Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft
File: xX4MBpirwZpWiv7OaxkM7QM6coU.mft (raw, json)
Hash identifier: +z2RTKXSRJarciJGksnmxbxxvjfut6qWWR7jk7g6BoY=
Subject key identifier: 3F:5C:D2:CB:D7:BE:DA:C7:E7:D8:AB:4C:3E:C0:6F:21:8C:7D:68:A5
Authority key identifier: C5:7E:0C:06:98:AB:C1:9A:56:8A:FE:CE:6B:19:0C:ED:03:3A:72:85
Certificate issuer: /CN=c57e0c0698abc19a568afece6b190ced033a7285
Certificate serial: 019E1DFE8669E88CA73A02FEE728EC926C04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xX4MBpirwZpWiv7OaxkM7QM6coU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft
Manifest number: 1805
Signing time: Tue 12 May 2026 21:01:20 +0000
Manifest this update: Tue 12 May 2026 21:01:20 +0000
Manifest next update: Wed 13 May 2026 21:01:20 +0000
Files and hashes: 1: hvm-1sw6yKhG-M4wHJ1S06-4bQ8.roa (hash: tKs3IGxy6JfH17/EICz+WfGgz3jmWl7OeQzPl058cdo=)
2: rHb_iz-JiMdt3RDI2-qf4obfFyQ.asa (hash: PB1OmdbHMMh/Gs2lwxTkfdhg+R2oRe0ZvKNcBWEoM4Q=)
3: xX4MBpirwZpWiv7OaxkM7QM6coU.crl (hash: ej0rJBWpjQzdpqg8Sb+3FUUiOs/SkxP5kkyieewd69c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xX4MBpirwZpWiv7OaxkM7QM6coU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:86:69:e8:8c:a7:3a:02:fe:e7:28:ec:92:6c:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c57e0c0698abc19a568afece6b190ced033a7285
Validity
Not Before: May 12 21:01:20 2026 GMT
Not After : May 13 21:01:20 2026 GMT
Subject: CN=3f5cd2cbd7bedac7e7d8ab4c3ec06f218c7d68a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a6:23:67:ea:dd:17:1a:77:eb:67:fd:bb:9b:
c1:cc:d4:67:1d:da:fe:18:65:1c:bd:d8:fb:d1:e1:
86:47:7e:a0:14:45:d4:47:9c:15:f8:56:0b:9c:74:
79:a4:80:7d:0e:77:6f:78:89:b5:e9:1b:1d:5a:de:
06:e4:8f:71:43:7d:3b:3b:a7:c0:f1:ee:06:f7:7f:
5b:0d:25:6d:d4:49:80:c2:ea:1f:b6:cc:d9:08:0f:
ba:03:70:f9:bf:4b:34:c5:21:8b:ef:18:f9:da:3b:
b6:d0:f6:92:2e:5e:d5:73:b7:ba:0b:0c:67:59:7c:
4e:3b:73:a5:b8:77:c1:74:e6:4b:1b:ff:97:03:c1:
50:7e:8e:76:62:d8:bb:24:82:6e:09:de:b7:10:26:
57:2c:b8:c7:86:4d:cc:1d:a4:d7:b0:f8:7a:13:35:
e4:ae:11:13:3f:af:b7:e6:2f:9a:c3:15:5a:d8:52:
54:50:f8:53:18:18:44:d3:11:7a:2f:61:85:ee:5e:
ad:0d:70:c2:22:62:59:a3:c0:71:4e:44:2c:b0:a8:
73:be:7e:12:ef:23:74:5f:30:94:f9:59:72:ba:c8:
45:e4:a2:09:11:8c:c9:86:43:8d:17:33:7b:49:0f:
5c:2b:b5:00:e7:92:36:fa:10:e0:57:61:6b:c9:18:
2b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:5C:D2:CB:D7:BE:DA:C7:E7:D8:AB:4C:3E:C0:6F:21:8C:7D:68:A5
X509v3 Authority Key Identifier:
keyid:C5:7E:0C:06:98:AB:C1:9A:56:8A:FE:CE:6B:19:0C:ED:03:3A:72:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xX4MBpirwZpWiv7OaxkM7QM6coU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:75:57:72:8f:21:d0:b8:54:55:3e:0e:bc:dc:fc:bb:16:3c:
f0:f1:90:6c:c2:b1:c1:37:75:37:7b:f5:a2:3e:94:59:70:ed:
5d:a6:3f:4f:35:25:d9:77:40:c1:12:f0:58:04:7d:51:67:12:
fe:aa:42:fe:ff:05:82:7c:a0:da:75:79:39:a0:25:30:73:49:
1b:63:2a:6a:a4:1c:6e:ca:1f:c7:d9:ba:13:cb:2d:81:ee:d5:
ae:6f:bb:b5:ae:53:9d:e9:c9:e4:4d:98:05:20:71:df:f2:33:
9f:b5:3e:91:58:5d:f0:5f:40:49:33:b0:3e:dc:ae:dc:46:45:
89:2b:25:80:06:05:d6:c1:7b:2e:71:35:c5:b9:4e:41:dc:2c:
dd:77:4c:02:93:f1:f4:a4:dd:c9:75:eb:60:26:7d:40:78:d8:
f4:67:9b:f4:99:5c:0c:fb:c1:15:ef:15:a2:0c:55:9b:01:6c:
3c:59:8f:a3:b5:df:99:c8:a1:f0:fa:08:20:a1:5b:62:56:0e:
35:e0:44:d1:eb:ec:c7:f4:c4:e7:e6:12:04:1a:ca:e3:51:eb:
6b:a3:b8:dd:88:3c:c3:af:2b:6d:ed:f9:61:2c:dd:48:ed:03:
b1:8d:8d:db:ac:4f:13:ef:10:5a:2c:5e:b8:66:64:08:b4:63:
7e:4a:95:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/oZp6IynOgL+5yjskmwEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1N2UwYzA2OThhYmMxOWE1NjhhZmVjZTZiMTkwY2VkMDMz
YTcyODUwHhcNMjYwNTEyMjEwMTIwWhcNMjYwNTEzMjEwMTIwWjAzMTEwLwYDVQQD
EygzZjVjZDJjYmQ3YmVkYWM3ZTdkOGFiNGMzZWMwNmYyMThjN2Q2OGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6YjZ+rdFxp362f9u5vBzNRnHdr+
GGUcvdj70eGGR36gFEXUR5wV+FYLnHR5pIB9DndveIm16RsdWt4G5I9xQ307O6fA
8e4G939bDSVt1EmAwuoftszZCA+6A3D5v0s0xSGL7xj52ju20PaSLl7Vc7e6Cwxn
WXxOO3OluHfBdOZLG/+XA8FQfo52Yti7JIJuCd63ECZXLLjHhk3MHaTXsPh6EzXk
rhETP6+35i+awxVa2FJUUPhTGBhE0xF6L2GF7l6tDXDCImJZo8BxTkQssKhzvn4S
7yN0XzCU+VlyushF5KIJEYzJhkONFzN7SQ9cK7UA55I2+hDgV2FryRgrDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD9c0svXvtrH59irTD7AbyGMfWilMB8GA1UdIwQY
MBaAFMV+DAaYq8GaVor+zmsZDO0DOnKFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFg0TUJwaXJ3WnBXaXY3T2F4a003UU02Y29VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS80YThkMmEtNjY0Yi00NDY0LWE0ZTkt
MTcwOWY3YzdkNWU4LzEveFg0TUJwaXJ3WnBXaXY3T2F4a003UU02Y29VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS80YThkMmEtNjY0Yi00NDY0LWE0ZTktMTcwOWY3YzdkNWU4
LzEveFg0TUJwaXJ3WnBXaXY3T2F4a003UU02Y29VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT3VXco8h
0LhUVT4OvNz8uxY88PGQbMKxwTd1N3v1oj6UWXDtXaY/TzUl2XdAwRLwWAR9UWcS
/qpC/v8Fgnyg2nV5OaAlMHNJG2MqaqQcbsofx9m6E8stge7Vrm+7ta5TnenJ5E2Y
BSBx3/Izn7U+kVhd8F9ASTOwPtyu3EZFiSslgAYF1sF7LnE1xblOQdws3XdMApPx
9KTdyXXrYCZ9QHjY9Geb9JlcDPvBFe8VogxVmwFsPFmPo7Xfmcih8PoIIKFbYlYO
NeBE0evsx/TE5+YSBBrK41Hra6O43Yg8w68rbe35YSzdSO0DsY2N26xPE+8QWixe
uGZkCLRjfkqVFA==
-----END CERTIFICATE-----
Generated at Wed May 13 02:53:23 2026 by rpki-client