Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft
File: xLejOGcjuooupILHtoAxpUEirE8.mft (raw, json)
Hash identifier: 0kt1/G6zZCQN0BBZN47tWgneleZIyR1HyBeQ2Hv+LRA=
Subject key identifier: 52:E1:FE:D2:9C:43:C7:90:3F:7C:B0:B9:30:02:62:C8:ED:EF:F5:C9
Authority key identifier: C4:B7:A3:38:67:23:BA:8A:2E:A4:82:C7:B6:80:31:A5:41:22:AC:4F
Certificate issuer: /CN=c4b7a3386723ba8a2ea482c7b68031a54122ac4f
Certificate serial: 019E1F119A71D3A619825BE10C10416F4AF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLejOGcjuooupILHtoAxpUEirE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft
Manifest number: 076D
Signing time: Wed 13 May 2026 02:01:47 +0000
Manifest this update: Wed 13 May 2026 02:01:47 +0000
Manifest next update: Thu 14 May 2026 02:01:47 +0000
Files and hashes: 1: Mk6KT-G0Nd_n-6Ue0npJ0Pqa4CI.roa (hash: 2cQhzB6rvIgJcWKL8JGJ8AUuDd5CAqSH0lZjme07urY=)
2: xLejOGcjuooupILHtoAxpUEirE8.crl (hash: 0nr1JK/HmM/RXDCA9QGFTJymtDe3ib5yhEzvSVhxgjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xLejOGcjuooupILHtoAxpUEirE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:9a:71:d3:a6:19:82:5b:e1:0c:10:41:6f:4a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b7a3386723ba8a2ea482c7b68031a54122ac4f
Validity
Not Before: May 13 02:01:47 2026 GMT
Not After : May 14 02:01:47 2026 GMT
Subject: CN=52e1fed29c43c7903f7cb0b9300262c8edeff5c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ad:c1:6f:20:9e:01:3c:73:9d:b1:d8:cb:ef:
fc:61:c5:07:92:5d:16:20:ff:41:60:23:9f:b9:29:
ed:6d:e1:77:c8:38:f4:a9:3a:1f:28:79:99:2d:23:
70:8c:a3:ee:08:8d:31:c9:ce:e0:aa:6a:77:ab:5f:
bc:d9:cd:44:f6:d7:56:cc:28:da:14:20:c4:e2:33:
ca:b0:14:a5:31:3c:62:80:50:0e:ba:34:0c:65:57:
a8:91:46:94:41:cb:84:e8:d4:f1:92:d8:3d:20:d1:
15:9d:14:b3:da:c2:36:fa:fd:eb:48:e3:41:fa:50:
62:6d:4c:c6:a0:7e:07:a5:a1:44:0a:e3:0e:91:fa:
de:61:f5:24:f5:c5:25:23:24:d2:ad:ab:8c:0b:cc:
8c:b5:03:9e:51:d9:39:7c:94:1e:39:41:8b:48:35:
11:fa:31:19:10:b7:12:93:b2:f4:4d:d7:01:4d:cc:
89:8c:ac:7d:fe:93:2e:2b:e5:12:51:38:37:5e:b9:
bf:f4:01:dd:58:49:71:66:99:07:d9:ae:fc:b0:bc:
5e:f4:1a:c2:24:4c:4d:1e:bb:a2:97:17:0a:11:34:
d6:ad:a2:08:3a:cc:43:dc:d3:b5:4c:61:45:7e:4a:
0f:86:84:8a:ad:fa:66:7d:99:f8:d4:e2:ed:59:ca:
a8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E1:FE:D2:9C:43:C7:90:3F:7C:B0:B9:30:02:62:C8:ED:EF:F5:C9
X509v3 Authority Key Identifier:
keyid:C4:B7:A3:38:67:23:BA:8A:2E:A4:82:C7:B6:80:31:A5:41:22:AC:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLejOGcjuooupILHtoAxpUEirE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:c9:ed:f6:c1:45:d2:5b:b3:e0:b6:09:7d:17:4e:b9:c4:2e:
c0:f4:d9:2f:2a:8f:49:f7:e9:f8:d9:cc:4c:47:3e:11:7d:ff:
73:d7:48:43:23:a0:7d:5d:93:35:a5:c3:07:7a:ba:b5:10:68:
43:45:be:82:41:fd:cf:d5:e1:d9:49:3d:94:29:0d:02:75:0d:
06:45:40:76:89:52:7a:27:de:78:0d:e6:38:51:1d:47:12:cd:
58:12:1a:fb:8f:78:89:ce:44:f3:da:67:bc:f3:e4:01:48:57:
a6:fe:d5:bc:fd:59:47:87:a7:11:dd:3c:69:d3:36:c4:59:28:
5e:1b:bd:38:e0:e0:f4:d4:cb:98:80:93:ad:4a:d3:14:6f:ec:
28:c1:84:e0:a0:cd:00:89:cc:51:72:75:d2:9d:ba:89:fe:12:
d9:13:a0:37:71:9f:d5:1b:c2:9f:8f:fc:30:06:5e:e1:a0:67:
ff:cf:8e:39:34:97:97:0f:eb:7c:2a:03:76:bb:ea:f3:a1:17:
66:c3:e5:e0:a6:1c:2d:df:f5:8c:6d:38:f1:70:02:7e:44:a7:
f6:5e:97:9c:43:d3:75:63:e6:b3:91:e0:46:79:d1:11:7c:ab:
b3:2c:1d:18:c9:bc:66:33:d9:49:d7:38:71:92:23:8e:de:81:
c2:f0:dc:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fEZpx06YZglvhDBBBb0ryMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0YjdhMzM4NjcyM2JhOGEyZWE0ODJjN2I2ODAzMWE1NDEy
MmFjNGYwHhcNMjYwNTEzMDIwMTQ3WhcNMjYwNTE0MDIwMTQ3WjAzMTEwLwYDVQQD
Eyg1MmUxZmVkMjljNDNjNzkwM2Y3Y2IwYjkzMDAyNjJjOGVkZWZmNWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwa3BbyCeATxznbHYy+/8YcUHkl0W
IP9BYCOfuSntbeF3yDj0qTofKHmZLSNwjKPuCI0xyc7gqmp3q1+82c1E9tdWzCja
FCDE4jPKsBSlMTxigFAOujQMZVeokUaUQcuE6NTxktg9INEVnRSz2sI2+v3rSONB
+lBibUzGoH4HpaFECuMOkfreYfUk9cUlIyTSrauMC8yMtQOeUdk5fJQeOUGLSDUR
+jEZELcSk7L0TdcBTcyJjKx9/pMuK+USUTg3Xrm/9AHdWElxZpkH2a78sLxe9BrC
JExNHruilxcKETTWraIIOsxD3NO1TGFFfkoPhoSKrfpmfZn41OLtWcqohQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFLh/tKcQ8eQP3ywuTACYsjt7/XJMB8GA1UdIwQY
MBaAFMS3ozhnI7qKLqSCx7aAMaVBIqxPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveExlak9HY2p1b291cElMSHRvQXhwVUVpckU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9hYTdiZjYtNjUyNS00Mzk0LTgwYmEt
YmQ0MGRmYWU3ODg2LzEveExlak9HY2p1b291cElMSHRvQXhwVUVpckU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9hYTdiZjYtNjUyNS00Mzk0LTgwYmEtYmQ0MGRmYWU3ODg2
LzEveExlak9HY2p1b291cElMSHRvQXhwVUVpckU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcMnt9sFF
0luz4LYJfRdOucQuwPTZLyqPSffp+NnMTEc+EX3/c9dIQyOgfV2TNaXDB3q6tRBo
Q0W+gkH9z9Xh2Uk9lCkNAnUNBkVAdolSeifeeA3mOFEdRxLNWBIa+494ic5E89pn
vPPkAUhXpv7VvP1ZR4enEd08adM2xFkoXhu9OODg9NTLmICTrUrTFG/sKMGE4KDN
AInMUXJ10p26if4S2ROgN3Gf1RvCn4/8MAZe4aBn/8+OOTSXlw/rfCoDdrvq86EX
ZsPl4KYcLd/1jG048XACfkSn9l6XnEPTdWPms5HgRnnREXyrsywdGMm8ZjPZSdc4
cZIjjt6BwvDcpw==
-----END CERTIFICATE-----
Generated at Wed May 13 08:53:55 2026 by rpki-client