Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
File: eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft (raw, json)
Hash identifier: gzK2rvH/rkeRgIrBY0UmFDqPxWb2nLbEHTCV1X4Y8As=
Subject key identifier: 6A:91:2B:B9:41:31:F2:16:70:30:E2:EA:10:78:45:00:4E:26:E6:C1
Authority key identifier: 79:76:D7:D0:BB:CC:08:51:65:23:D5:DF:24:E6:88:2B:72:CA:56:93
Certificate issuer: /CN=7976d7d0bbcc08516523d5df24e6882b72ca5693
Certificate serial: 019E216D143251EFFAF1A6B912CD01F44694
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
Manifest number: 090D
Signing time: Wed 13 May 2026 13:00:57 +0000
Manifest this update: Wed 13 May 2026 13:00:57 +0000
Manifest next update: Thu 14 May 2026 13:00:57 +0000
Files and hashes: 1: AmpembMZnQ3F11s0E_0dYki25Mc.roa (hash: WDbKJoErc1LVQLx62LO/KjvhetUehDjF17FpYSbvL/4=)
2: PKXuRc_5_wM56Jttnq1znbxTNrM.roa (hash: wNBNrg7iwt49739UTs0ZF6veqyOIJdBVUfKeZkV8DDw=)
3: eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl (hash: uk/wRK4u5x65Sh23x0ebh/7Ln6IeoHuZM2BExkavCao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:6d:14:32:51:ef:fa:f1:a6:b9:12:cd:01:f4:46:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7976d7d0bbcc08516523d5df24e6882b72ca5693
Validity
Not Before: May 13 13:00:57 2026 GMT
Not After : May 14 13:00:57 2026 GMT
Subject: CN=6a912bb94131f2167030e2ea107845004e26e6c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9d:35:2b:18:4c:ea:46:81:db:56:34:a7:2a:
ee:6a:b7:9d:e4:de:f3:fc:bd:58:d8:5a:e2:60:8e:
a1:91:70:13:fa:69:15:3f:be:3a:f7:8c:96:84:a9:
de:8f:a8:8e:f4:14:c1:02:41:10:3b:13:43:a3:86:
cf:d5:e4:88:68:64:9a:39:2e:0a:2c:99:bd:74:d6:
b8:ff:14:10:e8:c2:a6:32:21:bf:9e:24:a3:ea:05:
e9:45:97:25:9b:1e:da:3a:81:c0:84:fa:61:25:05:
1e:a0:41:f7:a8:fd:9b:41:64:61:88:db:09:be:ca:
5a:55:e2:7b:c7:c9:1c:7b:d6:b0:d3:f8:87:cb:7f:
a4:43:59:70:a3:1f:c8:0e:a4:fd:05:34:98:60:2b:
d6:6f:80:92:5d:f4:59:b5:05:08:10:6c:1a:6e:3c:
57:f6:77:1c:45:c8:c3:df:2b:7a:48:58:07:c8:96:
04:5e:df:c1:58:e7:d7:d3:d7:96:58:a2:03:a1:0c:
b1:58:0d:76:39:70:e1:52:04:d4:9f:c3:88:4b:02:
16:7e:ab:1e:7c:c0:6a:ed:89:65:2a:ab:2f:85:f1:
fe:13:e1:73:36:40:18:25:1a:6a:96:51:f3:3c:e1:
60:67:d4:bc:dd:a9:e7:2d:55:21:c1:3f:6f:a9:ef:
44:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:91:2B:B9:41:31:F2:16:70:30:E2:EA:10:78:45:00:4E:26:E6:C1
X509v3 Authority Key Identifier:
keyid:79:76:D7:D0:BB:CC:08:51:65:23:D5:DF:24:E6:88:2B:72:CA:56:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:be:eb:4b:55:8b:3c:d8:69:44:eb:99:d6:aa:37:a2:97:9e:
a1:a1:45:b4:32:8d:f8:63:e9:10:e9:95:0e:72:b9:de:5d:fa:
66:38:ea:59:5a:51:c2:65:9f:dc:b0:31:0c:9f:1d:c6:99:e5:
a8:e4:12:fc:ab:75:20:91:16:95:c0:56:9b:35:a1:1a:ae:02:
6c:e9:e1:01:26:67:c7:63:5c:b4:11:53:62:5d:e4:c9:20:5a:
24:fd:d9:dc:a9:bd:fa:d2:f5:47:6c:a1:cb:73:37:c4:84:76:
24:71:09:37:e5:92:4b:20:41:0a:18:0f:75:a6:6d:33:7b:9e:
f8:37:47:d9:83:87:e3:7d:ec:8e:de:c4:23:5d:f2:a7:18:1c:
4c:08:f8:83:5c:b5:a7:58:7d:11:7b:c1:18:03:3b:2c:37:b6:
e4:71:f8:e3:2a:34:47:b6:a0:be:15:a6:3c:3e:94:5f:88:d1:
a6:02:63:17:0f:41:fe:dd:a6:ad:c7:da:1d:89:96:25:dc:f8:
be:b8:56:bd:8e:34:fe:58:65:d1:de:16:16:77:56:08:4e:81:
c9:1d:5a:97:fe:1d:fe:5a:3c:4e:6d:55:28:f3:a7:27:a9:98:
3f:95:c1:43:cb:29:eb:a0:9f:b0:0c:38:55:b7:c5:57:68:ca:
b7:cb:54:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4hbRQyUe/68aa5Es0B9EaUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5NzZkN2QwYmJjYzA4NTE2NTIzZDVkZjI0ZTY4ODJiNzJj
YTU2OTMwHhcNMjYwNTEzMTMwMDU3WhcNMjYwNTE0MTMwMDU3WjAzMTEwLwYDVQQD
Eyg2YTkxMmJiOTQxMzFmMjE2NzAzMGUyZWExMDc4NDUwMDRlMjZlNmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAop01KxhM6kaB21Y0pyruared5N7z
/L1Y2FriYI6hkXAT+mkVP74694yWhKnej6iO9BTBAkEQOxNDo4bP1eSIaGSaOS4K
LJm9dNa4/xQQ6MKmMiG/niSj6gXpRZclmx7aOoHAhPphJQUeoEH3qP2bQWRhiNsJ
vspaVeJ7x8kce9aw0/iHy3+kQ1lwox/IDqT9BTSYYCvWb4CSXfRZtQUIEGwabjxX
9nccRcjD3yt6SFgHyJYEXt/BWOfX09eWWKIDoQyxWA12OXDhUgTUn8OISwIWfqse
fMBq7YllKqsvhfH+E+FzNkAYJRpqllHzPOFgZ9S83annLVUhwT9vqe9EtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGqRK7lBMfIWcDDi6hB4RQBOJubBMB8GA1UdIwQY
MBaAFHl219C7zAhRZSPV3yTmiCtyylaTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVhiWDBMdk1DRkZsSTlYZkpPYUlLM0xLVnBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9kZDY5NDMtNmZjZS00MzA5LTg3MTMt
ODU0MTgyY2IwNmE2LzEvZVhiWDBMdk1DRkZsSTlYZkpPYUlLM0xLVnBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9kZDY5NDMtNmZjZS00MzA5LTg3MTMtODU0MTgyY2IwNmE2
LzEvZVhiWDBMdk1DRkZsSTlYZkpPYUlLM0xLVnBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnr7rS1WL
PNhpROuZ1qo3opeeoaFFtDKN+GPpEOmVDnK53l36ZjjqWVpRwmWf3LAxDJ8dxpnl
qOQS/Kt1IJEWlcBWmzWhGq4CbOnhASZnx2NctBFTYl3kySBaJP3Z3Km9+tL1R2yh
y3M3xIR2JHEJN+WSSyBBChgPdaZtM3ue+DdH2YOH433sjt7EI13ypxgcTAj4g1y1
p1h9EXvBGAM7LDe25HH44yo0R7agvhWmPD6UX4jRpgJjFw9B/t2mrcfaHYmWJdz4
vrhWvY40/lhl0d4WFndWCE6ByR1al/4d/lo8Tm1VKPOnJ6mYP5XBQ8sp66CfsAw4
VbfFV2jKt8tUtA==
-----END CERTIFICATE-----
Generated at Wed May 13 19:48:59 2026 by rpki-client