Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
File: X1B54OWHxH_xTSAhEvTu94sHhJE.mft (raw, json)
Hash identifier: nifvQTeqlapX+ITrzpMEAyqvtpPEzG9tHr2Pz/EtOz8=
Subject key identifier: 7F:E8:FD:72:12:49:B5:C5:2F:27:38:A2:D9:0A:45:6D:F0:90:9F:8A
Authority key identifier: 5F:50:79:E0:E5:87:C4:7F:F1:4D:20:21:12:F4:EE:F7:8B:07:84:91
Certificate issuer: /CN=5f5079e0e587c47ff14d202112f4eef78b078491
Certificate serial: 019CA945926C95EEA41A3E3E3CC4E1DCF4CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
Manifest number: 0A68
Signing time: Sun 01 Mar 2026 12:00:34 +0000
Manifest this update: Sun 01 Mar 2026 12:00:34 +0000
Manifest next update: Mon 02 Mar 2026 12:00:34 +0000
Files and hashes: 1: 7bGl1Xdi6Pm1X1Ab1Zfe3WxrCvQ.roa (hash: WitY0IfqjKazmEtgATl+1ViOVRltHmA3RLHFAZFUngo=)
2: X1B54OWHxH_xTSAhEvTu94sHhJE.crl (hash: oumT2wqQVddkWNDOywAIxwzSXOH9eKdl7UCYw4QZUBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:92:6c:95:ee:a4:1a:3e:3e:3c:c4:e1:dc:f4:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5079e0e587c47ff14d202112f4eef78b078491
Validity
Not Before: Mar 1 12:00:34 2026 GMT
Not After : Mar 2 12:00:34 2026 GMT
Subject: CN=7fe8fd721249b5c52f2738a2d90a456df0909f8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a3:ba:d5:34:b6:bd:86:a9:7f:c4:40:ab:8f:
97:a7:09:eb:95:11:6f:d3:5b:03:59:23:fd:52:32:
8f:be:a8:30:6d:7e:d2:30:a5:d9:02:4f:4c:22:32:
5f:f4:ad:6f:4f:18:63:f5:91:02:a7:91:0e:80:c4:
a4:22:49:6f:9f:f2:61:22:bf:59:45:06:70:18:04:
c1:2c:61:9a:25:9b:68:4b:05:24:b4:f6:ea:6c:c2:
85:4b:9c:23:ff:77:1f:9b:4c:a2:ba:42:22:bb:bf:
d8:81:26:7f:9e:9a:b4:4c:71:96:da:46:c3:94:63:
56:4f:7c:c5:d0:50:69:c3:e9:5b:bf:42:74:94:09:
92:aa:f5:cc:a2:15:af:2c:61:18:2d:93:d9:82:b6:
7e:ff:13:3f:85:b0:61:fc:5f:dc:70:37:b7:a1:97:
3b:55:16:bf:e0:15:16:b9:b8:67:9c:1e:94:55:35:
39:d5:3f:42:4c:ae:ab:d3:c4:37:cb:d0:83:18:56:
03:e6:31:86:7f:5a:32:7c:f7:1b:92:84:9a:07:a1:
f7:d0:2a:73:5e:b1:b6:c9:d7:2b:fc:6a:4a:15:c4:
75:93:a0:75:02:5c:cd:7f:49:9e:ac:cf:98:67:74:
0f:0e:30:cb:b6:5f:f2:66:9f:b6:60:a5:0e:a8:75:
b7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E8:FD:72:12:49:B5:C5:2F:27:38:A2:D9:0A:45:6D:F0:90:9F:8A
X509v3 Authority Key Identifier:
keyid:5F:50:79:E0:E5:87:C4:7F:F1:4D:20:21:12:F4:EE:F7:8B:07:84:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:35:5e:c8:b8:5a:f0:81:40:3a:e5:8c:b5:88:a1:28:ff:fb:
7e:96:56:6e:8e:61:0c:e9:17:be:6d:bd:57:71:92:b8:25:20:
c4:46:83:4b:76:57:9d:a4:1d:b0:9f:51:74:a9:c3:ca:76:e3:
6f:80:05:52:3e:1a:e7:fb:d9:94:b6:b7:58:cd:73:1e:4b:8d:
df:06:24:25:d8:23:bd:3e:34:91:52:19:d3:d0:74:07:b7:79:
d7:29:ef:d6:96:3b:00:5d:6e:6c:7e:50:ea:96:1a:cd:8f:b9:
b3:a8:11:cf:ed:c4:41:74:85:6a:87:d6:59:73:10:a8:68:15:
c0:ee:be:af:90:6b:4c:d4:0f:6c:8b:e7:5c:27:07:e8:da:40:
2a:3e:cc:28:57:d0:36:f2:b6:64:40:c9:eb:6a:dc:5e:16:23:
90:6a:19:5b:37:14:93:5e:a4:94:d3:7f:2a:6e:86:48:e4:2a:
ba:ff:e7:95:cc:e5:23:df:43:05:fe:34:d6:0b:18:5c:87:d8:
6a:62:f1:84:68:44:08:34:a9:74:c8:f4:c2:10:b1:85:c1:a3:
0b:97:3c:70:ab:cd:1d:7f:54:d5:e4:36:0d:6f:3e:d9:9b:8d:
bd:f6:14:6c:d4:93:81:c9:73:fe:c5:c3:e0:8b:ce:5a:e3:dc:
16:6b:2c:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypRZJsle6kGj4+PMTh3PTKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmNTA3OWUwZTU4N2M0N2ZmMTRkMjAyMTEyZjRlZWY3OGIw
Nzg0OTEwHhcNMjYwMzAxMTIwMDM0WhcNMjYwMzAyMTIwMDM0WjAzMTEwLwYDVQQD
Eyg3ZmU4ZmQ3MjEyNDliNWM1MmYyNzM4YTJkOTBhNDU2ZGYwOTA5ZjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaO61TS2vYapf8RAq4+XpwnrlRFv
01sDWSP9UjKPvqgwbX7SMKXZAk9MIjJf9K1vTxhj9ZECp5EOgMSkIklvn/JhIr9Z
RQZwGATBLGGaJZtoSwUktPbqbMKFS5wj/3cfm0yiukIiu7/YgSZ/npq0THGW2kbD
lGNWT3zF0FBpw+lbv0J0lAmSqvXMohWvLGEYLZPZgrZ+/xM/hbBh/F/ccDe3oZc7
VRa/4BUWubhnnB6UVTU51T9CTK6r08Q3y9CDGFYD5jGGf1oyfPcbkoSaB6H30Cpz
XrG2ydcr/GpKFcR1k6B1AlzNf0merM+YZ3QPDjDLtl/yZp+2YKUOqHW3LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH/o/XISSbXFLyc4otkKRW3wkJ+KMB8GA1UdIwQY
MBaAFF9QeeDlh8R/8U0gIRL07veLB4SRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDFCNTRPV0h4SF94VFNBaEV2VHU5NHNIaEpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9lMzc4YjItODg2NC00NzEwLTk2NzQt
MWZjOGY3NmE4MDZhLzEvWDFCNTRPV0h4SF94VFNBaEV2VHU5NHNIaEpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9lMzc4YjItODg2NC00NzEwLTk2NzQtMWZjOGY3NmE4MDZh
LzEvWDFCNTRPV0h4SF94VFNBaEV2VHU5NHNIaEpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWzVeyLha
8IFAOuWMtYihKP/7fpZWbo5hDOkXvm29V3GSuCUgxEaDS3ZXnaQdsJ9RdKnDynbj
b4AFUj4a5/vZlLa3WM1zHkuN3wYkJdgjvT40kVIZ09B0B7d51ynv1pY7AF1ubH5Q
6pYazY+5s6gRz+3EQXSFaofWWXMQqGgVwO6+r5BrTNQPbIvnXCcH6NpAKj7MKFfQ
NvK2ZEDJ62rcXhYjkGoZWzcUk16klNN/Km6GSOQquv/nlczlI99DBf401gsYXIfY
amLxhGhECDSpdMj0whCxhcGjC5c8cKvNHX9U1eQ2DW8+2ZuNvfYUbNSTgclz/sXD
4IvOWuPcFmsslQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 16:31:02 2026 by rpki-client