Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
File: xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft (raw, json)
Hash identifier: Fn0SDCJzQJbcEj7IXTf+XBVVLMefis6VPfRVU34FFyQ=
Subject key identifier: 07:82:95:06:33:6C:E2:BA:57:D7:BA:B6:B7:F2:FA:BB:D7:99:66:A6
Authority key identifier: C5:E1:40:70:21:06:27:BF:CA:46:54:B4:2D:E7:97:AC:D6:D2:C4:F4
Certificate issuer: /CN=c5e14070210627bfca4654b42de797acd6d2c4f4
Certificate serial: 019E1F109A006BC4BAF3FD7DDA3D7ACD622B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
Manifest number: 08F8
Signing time: Wed 13 May 2026 02:00:42 +0000
Manifest this update: Wed 13 May 2026 02:00:42 +0000
Manifest next update: Thu 14 May 2026 02:00:42 +0000
Files and hashes: 1: 2jQx973K_WHIEDeBwoceaInwrVk.asa (hash: Xu/Sv3zfgccGu+NaMsUgY/a+THDNzPx1jfH33fWcIQ0=)
2: 4N_n1cCDT7wj_iB4XrMTAQ9PivM.roa (hash: MxvavFzCXv3bNh/z3UJzQ6ZzRkLADzDg48/vugWD+cE=)
3: xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl (hash: gBO0tpwfOCVSGlY7vhmB+svwcVReYNjCRBZyrbkYlE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:9a:00:6b:c4:ba:f3:fd:7d:da:3d:7a:cd:62:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5e14070210627bfca4654b42de797acd6d2c4f4
Validity
Not Before: May 13 02:00:42 2026 GMT
Not After : May 14 02:00:42 2026 GMT
Subject: CN=07829506336ce2ba57d7bab6b7f2fabbd79966a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:66:92:a0:76:3f:7d:b1:4d:c9:96:0b:c4:f0:
ac:be:b2:7b:fb:53:8c:56:6c:c9:0b:e6:4b:fd:bf:
42:a8:26:ef:72:f2:9e:1e:da:27:45:9e:86:16:0c:
fd:b2:af:6c:8e:73:c0:2f:4a:a9:22:c5:83:7b:6d:
d8:95:27:98:90:3f:86:2f:6b:d4:43:35:cb:80:f3:
88:b8:c2:f3:f8:78:cd:61:03:65:b1:6a:b6:11:1f:
d3:10:be:e2:e6:50:70:ab:5d:8a:b9:75:48:83:b9:
30:0f:fd:73:25:9e:96:eb:4f:bd:2e:76:d5:91:fa:
e0:2e:ab:60:cc:85:c5:94:c9:84:62:89:ac:cf:e7:
c5:92:e6:61:16:bb:21:bc:4f:d3:52:89:0f:99:77:
34:ec:d3:dd:84:e2:60:04:cb:f9:bd:bc:df:86:e0:
ab:ea:c5:85:78:f6:28:62:54:3e:d1:8d:d1:f8:dc:
d7:e2:4e:32:1a:69:4c:e2:5b:61:b6:85:48:e8:f7:
77:c3:04:b1:55:aa:12:63:24:96:04:2a:01:61:f8:
be:ef:c1:bc:4b:da:59:17:ef:cc:40:c3:e2:09:de:
9c:fc:49:73:32:86:0b:6e:b2:bf:cc:ba:2a:9d:5b:
48:e4:ac:11:e0:32:4c:94:e8:3d:95:86:06:21:4e:
94:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:82:95:06:33:6C:E2:BA:57:D7:BA:B6:B7:F2:FA:BB:D7:99:66:A6
X509v3 Authority Key Identifier:
keyid:C5:E1:40:70:21:06:27:BF:CA:46:54:B4:2D:E7:97:AC:D6:D2:C4:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:e8:4e:36:66:79:74:c4:41:49:bf:5f:a7:ae:3b:7e:31:66:
19:16:ab:d9:75:66:37:f3:62:5a:c9:d4:09:31:5e:fe:6c:5e:
e6:ae:35:bd:27:82:b3:7d:c2:c8:80:5c:f0:25:71:c1:b4:86:
81:83:33:59:da:c0:52:b6:cb:e1:be:46:47:d0:a1:6d:0e:61:
42:1b:ee:11:f6:45:78:4c:ef:97:6f:29:a6:6d:13:ac:af:60:
44:c6:d2:e8:e5:f3:f2:22:c1:e0:63:ec:32:17:56:e6:e0:51:
3e:83:67:c5:b4:e2:06:65:53:fb:2b:d0:7d:5b:b4:ed:0e:d1:
6b:89:d4:cf:0d:e3:37:13:07:85:b8:8e:92:15:51:25:91:77:
11:de:41:6c:9c:b0:da:49:7f:b5:6b:1c:03:c3:65:c6:1e:cb:
3b:f9:a2:6e:09:f4:f3:89:9e:27:11:7a:16:c9:15:00:28:62:
49:6b:70:e1:8a:80:89:7e:a0:4b:cf:90:8c:b6:72:fd:40:a5:
dc:6d:f0:c7:5a:0b:52:7e:d4:7b:c1:cf:2b:78:2f:bd:2f:93:
17:5b:b3:24:31:ac:e8:12:2b:87:2a:ab:0f:98:a0:a3:4f:cf:
59:a7:5e:12:8c:9c:8b:df:13:5f:66:97:8c:75:56:8a:b1:c5:
2c:58:27:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fEJoAa8S68/192j16zWIrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1ZTE0MDcwMjEwNjI3YmZjYTQ2NTRiNDJkZTc5N2FjZDZk
MmM0ZjQwHhcNMjYwNTEzMDIwMDQyWhcNMjYwNTE0MDIwMDQyWjAzMTEwLwYDVQQD
EygwNzgyOTUwNjMzNmNlMmJhNTdkN2JhYjZiN2YyZmFiYmQ3OTk2NmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4maSoHY/fbFNyZYLxPCsvrJ7+1OM
VmzJC+ZL/b9CqCbvcvKeHtonRZ6GFgz9sq9sjnPAL0qpIsWDe23YlSeYkD+GL2vU
QzXLgPOIuMLz+HjNYQNlsWq2ER/TEL7i5lBwq12KuXVIg7kwD/1zJZ6W60+9LnbV
kfrgLqtgzIXFlMmEYomsz+fFkuZhFrshvE/TUokPmXc07NPdhOJgBMv5vbzfhuCr
6sWFePYoYlQ+0Y3R+NzX4k4yGmlM4lthtoVI6Pd3wwSxVaoSYySWBCoBYfi+78G8
S9pZF+/MQMPiCd6c/ElzMoYLbrK/zLoqnVtI5KwR4DJMlOg9lYYGIU6UgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAeClQYzbOK6V9e6trfy+rvXmWamMB8GA1UdIwQY
MBaAFMXhQHAhBie/ykZUtC3nl6zW0sT0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGVGQWNDRUdKN19LUmxTMExlZVhyTmJTeFBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS80YmQ1MDAtNWQ0Zi00ODg5LTkxNDIt
M2M0ODM5YzhlODUxLzEveGVGQWNDRUdKN19LUmxTMExlZVhyTmJTeFBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS80YmQ1MDAtNWQ0Zi00ODg5LTkxNDItM2M0ODM5YzhlODUx
LzEveGVGQWNDRUdKN19LUmxTMExlZVhyTmJTeFBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACOhONmZ5
dMRBSb9fp647fjFmGRar2XVmN/NiWsnUCTFe/mxe5q41vSeCs33CyIBc8CVxwbSG
gYMzWdrAUrbL4b5GR9ChbQ5hQhvuEfZFeEzvl28ppm0TrK9gRMbS6OXz8iLB4GPs
MhdW5uBRPoNnxbTiBmVT+yvQfVu07Q7Ra4nUzw3jNxMHhbiOkhVRJZF3Ed5BbJyw
2kl/tWscA8Nlxh7LO/mibgn084meJxF6FskVAChiSWtw4YqAiX6gS8+QjLZy/UCl
3G3wx1oLUn7Ue8HPK3gvvS+TF1uzJDGs6BIrhyqrD5igo0/PWadeEoyci98TX2aX
jHVWirHFLFgnXA==
-----END CERTIFICATE-----
Generated at Wed May 13 06:46:25 2026 by rpki-client