Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft
File: tXikYahZ3cmGwIqI6VEtXD0iEOY.mft (raw, json)
Hash identifier: 90s179VvyRZ3rRbPKA/q8oaU3aSyixbdc3kDO5cOff0=
Subject key identifier: B8:83:9B:71:1F:91:29:7B:7C:69:D1:82:DC:47:46:64:52:D6:8F:BB
Authority key identifier: B5:78:A4:61:A8:59:DD:C9:86:C0:8A:88:E9:51:2D:5C:3D:22:10:E6
Certificate issuer: /CN=b578a461a859ddc986c08a88e9512d5c3d2210e6
Certificate serial: 019E1FECAE045B985F65BC3CA53D4CD0AA96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXikYahZ3cmGwIqI6VEtXD0iEOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft
Manifest number: 15E9
Signing time: Wed 13 May 2026 06:01:05 +0000
Manifest this update: Wed 13 May 2026 06:01:05 +0000
Manifest next update: Thu 14 May 2026 06:01:05 +0000
Files and hashes: 1: dQ2JSeRkXtpAwYOMmqrJulKnPek.roa (hash: gnIi6rzRodMaHa0HwkkgHYuXAe1/OxH3oVCHWvHcN8Q=)
2: f6m0hqb0BBxiTxktGTcPrNXvB2g.roa (hash: wEO7iV67QNAygsspSwBpIYn+S9XY1EpUPceKq+Gbr8U=)
3: tXikYahZ3cmGwIqI6VEtXD0iEOY.crl (hash: vjfZHmiTddOeJhI6h1a2/M5kgvKQcaJJJFJXrr54iHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXikYahZ3cmGwIqI6VEtXD0iEOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:ae:04:5b:98:5f:65:bc:3c:a5:3d:4c:d0:aa:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b578a461a859ddc986c08a88e9512d5c3d2210e6
Validity
Not Before: May 13 06:01:05 2026 GMT
Not After : May 14 06:01:05 2026 GMT
Subject: CN=b8839b711f91297b7c69d182dc47466452d68fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:85:8e:b6:bd:b8:63:d8:37:da:ba:ad:88:5c:
3a:3b:3b:e4:37:4e:3a:dc:76:7a:12:e8:9d:c5:f6:
07:72:81:d7:a5:4a:6f:7f:eb:85:82:fb:d5:c8:79:
f3:21:30:00:9f:eb:01:1b:3b:04:42:e5:fb:6a:91:
cf:6d:20:1f:08:59:f9:eb:e9:dd:8a:55:7e:07:fe:
51:dd:c5:56:87:3f:b2:38:75:0f:a2:e2:a4:46:ff:
a8:39:fa:a6:37:0d:e8:33:9d:bf:51:f6:ec:a1:6c:
01:f6:c9:df:13:99:c3:51:79:1d:f2:67:02:8e:0d:
8e:4d:02:e1:34:37:14:e4:41:27:62:be:7e:3b:a2:
f5:be:a7:f3:1b:68:f8:fb:8d:dd:c7:54:8a:8d:9e:
be:26:4a:ba:8c:7f:b4:fb:f1:06:c7:24:68:15:9e:
e1:d9:62:0f:b3:b5:2c:95:ce:2c:d5:1f:86:e5:98:
5d:32:b8:1e:55:3c:15:99:ff:7f:ed:bf:01:c0:ee:
0a:a4:ae:49:fd:85:cc:8e:c6:fc:a2:14:43:13:1a:
90:78:f5:1d:9b:6e:ac:74:dc:5d:09:39:79:23:f4:
df:d9:64:e5:24:0a:53:48:80:8c:ff:73:ac:b4:fc:
1c:13:35:28:53:9e:bd:60:a5:69:cf:db:cb:15:b2:
7a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:83:9B:71:1F:91:29:7B:7C:69:D1:82:DC:47:46:64:52:D6:8F:BB
X509v3 Authority Key Identifier:
keyid:B5:78:A4:61:A8:59:DD:C9:86:C0:8A:88:E9:51:2D:5C:3D:22:10:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXikYahZ3cmGwIqI6VEtXD0iEOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:28:e7:b5:52:02:0a:c7:be:15:73:f0:71:82:45:21:d6:11:
27:fc:5e:62:64:6c:d6:68:13:4b:44:72:8a:59:31:80:6a:a6:
d2:ec:1a:40:10:5a:98:49:c1:34:f6:03:67:6d:32:c4:81:82:
64:66:03:26:73:90:83:80:b1:11:8e:2c:b5:cc:ec:84:49:bf:
8a:99:57:c7:81:62:11:de:ef:b7:da:18:69:51:40:3a:d3:b4:
df:c0:7f:70:a9:95:bd:de:b6:a8:2a:9f:14:b7:e5:24:01:33:
c4:45:1a:76:ed:0a:48:c5:0c:52:08:da:00:7f:b6:ea:9f:4b:
2e:0e:bb:63:46:ea:c7:41:f0:9f:38:c9:11:a9:92:51:3c:8a:
e6:71:e3:76:e8:9e:57:af:41:f3:f7:4f:4a:12:2c:05:ff:52:
c5:26:ca:ca:2e:f5:c1:8f:c5:c4:22:6b:23:88:cf:51:2e:50:
32:1f:8c:ae:ae:34:93:1c:56:af:08:2d:05:99:1b:06:26:e5:
75:68:ce:36:d1:b3:3b:74:23:10:63:d4:cd:45:09:89:2d:d4:
2b:c6:a6:20:48:01:12:32:b7:db:ec:dd:81:fd:51:99:58:55:
92:b8:78:22:84:f4:a8:e5:56:7b:48:e5:d4:4c:ae:28:64:af:
f5:88:9b:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4f7K4EW5hfZbw8pT1M0KqWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NzhhNDYxYTg1OWRkYzk4NmMwOGE4OGU5NTEyZDVjM2Qy
MjEwZTYwHhcNMjYwNTEzMDYwMTA1WhcNMjYwNTE0MDYwMTA1WjAzMTEwLwYDVQQD
EyhiODgzOWI3MTFmOTEyOTdiN2M2OWQxODJkYzQ3NDY2NDUyZDY4ZmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYWOtr24Y9g32rqtiFw6OzvkN046
3HZ6EuidxfYHcoHXpUpvf+uFgvvVyHnzITAAn+sBGzsEQuX7apHPbSAfCFn56+nd
ilV+B/5R3cVWhz+yOHUPouKkRv+oOfqmNw3oM52/UfbsoWwB9snfE5nDUXkd8mcC
jg2OTQLhNDcU5EEnYr5+O6L1vqfzG2j4+43dx1SKjZ6+Jkq6jH+0+/EGxyRoFZ7h
2WIPs7Uslc4s1R+G5ZhdMrgeVTwVmf9/7b8BwO4KpK5J/YXMjsb8ohRDExqQePUd
m26sdNxdCTl5I/Tf2WTlJApTSICM/3OstPwcEzUoU569YKVpz9vLFbJ6jQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLiDm3EfkSl7fGnRgtxHRmRS1o+7MB8GA1UdIwQY
MBaAFLV4pGGoWd3JhsCKiOlRLVw9IhDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFhpa1lhaFozY21Hd0lxSTZWRXRYRDBpRU9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8wY2VlMzQtNWFjYy00MmQ1LWE1YmYt
ZmMxYzBjY2JjMGI3LzEvdFhpa1lhaFozY21Hd0lxSTZWRXRYRDBpRU9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8wY2VlMzQtNWFjYy00MmQ1LWE1YmYtZmMxYzBjY2JjMGI3
LzEvdFhpa1lhaFozY21Hd0lxSTZWRXRYRDBpRU9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeijntVIC
Cse+FXPwcYJFIdYRJ/xeYmRs1mgTS0RyilkxgGqm0uwaQBBamEnBNPYDZ20yxIGC
ZGYDJnOQg4CxEY4stczshEm/iplXx4FiEd7vt9oYaVFAOtO038B/cKmVvd62qCqf
FLflJAEzxEUadu0KSMUMUgjaAH+26p9LLg67Y0bqx0HwnzjJEamSUTyK5nHjduie
V69B8/dPShIsBf9SxSbKyi71wY/FxCJrI4jPUS5QMh+Mrq40kxxWrwgtBZkbBibl
dWjONtGzO3QjEGPUzUUJiS3UK8amIEgBEjK32+zdgf1RmVhVkrh4IoT0qOVWe0jl
1EyuKGSv9Yib3Q==
-----END CERTIFICATE-----
Generated at Wed May 13 15:09:27 2026 by rpki-client