZpu13xksoFe6UF9meIvQOB9p9BxEAJYmWPfH5pNFbj4bISZYQ6
/S0I1PaXH0kr2M5fSdNMYjDdPc6PvR+Dc++ER64pPzN4yhzOa4kO1l78ol/yrJeC
Hw+oyJB31Znl88oztc9iJwFfZx9vaEQjZ2VsWMCfOv/wXjYs2xfCyOdbnE82nADT
4hi2wXGRFvMUzFB0Ggu5DNahf5Hxe8wnVHH9oVpZ7TvKlSgAdWCSG9NtkdUiEd/x
1UW1qFeqMyVBpA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:35:42 2026 by rpki-client