Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
File: X63Q6UW8YRAcabzmSj1yi6G7hmE.mft (raw, json)
Hash identifier: DXakUYlNjuW/ewMkoHZiz6oe8FhEreg1PjumcsnIo88=
Subject key identifier: 34:39:61:B2:79:66:F6:83:E7:44:AD:80:AC:CA:56:91:95:CA:65:DA
Authority key identifier: 5F:AD:D0:E9:45:BC:61:10:1C:69:BC:E6:4A:3D:72:8B:A1:BB:86:61
Certificate issuer: /CN=5fadd0e945bc61101c69bce64a3d728ba1bb8661
Certificate serial: 019E1F7EC3412ECC48D0CE23733EAB0119F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
Manifest number: 11A3
Signing time: Wed 13 May 2026 04:01:01 +0000
Manifest this update: Wed 13 May 2026 04:01:01 +0000
Manifest next update: Thu 14 May 2026 04:01:01 +0000
Files and hashes: 1: 8saY52FM3OItyl4VOSm_edBIkos.roa (hash: BD5qCuL+dtuTG+pcsvXNBMfwvdqjtVm3dC9TZz4R5tA=)
2: AgsPlaew9BxC8H6svqcKUEs4Qhk.roa (hash: 4UR8Vh6eTw1Tv7xe4kRQAuAMN978t94veu9L+yIEOOw=)
3: X63Q6UW8YRAcabzmSj1yi6G7hmE.crl (hash: rVejUtUvGhBcPcw/8FPBkiB1OJrT+mfZ1qd53xsGVlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:c3:41:2e:cc:48:d0:ce:23:73:3e:ab:01:19:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fadd0e945bc61101c69bce64a3d728ba1bb8661
Validity
Not Before: May 13 04:01:01 2026 GMT
Not After : May 14 04:01:01 2026 GMT
Subject: CN=343961b27966f683e744ad80acca569195ca65da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:97:ed:af:05:81:3a:87:f2:ad:0b:17:44:ef:
e3:58:24:ce:ec:4b:60:72:99:db:63:6f:ed:98:96:
44:54:d7:0a:ae:8c:86:a9:85:f4:61:ba:44:08:25:
82:74:c0:25:14:37:aa:65:04:f1:3c:f7:e0:71:39:
ba:ea:fa:f4:07:7e:2f:d8:57:84:66:b0:40:37:39:
73:f5:11:6e:5d:41:3c:f0:07:c6:15:94:20:a0:f7:
72:71:70:f2:1e:b0:0a:be:17:e3:73:06:29:7e:54:
4b:e6:29:89:1f:b2:21:84:67:e2:0e:a9:92:4d:d1:
29:8a:b3:c3:b8:28:c8:51:bf:95:cf:ae:e2:f9:37:
73:59:15:b9:8d:ec:55:1b:f3:e1:de:9d:52:60:04:
85:4b:58:3a:26:e0:62:0d:64:0f:94:88:2e:bd:be:
3f:5c:4c:40:e4:2c:2b:67:3a:78:c2:3e:d1:1a:62:
59:29:98:bb:dc:c1:15:89:f2:18:55:8d:61:80:3f:
76:c3:fa:5b:1b:80:0d:15:6e:71:1b:2c:95:f3:70:
39:e6:60:3c:07:1b:68:0d:ff:59:fa:e0:b2:2a:0f:
fe:47:a7:70:cb:d3:0e:a4:4d:33:ac:e6:d1:4d:bf:
b7:bc:f7:2e:e5:d1:7e:8c:8a:02:41:0b:6d:45:42:
4f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:39:61:B2:79:66:F6:83:E7:44:AD:80:AC:CA:56:91:95:CA:65:DA
X509v3 Authority Key Identifier:
keyid:5F:AD:D0:E9:45:BC:61:10:1C:69:BC:E6:4A:3D:72:8B:A1:BB:86:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:38:88:75:44:82:5d:04:1e:a0:33:2b:83:cd:27:6e:cc:c9:
68:e6:f0:8e:f8:a4:bb:b0:3e:e3:72:4f:f6:2a:3c:0d:a3:56:
43:e8:1d:00:05:7a:11:f3:7e:24:76:83:28:b1:f7:05:4b:e9:
1d:dd:2a:84:9f:bc:69:2e:fe:c6:41:8b:2d:73:02:de:9b:08:
69:3f:ba:09:26:40:46:8a:61:71:84:e8:0a:15:6b:06:5c:a3:
b5:bc:4b:61:9c:b5:8d:fb:ac:bf:8a:53:dc:6f:d6:22:80:62:
4c:2d:06:ad:f0:a7:10:b1:bc:9f:ea:7e:1c:92:d5:15:1b:ee:
4f:ba:45:b5:70:a8:e6:fb:1f:64:4e:26:78:b7:16:db:15:91:
5c:41:97:da:f7:53:2e:f4:f3:44:01:35:c2:55:31:4a:8a:af:
72:16:54:61:e5:80:03:5c:5b:3e:b0:b1:0f:93:a2:52:30:87:
ed:a4:29:05:59:44:03:c7:05:cd:07:35:fa:0b:48:14:b4:15:
8a:6d:a9:0c:f1:90:27:3e:21:5e:28:5e:63:55:f6:0c:32:93:
df:4c:62:ba:ec:00:43:e3:3f:e0:63:0f:e5:1e:5d:59:e6:b3:
39:66:89:db:fd:c8:e1:f1:18:04:f6:cb:fc:01:ad:43:06:c0:
55:01:d1:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ffsNBLsxI0M4jcz6rARnxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYWRkMGU5NDViYzYxMTAxYzY5YmNlNjRhM2Q3MjhiYTFi
Yjg2NjEwHhcNMjYwNTEzMDQwMTAxWhcNMjYwNTE0MDQwMTAxWjAzMTEwLwYDVQQD
EygzNDM5NjFiMjc5NjZmNjgzZTc0NGFkODBhY2NhNTY5MTk1Y2E2NWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZftrwWBOofyrQsXRO/jWCTO7Etg
cpnbY2/tmJZEVNcKroyGqYX0YbpECCWCdMAlFDeqZQTxPPfgcTm66vr0B34v2FeE
ZrBANzlz9RFuXUE88AfGFZQgoPdycXDyHrAKvhfjcwYpflRL5imJH7IhhGfiDqmS
TdEpirPDuCjIUb+Vz67i+TdzWRW5jexVG/Ph3p1SYASFS1g6JuBiDWQPlIguvb4/
XExA5CwrZzp4wj7RGmJZKZi73MEVifIYVY1hgD92w/pbG4ANFW5xGyyV83A55mA8
BxtoDf9Z+uCyKg/+R6dwy9MOpE0zrObRTb+3vPcu5dF+jIoCQQttRUJPKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQ5YbJ5ZvaD50StgKzKVpGVymXaMB8GA1UdIwQY
MBaAFF+t0OlFvGEQHGm85ko9couhu4ZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDYzUTZVVzhZUkFjYWJ6bVNqMXlpNkc3aG1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iMDA3M2QtMzg4Zi00YWI5LWI5MGUt
NzFjN2U4YWM1OWMwLzEvWDYzUTZVVzhZUkFjYWJ6bVNqMXlpNkc3aG1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9iMDA3M2QtMzg4Zi00YWI5LWI5MGUtNzFjN2U4YWM1OWMw
LzEvWDYzUTZVVzhZUkFjYWJ6bVNqMXlpNkc3aG1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaTiIdUSC
XQQeoDMrg80nbszJaObwjviku7A+43JP9io8DaNWQ+gdAAV6EfN+JHaDKLH3BUvp
Hd0qhJ+8aS7+xkGLLXMC3psIaT+6CSZARophcYToChVrBlyjtbxLYZy1jfusv4pT
3G/WIoBiTC0GrfCnELG8n+p+HJLVFRvuT7pFtXCo5vsfZE4meLcW2xWRXEGX2vdT
LvTzRAE1wlUxSoqvchZUYeWAA1xbPrCxD5OiUjCH7aQpBVlEA8cFzQc1+gtIFLQV
im2pDPGQJz4hXiheY1X2DDKT30xiuuwAQ+M/4GMP5R5dWeazOWaJ2/3I4fEYBPbL
/AGtQwbAVQHRmQ==
-----END CERTIFICATE-----
Generated at Wed May 13 11:12:50 2026 by rpki-client