Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
File: xe6WP4Kg-whm1CVTszeFl9nz72g.mft (raw, json)
Hash identifier: SpvKFqn5ihNBrVNX7SCRPYE1rOkx3G7wNiB1G+XI/gs=
Subject key identifier: E8:31:79:84:86:5A:B5:D8:B6:10:F9:AE:1D:0F:0F:6F:74:04:EF:60
Authority key identifier: C5:EE:96:3F:82:A0:FB:08:66:D4:25:53:B3:37:85:97:D9:F3:EF:68
Certificate issuer: /CN=c5ee963f82a0fb0866d42553b3378597d9f3ef68
Certificate serial: 019CAB349CBD75428B7649F4F5BBCAB9BD04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
Manifest number: 13EB
Signing time: Sun 01 Mar 2026 21:01:17 +0000
Manifest this update: Sun 01 Mar 2026 21:01:17 +0000
Manifest next update: Mon 02 Mar 2026 21:01:17 +0000
Files and hashes: 1: e1vkUB4hW3aB_edwhYTI6Nlcy0A.roa (hash: izbr6DXAEGnVX5rmj+RODLmoS4n5mXvbk+24OOXQV7s=)
2: xe6WP4Kg-whm1CVTszeFl9nz72g.crl (hash: 6xUKbyfQZQIT5tbbojKuVIuasKn49YmU4hy/B9m4xB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:9c:bd:75:42:8b:76:49:f4:f5:bb:ca:b9:bd:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ee963f82a0fb0866d42553b3378597d9f3ef68
Validity
Not Before: Mar 1 21:01:17 2026 GMT
Not After : Mar 2 21:01:17 2026 GMT
Subject: CN=e8317984865ab5d8b610f9ae1d0f0f6f7404ef60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5d:d1:ce:53:5e:67:fb:d2:31:18:d2:ed:63:
98:42:69:6d:98:2c:33:f4:11:ed:e0:44:bf:d8:64:
e4:dc:ad:79:ed:33:f8:0b:82:91:85:de:31:49:f1:
40:e2:98:f3:ac:06:e1:92:ee:20:f3:ce:50:32:a6:
66:69:c9:c8:32:a1:d5:fb:b9:76:61:a7:bf:96:e9:
90:b1:5d:7b:5b:97:74:44:ca:11:b3:b6:4b:27:f4:
d2:e2:e3:14:b8:5e:98:cb:fc:44:0a:62:e1:c6:b8:
eb:39:34:a4:d0:68:93:f1:b6:47:af:6a:62:9c:10:
c7:04:2e:94:27:3d:ce:d8:28:53:ff:8d:fb:37:dc:
e9:47:6e:e7:ca:cf:68:42:b6:63:e8:5f:cc:6e:4b:
b2:3d:32:e1:1a:bf:f9:73:9d:a9:66:2b:75:46:47:
99:34:05:73:77:25:7a:72:2b:75:e0:68:ac:9a:2c:
ca:15:65:c3:25:00:8a:6f:ed:0d:e2:07:b8:aa:d3:
be:55:bc:7d:a1:43:b2:c5:f8:79:26:70:00:92:68:
c4:6b:2c:38:3f:c3:02:a1:27:dd:83:86:46:ee:6a:
67:fe:59:fa:f1:65:b0:b9:e0:b0:5f:6c:2d:c0:bd:
d2:e0:f7:d9:53:0a:d4:75:02:9f:e6:f2:27:1a:4b:
97:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:31:79:84:86:5A:B5:D8:B6:10:F9:AE:1D:0F:0F:6F:74:04:EF:60
X509v3 Authority Key Identifier:
keyid:C5:EE:96:3F:82:A0:FB:08:66:D4:25:53:B3:37:85:97:D9:F3:EF:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b2:b5:a2:55:5b:20:c9:1d:96:a8:9c:34:e9:2b:11:05:e0:
d7:73:97:83:30:c2:e1:7d:88:a6:40:d6:66:ae:1a:71:b7:e1:
aa:e0:12:7d:9d:50:66:8d:f9:76:33:34:0e:8c:6a:9c:ab:9a:
d6:8d:66:17:06:a4:c0:64:99:b8:a6:b6:87:dd:3d:97:6d:83:
92:af:6b:67:4d:26:1c:a8:df:b3:eb:9c:70:55:cb:4e:03:77:
f2:59:eb:20:32:8c:ca:93:e4:a4:95:7f:25:e1:07:11:17:21:
50:5d:c1:68:58:13:94:c1:c5:86:32:77:84:cd:03:6b:ab:1f:
70:0b:4e:e3:18:a1:bb:5c:04:e5:71:39:50:05:c1:74:7d:bf:
cf:3d:db:b2:fb:ea:ef:77:28:b5:05:1b:0b:0c:78:3b:74:a8:
f5:bf:a0:59:51:83:a3:2f:36:4e:32:83:c8:5f:8d:6f:f9:30:
07:3f:71:1d:bf:ad:9f:da:62:c1:c4:0c:d5:41:ab:d7:8f:86:
6c:5a:51:4c:f2:f0:39:b5:5e:37:bc:c5:e7:43:aa:aa:03:78:
ad:26:60:e8:b5:03:d8:69:f5:17:2f:be:f4:b4:8b:9f:9a:1a:
98:92:88:2b:a7:fc:ff:64:90:1e:77:d2:ff:59:62:97:03:42:
95:58:c9:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNJy9dUKLdkn09bvKub0EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1ZWU5NjNmODJhMGZiMDg2NmQ0MjU1M2IzMzc4NTk3ZDlm
M2VmNjgwHhcNMjYwMzAxMjEwMTE3WhcNMjYwMzAyMjEwMTE3WjAzMTEwLwYDVQQD
EyhlODMxNzk4NDg2NWFiNWQ4YjYxMGY5YWUxZDBmMGY2Zjc0MDRlZjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsV3RzlNeZ/vSMRjS7WOYQmltmCwz
9BHt4ES/2GTk3K157TP4C4KRhd4xSfFA4pjzrAbhku4g885QMqZmacnIMqHV+7l2
Yae/lumQsV17W5d0RMoRs7ZLJ/TS4uMUuF6Yy/xECmLhxrjrOTSk0GiT8bZHr2pi
nBDHBC6UJz3O2ChT/437N9zpR27nys9oQrZj6F/MbkuyPTLhGr/5c52pZit1RkeZ
NAVzdyV6cit14GismizKFWXDJQCKb+0N4ge4qtO+Vbx9oUOyxfh5JnAAkmjEayw4
P8MCoSfdg4ZG7mpn/ln68WWwueCwX2wtwL3S4PfZUwrUdQKf5vInGkuXgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOgxeYSGWrXYthD5rh0PD290BO9gMB8GA1UdIwQY
MBaAFMXulj+CoPsIZtQlU7M3hZfZ8+9oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGU2V1A0S2ctd2htMUNWVHN6ZUZsOW56NzJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS84M2QyNDYtNzQwZC00YjAxLTkwMjAt
ZGI1YWE1NzdjM2FmLzEveGU2V1A0S2ctd2htMUNWVHN6ZUZsOW56NzJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS84M2QyNDYtNzQwZC00YjAxLTkwMjAtZGI1YWE1NzdjM2Fm
LzEveGU2V1A0S2ctd2htMUNWVHN6ZUZsOW56NzJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXrK1olVb
IMkdlqicNOkrEQXg13OXgzDC4X2IpkDWZq4acbfhquASfZ1QZo35djM0DoxqnKua
1o1mFwakwGSZuKa2h909l22Dkq9rZ00mHKjfs+uccFXLTgN38lnrIDKMypPkpJV/
JeEHERchUF3BaFgTlMHFhjJ3hM0Da6sfcAtO4xihu1wE5XE5UAXBdH2/zz3bsvvq
73cotQUbCwx4O3So9b+gWVGDoy82TjKDyF+Nb/kwBz9xHb+tn9piwcQM1UGr14+G
bFpRTPLwObVeN7zF50OqqgN4rSZg6LUD2Gn1Fy++9LSLn5oamJKIK6f8/2SQHnfS
/1lilwNClVjJHA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:38:55 2026 by rpki-client