Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
File: xtEbZP_hjvpC9DpsdlY53uONAn4.mft (raw, json)
Hash identifier: J3tLUY7ce3KvniOvUVHFJ1XxlQPo8B1bZB33B6hP0lY=
Subject key identifier: E9:F5:70:06:0E:93:4F:07:FD:29:B4:2F:06:F8:AE:F7:EC:9B:57:D6
Authority key identifier: C6:D1:1B:64:FF:E1:8E:FA:42:F4:3A:6C:76:56:39:DE:E3:8D:02:7E
Certificate issuer: /CN=c6d11b64ffe18efa42f43a6c765639dee38d027e
Certificate serial: 019E1F119E1702B8E45E791FE92C93FDAE4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
Manifest number: 118E
Signing time: Wed 13 May 2026 02:01:48 +0000
Manifest this update: Wed 13 May 2026 02:01:48 +0000
Manifest next update: Thu 14 May 2026 02:01:48 +0000
Files and hashes: 1: 1HMsGfdsMj6bVCe_HqSPHKmPGQA.roa (hash: Aa+3horScinkb91IcV06nuOTEkzdcEAPUq8TBlQGMDg=)
2: Q6q5ifTmogwJicn2e4z2f5_1UN8.roa (hash: ZCT+LPivkmFqXHHIYRE3kEHzKOk9mVM2bvW0OtpppFg=)
3: xtEbZP_hjvpC9DpsdlY53uONAn4.crl (hash: BjYUUowgVwwxI0xjMj5qZsmBuQ8Lar5ccRBWOQGwlEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:9e:17:02:b8:e4:5e:79:1f:e9:2c:93:fd:ae:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6d11b64ffe18efa42f43a6c765639dee38d027e
Validity
Not Before: May 13 02:01:48 2026 GMT
Not After : May 14 02:01:48 2026 GMT
Subject: CN=e9f570060e934f07fd29b42f06f8aef7ec9b57d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:73:e7:f9:d6:73:95:c9:de:81:95:97:c9:d9:
d6:59:7c:9e:1a:b4:ec:86:cd:a9:21:5a:b4:22:1d:
6a:30:05:07:3f:a3:e2:fb:6b:d3:12:c2:5f:ff:ca:
d5:f9:64:08:31:ac:51:e5:8a:cb:3d:b6:6b:c9:cb:
f0:dd:14:49:b3:2f:ea:ae:6b:87:ac:ba:a7:50:c3:
49:69:93:e7:6a:2b:0a:02:b7:41:1b:b8:19:95:ae:
77:88:a4:ca:e2:d4:69:94:95:2e:49:68:be:f7:eb:
d2:ab:aa:77:53:16:a5:34:9e:cd:97:99:05:de:ed:
c0:d1:dd:e6:85:ac:16:7b:d8:bf:f4:a3:f8:5a:05:
0a:cd:c6:e3:a3:02:7d:8e:c2:0c:0c:8c:1c:5a:f8:
71:27:7c:33:81:d2:ec:ea:15:29:90:ac:88:52:f9:
ba:09:a3:d7:75:48:5e:5d:e0:2e:c0:a3:52:a9:62:
cb:0a:2b:29:cf:01:0d:98:6e:73:04:e5:52:a3:49:
8b:03:e7:79:f2:c7:7c:4f:48:37:fb:f0:fa:c3:7a:
26:d4:db:37:0b:97:15:fa:10:fa:2a:61:80:de:98:
30:85:9e:72:d8:8c:c1:61:5b:c4:35:33:d2:19:95:
5e:32:ab:18:d5:62:67:6c:78:f5:8d:fd:ca:d9:39:
00:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F5:70:06:0E:93:4F:07:FD:29:B4:2F:06:F8:AE:F7:EC:9B:57:D6
X509v3 Authority Key Identifier:
keyid:C6:D1:1B:64:FF:E1:8E:FA:42:F4:3A:6C:76:56:39:DE:E3:8D:02:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:f3:b7:28:91:e6:1a:79:86:46:cb:64:c6:78:38:7c:5e:83:
f5:ae:80:80:4d:7b:6f:27:e7:34:bc:e7:33:dc:5b:65:76:44:
fe:1d:08:cb:5e:be:67:e8:d8:b1:bb:07:9b:5f:6d:ae:c7:b1:
f1:11:b9:10:4f:9b:d6:59:a6:6e:db:06:3c:ed:e3:f9:99:f6:
d5:a7:ad:8e:ce:76:2e:14:64:5b:49:41:13:6a:67:43:18:3a:
90:02:1e:5b:a4:87:11:a3:86:1c:03:85:fe:4b:08:cf:00:a1:
22:6e:d0:99:37:d8:3c:50:65:62:c3:1e:19:7d:63:a1:2e:aa:
6b:cf:11:86:2b:8c:93:79:d9:fe:a0:65:ae:e5:a3:e7:a2:9f:
dc:77:9a:55:fd:6e:67:83:c4:f9:c1:b7:22:15:7d:27:9a:82:
62:2f:e1:9b:3c:01:a1:b1:01:cb:4f:7d:74:c1:54:f9:d2:16:
ff:ad:8f:30:d6:c1:b8:3c:9e:44:9c:59:78:a3:9b:b4:86:2b:
d5:d4:ac:e7:7e:ed:de:f6:16:2d:14:aa:db:36:9a:3a:31:5c:
e5:04:9c:74:ad:ea:a3:e0:92:4d:b6:39:bf:b7:3a:16:43:87:
76:0e:48:86:62:62:11:75:8f:20:fc:80:bb:bd:32:7c:95:82:
97:bd:c4:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fEZ4XArjkXnkf6SyT/a5LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2ZDExYjY0ZmZlMThlZmE0MmY0M2E2Yzc2NTYzOWRlZTM4
ZDAyN2UwHhcNMjYwNTEzMDIwMTQ4WhcNMjYwNTE0MDIwMTQ4WjAzMTEwLwYDVQQD
EyhlOWY1NzAwNjBlOTM0ZjA3ZmQyOWI0MmYwNmY4YWVmN2VjOWI1N2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXPn+dZzlcnegZWXydnWWXyeGrTs
hs2pIVq0Ih1qMAUHP6Pi+2vTEsJf/8rV+WQIMaxR5YrLPbZrycvw3RRJsy/qrmuH
rLqnUMNJaZPnaisKArdBG7gZla53iKTK4tRplJUuSWi+9+vSq6p3UxalNJ7Nl5kF
3u3A0d3mhawWe9i/9KP4WgUKzcbjowJ9jsIMDIwcWvhxJ3wzgdLs6hUpkKyIUvm6
CaPXdUheXeAuwKNSqWLLCispzwENmG5zBOVSo0mLA+d58sd8T0g3+/D6w3om1Ns3
C5cV+hD6KmGA3pgwhZ5y2IzBYVvENTPSGZVeMqsY1WJnbHj1jf3K2TkAZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOn1cAYOk08H/Sm0Lwb4rvfsm1fWMB8GA1UdIwQY
MBaAFMbRG2T/4Y76QvQ6bHZWOd7jjQJ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHRFYlpQX2hqdnBDOURwc2RsWTUzdU9OQW40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80Y2FjNmItOGUwNS00NDhhLTgzZjct
NjgzNTg1MjE1OGQ4LzEveHRFYlpQX2hqdnBDOURwc2RsWTUzdU9OQW40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy80Y2FjNmItOGUwNS00NDhhLTgzZjctNjgzNTg1MjE1OGQ4
LzEveHRFYlpQX2hqdnBDOURwc2RsWTUzdU9OQW40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0PO3KJHm
GnmGRstkxng4fF6D9a6AgE17byfnNLznM9xbZXZE/h0Iy16+Z+jYsbsHm19trsex
8RG5EE+b1lmmbtsGPO3j+Zn21aetjs52LhRkW0lBE2pnQxg6kAIeW6SHEaOGHAOF
/ksIzwChIm7QmTfYPFBlYsMeGX1joS6qa88RhiuMk3nZ/qBlruWj56Kf3HeaVf1u
Z4PE+cG3IhV9J5qCYi/hmzwBobEBy099dMFU+dIW/62PMNbBuDyeRJxZeKObtIYr
1dSs537t3vYWLRSq2zaaOjFc5QScdK3qo+CSTbY5v7c6FkOHdg5IhmJiEXWPIPyA
u70yfJWCl73E2w==
-----END CERTIFICATE-----
Generated at Wed May 13 07:18:49 2026 by rpki-client