Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft
File: xb14VKoFD9blUPx80CtVhzC_u3o.mft (raw, json)
Hash identifier: 6e5tTICo/vnbzuT/htu2UES89shtS3lhapefBQCI3+s=
Subject key identifier: 61:A4:19:D1:E0:6D:42:00:57:3E:1E:48:CC:24:87:1F:24:B0:66:68
Authority key identifier: C5:BD:78:54:AA:05:0F:D6:E5:50:FC:7C:D0:2B:55:87:30:BF:BB:7A
Certificate issuer: /CN=c5bd7854aa050fd6e550fc7cd02b558730bfbb7a
Certificate serial: 019E20FF105BC197BD574338E301CA8C30B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xb14VKoFD9blUPx80CtVhzC_u3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft
Manifest number: 0856
Signing time: Wed 13 May 2026 11:00:47 +0000
Manifest this update: Wed 13 May 2026 11:00:47 +0000
Manifest next update: Thu 14 May 2026 11:00:47 +0000
Files and hashes: 1: CQU1i8i4vqvuY4KqJGZlaSLhz1o.roa (hash: CuYb2a2XddVX7SxALr1d1KIhl+UGwYzhtlyXuVxbI4M=)
2: xb14VKoFD9blUPx80CtVhzC_u3o.crl (hash: yM/6RtVPn/x2blFgubUhz9Nh7QCiXGcvMsOVKdhWuG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/xb14VKoFD9blUPx80CtVhzC_u3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:10:5b:c1:97:bd:57:43:38:e3:01:ca:8c:30:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5bd7854aa050fd6e550fc7cd02b558730bfbb7a
Validity
Not Before: May 13 11:00:47 2026 GMT
Not After : May 14 11:00:47 2026 GMT
Subject: CN=61a419d1e06d4200573e1e48cc24871f24b06668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:04:8f:db:5a:cc:f8:ff:ad:86:47:10:05:97:
14:06:f9:90:5a:f5:44:e6:1d:19:de:d5:9e:8d:42:
11:40:0e:34:b2:e2:be:6e:47:14:ad:12:a0:b0:3b:
bf:ed:eb:f5:71:99:81:ba:2b:22:43:9c:7d:a0:3f:
49:11:47:23:33:83:f9:c6:35:6c:b4:f7:d8:73:11:
98:3a:8f:61:b8:45:2b:04:52:1f:95:f4:9a:ef:05:
58:bd:ab:d0:71:03:ea:33:25:44:09:c9:49:12:b8:
0e:0e:31:1b:97:35:4f:cf:82:34:56:d2:a7:c5:b2:
00:14:cf:b0:dd:31:02:14:2a:d8:78:63:3a:47:8e:
a9:c3:d7:8b:a9:1f:d1:e7:52:df:4b:29:28:ac:a6:
f4:12:19:ba:43:05:44:65:51:a5:7c:b2:40:f7:16:
13:2a:48:8f:bb:01:b2:ce:8e:5b:9c:ea:d6:5e:b4:
1d:16:a5:be:7b:30:f8:56:bf:68:5e:e8:4f:b8:f2:
9f:68:07:55:10:fd:de:ab:a8:88:b3:74:5f:87:fa:
3e:f9:48:10:2c:84:b0:85:19:a1:c7:85:d4:b1:c1:
db:2d:c2:0a:ed:97:32:cd:4b:23:d7:e4:dd:b7:90:
8d:a7:a3:f0:e5:43:ac:d3:68:95:f9:44:73:23:1b:
8c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A4:19:D1:E0:6D:42:00:57:3E:1E:48:CC:24:87:1F:24:B0:66:68
X509v3 Authority Key Identifier:
keyid:C5:BD:78:54:AA:05:0F:D6:E5:50:FC:7C:D0:2B:55:87:30:BF:BB:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xb14VKoFD9blUPx80CtVhzC_u3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:16:4d:67:0d:da:44:6e:eb:21:04:3e:22:c0:4a:e6:ff:64:
f1:5d:e9:3e:91:27:88:3f:95:14:25:9e:1c:50:61:94:01:37:
a2:9d:7b:2c:08:21:19:90:36:43:2d:0d:35:2a:e6:be:bd:01:
17:4a:0d:c5:28:36:ea:47:c8:26:e7:c1:e5:69:6c:43:1d:fd:
b2:ef:45:b9:47:b4:74:61:40:68:7b:63:c0:2d:b1:b0:3c:70:
9a:5d:25:5c:0e:de:e1:37:99:87:6c:8a:1f:a1:6d:64:b1:60:
38:41:d8:e2:98:28:72:0f:47:d0:0b:d8:c8:e0:84:a7:7d:6f:
cc:6a:c5:fa:28:5f:fa:a9:25:0f:66:8c:c7:a7:1c:18:ac:9d:
63:67:0b:47:df:27:ff:01:3f:bf:72:17:f7:8c:1f:67:9a:2c:
bc:73:63:1e:ba:df:39:fe:7b:3c:ea:62:33:25:05:aa:0b:80:
f4:c4:93:73:38:a6:b1:25:b6:2d:0b:e8:b8:da:62:16:0f:60:
28:cd:86:ad:8b:b9:dd:19:19:25:de:f6:a9:8b:25:3b:e0:e8:
bd:b5:35:da:e6:da:4f:f0:7e:0f:a7:f9:9e:6e:58:c5:7b:af:
4c:38:2a:f1:21:d9:50:eb:55:79:07:be:b7:4f:64:2b:ef:04:
55:ca:4c:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4g/xBbwZe9V0M44wHKjDCxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1YmQ3ODU0YWEwNTBmZDZlNTUwZmM3Y2QwMmI1NTg3MzBi
ZmJiN2EwHhcNMjYwNTEzMTEwMDQ3WhcNMjYwNTE0MTEwMDQ3WjAzMTEwLwYDVQQD
Eyg2MWE0MTlkMWUwNmQ0MjAwNTczZTFlNDhjYzI0ODcxZjI0YjA2NjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgSP21rM+P+thkcQBZcUBvmQWvVE
5h0Z3tWejUIRQA40suK+bkcUrRKgsDu/7ev1cZmBuisiQ5x9oD9JEUcjM4P5xjVs
tPfYcxGYOo9huEUrBFIflfSa7wVYvavQcQPqMyVECclJErgODjEblzVPz4I0VtKn
xbIAFM+w3TECFCrYeGM6R46pw9eLqR/R51LfSykorKb0Ehm6QwVEZVGlfLJA9xYT
KkiPuwGyzo5bnOrWXrQdFqW+ezD4Vr9oXuhPuPKfaAdVEP3eq6iIs3Rfh/o++UgQ
LISwhRmhx4XUscHbLcIK7ZcyzUsj1+Tdt5CNp6Pw5UOs02iV+URzIxuMcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGGkGdHgbUIAVz4eSMwkhx8ksGZoMB8GA1UdIwQY
MBaAFMW9eFSqBQ/W5VD8fNArVYcwv7t6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGIxNFZLb0ZEOWJsVVB4ODBDdFZoekNfdTNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8zZjY2NDAtNWQ4Mi00YWM2LTkzODkt
NmZmMWQ0MjdkOTcxLzEveGIxNFZLb0ZEOWJsVVB4ODBDdFZoekNfdTNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS8zZjY2NDAtNWQ4Mi00YWM2LTkzODktNmZmMWQ0MjdkOTcx
LzEveGIxNFZLb0ZEOWJsVVB4ODBDdFZoekNfdTNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyRZNZw3a
RG7rIQQ+IsBK5v9k8V3pPpEniD+VFCWeHFBhlAE3op17LAghGZA2Qy0NNSrmvr0B
F0oNxSg26kfIJufB5WlsQx39su9FuUe0dGFAaHtjwC2xsDxwml0lXA7e4TeZh2yK
H6FtZLFgOEHY4pgocg9H0AvYyOCEp31vzGrF+ihf+qklD2aMx6ccGKydY2cLR98n
/wE/v3IX94wfZ5osvHNjHrrfOf57POpiMyUFqguA9MSTczimsSW2LQvouNpiFg9g
KM2GrYu53RkZJd72qYslO+DovbU12ubaT/B+D6f5nm5YxXuvTDgq8SHZUOtVeQe+
t09kK+8EVcpM8Q==
-----END CERTIFICATE-----
Generated at Wed May 13 15:37:43 2026 by rpki-client