Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.mft
File: xrr44wiCF-S3wMIxcY-rkJsYgeQ.mft (raw, json)
Hash identifier: pTn4mXNDHyIVBHmQT0qME9Uo8a0y26xiNGBvvztUs4E=
Subject key identifier: 76:8C:E9:97:9B:9C:BA:A1:45:BC:3C:85:16:1D:86:21:5C:4B:B1:64
Authority key identifier: C6:BA:F8:E3:08:82:17:E4:B7:C0:C2:31:71:8F:AB:90:9B:18:81:E4
Certificate issuer: /CN=c6baf8e3088217e4b7c0c231718fab909b1881e4
Certificate serial: 019CAA2200974131C19D8237CE0C3CED532E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrr44wiCF-S3wMIxcY-rkJsYgeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.mft
Manifest number: BA
Signing time: Sun 01 Mar 2026 16:01:20 +0000
Manifest this update: Sun 01 Mar 2026 16:01:20 +0000
Manifest next update: Mon 02 Mar 2026 16:01:20 +0000
Files and hashes: 1: YfYnV8dROfvt9YlNJZwwIzCuaVk.roa (hash: 8h9Qzp6OMQv/b+8I/FjbB7FBpfDNca2A4Lb8PfnMIP8=)
2: muxPZK-ETW8tpLSqLIwKLV3HXOk.asa (hash: /+0xru5+5Z1tOoOAH5nYb2Wl7cyjV1xFYP0ZTNGGwik=)
3: xrr44wiCF-S3wMIxcY-rkJsYgeQ.crl (hash: 2BTWTQJsEjLEUH3HwOmU0RhagwK8RqJFFTVBCDOlT8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xrr44wiCF-S3wMIxcY-rkJsYgeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:22:00:97:41:31:c1:9d:82:37:ce:0c:3c:ed:53:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6baf8e3088217e4b7c0c231718fab909b1881e4
Validity
Not Before: Mar 1 16:01:20 2026 GMT
Not After : Mar 2 16:01:20 2026 GMT
Subject: CN=768ce9979b9cbaa145bc3c85161d86215c4bb164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6e:3b:ce:20:5c:78:3f:6c:35:2b:93:4b:c0:
81:f5:0a:f7:88:1b:06:51:e8:66:1c:11:8d:e1:ce:
f5:a3:34:63:55:1a:e2:b1:ff:b6:d2:56:53:95:73:
f9:e6:d7:d0:69:f7:bd:6b:fc:28:5f:62:ff:87:2c:
dc:9b:ed:3c:06:70:f4:e7:78:df:4e:31:68:a0:47:
24:1f:93:44:9a:6d:c7:61:1d:e6:3d:58:8a:02:75:
74:d2:3d:48:f1:73:58:89:60:e9:f0:c2:ff:13:06:
74:10:f4:f2:4c:bb:b1:6f:c0:6f:82:0a:53:03:35:
c3:86:9c:15:89:38:af:84:1e:e6:2e:4c:90:dc:a2:
36:77:20:36:dc:6c:70:7f:70:74:13:e5:2d:48:64:
f8:31:87:2d:ce:8f:1c:5b:23:04:49:26:fa:69:90:
79:3c:4a:ef:59:49:2b:0d:db:13:87:6e:f6:7f:18:
6c:d9:50:af:8b:cb:a6:3c:49:cc:22:d5:ef:86:0c:
41:4b:f8:b9:28:03:f3:66:51:9c:43:6a:15:58:fa:
da:1d:54:23:52:63:a8:df:75:9c:89:f1:e4:33:f2:
43:0d:dc:b0:bd:94:3e:6c:f2:73:94:82:81:eb:df:
97:b0:90:3a:9c:3e:d8:85:23:eb:c5:74:2d:62:83:
56:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:8C:E9:97:9B:9C:BA:A1:45:BC:3C:85:16:1D:86:21:5C:4B:B1:64
X509v3 Authority Key Identifier:
keyid:C6:BA:F8:E3:08:82:17:E4:B7:C0:C2:31:71:8F:AB:90:9B:18:81:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrr44wiCF-S3wMIxcY-rkJsYgeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:80:29:5d:70:d8:f9:fb:ce:b6:0b:28:87:c2:36:a2:9c:cf:
27:f0:da:3b:07:47:ea:9f:d2:c5:fa:dd:c1:e3:79:50:db:66:
8e:73:5e:6b:4f:cb:15:99:75:a2:fc:11:e3:73:94:16:6a:86:
d9:fa:b1:5f:ee:dd:1d:af:ca:c4:b0:84:ec:73:53:f9:28:cc:
ec:3f:29:f4:8e:03:de:b9:57:f9:6b:cf:fc:a6:c4:0f:67:d8:
20:8c:ee:2d:b4:ad:0e:d2:c2:1b:26:19:e8:ac:02:42:39:16:
da:ab:fa:b0:b8:c1:7b:ba:57:19:5a:0f:83:55:9a:a1:95:ea:
66:7d:c3:f5:dc:ad:dd:05:f1:cd:5d:9d:03:1d:6f:8e:b9:b0:
f8:00:0f:78:17:7b:39:6b:45:05:34:94:04:f8:6f:57:86:35:
0a:00:d2:46:a7:d8:a4:4c:6f:c4:f1:b8:38:b5:d8:af:41:32:
53:40:55:2b:fb:b7:8a:73:c0:0a:b0:7c:10:f6:56:7d:eb:30:
9c:26:95:bf:20:ff:09:42:18:c3:6a:be:61:96:a8:1d:cd:69:
40:85:00:34:d5:20:61:88:92:02:ad:84:68:22:b8:a6:f7:f1:
6f:02:1d:29:75:fc:88:b1:0b:80:bc:e7:6c:8e:1b:ad:d9:85:
72:63:4e:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqIgCXQTHBnYI3zgw87VMuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YmFmOGUzMDg4MjE3ZTRiN2MwYzIzMTcxOGZhYjkwOWIx
ODgxZTQwHhcNMjYwMzAxMTYwMTIwWhcNMjYwMzAyMTYwMTIwWjAzMTEwLwYDVQQD
Eyg3NjhjZTk5NzliOWNiYWExNDViYzNjODUxNjFkODYyMTVjNGJiMTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAum47ziBceD9sNSuTS8CB9Qr3iBsG
UehmHBGN4c71ozRjVRrisf+20lZTlXP55tfQafe9a/woX2L/hyzcm+08BnD053jf
TjFooEckH5NEmm3HYR3mPViKAnV00j1I8XNYiWDp8ML/EwZ0EPTyTLuxb8BvggpT
AzXDhpwViTivhB7mLkyQ3KI2dyA23Gxwf3B0E+UtSGT4MYctzo8cWyMESSb6aZB5
PErvWUkrDdsTh272fxhs2VCvi8umPEnMItXvhgxBS/i5KAPzZlGcQ2oVWPraHVQj
UmOo33WcifHkM/JDDdywvZQ+bPJzlIKB69+XsJA6nD7YhSPrxXQtYoNWAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHaM6ZebnLqhRbw8hRYdhiFcS7FkMB8GA1UdIwQY
MBaAFMa6+OMIghfkt8DCMXGPq5CbGIHkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHJyNDR3aUNGLVMzd01JeGNZLXJrSnNZZ2VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS84NzNkZDAtYWY4OC00YmU1LTk4NjEt
ZmVhNWVmZjM3NzI0LzEveHJyNDR3aUNGLVMzd01JeGNZLXJrSnNZZ2VRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS84NzNkZDAtYWY4OC00YmU1LTk4NjEtZmVhNWVmZjM3NzI0
LzEveHJyNDR3aUNGLVMzd01JeGNZLXJrSnNZZ2VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArYApXXDY
+fvOtgsoh8I2opzPJ/DaOwdH6p/SxfrdweN5UNtmjnNea0/LFZl1ovwR43OUFmqG
2fqxX+7dHa/KxLCE7HNT+SjM7D8p9I4D3rlX+WvP/KbED2fYIIzuLbStDtLCGyYZ
6KwCQjkW2qv6sLjBe7pXGVoPg1WaoZXqZn3D9dyt3QXxzV2dAx1vjrmw+AAPeBd7
OWtFBTSUBPhvV4Y1CgDSRqfYpExvxPG4OLXYr0EyU0BVK/u3inPACrB8EPZWfesw
nCaVvyD/CUIYw2q+YZaoHc1pQIUANNUgYYiSAq2EaCK4pvfxbwIdKXX8iLELgLzn
bI4brdmFcmNO8Q==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:08:52 2026 by rpki-client