Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.mft
File: xU9qEXeCbFq2S9OvATiptXpLkeU.mft (raw, json)
Hash identifier: j4sRR3n7l4n4M9XpAEGmqboFZDdm/fKb9+nhwRjvIvI=
Subject key identifier: 2B:01:98:72:3E:6B:57:82:90:AC:97:4C:F8:25:9A:EA:9F:26:17:30
Authority key identifier: C5:4F:6A:11:77:82:6C:5A:B6:4B:D3:AF:01:38:A9:B5:7A:4B:91:E5
Certificate issuer: /CN=c54f6a1177826c5ab64bd3af0138a9b57a4b91e5
Certificate serial: 019F8F10E3D8697824ECED20184E40CFC3DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xU9qEXeCbFq2S9OvATiptXpLkeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.mft
Manifest number: 0258
Signing time: Thu 23 Jul 2026 13:01:16 +0000
Manifest this update: Thu 23 Jul 2026 13:01:16 +0000
Manifest next update: Fri 24 Jul 2026 13:01:16 +0000
Files and hashes: 1: AAL-YY9GVuWqbLX5GG1k3ImctWA.roa (hash: dOcDqpARrTucPUNtlVinnlKcwBaTZo2MLnDCrG84YIw=)
2: xU9qEXeCbFq2S9OvATiptXpLkeU.crl (hash: MZvh3Ho59gdRjsiO1BbjRS9WDz+c6Oy9sDkmG1wRUac=)
3: x_VjdL15EqUB70pwRzrAehHyTNo.asa (hash: roR1zfTDox/ACVmuA2wDu2cHX32k232PLN3hkotoI04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xU9qEXeCbFq2S9OvATiptXpLkeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:e3:d8:69:78:24:ec:ed:20:18:4e:40:cf:c3:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c54f6a1177826c5ab64bd3af0138a9b57a4b91e5
Validity
Not Before: Jul 23 13:01:16 2026 GMT
Not After : Jul 24 13:01:16 2026 GMT
Subject: CN=2b0198723e6b578290ac974cf8259aea9f261730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:92:38:e2:14:cb:ea:a0:0b:21:76:43:79:bf:
66:9c:5e:72:2f:54:97:ee:03:71:60:5f:13:d6:7d:
70:5a:6e:20:02:35:75:48:c7:75:64:1a:d5:28:e3:
bd:4f:0b:dc:0f:20:dd:db:7c:9e:49:bc:01:bf:62:
84:b5:4d:e9:66:af:df:1c:39:8d:0b:60:f2:32:c9:
62:4e:6e:39:fa:8d:e0:8f:a9:80:bb:dc:bf:00:52:
91:49:5f:b1:c5:be:ae:14:08:28:9e:72:bb:dd:83:
01:3f:0a:e8:54:99:b8:c6:5b:30:74:59:35:99:91:
43:09:ce:45:a9:e6:89:a7:21:2f:a7:05:3f:a5:04:
fe:99:44:f7:9d:5b:7b:fe:63:f8:a4:13:0f:e7:8c:
0e:f1:5d:b6:7a:56:5d:7f:a6:39:c7:67:c4:e7:91:
b6:c0:36:da:1c:ac:c4:87:7a:4e:cd:22:33:6a:d1:
a2:78:26:2f:c7:59:26:45:03:1e:67:a5:39:5b:ba:
e6:5e:c5:3e:5c:f6:c7:d1:6d:d1:32:5d:40:3d:34:
cd:da:ea:4c:45:e4:4c:aa:c8:52:61:63:08:a0:6f:
9c:ce:4e:08:29:b2:bc:40:c6:2e:8c:a4:06:83:86:
34:52:e2:43:50:58:68:7f:f5:2c:46:7b:5c:e9:18:
f7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:01:98:72:3E:6B:57:82:90:AC:97:4C:F8:25:9A:EA:9F:26:17:30
X509v3 Authority Key Identifier:
keyid:C5:4F:6A:11:77:82:6C:5A:B6:4B:D3:AF:01:38:A9:B5:7A:4B:91:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xU9qEXeCbFq2S9OvATiptXpLkeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:15:19:c7:47:0c:f5:b3:69:50:c0:87:ae:d4:1d:5d:fc:6d:
40:04:00:69:9b:ce:2f:04:16:32:b4:34:84:d6:66:f0:2a:bd:
2e:64:b3:fc:eb:db:52:e6:85:18:9d:a1:41:35:47:fb:01:b2:
6e:25:21:33:8b:7d:5a:b4:b6:4d:42:4c:3f:4b:89:69:7b:9c:
b2:e4:bb:18:05:4e:41:aa:dc:6c:66:c3:9b:ed:64:ca:e6:8b:
37:b1:9f:2d:95:8f:80:cd:1c:5f:88:31:91:c6:5f:93:d2:84:
16:1d:aa:f0:f9:06:f7:b2:ed:fd:c5:5f:9f:e3:f0:a0:62:a4:
df:3b:9a:b5:8d:ab:15:d1:46:7e:05:c7:ca:76:83:64:b5:f0:
34:e1:30:d3:65:00:9d:63:1b:7b:40:a2:68:02:be:4c:a5:b7:
8c:76:a9:d0:a6:69:ea:f8:0c:b6:0e:12:a2:4b:a9:0a:ec:0b:
f9:d9:93:95:f4:04:8e:a0:c7:99:ee:dc:35:6e:65:e1:f9:a9:
ef:f7:45:de:f3:f1:b5:05:57:aa:eb:7b:62:10:de:3a:3c:6d:
7b:7b:53:be:4f:2e:36:24:ef:21:be:64:89:a1:29:5c:af:3f:
fb:93:23:8f:b6:85:05:28:35:6c:33:99:89:17:22:92:5d:be:
da:0a:14:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PEOPYaXgk7O0gGE5Az8PbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NGY2YTExNzc4MjZjNWFiNjRiZDNhZjAxMzhhOWI1N2E0
YjkxZTUwHhcNMjYwNzIzMTMwMTE2WhcNMjYwNzI0MTMwMTE2WjAzMTEwLwYDVQQD
EygyYjAxOTg3MjNlNmI1NzgyOTBhYzk3NGNmODI1OWFlYTlmMjYxNzMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJI44hTL6qALIXZDeb9mnF5yL1SX
7gNxYF8T1n1wWm4gAjV1SMd1ZBrVKOO9TwvcDyDd23yeSbwBv2KEtU3pZq/fHDmN
C2DyMsliTm45+o3gj6mAu9y/AFKRSV+xxb6uFAgonnK73YMBPwroVJm4xlswdFk1
mZFDCc5FqeaJpyEvpwU/pQT+mUT3nVt7/mP4pBMP54wO8V22elZdf6Y5x2fE55G2
wDbaHKzEh3pOzSIzatGieCYvx1kmRQMeZ6U5W7rmXsU+XPbH0W3RMl1APTTN2upM
ReRMqshSYWMIoG+czk4IKbK8QMYujKQGg4Y0UuJDUFhof/UsRntc6Rj3SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCsBmHI+a1eCkKyXTPglmuqfJhcwMB8GA1UdIwQY
MBaAFMVPahF3gmxatkvTrwE4qbV6S5HlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFU5cUVYZUNiRnEyUzlPdkFUaXB0WHBMa2VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xNGYzNjctM2I5ZS00OWQ0LTk2ODYt
MmVhOGFjZTViOTVlLzEveFU5cUVYZUNiRnEyUzlPdkFUaXB0WHBMa2VVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS8xNGYzNjctM2I5ZS00OWQ0LTk2ODYtMmVhOGFjZTViOTVl
LzEveFU5cUVYZUNiRnEyUzlPdkFUaXB0WHBMa2VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxhUZx0cM
9bNpUMCHrtQdXfxtQAQAaZvOLwQWMrQ0hNZm8Cq9LmSz/OvbUuaFGJ2hQTVH+wGy
biUhM4t9WrS2TUJMP0uJaXucsuS7GAVOQarcbGbDm+1kyuaLN7GfLZWPgM0cX4gx
kcZfk9KEFh2q8PkG97Lt/cVfn+PwoGKk3zuatY2rFdFGfgXHynaDZLXwNOEw02UA
nWMbe0CiaAK+TKW3jHap0KZp6vgMtg4SokupCuwL+dmTlfQEjqDHme7cNW5l4fmp
7/dF3vPxtQVXqut7YhDeOjxte3tTvk8uNiTvIb5kiaEpXK8/+5Mjj7aFBSg1bDOZ
iRcikl2+2goUxA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:02:58 2026 by rpki-client