Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft
File: xmJhwznF7fjYxIPwjka4SAqAXvE.mft (raw, json)
Hash identifier: 7uOtkG9Z4VWi3hGsMwOFyS+eCawP2epnDyfG44WhaNM=
Subject key identifier: 96:A9:C0:8B:32:73:56:69:C0:F7:6F:4C:8B:24:7E:40:90:86:1B:89
Authority key identifier: C6:62:61:C3:39:C5:ED:F8:D8:C4:83:F0:8E:46:B8:48:0A:80:5E:F1
Certificate issuer: /CN=c66261c339c5edf8d8c483f08e46b8480a805ef1
Certificate serial: 019CAAC6A99FB82E03762B62D37844204411
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJhwznF7fjYxIPwjka4SAqAXvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft
Manifest number: 1782
Signing time: Sun 01 Mar 2026 19:01:11 +0000
Manifest this update: Sun 01 Mar 2026 19:01:11 +0000
Manifest next update: Mon 02 Mar 2026 19:01:11 +0000
Files and hashes: 1: GkysysiUBXozBtdhxp6l182WpJ8.roa (hash: VR1FnjecjyRiwX08EOHPvLrD5A0SMs3OVYweJtUa454=)
2: xmJhwznF7fjYxIPwjka4SAqAXvE.crl (hash: IEYn226Y3TRp6zV5zzVkmGXoExQXVdxkurY7+lqv9xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJhwznF7fjYxIPwjka4SAqAXvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:a9:9f:b8:2e:03:76:2b:62:d3:78:44:20:44:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66261c339c5edf8d8c483f08e46b8480a805ef1
Validity
Not Before: Mar 1 19:01:11 2026 GMT
Not After : Mar 2 19:01:11 2026 GMT
Subject: CN=96a9c08b32735669c0f76f4c8b247e4090861b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:02:f8:95:e7:03:95:42:be:3d:26:42:5d:13:
63:3c:e6:3f:59:37:eb:9a:39:9e:a6:c9:26:59:e6:
5f:53:8c:67:98:94:5f:aa:70:8f:a8:09:2c:e9:13:
82:0d:0a:8d:ae:66:6a:67:33:b5:4e:09:29:c7:0f:
3c:39:87:d0:5a:73:3c:42:bf:e5:aa:2d:cf:b8:f7:
71:3e:2b:42:2f:00:64:6c:63:5c:36:4d:43:1c:6c:
44:63:59:04:d2:bf:81:2d:50:89:77:7a:a3:f7:38:
f2:94:e6:3d:2f:3a:87:a2:d1:dd:ed:9c:e6:fa:93:
d0:04:1c:11:5f:01:e6:63:c7:01:25:49:62:40:2e:
1c:56:a9:33:1a:b4:6d:ce:b7:9b:2e:21:0e:82:93:
de:f1:e7:8c:4e:db:6e:38:29:1c:8b:83:0e:b7:3a:
61:93:d7:93:ef:20:71:14:1e:c1:21:03:69:5a:bd:
ad:48:09:11:1d:08:93:f4:6f:11:46:2d:0a:09:f4:
7d:28:7d:52:0a:be:a0:ba:9a:ac:0a:06:41:b4:9c:
42:a4:9f:14:61:51:5e:30:bf:89:6d:77:a3:cf:b3:
5f:e4:9f:2d:62:d8:74:29:4e:2b:2a:79:2c:f7:a8:
61:59:7a:86:ae:dc:de:a9:77:ba:e5:7b:bb:26:3c:
01:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A9:C0:8B:32:73:56:69:C0:F7:6F:4C:8B:24:7E:40:90:86:1B:89
X509v3 Authority Key Identifier:
keyid:C6:62:61:C3:39:C5:ED:F8:D8:C4:83:F0:8E:46:B8:48:0A:80:5E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJhwznF7fjYxIPwjka4SAqAXvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:c8:d1:b9:34:78:3a:a5:f7:d1:6e:d7:91:ad:8e:0f:47:80:
2c:75:cb:a3:16:5c:c3:c0:19:d3:08:b5:04:87:ea:16:bd:b0:
8b:24:c5:4a:a8:85:bd:c1:a1:81:6a:04:e2:99:f0:ae:fd:a6:
87:0a:dc:50:76:92:4e:2b:ae:db:af:42:9f:ef:f1:24:31:68:
04:fe:25:47:dc:4e:d3:58:47:e8:8e:3c:1b:a4:c8:6c:1f:f3:
0a:bf:8e:b0:eb:28:8c:2e:3b:0a:df:bb:34:5d:76:50:1c:b8:
7d:49:fb:47:94:4a:e1:7e:ef:31:2c:b0:de:33:dd:e2:e6:cd:
08:c1:8c:07:40:96:fc:77:84:13:eb:0b:80:be:1e:82:b8:29:
bb:b7:17:df:8c:0b:f8:e4:04:88:89:80:f7:1e:5d:e5:77:ac:
57:83:b2:1f:5d:44:89:92:86:d5:cf:88:80:0d:04:14:44:92:
47:9d:b5:09:3c:1b:2d:67:e9:a2:c6:9c:91:46:12:2a:2b:68:
b0:2f:bb:92:ba:38:d3:b9:e3:ae:7f:eb:3a:5d:2d:ea:75:72:
a3:bd:6f:3f:d5:fc:7c:04:e2:ce:1a:a4:2d:ff:76:59:ec:a0:
ff:e2:94:19:1f:6e:3f:cf:9a:4e:83:8f:3c:ff:d0:0f:0f:60:
c5:74:00:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxqmfuC4Dditi03hEIEQRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2MWMzMzljNWVkZjhkOGM0ODNmMDhlNDZiODQ4MGE4
MDVlZjEwHhcNMjYwMzAxMTkwMTExWhcNMjYwMzAyMTkwMTExWjAzMTEwLwYDVQQD
Eyg5NmE5YzA4YjMyNzM1NjY5YzBmNzZmNGM4YjI0N2U0MDkwODYxYjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+wL4lecDlUK+PSZCXRNjPOY/WTfr
mjmepskmWeZfU4xnmJRfqnCPqAks6ROCDQqNrmZqZzO1Tgkpxw88OYfQWnM8Qr/l
qi3PuPdxPitCLwBkbGNcNk1DHGxEY1kE0r+BLVCJd3qj9zjylOY9LzqHotHd7Zzm
+pPQBBwRXwHmY8cBJUliQC4cVqkzGrRtzrebLiEOgpPe8eeMTttuOCkci4MOtzph
k9eT7yBxFB7BIQNpWr2tSAkRHQiT9G8RRi0KCfR9KH1SCr6gupqsCgZBtJxCpJ8U
YVFeML+JbXejz7Nf5J8tYth0KU4rKnks96hhWXqGrtzeqXe65Xu7JjwB6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJapwIsyc1ZpwPdvTIskfkCQhhuJMB8GA1UdIwQY
MBaAFMZiYcM5xe342MSD8I5GuEgKgF7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KaHd6bkY3ZmpZeElQd2prYTRTQXFBWHZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS81MjU5NTItN2FmYi00NDNkLWFmMGEt
NzdjM2UxYzhmNmRlLzEveG1KaHd6bkY3ZmpZeElQd2prYTRTQXFBWHZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS81MjU5NTItN2FmYi00NDNkLWFmMGEtNzdjM2UxYzhmNmRl
LzEveG1KaHd6bkY3ZmpZeElQd2prYTRTQXFBWHZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASMjRuTR4
OqX30W7Xka2OD0eALHXLoxZcw8AZ0wi1BIfqFr2wiyTFSqiFvcGhgWoE4pnwrv2m
hwrcUHaSTiuu269Cn+/xJDFoBP4lR9xO01hH6I48G6TIbB/zCr+OsOsojC47Ct+7
NF12UBy4fUn7R5RK4X7vMSyw3jPd4ubNCMGMB0CW/HeEE+sLgL4egrgpu7cX34wL
+OQEiImA9x5d5XesV4OyH11EiZKG1c+IgA0EFESSR521CTwbLWfposackUYSKito
sC+7kro407njrn/rOl0t6nVyo71vP9X8fATizhqkLf92Weyg/+KUGR9uP8+aToOP
PP/QDw9gxXQALA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:23 2026 by rpki-client