Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
File: xKPrF197V5BsgPUI4V9j4D8Lfvg.mft (raw, json)
Hash identifier: D2tzDoo4mztbt/qNfYeYAKQ/NglBaOCb5fzonBOPeoA=
Subject key identifier: 50:46:EB:46:FF:5A:BD:E4:F2:08:B3:34:15:93:0D:40:ED:AE:62:0F
Authority key identifier: C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8
Certificate issuer: /CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8
Certificate serial: 019E1DFE3161E4530AA5B03430D07829905E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
Manifest number: 18A3
Signing time: Tue 12 May 2026 21:00:58 +0000
Manifest this update: Tue 12 May 2026 21:00:58 +0000
Manifest next update: Wed 13 May 2026 21:00:58 +0000
Files and hashes: 1: mTuVuiw3HM2pBIheqITWSq5I3n0.roa (hash: Ipl/v3cZkycb4zTv5tbg7JdjHKPt6S5to0wny64/QVQ=)
2: xKPrF197V5BsgPUI4V9j4D8Lfvg.crl (hash: f1MTNuCbMp66jChfOiED2zbIPBdqCChcigOdcoCSmF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:31:61:e4:53:0a:a5:b0:34:30:d0:78:29:90:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8
Validity
Not Before: May 12 21:00:58 2026 GMT
Not After : May 13 21:00:58 2026 GMT
Subject: CN=5046eb46ff5abde4f208b33415930d40edae620f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:78:91:e2:28:e3:19:2c:29:64:81:06:df:dd:
01:73:05:37:30:2e:76:5b:ea:57:89:0d:f7:46:78:
db:ba:54:48:4e:65:c4:36:f9:73:11:f3:cb:1a:01:
c4:24:45:4d:b1:69:cb:eb:ab:48:23:3a:31:5d:78:
df:75:b8:3d:1b:42:72:bf:6b:44:a9:bf:f4:4e:83:
20:ff:c3:41:d9:88:81:04:39:8f:19:9d:60:04:f8:
74:ad:97:14:aa:e4:e0:c1:43:c4:9c:ca:16:32:01:
72:cf:83:ac:6f:41:b2:64:1b:c5:6f:78:5d:d5:e8:
63:62:b3:a5:ad:63:f3:9b:23:63:a2:cb:90:40:5b:
55:80:41:69:ec:f9:87:c9:5c:d7:80:63:16:cd:ff:
94:41:12:6a:ca:b6:b5:0d:0b:36:03:72:2a:ee:3b:
bc:24:7a:3f:65:59:07:38:67:44:b2:48:e9:be:37:
af:3d:ce:59:93:e1:d3:8c:6d:ec:03:fb:6a:e4:6c:
e2:43:33:1d:df:db:35:6a:1f:1a:cb:3e:2f:3f:36:
57:96:1a:22:89:50:9e:25:5d:6b:63:32:de:50:46:
32:ba:73:a9:88:26:bf:62:d3:b3:8f:ce:5c:d7:41:
f1:62:fd:5e:8c:48:78:ca:e0:bb:48:3b:67:33:e6:
b3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:46:EB:46:FF:5A:BD:E4:F2:08:B3:34:15:93:0D:40:ED:AE:62:0F
X509v3 Authority Key Identifier:
keyid:C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:fd:30:f4:15:ba:de:a9:ac:e7:d3:fe:82:66:a1:39:66:ae:
db:6f:b5:ed:9a:5d:7b:84:15:2c:01:50:91:87:a1:e7:02:a0:
df:1c:53:be:95:07:ef:4c:3c:3b:73:c5:87:69:af:c3:cd:32:
46:93:88:dc:20:43:49:08:76:b9:ab:ef:eb:ad:d9:91:28:c0:
81:41:93:85:28:a9:df:76:ae:d4:47:56:7d:ab:f6:f6:d7:84:
1c:36:79:2b:f1:08:21:e6:79:79:29:6d:1f:4a:96:b3:33:e1:
8c:55:17:af:59:cd:cf:53:cd:ef:74:b4:52:64:a6:a0:44:08:
e9:b6:3e:ad:50:b8:31:a8:b5:0d:a5:ed:e8:16:da:b0:fe:24:
84:fb:8d:61:16:b7:73:26:d4:cf:33:93:fc:db:d2:65:cc:2d:
94:d8:22:1e:39:f0:f3:70:ee:56:c9:85:e1:93:db:7a:27:69:
d5:91:b7:50:00:56:15:e3:96:17:4a:2b:5b:4c:27:00:7e:ae:
4d:6e:e1:5e:74:7e:dd:ed:cd:2d:db:34:57:fb:93:2d:12:b9:
90:05:1b:33:a6:89:44:07:9e:94:7f:02:a0:73:a5:db:42:bc:
43:6c:84:0d:aa:0e:2e:8e:a4:80:75:0e:8c:7f:e6:4d:97:5a:
36:8b:19:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/jFh5FMKpbA0MNB4KZBeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0YTNlYjE3NWY3YjU3OTA2YzgwZjUwOGUxNWY2M2UwM2Yw
YjdlZjgwHhcNMjYwNTEyMjEwMDU4WhcNMjYwNTEzMjEwMDU4WjAzMTEwLwYDVQQD
Eyg1MDQ2ZWI0NmZmNWFiZGU0ZjIwOGIzMzQxNTkzMGQ0MGVkYWU2MjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyniR4ijjGSwpZIEG390BcwU3MC52
W+pXiQ33RnjbulRITmXENvlzEfPLGgHEJEVNsWnL66tIIzoxXXjfdbg9G0Jyv2tE
qb/0ToMg/8NB2YiBBDmPGZ1gBPh0rZcUquTgwUPEnMoWMgFyz4Osb0GyZBvFb3hd
1ehjYrOlrWPzmyNjosuQQFtVgEFp7PmHyVzXgGMWzf+UQRJqyra1DQs2A3Iq7ju8
JHo/ZVkHOGdEskjpvjevPc5Zk+HTjG3sA/tq5GziQzMd39s1ah8ayz4vPzZXlhoi
iVCeJV1rYzLeUEYyunOpiCa/YtOzj85c10HxYv1ejEh4yuC7SDtnM+az7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFBG60b/Wr3k8gizNBWTDUDtrmIPMB8GA1UdIwQY
MBaAFMSj6xdfe1eQbID1COFfY+A/C374MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEtQckYxOTdWNUJzZ1BVSTRWOWo0RDhMZnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS83Zjc3YmQtYjMwMi00OTMzLWE1Zjkt
ZmNiNGQyMGJjZDc1LzEveEtQckYxOTdWNUJzZ1BVSTRWOWo0RDhMZnZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS83Zjc3YmQtYjMwMi00OTMzLWE1ZjktZmNiNGQyMGJjZDc1
LzEveEtQckYxOTdWNUJzZ1BVSTRWOWo0RDhMZnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN/0w9BW6
3qms59P+gmahOWau22+17Zpde4QVLAFQkYeh5wKg3xxTvpUH70w8O3PFh2mvw80y
RpOI3CBDSQh2uavv663ZkSjAgUGThSip33au1EdWfav29teEHDZ5K/EIIeZ5eSlt
H0qWszPhjFUXr1nNz1PN73S0UmSmoEQI6bY+rVC4Mai1DaXt6BbasP4khPuNYRa3
cybUzzOT/NvSZcwtlNgiHjnw83DuVsmF4ZPbeidp1ZG3UABWFeOWF0orW0wnAH6u
TW7hXnR+3e3NLds0V/uTLRK5kAUbM6aJRAeelH8CoHOl20K8Q2yEDaoOLo6kgHUO
jH/mTZdaNosZmw==
-----END CERTIFICATE-----
Generated at Wed May 13 08:40:53 2026 by rpki-client