Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
File: xXHZWAqPAeScYcX8_f8uWJlTS48.mft (raw, json)
Hash identifier: 8e4+pT5FdYRNVf6cfmkoVKvWCvM43YUut/H2lDD6gSw=
Subject key identifier: 7E:06:3E:A3:68:9F:BC:61:46:00:5D:0C:BA:2C:CD:63:E5:73:55:20
Authority key identifier: C5:71:D9:58:0A:8F:01:E4:9C:61:C5:FC:FD:FF:2E:58:99:53:4B:8F
Certificate issuer: /CN=c571d9580a8f01e49c61c5fcfdff2e5899534b8f
Certificate serial: 019F94366186C160EE7E708FAA9FE0D80330
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
Manifest number: 087C
Signing time: Fri 24 Jul 2026 13:00:19 +0000
Manifest this update: Fri 24 Jul 2026 13:00:19 +0000
Manifest next update: Sat 25 Jul 2026 13:00:19 +0000
Files and hashes: 1: uWNKx0IJVXvtTHYU4bkunZTjfuw.roa (hash: AUH4XmlqocQ9F/9lHvt0FvG+HzGfyUQaY0PdFUq9T4I=)
2: xXHZWAqPAeScYcX8_f8uWJlTS48.crl (hash: IQ/Jev9ht79st5hSFBk095uUinNYL3BbsP33Dq+c6Q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 13:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:61:86:c1:60:ee:7e:70:8f:aa:9f:e0:d8:03:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c571d9580a8f01e49c61c5fcfdff2e5899534b8f
Validity
Not Before: Jul 24 13:00:19 2026 GMT
Not After : Jul 25 13:00:19 2026 GMT
Subject: CN=7e063ea3689fbc6146005d0cba2ccd63e5735520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:27:79:83:35:e5:6e:77:92:45:dc:7e:cf:74:
ec:df:98:52:d9:5f:e8:e3:77:6d:a5:e5:05:9a:bd:
4b:d2:ef:87:1b:8f:79:3a:59:ef:43:67:a5:cf:4a:
59:29:08:a4:f6:af:2f:fb:79:08:7e:30:8c:ec:ac:
e9:09:b2:6d:be:b8:f4:aa:d1:4d:48:62:a0:94:82:
77:1d:41:e5:5f:f1:e6:fb:8f:8b:b4:6c:b7:7a:d8:
40:1c:e2:c7:2c:3a:07:6d:f8:ae:03:f0:9d:6d:e0:
f8:13:9d:c2:b0:0a:1d:1d:78:2b:a9:f9:ea:35:8b:
11:7e:8d:ef:64:9a:4c:be:b3:c2:9c:26:c2:50:b6:
28:96:c0:ab:b4:1c:91:1f:8e:df:0a:21:9f:c5:43:
62:47:dc:22:af:5b:60:92:74:ce:71:f7:1b:d6:0e:
ff:9d:df:ec:36:09:4e:1a:d4:42:a5:10:7a:00:b2:
0e:13:ea:eb:9d:68:d5:24:cc:c8:82:89:8f:f7:70:
36:87:12:56:de:c8:e0:49:9b:40:03:5f:cf:29:53:
be:76:a3:52:fc:33:12:2f:85:6a:f3:6c:97:87:a6:
71:c8:db:a3:75:be:bf:0c:f2:de:0c:5b:10:b1:ae:
0c:51:b3:e8:59:38:63:6c:cf:0d:d5:f6:a7:ab:85:
b8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:06:3E:A3:68:9F:BC:61:46:00:5D:0C:BA:2C:CD:63:E5:73:55:20
X509v3 Authority Key Identifier:
keyid:C5:71:D9:58:0A:8F:01:E4:9C:61:C5:FC:FD:FF:2E:58:99:53:4B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:5c:53:49:28:34:b8:ae:4f:65:43:e0:5d:9f:0c:60:59:53:
38:59:1f:ed:23:b7:6f:a6:85:59:66:30:1a:4e:cb:3c:c5:b2:
41:5e:fc:12:b3:ce:ad:6d:52:78:a6:ac:31:b3:5c:de:99:95:
75:f0:72:a7:b3:d8:a5:11:dc:c5:ad:12:24:9b:51:a4:2c:0a:
f1:77:56:b9:33:56:59:db:5a:18:e8:bf:5a:97:96:65:a2:bf:
71:48:fa:9b:4f:50:f5:50:50:7e:ea:8b:c5:b6:79:42:53:9b:
4d:10:20:1c:06:53:76:0b:23:70:d5:ee:f8:b2:a1:6c:ce:da:
54:fb:ee:67:bc:3f:0b:ed:41:2b:b5:cc:e2:0f:02:09:7e:59:
3a:f8:66:4b:71:51:48:4b:c4:e1:0a:51:2d:6d:68:a9:07:99:
d5:7b:e8:5d:25:03:1e:82:4c:4b:d1:13:a2:ee:fe:c3:90:a4:
a6:6e:de:b6:6a:77:10:10:9a:2c:12:5d:01:f6:64:2d:e7:42:
b8:f8:8c:94:fd:5e:14:c2:f2:bc:4c:a8:4a:20:7a:fb:9a:f4:
a0:6e:28:c2:02:2d:b8:47:b6:f9:1b:4e:5b:b2:eb:b0:59:d5:
de:b8:33:fe:69:cd:a4:98:e9:09:08:41:c6:9b:01:84:0f:a3:
29:10:ba:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UNmGGwWDufnCPqp/g2AMwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NzFkOTU4MGE4ZjAxZTQ5YzYxYzVmY2ZkZmYyZTU4OTk1
MzRiOGYwHhcNMjYwNzI0MTMwMDE5WhcNMjYwNzI1MTMwMDE5WjAzMTEwLwYDVQQD
Eyg3ZTA2M2VhMzY4OWZiYzYxNDYwMDVkMGNiYTJjY2Q2M2U1NzM1NTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCd5gzXlbneSRdx+z3Ts35hS2V/o
43dtpeUFmr1L0u+HG495OlnvQ2elz0pZKQik9q8v+3kIfjCM7KzpCbJtvrj0qtFN
SGKglIJ3HUHlX/Hm+4+LtGy3ethAHOLHLDoHbfiuA/CdbeD4E53CsAodHXgrqfnq
NYsRfo3vZJpMvrPCnCbCULYolsCrtByRH47fCiGfxUNiR9wir1tgknTOcfcb1g7/
nd/sNglOGtRCpRB6ALIOE+rrnWjVJMzIgomP93A2hxJW3sjgSZtAA1/PKVO+dqNS
/DMSL4Vq82yXh6ZxyNujdb6/DPLeDFsQsa4MUbPoWThjbM8N1fanq4W4DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH4GPqNon7xhRgBdDLoszWPlc1UgMB8GA1UdIwQY
MBaAFMVx2VgKjwHknGHF/P3/LliZU0uPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFhIWldBcVBBZVNjWWNYOF9mOHVXSmxUUzQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni84MTFmMjEtMTI1Yi00ZDA3LWJhYzgt
NzU0NmRkMTcxNmM4LzEveFhIWldBcVBBZVNjWWNYOF9mOHVXSmxUUzQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni84MTFmMjEtMTI1Yi00ZDA3LWJhYzgtNzU0NmRkMTcxNmM4
LzEveFhIWldBcVBBZVNjWWNYOF9mOHVXSmxUUzQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAllxTSSg0
uK5PZUPgXZ8MYFlTOFkf7SO3b6aFWWYwGk7LPMWyQV78ErPOrW1SeKasMbNc3pmV
dfByp7PYpRHcxa0SJJtRpCwK8XdWuTNWWdtaGOi/WpeWZaK/cUj6m09Q9VBQfuqL
xbZ5QlObTRAgHAZTdgsjcNXu+LKhbM7aVPvuZ7w/C+1BK7XM4g8CCX5ZOvhmS3FR
SEvE4QpRLW1oqQeZ1XvoXSUDHoJMS9ETou7+w5Ckpm7etmp3EBCaLBJdAfZkLedC
uPiMlP1eFMLyvEyoSiB6+5r0oG4owgItuEe2+RtOW7LrsFnV3rgz/mnNpJjpCQhB
xpsBhA+jKRC6zw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:39:31 2026 by rpki-client