Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.mft
File: X39wJQCCw-BW8_5Si9d7BuIOQHw.mft (raw, json)
Hash identifier: zaCTlNq6jhhcDU1U0m62tfJtqSElqcDehhWZuSbKkJ0=
Subject key identifier: 33:35:AB:C2:41:15:D7:8E:71:09:D5:B3:D7:7E:BD:06:9C:6A:BA:75
Authority key identifier: 5F:7F:70:25:00:82:C3:E0:56:F3:FE:52:8B:D7:7B:06:E2:0E:40:7C
Certificate issuer: /CN=5f7f70250082c3e056f3fe528bd77b06e20e407c
Certificate serial: 019CABA1B97BB2A3336BA1297A12CCFB3D95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X39wJQCCw-BW8_5Si9d7BuIOQHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.mft
Manifest number: E4
Signing time: Sun 01 Mar 2026 23:00:28 +0000
Manifest this update: Sun 01 Mar 2026 23:00:28 +0000
Manifest next update: Mon 02 Mar 2026 23:00:28 +0000
Files and hashes: 1: 6PCZUJB3ipwVXLiyKcyJrFQu4wQ.roa (hash: m4ynyhKu4YCsiRrg6pHmEytuHr7lJuhn9fuEsyhPlJc=)
2: HMXQRJYEwWMFjXi4_zNifQwmzd8.roa (hash: D7J443X7Zh+r0dIaKPIBQn29cDjE1qybG77af4zAfkY=)
3: X39wJQCCw-BW8_5Si9d7BuIOQHw.crl (hash: Vy3g7bbrWD6Y1TrqYqcYcYre8ocly4NP2e/l6/4U5/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X39wJQCCw-BW8_5Si9d7BuIOQHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:b9:7b:b2:a3:33:6b:a1:29:7a:12:cc:fb:3d:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7f70250082c3e056f3fe528bd77b06e20e407c
Validity
Not Before: Mar 1 23:00:28 2026 GMT
Not After : Mar 2 23:00:28 2026 GMT
Subject: CN=3335abc24115d78e7109d5b3d77ebd069c6aba75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:88:2a:7d:a4:50:63:d6:89:6f:56:0e:ab:7c:
78:0f:53:58:04:f8:45:a7:fd:17:c9:8d:4e:6a:76:
62:f8:d3:9e:09:dc:56:db:5e:64:b3:1c:08:a7:b0:
bd:25:ed:36:60:4b:bd:93:0d:a6:08:2d:98:4d:f0:
c4:8d:33:0c:82:fe:cb:24:dc:23:ca:05:a4:c4:d3:
c6:ad:26:35:21:33:8c:2f:32:c8:27:24:ad:52:b6:
85:35:37:4f:c8:f7:d9:89:1a:85:c6:bb:8c:b4:a9:
44:5c:41:72:26:85:af:55:8e:23:53:9e:d0:c7:4e:
85:69:2e:b3:30:ce:66:b4:2a:ba:02:30:1f:98:86:
52:5b:3d:e4:2c:e0:0d:8a:91:03:70:2d:4f:68:08:
9b:dd:28:58:26:02:2e:f1:d3:21:6f:9c:0d:ca:c1:
87:a9:21:07:e4:19:18:0b:2e:a9:6e:dd:49:ce:f0:
8c:af:73:2a:43:69:02:d2:89:0b:b4:95:7e:73:d4:
31:24:3f:cb:ed:57:16:c5:e3:34:45:48:d9:59:86:
f5:d3:86:11:95:4d:11:b8:ba:7a:b5:26:d5:d0:3f:
d3:4b:85:21:f4:3a:ea:c6:c6:24:1e:01:ac:2b:c6:
a6:95:68:ea:d3:5b:2c:c5:00:58:d3:1d:ef:f5:e3:
5a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:35:AB:C2:41:15:D7:8E:71:09:D5:B3:D7:7E:BD:06:9C:6A:BA:75
X509v3 Authority Key Identifier:
keyid:5F:7F:70:25:00:82:C3:E0:56:F3:FE:52:8B:D7:7B:06:E2:0E:40:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X39wJQCCw-BW8_5Si9d7BuIOQHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:c8:d4:d1:df:5e:bb:1d:66:a2:10:37:14:eb:5e:4e:1d:17:
b4:ac:ee:41:fe:cc:f0:b2:97:aa:21:08:5b:28:bd:f1:74:7e:
f1:2e:ac:1b:ab:3c:50:73:11:7f:e5:0d:eb:52:26:c5:a5:ef:
14:33:6d:38:ba:4d:05:08:91:82:76:7b:19:c8:85:da:ad:8f:
81:79:e3:c7:58:cd:05:db:7d:ef:4f:ac:1a:a3:6f:36:e2:01:
4d:24:d1:95:0c:77:4a:b3:cb:6e:df:bf:27:73:2d:64:80:df:
03:93:49:ac:ee:56:56:4d:89:e9:62:3f:5c:09:ed:36:d7:c0:
3e:41:6b:27:34:48:b7:86:9b:34:85:11:5f:48:43:4c:c8:ca:
4a:ba:09:58:e4:1a:46:ab:ef:5d:e3:a3:3b:68:e3:09:c8:71:
95:f1:fb:cd:17:f5:d2:cb:e7:33:77:48:94:44:cf:33:96:77:
16:5e:26:90:0c:ea:96:bf:37:a6:af:71:8a:64:3a:ec:84:67:
21:19:02:1d:34:64:2a:94:08:af:27:6b:59:fb:df:02:84:7a:
d4:88:fe:29:08:2e:4b:3b:e7:9e:73:59:c5:1b:f5:14:5f:5c:
68:87:5b:d0:ca:e7:03:ff:a5:a3:6c:56:17:38:d4:3a:8f:51:
f6:e5:1c:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrobl7sqMza6EpehLM+z2VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmN2Y3MDI1MDA4MmMzZTA1NmYzZmU1MjhiZDc3YjA2ZTIw
ZTQwN2MwHhcNMjYwMzAxMjMwMDI4WhcNMjYwMzAyMjMwMDI4WjAzMTEwLwYDVQQD
EygzMzM1YWJjMjQxMTVkNzhlNzEwOWQ1YjNkNzdlYmQwNjljNmFiYTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxogqfaRQY9aJb1YOq3x4D1NYBPhF
p/0XyY1OanZi+NOeCdxW215ksxwIp7C9Je02YEu9kw2mCC2YTfDEjTMMgv7LJNwj
ygWkxNPGrSY1ITOMLzLIJyStUraFNTdPyPfZiRqFxruMtKlEXEFyJoWvVY4jU57Q
x06FaS6zMM5mtCq6AjAfmIZSWz3kLOANipEDcC1PaAib3ShYJgIu8dMhb5wNysGH
qSEH5BkYCy6pbt1JzvCMr3MqQ2kC0okLtJV+c9QxJD/L7VcWxeM0RUjZWYb104YR
lU0RuLp6tSbV0D/TS4Uh9DrqxsYkHgGsK8amlWjq01ssxQBY0x3v9eNaKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDM1q8JBFdeOcQnVs9d+vQacarp1MB8GA1UdIwQY
MBaAFF9/cCUAgsPgVvP+UovXewbiDkB8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDM5d0pRQ0N3LUJXOF81U2k5ZDdCdUlPUUh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC80ZTk0MTQtYmM0ZC00ZjJjLWI5ZjEt
MjNmMGMwNGQyYzE3LzEvWDM5d0pRQ0N3LUJXOF81U2k5ZDdCdUlPUUh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC80ZTk0MTQtYmM0ZC00ZjJjLWI5ZjEtMjNmMGMwNGQyYzE3
LzEvWDM5d0pRQ0N3LUJXOF81U2k5ZDdCdUlPUUh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAcjU0d9e
ux1mohA3FOteTh0XtKzuQf7M8LKXqiEIWyi98XR+8S6sG6s8UHMRf+UN61ImxaXv
FDNtOLpNBQiRgnZ7GciF2q2PgXnjx1jNBdt970+sGqNvNuIBTSTRlQx3SrPLbt+/
J3MtZIDfA5NJrO5WVk2J6WI/XAntNtfAPkFrJzRIt4abNIURX0hDTMjKSroJWOQa
RqvvXeOjO2jjCchxlfH7zRf10svnM3dIlETPM5Z3Fl4mkAzqlr83pq9ximQ67IRn
IRkCHTRkKpQIrydrWfvfAoR61Ij+KQguSzvnnnNZxRv1FF9caIdb0MrnA/+lo2xW
FzjUOo9R9uUciQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:46:37 2026 by rpki-client