Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.mft
File: xM-i_E8u6evIO-eTZrCulNHyv8c.mft (raw, json)
Hash identifier: orpVl28NktcKZAbD1sHxC2n0dqzaqkadzwGGJYGpPOc=
Subject key identifier: 77:6E:5E:78:B2:89:FB:B5:9D:7D:19:F4:55:C9:F8:4D:AF:25:E1:38
Authority key identifier: C4:CF:A2:FC:4F:2E:E9:EB:C8:3B:E7:93:66:B0:AE:94:D1:F2:BF:C7
Certificate issuer: /CN=c4cfa2fc4f2ee9ebc83be79366b0ae94d1f2bfc7
Certificate serial: 019E20242A533F81622F6EBBC1CED2EC9A09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM-i_E8u6evIO-eTZrCulNHyv8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.mft
Manifest number: 0966
Signing time: Wed 13 May 2026 07:01:41 +0000
Manifest this update: Wed 13 May 2026 07:01:41 +0000
Manifest next update: Thu 14 May 2026 07:01:41 +0000
Files and hashes: 1: F30FN8U3Xj87k2Z9DAG1GB_A31Q.roa (hash: pnPZQBEXHi+ImRZ6WCYxFeNcDY9y0/l3lR4zkQuuaVQ=)
2: xM-i_E8u6evIO-eTZrCulNHyv8c.crl (hash: 6RbkCnHcrnEqI9TWuwfD9w26RO8Ck+COiAlS3rj2yVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM-i_E8u6evIO-eTZrCulNHyv8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:24:2a:53:3f:81:62:2f:6e:bb:c1:ce:d2:ec:9a:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4cfa2fc4f2ee9ebc83be79366b0ae94d1f2bfc7
Validity
Not Before: May 13 07:01:41 2026 GMT
Not After : May 14 07:01:41 2026 GMT
Subject: CN=776e5e78b289fbb59d7d19f455c9f84daf25e138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ff:3b:f9:04:9b:86:a9:c3:86:da:75:15:0a:
25:45:6a:a8:62:cf:28:dc:da:66:77:69:d3:90:11:
24:cf:95:27:1d:34:e5:35:4a:c6:e0:ce:4f:43:93:
22:8d:8c:a6:df:9a:60:3c:96:ce:8c:d8:60:b8:ae:
16:28:36:b5:b9:34:4d:c7:21:d3:9a:05:3f:1a:63:
9b:f7:00:f4:e6:fe:c4:49:89:be:46:2d:3f:30:72:
0e:c5:93:6c:92:97:7f:07:54:65:21:13:6a:d6:25:
1c:a3:03:1f:43:0d:6a:b8:c6:db:16:cc:3c:38:8e:
10:69:a6:bf:4b:de:00:af:a0:70:28:9b:68:3d:da:
63:bc:64:90:fc:e0:e7:f3:8e:75:69:5b:5e:7d:b3:
1c:e7:8f:35:dd:14:26:44:1f:d5:5a:95:9d:0c:78:
b0:1b:b9:05:16:b1:4f:78:64:00:97:70:df:8e:00:
9c:77:37:bb:df:be:e5:18:b6:b7:95:a8:e5:ca:ba:
fb:e9:b9:39:f7:d3:b5:41:aa:02:4f:eb:4b:0d:93:
47:9a:3c:d7:a9:1a:90:56:6b:c1:a1:3d:b0:ed:b4:
7d:a0:80:d0:34:3c:33:b6:c0:4f:79:c8:e9:78:da:
db:65:d1:c2:49:aa:99:07:03:c4:4a:89:bc:d3:e1:
81:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:6E:5E:78:B2:89:FB:B5:9D:7D:19:F4:55:C9:F8:4D:AF:25:E1:38
X509v3 Authority Key Identifier:
keyid:C4:CF:A2:FC:4F:2E:E9:EB:C8:3B:E7:93:66:B0:AE:94:D1:F2:BF:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM-i_E8u6evIO-eTZrCulNHyv8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:14:d2:ec:31:42:b8:6c:ae:d0:3f:85:9f:b0:c0:28:f4:2b:
bb:ce:8a:19:ff:6b:a6:15:ca:aa:45:e0:e9:72:94:51:87:f8:
da:f4:f8:6a:dd:14:08:ec:52:21:9c:34:f3:b7:f0:94:80:4a:
43:19:f3:47:43:91:4f:90:bc:91:fc:c1:28:33:2e:f0:41:dd:
41:be:f4:9f:ea:bb:f3:0d:e3:57:79:a8:26:29:54:a9:72:f1:
a5:ab:56:58:99:7d:77:a9:b0:fb:8a:47:22:1e:7f:28:fe:de:
2f:c6:24:74:cd:71:07:b8:90:b5:6e:6c:65:52:b5:5a:b8:eb:
fd:bd:e9:56:a3:cd:17:23:d1:00:03:a8:4e:6e:53:2e:74:4e:
37:f0:29:6d:f6:fa:08:65:cd:27:97:f1:83:6f:6e:63:34:38:
db:9b:6f:44:6f:d7:6d:04:c5:7e:bf:1c:df:ec:28:68:a7:0b:
72:cf:4d:45:1b:0e:f3:e3:2d:27:3a:29:e7:ba:61:56:bd:46:
05:58:99:80:99:51:af:c4:07:68:82:9f:bc:a8:b6:c3:73:d5:
ba:e4:96:32:4c:d6:2a:13:64:16:fe:14:4d:f7:02:f8:c4:7e:
a0:31:ec:6a:ff:71:65:51:20:57:5f:80:46:91:ae:72:e3:8a:
b2:2e:7f:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gJCpTP4FiL267wc7S7JoJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0Y2ZhMmZjNGYyZWU5ZWJjODNiZTc5MzY2YjBhZTk0ZDFm
MmJmYzcwHhcNMjYwNTEzMDcwMTQxWhcNMjYwNTE0MDcwMTQxWjAzMTEwLwYDVQQD
Eyg3NzZlNWU3OGIyODlmYmI1OWQ3ZDE5ZjQ1NWM5Zjg0ZGFmMjVlMTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1P87+QSbhqnDhtp1FQolRWqoYs8o
3Npmd2nTkBEkz5UnHTTlNUrG4M5PQ5MijYym35pgPJbOjNhguK4WKDa1uTRNxyHT
mgU/GmOb9wD05v7ESYm+Ri0/MHIOxZNskpd/B1RlIRNq1iUcowMfQw1quMbbFsw8
OI4Qaaa/S94Ar6BwKJtoPdpjvGSQ/ODn8451aVtefbMc54813RQmRB/VWpWdDHiw
G7kFFrFPeGQAl3DfjgCcdze7377lGLa3lajlyrr76bk599O1QaoCT+tLDZNHmjzX
qRqQVmvBoT2w7bR9oIDQNDwztsBPecjpeNrbZdHCSaqZBwPESom80+GBgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHduXniyifu1nX0Z9FXJ+E2vJeE4MB8GA1UdIwQY
MBaAFMTPovxPLunryDvnk2awrpTR8r/HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE0taV9FOHU2ZXZJTy1lVFpyQ3VsTkh5djhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS80Mzk2YzItOGVkMS00MzJlLTk5ZmIt
N2M1NzNiNmUwMGVhLzEveE0taV9FOHU2ZXZJTy1lVFpyQ3VsTkh5djhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS80Mzk2YzItOGVkMS00MzJlLTk5ZmItN2M1NzNiNmUwMGVh
LzEveE0taV9FOHU2ZXZJTy1lVFpyQ3VsTkh5djhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHBTS7DFC
uGyu0D+Fn7DAKPQru86KGf9rphXKqkXg6XKUUYf42vT4at0UCOxSIZw087fwlIBK
QxnzR0ORT5C8kfzBKDMu8EHdQb70n+q78w3jV3moJilUqXLxpatWWJl9d6mw+4pH
Ih5/KP7eL8YkdM1xB7iQtW5sZVK1Wrjr/b3pVqPNFyPRAAOoTm5TLnRON/Apbfb6
CGXNJ5fxg29uYzQ425tvRG/XbQTFfr8c3+woaKcLcs9NRRsO8+MtJzop57phVr1G
BViZgJlRr8QHaIKfvKi2w3PVuuSWMkzWKhNkFv4UTfcC+MR+oDHsav9xZVEgV1+A
RpGucuOKsi5/sA==
-----END CERTIFICATE-----
Generated at Wed May 13 11:13:20 2026 by rpki-client