Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
File: X1B54OWHxH_xTSAhEvTu94sHhJE.mft (raw, json)
Hash identifier: 6WiXXuIzr3SzgJPvQd1zH30vZ0HNrbYTBvV17KGTg1M=
Subject key identifier: 6D:61:0E:4E:A6:DE:5F:D3:91:D6:A3:1C:A7:F5:1E:EF:56:9F:10:D8
Authority key identifier: 5F:50:79:E0:E5:87:C4:7F:F1:4D:20:21:12:F4:EE:F7:8B:07:84:91
Certificate issuer: /CN=5f5079e0e587c47ff14d202112f4eef78b078491
Certificate serial: 019D9AAC449230F2330DDADDBB3D606DFE22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
Manifest number: 0AE5
Signing time: Fri 17 Apr 2026 09:01:14 +0000
Manifest this update: Fri 17 Apr 2026 09:01:14 +0000
Manifest next update: Sat 18 Apr 2026 09:01:14 +0000
Files and hashes: 1: 7bGl1Xdi6Pm1X1Ab1Zfe3WxrCvQ.roa (hash: WitY0IfqjKazmEtgATl+1ViOVRltHmA3RLHFAZFUngo=)
2: X1B54OWHxH_xTSAhEvTu94sHhJE.crl (hash: gudjF1FMYn34z+dnhDm6ioagXGVKmIGNkQ+KFLh0imI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:44:92:30:f2:33:0d:da:dd:bb:3d:60:6d:fe:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5079e0e587c47ff14d202112f4eef78b078491
Validity
Not Before: Apr 17 09:01:14 2026 GMT
Not After : Apr 18 09:01:14 2026 GMT
Subject: CN=6d610e4ea6de5fd391d6a31ca7f51eef569f10d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fd:c3:89:b5:5b:6b:72:48:64:9f:09:af:55:
c8:02:fc:62:c0:ed:bc:14:c1:cb:5c:30:7d:9e:20:
c7:94:0c:77:64:0e:cc:9b:6d:71:e4:f5:94:01:b5:
da:a9:3f:dc:fd:ef:35:87:a5:6b:bc:64:86:1a:49:
33:55:47:18:5f:00:0d:dc:d4:99:b1:48:6b:22:8f:
2a:bc:5a:0c:9d:e1:37:e7:3c:b7:8d:c9:2a:e1:a7:
7a:bf:b9:38:a1:a2:07:a4:15:48:a9:74:05:51:af:
12:30:df:a3:13:21:a5:c7:7e:af:34:60:0d:36:34:
aa:05:45:09:20:e4:26:4a:45:75:ca:3c:48:10:c1:
ce:c2:5f:fb:39:2a:ae:26:a2:37:f4:15:ff:b2:44:
c5:dc:90:e5:51:4d:6e:ad:05:34:9b:da:93:46:9d:
f5:c0:fe:52:c9:29:5a:5c:ea:12:01:6b:d2:26:39:
48:7f:dc:56:95:68:dc:da:9f:50:7a:fa:5c:32:23:
35:a5:00:d0:e0:2f:78:e6:92:a1:44:6e:27:b6:51:
41:b4:2e:88:ea:5b:0d:36:ac:ab:3c:5e:bb:2f:07:
04:a7:28:f5:39:9f:5e:9d:ac:be:53:19:19:c7:67:
80:1c:db:c8:76:2a:72:01:31:73:ca:81:5d:5c:bc:
d4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:61:0E:4E:A6:DE:5F:D3:91:D6:A3:1C:A7:F5:1E:EF:56:9F:10:D8
X509v3 Authority Key Identifier:
keyid:5F:50:79:E0:E5:87:C4:7F:F1:4D:20:21:12:F4:EE:F7:8B:07:84:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:84:bb:3f:ab:b5:c9:e5:60:39:5a:91:92:c4:11:14:2a:d1:
3e:d9:d4:30:71:06:8d:ef:59:32:37:3d:49:19:29:5c:cc:a8:
c5:64:2a:67:48:45:8b:a1:27:ac:ef:08:2c:c4:2b:24:ec:b4:
f9:79:bb:6f:fd:15:b3:2c:17:62:65:35:70:ac:17:56:9d:d1:
0c:9d:a4:53:55:12:eb:a7:eb:4d:02:24:a7:bb:72:2a:bf:4f:
77:a8:3e:8c:70:9b:30:1b:79:2f:82:b9:ab:ed:02:c7:b5:a6:
5b:52:41:72:60:46:31:3e:f6:1d:f7:68:82:14:77:c4:c9:ad:
14:38:c9:19:cd:04:e8:8b:d9:9f:1f:07:99:62:72:55:72:e3:
38:92:9b:9f:1d:cb:3a:7c:f4:7b:ac:b6:67:f7:70:11:8b:cc:
b8:4f:18:3a:c3:38:4d:88:f4:03:9d:2d:bf:2f:b8:7c:d6:b2:
18:ae:96:1f:f4:7f:65:a8:76:6b:18:29:65:ef:12:04:22:9f:
60:a2:94:f7:53:7f:5f:39:a5:85:6c:f5:ff:f2:37:ad:97:52:
ba:f1:68:00:21:27:5e:1e:9a:d0:eb:3b:b0:c9:e9:fb:89:e8:
7c:f1:7e:65:df:3c:64:ef:67:03:ac:1a:28:3b:77:b8:2b:68:
41:af:48:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2arESSMPIzDdrduz1gbf4iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmNTA3OWUwZTU4N2M0N2ZmMTRkMjAyMTEyZjRlZWY3OGIw
Nzg0OTEwHhcNMjYwNDE3MDkwMTE0WhcNMjYwNDE4MDkwMTE0WjAzMTEwLwYDVQQD
Eyg2ZDYxMGU0ZWE2ZGU1ZmQzOTFkNmEzMWNhN2Y1MWVlZjU2OWYxMGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwf3DibVba3JIZJ8Jr1XIAvxiwO28
FMHLXDB9niDHlAx3ZA7Mm21x5PWUAbXaqT/c/e81h6VrvGSGGkkzVUcYXwAN3NSZ
sUhrIo8qvFoMneE35zy3jckq4ad6v7k4oaIHpBVIqXQFUa8SMN+jEyGlx36vNGAN
NjSqBUUJIOQmSkV1yjxIEMHOwl/7OSquJqI39BX/skTF3JDlUU1urQU0m9qTRp31
wP5SySlaXOoSAWvSJjlIf9xWlWjc2p9QevpcMiM1pQDQ4C945pKhRG4ntlFBtC6I
6lsNNqyrPF67LwcEpyj1OZ9enay+UxkZx2eAHNvIdipyATFzyoFdXLzUrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG1hDk6m3l/TkdajHKf1Hu9WnxDYMB8GA1UdIwQY
MBaAFF9QeeDlh8R/8U0gIRL07veLB4SRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDFCNTRPV0h4SF94VFNBaEV2VHU5NHNIaEpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9lMzc4YjItODg2NC00NzEwLTk2NzQt
MWZjOGY3NmE4MDZhLzEvWDFCNTRPV0h4SF94VFNBaEV2VHU5NHNIaEpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9lMzc4YjItODg2NC00NzEwLTk2NzQtMWZjOGY3NmE4MDZh
LzEvWDFCNTRPV0h4SF94VFNBaEV2VHU5NHNIaEpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ4S7P6u1
yeVgOVqRksQRFCrRPtnUMHEGje9ZMjc9SRkpXMyoxWQqZ0hFi6EnrO8ILMQrJOy0
+Xm7b/0VsywXYmU1cKwXVp3RDJ2kU1US66frTQIkp7tyKr9Pd6g+jHCbMBt5L4K5
q+0Cx7WmW1JBcmBGMT72HfdoghR3xMmtFDjJGc0E6IvZnx8HmWJyVXLjOJKbnx3L
Onz0e6y2Z/dwEYvMuE8YOsM4TYj0A50tvy+4fNayGK6WH/R/Zah2axgpZe8SBCKf
YKKU91N/XzmlhWz1//I3rZdSuvFoACEnXh6a0Os7sMnp+4nofPF+Zd88ZO9nA6wa
KDt3uCtoQa9IQA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:25:09 2026 by rpki-client