Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft
File: xg8yRv3WG6G1eS_hrsStypjXWlw.mft (raw, json)
Hash identifier: GD+pK8irqHir1baKRjR8iUbByWhF/lBmkvWbBbPJw7I=
Subject key identifier: DE:44:E4:43:4B:0E:84:0D:B2:0A:4D:40:D3:2B:4F:3F:15:FE:9D:2B
Authority key identifier: C6:0F:32:46:FD:D6:1B:A1:B5:79:2F:E1:AE:C4:AD:CA:98:D7:5A:5C
Certificate issuer: /CN=c60f3246fdd61ba1b5792fe1aec4adca98d75a5c
Certificate serial: 019F91DAAD6159C252834A156989CE64587C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xg8yRv3WG6G1eS_hrsStypjXWlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft
Manifest number: 03A8
Signing time: Fri 24 Jul 2026 02:00:55 +0000
Manifest this update: Fri 24 Jul 2026 02:00:55 +0000
Manifest next update: Sat 25 Jul 2026 02:00:55 +0000
Files and hashes: 1: MmQGKSoH5LF3BVkr3ibrE-H9I9E.roa (hash: yWJCfOrBqqRptAvrnSvVrhM/S/WywcoV/IXeHHMd0es=)
2: xg8yRv3WG6G1eS_hrsStypjXWlw.crl (hash: 942SCvDIk/h4VbYcH4QXB+BaCprSH/KXcF+rwzuNyAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xg8yRv3WG6G1eS_hrsStypjXWlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:ad:61:59:c2:52:83:4a:15:69:89:ce:64:58:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c60f3246fdd61ba1b5792fe1aec4adca98d75a5c
Validity
Not Before: Jul 24 02:00:55 2026 GMT
Not After : Jul 25 02:00:55 2026 GMT
Subject: CN=de44e4434b0e840db20a4d40d32b4f3f15fe9d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fe:07:25:75:32:7c:0e:a0:af:b3:c4:8a:77:
a5:00:4e:98:ba:06:da:b4:c0:34:a1:cd:1e:e1:77:
9e:d9:dc:20:af:ba:1b:64:98:7a:cd:f9:0c:90:d2:
62:14:f0:fd:cf:fa:a8:d9:fa:ff:43:63:f0:63:0c:
b5:31:f0:cb:20:cb:3f:4c:26:d4:5d:96:72:06:5c:
df:dc:96:8b:b7:4e:4b:b5:d3:f1:cd:ea:9a:f7:16:
f3:f1:44:1d:6e:63:26:47:a9:37:1a:ba:5c:16:15:
d1:29:b1:6a:86:af:a9:ec:31:b9:74:ad:b8:85:d3:
9e:1e:ff:f4:cd:2f:f6:d1:ab:f2:07:43:63:d0:6c:
8d:30:9f:85:62:0b:90:f2:b2:7f:6a:ff:56:7c:e4:
8f:a3:fc:de:66:05:f4:fc:9d:f3:61:9f:fe:4c:f8:
85:bf:47:3b:29:1f:c3:f5:6f:83:6a:17:45:0e:ba:
cb:54:d9:e0:8d:10:df:96:02:81:e1:91:08:55:27:
7b:58:a8:a4:d0:a3:d1:39:0b:44:c6:ce:68:72:ff:
41:f7:e5:b0:10:23:41:1a:aa:ab:3c:c6:7b:dc:4e:
8a:62:b8:c5:a7:5a:c5:68:5e:3d:80:24:7a:e7:c4:
66:08:1d:28:d9:e4:a5:ab:5b:14:68:56:a4:91:a0:
db:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:44:E4:43:4B:0E:84:0D:B2:0A:4D:40:D3:2B:4F:3F:15:FE:9D:2B
X509v3 Authority Key Identifier:
keyid:C6:0F:32:46:FD:D6:1B:A1:B5:79:2F:E1:AE:C4:AD:CA:98:D7:5A:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xg8yRv3WG6G1eS_hrsStypjXWlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:8a:8b:fd:f2:c3:79:de:d1:33:10:43:35:18:99:33:9d:12:
c7:43:f7:07:e9:18:22:da:53:8c:31:0d:c0:ea:1c:46:36:e7:
f1:30:32:d1:36:e1:80:c0:77:f1:20:87:ea:42:4f:65:fc:64:
29:4a:4b:b2:34:b2:da:bc:48:69:f2:84:7a:c8:3d:bc:af:39:
d8:f8:7e:7d:3b:c7:66:87:0d:dd:93:e7:17:05:16:68:c3:7f:
0a:70:71:e8:96:05:3a:59:89:de:4c:e3:f4:40:6c:ad:ba:01:
8a:10:7d:3e:a0:cb:05:3c:7b:f8:7c:6e:1f:45:cd:fa:f8:f1:
31:23:ff:5c:2b:fe:17:68:9f:fe:3e:85:8b:26:1f:21:20:9a:
41:0d:64:dd:2b:c2:20:10:fa:4d:d0:ad:f0:c8:53:2f:64:b4:
45:08:de:d0:c6:ab:fb:47:c0:b5:07:63:e1:e1:99:ad:3d:bd:
df:d3:e1:ee:43:f0:b4:2e:da:b0:99:b4:bd:34:4e:46:75:8a:
42:c8:78:7e:35:5a:8a:80:46:11:fb:e8:b1:99:e1:39:6f:7e:
13:56:41:17:29:37:1f:5e:96:42:42:42:e3:af:82:48:b5:dc:
87:84:17:a7:49:32:9c:f9:20:47:9e:95:c5:60:c3:65:2d:88:
87:e5:52:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+R2q1hWcJSg0oVaYnOZFh8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MGYzMjQ2ZmRkNjFiYTFiNTc5MmZlMWFlYzRhZGNhOThk
NzVhNWMwHhcNMjYwNzI0MDIwMDU1WhcNMjYwNzI1MDIwMDU1WjAzMTEwLwYDVQQD
EyhkZTQ0ZTQ0MzRiMGU4NDBkYjIwYTRkNDBkMzJiNGYzZjE1ZmU5ZDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqf4HJXUyfA6gr7PEinelAE6Yugba
tMA0oc0e4Xee2dwgr7obZJh6zfkMkNJiFPD9z/qo2fr/Q2PwYwy1MfDLIMs/TCbU
XZZyBlzf3JaLt05LtdPxzeqa9xbz8UQdbmMmR6k3GrpcFhXRKbFqhq+p7DG5dK24
hdOeHv/0zS/20avyB0Nj0GyNMJ+FYguQ8rJ/av9WfOSPo/zeZgX0/J3zYZ/+TPiF
v0c7KR/D9W+DahdFDrrLVNngjRDflgKB4ZEIVSd7WKik0KPROQtExs5ocv9B9+Ww
ECNBGqqrPMZ73E6KYrjFp1rFaF49gCR658RmCB0o2eSlq1sUaFakkaDbYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN5E5ENLDoQNsgpNQNMrTz8V/p0rMB8GA1UdIwQY
MBaAFMYPMkb91huhtXkv4a7ErcqY11pcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGc4eVJ2M1dHNkcxZVNfaHJzU3R5cGpYV2x3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8yYTY1NmEtOTMyMy00NDI0LThmYjUt
MTc5NzkyNzY4ZGFlLzEveGc4eVJ2M1dHNkcxZVNfaHJzU3R5cGpYV2x3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8yYTY1NmEtOTMyMy00NDI0LThmYjUtMTc5NzkyNzY4ZGFl
LzEveGc4eVJ2M1dHNkcxZVNfaHJzU3R5cGpYV2x3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIYqL/fLD
ed7RMxBDNRiZM50Sx0P3B+kYItpTjDENwOocRjbn8TAy0TbhgMB38SCH6kJPZfxk
KUpLsjSy2rxIafKEesg9vK852Ph+fTvHZocN3ZPnFwUWaMN/CnBx6JYFOlmJ3kzj
9EBsrboBihB9PqDLBTx7+HxuH0XN+vjxMSP/XCv+F2if/j6FiyYfISCaQQ1k3SvC
IBD6TdCt8MhTL2S0RQje0Mar+0fAtQdj4eGZrT2939Ph7kPwtC7asJm0vTRORnWK
Qsh4fjVaioBGEfvosZnhOW9+E1ZBFyk3H16WQkJC46+CSLXch4QXp0kynPkgR56V
xWDDZS2Ih+VSOw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:10:39 2026 by rpki-client