Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
File: _xukAAfM3NCTDxor3EsC4plFdno.mft (raw, json)
Hash identifier: mGF+EIVNDUdxe/IeXYkQN0UgCJJ3pWtSdFspHyPm+qs=
Subject key identifier: EA:A9:BF:1D:6D:C8:9B:D5:52:DD:20:F5:BA:FA:32:A8:11:F8:CE:8F
Authority key identifier: FF:1B:A4:00:07:CC:DC:D0:93:0F:1A:2B:DC:4B:02:E2:99:45:76:7A
Certificate issuer: /CN=ff1ba40007ccdcd0930f1a2bdc4b02e29945767a
Certificate serial: 019E1F108948098156AEB2CFF5E20A920070
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
Manifest number: 1905
Signing time: Wed 13 May 2026 02:00:37 +0000
Manifest this update: Wed 13 May 2026 02:00:37 +0000
Manifest next update: Thu 14 May 2026 02:00:37 +0000
Files and hashes: 1: MsXjoDhcJ3cwovjao6DlRt0DHd0.roa (hash: Tw0sup4+WLjwE3lyNhBuN8zmG2+OMt8afwKPB5VGZGg=)
2: _xukAAfM3NCTDxor3EsC4plFdno.crl (hash: L2BeWGcL+Op5kphz213PeRbYm7NLmOKdLT1Ev3nJLdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:89:48:09:81:56:ae:b2:cf:f5:e2:0a:92:00:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1ba40007ccdcd0930f1a2bdc4b02e29945767a
Validity
Not Before: May 13 02:00:37 2026 GMT
Not After : May 14 02:00:37 2026 GMT
Subject: CN=eaa9bf1d6dc89bd552dd20f5bafa32a811f8ce8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e9:d5:c7:42:4b:cb:a1:88:45:77:84:2d:2c:
fd:65:99:b6:53:52:5a:a9:e0:67:cb:ad:29:00:5c:
00:07:66:78:ce:0d:f6:24:74:27:46:f0:ab:5e:53:
6f:e8:34:e9:16:45:4e:31:22:ba:9c:50:aa:bf:f1:
c0:ef:80:f9:ee:46:e2:4a:f1:5e:0e:ee:7c:96:2f:
16:85:7f:1c:f4:a6:d6:69:6f:26:81:0e:7c:33:ae:
fd:a2:bd:8d:cb:59:a6:4b:19:fb:e0:52:9c:4d:e1:
76:2a:91:e7:85:23:b9:18:28:f6:d2:08:03:db:67:
b1:dc:cf:78:7b:3a:5d:d8:2e:13:97:23:89:6a:a3:
96:59:06:ee:71:35:43:bb:6b:62:37:dd:cb:d1:95:
bf:22:7d:7b:60:07:f5:49:40:7e:89:dc:38:d0:eb:
b2:ae:c5:6f:88:d2:e6:ce:41:82:16:ca:2a:4f:98:
f4:74:a6:03:d3:0e:4d:da:97:b8:c6:cb:9d:36:cb:
10:c5:e9:66:68:8d:24:a7:bb:5c:da:44:27:5d:53:
ff:60:89:cc:bc:14:e3:35:b9:c0:dc:03:6d:df:40:
16:e7:99:35:52:ae:75:a5:ed:99:b9:8c:2c:1f:4c:
86:a0:88:fd:3d:98:1e:e7:78:41:47:5a:aa:13:0b:
c2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A9:BF:1D:6D:C8:9B:D5:52:DD:20:F5:BA:FA:32:A8:11:F8:CE:8F
X509v3 Authority Key Identifier:
keyid:FF:1B:A4:00:07:CC:DC:D0:93:0F:1A:2B:DC:4B:02:E2:99:45:76:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:2f:02:23:60:36:3e:6d:5c:7c:6e:b7:93:33:e7:b9:c5:42:
27:bf:ec:32:72:4a:7f:d8:86:db:9e:76:86:5d:aa:0f:b4:d4:
b1:60:17:87:c3:5c:d9:6e:f1:e5:dc:6b:ab:34:b7:22:b3:77:
e9:02:f4:a9:0c:12:4a:c3:05:27:4d:5a:7e:57:98:5f:0a:d2:
d7:a6:b9:5d:d7:ee:3d:35:69:65:6e:c7:37:75:3e:d8:88:ab:
c6:98:21:d5:6a:f4:ba:18:83:c0:28:d8:13:5d:14:e8:f3:1b:
78:b6:7a:df:49:d6:45:80:7c:2f:81:06:21:98:90:41:cd:31:
a9:f5:7e:c6:8f:ca:d1:dd:85:5f:d6:78:54:67:63:69:40:c8:
b0:2f:67:6b:a4:1a:47:14:64:34:46:de:90:98:e8:12:43:57:
29:d9:63:1e:53:7e:74:a2:05:29:ba:a6:12:45:8b:e1:0a:14:
aa:e5:a3:49:16:4f:85:69:92:fb:1b:a6:c2:0b:25:21:69:9c:
9d:d3:19:18:75:a7:46:3c:d1:16:e8:ac:8e:18:96:27:05:7f:
79:1d:39:53:1a:c0:3c:65:84:c8:cd:32:5e:79:f3:38:fa:66:
7a:c8:5b:1a:91:b3:34:d7:18:1f:62:58:3f:24:37:e4:2a:22:
14:33:3c:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fEIlICYFWrrLP9eIKkgBwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMWJhNDAwMDdjY2RjZDA5MzBmMWEyYmRjNGIwMmUyOTk0
NTc2N2EwHhcNMjYwNTEzMDIwMDM3WhcNMjYwNTE0MDIwMDM3WjAzMTEwLwYDVQQD
EyhlYWE5YmYxZDZkYzg5YmQ1NTJkZDIwZjViYWZhMzJhODExZjhjZThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+nVx0JLy6GIRXeELSz9ZZm2U1Ja
qeBny60pAFwAB2Z4zg32JHQnRvCrXlNv6DTpFkVOMSK6nFCqv/HA74D57kbiSvFe
Du58li8WhX8c9KbWaW8mgQ58M679or2Ny1mmSxn74FKcTeF2KpHnhSO5GCj20ggD
22ex3M94ezpd2C4TlyOJaqOWWQbucTVDu2tiN93L0ZW/In17YAf1SUB+idw40Ouy
rsVviNLmzkGCFsoqT5j0dKYD0w5N2pe4xsudNssQxelmaI0kp7tc2kQnXVP/YInM
vBTjNbnA3ANt30AW55k1Uq51pe2ZuYwsH0yGoIj9PZge53hBR1qqEwvCoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOqpvx1tyJvVUt0g9br6MqgR+M6PMB8GA1UdIwQY
MBaAFP8bpAAHzNzQkw8aK9xLAuKZRXZ6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3h1a0FBZk0zTkNURHhvcjNFc0M0cGxGZG5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8wNjA3MjAtNzMyMC00OWI1LTg5YWIt
OGQyYTY1M2JhOTk5LzEvX3h1a0FBZk0zTkNURHhvcjNFc0M0cGxGZG5vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC8wNjA3MjAtNzMyMC00OWI1LTg5YWItOGQyYTY1M2JhOTk5
LzEvX3h1a0FBZk0zTkNURHhvcjNFc0M0cGxGZG5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeC8CI2A2
Pm1cfG63kzPnucVCJ7/sMnJKf9iG2552hl2qD7TUsWAXh8Nc2W7x5dxrqzS3IrN3
6QL0qQwSSsMFJ01afleYXwrS16a5XdfuPTVpZW7HN3U+2Iirxpgh1Wr0uhiDwCjY
E10U6PMbeLZ630nWRYB8L4EGIZiQQc0xqfV+xo/K0d2FX9Z4VGdjaUDIsC9na6Qa
RxRkNEbekJjoEkNXKdljHlN+dKIFKbqmEkWL4QoUquWjSRZPhWmS+xumwgslIWmc
ndMZGHWnRjzRFuisjhiWJwV/eR05UxrAPGWEyM0yXnnzOPpmeshbGpGzNNcYH2JY
PyQ35CoiFDM8gA==
-----END CERTIFICATE-----
Generated at Wed May 13 12:31:34 2026 by rpki-client