Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
File: xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft (raw, json)
Hash identifier: k7YpB3OQ/Zmh1w4asmeoTlYxF8dHKv3mXLGrKr02SB8=
Subject key identifier: 02:35:B3:43:EB:73:97:39:C4:58:9E:F7:BD:14:DF:A3:80:71:22:B3
Authority key identifier: C5:76:BA:0C:09:8D:C4:72:18:62:23:C9:1E:7D:EF:52:16:E2:39:F1
Certificate issuer: /CN=c576ba0c098dc472186223c91e7def5216e239f1
Certificate serial: 019E1EA2EBA1CCBE35242A503B0BBF556CD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
Manifest number: 07FC
Signing time: Wed 13 May 2026 00:00:54 +0000
Manifest this update: Wed 13 May 2026 00:00:54 +0000
Manifest next update: Thu 14 May 2026 00:00:54 +0000
Files and hashes: 1: D93aVb7wrIXUaG1-CC-3JUagYOE.roa (hash: /8ReYoccQ/vVAZ/EZIZ9ttYSoWEPANiLCShHLXPhYb0=)
2: xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl (hash: gJTFSEyB1bMynKjtaJQlVGQtgzlbGpKFfcmakN/r4fA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:eb:a1:cc:be:35:24:2a:50:3b:0b:bf:55:6c:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c576ba0c098dc472186223c91e7def5216e239f1
Validity
Not Before: May 13 00:00:54 2026 GMT
Not After : May 14 00:00:54 2026 GMT
Subject: CN=0235b343eb739739c4589ef7bd14dfa3807122b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:81:d9:41:3b:20:ed:cb:64:38:b2:96:c0:be:
9e:55:aa:dc:a6:58:19:a4:82:60:a3:3b:96:5c:12:
10:0d:27:5e:29:b6:90:cf:4c:8c:4c:24:1f:28:e6:
8a:63:78:20:96:aa:03:14:50:67:96:45:fd:06:5e:
a3:8a:a2:6c:cc:44:f2:36:97:aa:3c:f3:3c:02:66:
84:6f:4a:f9:66:c7:a3:d0:bf:90:38:ea:b7:ff:67:
ac:e9:63:ab:68:12:52:50:32:17:f2:9c:4f:6e:0c:
96:94:e1:3a:aa:a2:3b:6f:94:63:83:a0:30:03:46:
ad:d7:b1:59:57:ec:f6:18:37:ca:ea:5c:f0:12:93:
7d:94:e6:9e:34:e0:9e:38:03:dc:80:62:74:e1:31:
58:3e:50:ee:b8:64:28:b0:d0:46:6e:b7:15:e5:73:
b7:76:ec:24:ff:a1:55:02:e4:8a:04:a6:1a:24:8e:
38:6f:ca:c4:cd:10:98:de:e6:4e:cf:0d:dd:2e:f8:
ee:cf:c5:0f:31:d0:76:b4:54:59:37:75:fc:fb:f5:
3b:11:5d:bc:6f:ea:e0:ab:5e:84:a9:3a:df:8b:d7:
92:86:33:db:bc:60:59:e0:14:0f:e7:ff:bf:c2:b5:
66:4c:f2:f2:01:da:bc:cb:9d:a3:84:21:e7:45:51:
58:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:35:B3:43:EB:73:97:39:C4:58:9E:F7:BD:14:DF:A3:80:71:22:B3
X509v3 Authority Key Identifier:
keyid:C5:76:BA:0C:09:8D:C4:72:18:62:23:C9:1E:7D:EF:52:16:E2:39:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:76:ef:84:39:2b:ef:e3:a4:7f:8e:cd:25:ba:28:e6:0f:7f:
69:79:3c:60:28:15:d4:12:c8:06:83:e7:93:5b:37:73:ce:c5:
31:72:6b:4d:79:47:40:54:8f:51:50:d5:4d:dd:ad:9c:14:e6:
37:7d:6b:9c:dc:67:a2:dc:d6:ff:e8:82:3a:fb:1f:8c:ca:57:
52:ab:6c:b0:2a:2b:13:d4:aa:66:d3:c0:d5:48:ae:7b:0f:58:
0a:5e:d2:65:d1:27:ec:c4:ef:9d:06:76:fb:20:34:39:82:4f:
ce:00:82:6f:68:76:7d:2c:73:f4:0f:03:cd:11:a0:61:9c:d0:
a2:cc:92:e2:94:3e:1c:7b:9f:10:1b:96:d8:cb:c4:7b:d7:a6:
70:f7:43:63:f2:8d:b1:35:b1:91:65:e6:09:28:c1:de:66:15:
21:63:08:f1:26:f5:cb:be:3f:c7:b4:36:c4:a6:11:ea:41:55:
e9:2b:19:76:43:ed:d9:6a:9e:5f:66:bc:96:ee:da:32:cf:1b:
02:f4:30:cf:31:83:94:44:7c:49:22:e4:63:9a:25:71:da:ad:
96:85:82:40:e1:16:82:e2:46:01:01:63:d6:5f:b6:a7:69:c3:
c9:b6:cf:c6:e4:f0:37:2c:5c:e8:79:9a:87:3d:a7:74:b0:49:
66:4d:12:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eouuhzL41JCpQOwu/VWzZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NzZiYTBjMDk4ZGM0NzIxODYyMjNjOTFlN2RlZjUyMTZl
MjM5ZjEwHhcNMjYwNTEzMDAwMDU0WhcNMjYwNTE0MDAwMDU0WjAzMTEwLwYDVQQD
EygwMjM1YjM0M2ViNzM5NzM5YzQ1ODllZjdiZDE0ZGZhMzgwNzEyMmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4HZQTsg7ctkOLKWwL6eVarcplgZ
pIJgozuWXBIQDSdeKbaQz0yMTCQfKOaKY3gglqoDFFBnlkX9Bl6jiqJszETyNpeq
PPM8AmaEb0r5Zsej0L+QOOq3/2es6WOraBJSUDIX8pxPbgyWlOE6qqI7b5Rjg6Aw
A0at17FZV+z2GDfK6lzwEpN9lOaeNOCeOAPcgGJ04TFYPlDuuGQosNBGbrcV5XO3
duwk/6FVAuSKBKYaJI44b8rEzRCY3uZOzw3dLvjuz8UPMdB2tFRZN3X8+/U7EV28
b+rgq16EqTrfi9eShjPbvGBZ4BQP5/+/wrVmTPLyAdq8y52jhCHnRVFY3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAI1s0Prc5c5xFie970U36OAcSKzMB8GA1UdIwQY
MBaAFMV2ugwJjcRyGGIjyR5971IW4jnxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFhhNkRBbU54SElZWWlQSkhuM3ZVaGJpT2ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi85ZDYyZDQtZDAzMy00NmU5LWJmZDMt
MzJlZTQ1OGE2MzQ4LzEveFhhNkRBbU54SElZWWlQSkhuM3ZVaGJpT2ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi85ZDYyZDQtZDAzMy00NmU5LWJmZDMtMzJlZTQ1OGE2MzQ4
LzEveFhhNkRBbU54SElZWWlQSkhuM3ZVaGJpT2ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmHbvhDkr
7+Okf47NJboo5g9/aXk8YCgV1BLIBoPnk1s3c87FMXJrTXlHQFSPUVDVTd2tnBTm
N31rnNxnotzW/+iCOvsfjMpXUqtssCorE9SqZtPA1Uiuew9YCl7SZdEn7MTvnQZ2
+yA0OYJPzgCCb2h2fSxz9A8DzRGgYZzQosyS4pQ+HHufEBuW2MvEe9emcPdDY/KN
sTWxkWXmCSjB3mYVIWMI8Sb1y74/x7Q2xKYR6kFV6SsZdkPt2WqeX2a8lu7aMs8b
AvQwzzGDlER8SSLkY5olcdqtloWCQOEWguJGAQFj1l+2p2nDybbPxuTwNyxc6Hma
hz2ndLBJZk0S3w==
-----END CERTIFICATE-----
Generated at Wed May 13 06:52:55 2026 by rpki-client