Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/b2598f-0631-4b5a-afe5-5ad9864532a7/1/xC4WYonhwfw6mLVFQLzHMUbXSII.mft
File: xC4WYonhwfw6mLVFQLzHMUbXSII.mft (raw, json)
Hash identifier: Ce+GOfr/sIndbgalQjXplEAkZib1O2cr6pe26t/amVI=
Subject key identifier: 9D:ED:C9:08:41:2B:74:65:F3:A8:08:D1:5D:67:0D:45:03:49:78:8C
Authority key identifier: C4:2E:16:62:89:E1:C1:FC:3A:98:B5:45:40:BC:C7:31:46:D7:48:82
Certificate issuer: /CN=c42e166289e1c1fc3a98b54540bcc73146d74882
Certificate serial: 019E1DFE59145507AC6046AC850B7AD60FBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xC4WYonhwfw6mLVFQLzHMUbXSII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/b2598f-0631-4b5a-afe5-5ad9864532a7/1/xC4WYonhwfw6mLVFQLzHMUbXSII.mft
Manifest number: 0106
Signing time: Tue 12 May 2026 21:01:08 +0000
Manifest this update: Tue 12 May 2026 21:01:08 +0000
Manifest next update: Wed 13 May 2026 21:01:08 +0000
Files and hashes: 1: Lte9ihIhwLMJEwykODf0-Ea8xPQ.roa (hash: v/rTSSPoZthEpEjHR7Sqj/7dnyWCaWiGBnHcyQGxAwA=)
2: xC4WYonhwfw6mLVFQLzHMUbXSII.crl (hash: ZSxWiIWbOtH+xlyjJNqpC+s10ABNXXfuMPSlq0ee0PU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/b2598f-0631-4b5a-afe5-5ad9864532a7/1/xC4WYonhwfw6mLVFQLzHMUbXSII.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/b2598f-0631-4b5a-afe5-5ad9864532a7/1/xC4WYonhwfw6mLVFQLzHMUbXSII.mft
rsync://rpki.ripe.net/repository/DEFAULT/xC4WYonhwfw6mLVFQLzHMUbXSII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:59:14:55:07:ac:60:46:ac:85:0b:7a:d6:0f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42e166289e1c1fc3a98b54540bcc73146d74882
Validity
Not Before: May 12 21:01:08 2026 GMT
Not After : May 13 21:01:08 2026 GMT
Subject: CN=9dedc908412b7465f3a808d15d670d450349788c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:80:7d:68:ba:26:ce:d0:b4:17:58:2d:50:a0:
33:fe:51:63:db:47:e7:cd:6c:0e:c1:d6:64:db:96:
31:44:ce:46:7e:70:5b:4c:dc:18:de:d3:d4:b5:a8:
2e:e9:5e:db:e2:b5:81:c9:86:51:c9:2a:c3:72:42:
86:73:00:c0:ca:50:cf:9f:5e:a8:84:3f:79:59:3d:
d3:2a:8a:67:1e:f7:ea:46:e7:f8:b5:de:1b:b5:c0:
ac:87:c9:25:19:94:67:8c:32:c5:87:94:cd:71:6a:
cf:4b:cb:60:de:ab:ee:90:f3:3a:32:b8:f0:50:39:
69:55:37:a9:b3:34:5e:71:35:32:ce:5c:4f:7d:81:
e2:8b:70:ae:d4:c7:3b:d6:0d:59:72:e1:f2:fc:6a:
31:5e:ae:74:bc:72:c7:a0:ea:ac:38:94:49:1a:e1:
d1:9d:c2:9a:e3:8e:db:b9:c5:6e:18:16:67:a0:78:
a5:d4:c2:0c:34:25:cf:fc:a0:63:2f:0b:dc:fb:13:
5b:aa:24:82:e1:6c:43:f0:93:64:c4:24:38:4a:db:
d1:8f:be:86:96:0a:2a:11:51:7a:fa:74:be:ee:aa:
85:95:f0:a6:42:50:0f:60:68:01:55:83:13:a6:71:
e8:17:d8:0b:95:a3:9f:5b:76:dc:0e:ae:d7:cc:e8:
e7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:ED:C9:08:41:2B:74:65:F3:A8:08:D1:5D:67:0D:45:03:49:78:8C
X509v3 Authority Key Identifier:
keyid:C4:2E:16:62:89:E1:C1:FC:3A:98:B5:45:40:BC:C7:31:46:D7:48:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xC4WYonhwfw6mLVFQLzHMUbXSII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b2598f-0631-4b5a-afe5-5ad9864532a7/1/xC4WYonhwfw6mLVFQLzHMUbXSII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b2598f-0631-4b5a-afe5-5ad9864532a7/1/xC4WYonhwfw6mLVFQLzHMUbXSII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:2c:88:1f:a8:c5:28:4e:39:3b:8e:76:8f:71:f1:94:a0:69:
78:ab:83:bd:0d:60:ca:87:8f:60:89:00:53:a8:10:d4:51:b4:
59:0a:e7:80:6a:35:73:81:2e:ee:15:d0:6b:38:8f:a3:75:14:
c1:83:6b:ad:45:36:40:a8:53:52:72:70:d5:2e:35:41:06:6b:
aa:9b:02:48:98:f9:1b:21:7c:3e:33:9b:d1:10:65:6f:de:f9:
32:71:b9:a5:14:05:85:65:61:9e:ae:73:bd:45:1c:f1:91:96:
f2:9e:c1:1c:6d:df:9d:4e:54:d5:a9:a3:e8:b0:8f:82:40:48:
7a:52:a9:b4:3d:f9:df:c7:b8:98:f1:23:14:25:86:52:63:df:
e9:fb:04:ce:e9:bf:c1:2b:eb:b4:ef:d8:f1:bf:46:13:b7:85:
67:9c:7f:f2:c7:df:43:89:97:f9:af:25:4a:f8:c1:04:29:be:
52:cd:cf:60:57:18:5c:64:40:34:ab:15:68:eb:eb:ff:b0:cb:
46:8f:01:f7:59:5c:88:61:1d:6b:c6:86:03:4d:31:63:68:ad:
18:8f:71:e4:2d:b3:1b:f1:ee:03:57:0e:80:0f:d7:a8:0b:8d:
7b:49:9e:ab:ef:85:db:52:63:62:0d:58:4a:33:2b:4a:fd:92:
21:67:71:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/lkUVQesYEashQt61g++MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0MmUxNjYyODllMWMxZmMzYTk4YjU0NTQwYmNjNzMxNDZk
NzQ4ODIwHhcNMjYwNTEyMjEwMTA4WhcNMjYwNTEzMjEwMTA4WjAzMTEwLwYDVQQD
Eyg5ZGVkYzkwODQxMmI3NDY1ZjNhODA4ZDE1ZDY3MGQ0NTAzNDk3ODhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5YB9aLomztC0F1gtUKAz/lFj20fn
zWwOwdZk25YxRM5GfnBbTNwY3tPUtagu6V7b4rWByYZRySrDckKGcwDAylDPn16o
hD95WT3TKopnHvfqRuf4td4btcCsh8klGZRnjDLFh5TNcWrPS8tg3qvukPM6Mrjw
UDlpVTepszRecTUyzlxPfYHii3Cu1Mc71g1ZcuHy/GoxXq50vHLHoOqsOJRJGuHR
ncKa447bucVuGBZnoHil1MIMNCXP/KBjLwvc+xNbqiSC4WxD8JNkxCQ4StvRj76G
lgoqEVF6+nS+7qqFlfCmQlAPYGgBVYMTpnHoF9gLlaOfW3bcDq7XzOjnjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ3tyQhBK3Rl86gI0V1nDUUDSXiMMB8GA1UdIwQY
MBaAFMQuFmKJ4cH8Opi1RUC8xzFG10iCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEM0V1lvbmh3Znc2bUxWRlFMekhNVWJYU0lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9iMjU5OGYtMDYzMS00YjVhLWFmZTUt
NWFkOTg2NDUzMmE3LzEveEM0V1lvbmh3Znc2bUxWRlFMekhNVWJYU0lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9iMjU5OGYtMDYzMS00YjVhLWFmZTUtNWFkOTg2NDUzMmE3
LzEveEM0V1lvbmh3Znc2bUxWRlFMekhNVWJYU0lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbCyIH6jF
KE45O452j3HxlKBpeKuDvQ1gyoePYIkAU6gQ1FG0WQrngGo1c4Eu7hXQaziPo3UU
wYNrrUU2QKhTUnJw1S41QQZrqpsCSJj5GyF8PjOb0RBlb975MnG5pRQFhWVhnq5z
vUUc8ZGW8p7BHG3fnU5U1amj6LCPgkBIelKptD3538e4mPEjFCWGUmPf6fsEzum/
wSvrtO/Y8b9GE7eFZ5x/8sffQ4mX+a8lSvjBBCm+Us3PYFcYXGRANKsVaOvr/7DL
Ro8B91lciGEda8aGA00xY2itGI9x5C2zG/HuA1cOgA/XqAuNe0meq++F21JjYg1Y
SjMrSv2SIWdx7A==
-----END CERTIFICATE-----
Generated at Wed May 13 06:33:21 2026 by rpki-client