Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.mft
File: xTG2PRGmzC0c5p4TEch6waanBzM.mft (raw, json)
Hash identifier: EWoUDKVSNM2qQi1snPc0VZUtC/zdHqIeVE5F6yYTrDc=
Subject key identifier: DA:B6:1F:E3:B0:67:98:A5:F7:88:85:0F:8E:F0:60:02:0F:2D:60:FC
Authority key identifier: C5:31:B6:3D:11:A6:CC:2D:1C:E6:9E:13:11:C8:7A:C1:A6:A7:07:33
Certificate issuer: /CN=c531b63d11a6cc2d1ce69e1311c87ac1a6a70733
Certificate serial: 019F92B5C78BF8F480CF6B4F72420FB3188E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTG2PRGmzC0c5p4TEch6waanBzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.mft
Manifest number: 124C
Signing time: Fri 24 Jul 2026 06:00:14 +0000
Manifest this update: Fri 24 Jul 2026 06:00:14 +0000
Manifest next update: Sat 25 Jul 2026 06:00:14 +0000
Files and hashes: 1: WGUKVj-vf2RKGeE0tMRbU2IE_NQ.roa (hash: tHeLPtV3EhtYhN1tkXzaqoA9I1M0f8QKiOJp3r6uMxQ=)
2: xTG2PRGmzC0c5p4TEch6waanBzM.crl (hash: 8puOpyrbHDJ0TLIQ+a4RvvORvlWMaioRnGC2OUM53JI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTG2PRGmzC0c5p4TEch6waanBzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b5:c7:8b:f8:f4:80:cf:6b:4f:72:42:0f:b3:18:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c531b63d11a6cc2d1ce69e1311c87ac1a6a70733
Validity
Not Before: Jul 24 06:00:14 2026 GMT
Not After : Jul 25 06:00:14 2026 GMT
Subject: CN=dab61fe3b06798a5f788850f8ef060020f2d60fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:23:28:03:b3:86:e1:0c:af:c2:e4:91:84:22:
3d:c2:bf:97:e3:4f:0c:3e:01:21:fe:95:3f:6d:a0:
fc:3a:05:57:27:83:5a:33:0a:8c:6d:d5:ec:da:23:
13:7d:54:f5:b6:0e:77:cf:17:4e:80:8c:71:c1:f9:
6e:4d:99:64:36:06:e6:ac:73:25:82:58:79:b6:8d:
0f:0a:f8:46:b2:c0:59:5f:ef:da:a4:35:6a:43:46:
1d:9f:ba:27:73:aa:d6:54:fa:4f:9a:17:0c:6c:16:
9b:a7:14:f4:6e:63:e6:17:db:e7:04:b6:ab:d0:3f:
ca:e8:35:9c:0b:22:d8:ce:76:41:8d:67:9a:12:5e:
48:59:f1:f6:9e:9f:2d:03:a6:87:7b:f9:dc:de:15:
00:e3:41:09:d8:88:6e:81:75:6d:74:d6:e6:b8:28:
75:10:b0:c9:ac:54:15:db:7a:a5:b2:33:8b:df:7d:
b1:45:33:d3:dc:d5:dc:14:cf:98:f6:34:37:45:10:
31:c1:f0:ea:ce:0a:9a:38:aa:c4:55:af:b7:52:5d:
46:45:03:29:03:52:f0:ec:3f:5e:14:d6:f9:45:36:
f5:ea:67:b1:e2:84:74:1b:e9:18:11:05:5c:72:9e:
8a:e1:46:f5:d4:89:c3:57:f4:9f:fc:77:a8:c6:23:
53:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B6:1F:E3:B0:67:98:A5:F7:88:85:0F:8E:F0:60:02:0F:2D:60:FC
X509v3 Authority Key Identifier:
keyid:C5:31:B6:3D:11:A6:CC:2D:1C:E6:9E:13:11:C8:7A:C1:A6:A7:07:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTG2PRGmzC0c5p4TEch6waanBzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:41:0b:37:f9:0e:b7:69:77:78:32:f7:90:56:13:d9:9b:23:
89:1c:9c:1a:50:60:56:19:9d:9a:d7:fe:b1:61:c2:df:36:c7:
45:a8:36:0d:66:b4:4f:e1:05:2d:d4:a1:71:e9:db:7f:e8:07:
9b:09:49:7b:8b:0e:e1:9c:c8:e1:55:b9:4c:85:f1:85:d0:30:
e8:cd:9b:0b:ce:fe:46:2a:46:70:08:cc:44:f7:8b:b6:7a:1a:
a2:0c:94:1d:7d:6e:7e:fc:45:17:1a:ed:98:32:f1:16:e5:47:
73:77:b3:12:7c:d0:31:36:0b:10:3d:83:77:cf:a1:89:24:16:
6d:cf:4f:ce:b4:22:96:95:32:92:06:4e:e4:6b:7a:b4:a2:51:
12:69:8f:6d:1a:7a:a7:43:7a:ba:d1:ff:5c:2d:0b:7a:d4:ba:
9e:c1:ec:da:77:c9:72:34:e4:06:dd:7c:89:00:ee:48:51:f9:
62:17:d4:44:1c:d3:3f:0e:08:5c:be:9d:1a:75:97:71:a0:5e:
6f:cc:12:31:84:66:19:7b:d4:16:f7:a6:46:ed:80:5b:fd:14:
bd:7f:6c:bb:31:a1:22:c4:9d:0f:1e:af:5c:ac:ac:ec:3e:e3:
59:5a:8e:ef:28:ac:a9:11:bb:c5:7c:95:17:29:7f:dc:6c:88:
63:51:4a:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+StceL+PSAz2tPckIPsxiOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MzFiNjNkMTFhNmNjMmQxY2U2OWUxMzExYzg3YWMxYTZh
NzA3MzMwHhcNMjYwNzI0MDYwMDE0WhcNMjYwNzI1MDYwMDE0WjAzMTEwLwYDVQQD
EyhkYWI2MWZlM2IwNjc5OGE1Zjc4ODg1MGY4ZWYwNjAwMjBmMmQ2MGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiMoA7OG4QyvwuSRhCI9wr+X408M
PgEh/pU/baD8OgVXJ4NaMwqMbdXs2iMTfVT1tg53zxdOgIxxwfluTZlkNgbmrHMl
glh5to0PCvhGssBZX+/apDVqQ0Ydn7onc6rWVPpPmhcMbBabpxT0bmPmF9vnBLar
0D/K6DWcCyLYznZBjWeaEl5IWfH2np8tA6aHe/nc3hUA40EJ2IhugXVtdNbmuCh1
ELDJrFQV23qlsjOL332xRTPT3NXcFM+Y9jQ3RRAxwfDqzgqaOKrEVa+3Ul1GRQMp
A1Lw7D9eFNb5RTb16mex4oR0G+kYEQVccp6K4Ub11InDV/Sf/HeoxiNTRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNq2H+OwZ5il94iFD47wYAIPLWD8MB8GA1UdIwQY
MBaAFMUxtj0RpswtHOaeExHIesGmpwczMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFRHMlBSR216QzBjNXA0VEVjaDZ3YWFuQnpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84Njg5OGUtZTZlNi00Yjg4LTg4MTEt
ZGI4Y2FiY2VlMjFlLzEveFRHMlBSR216QzBjNXA0VEVjaDZ3YWFuQnpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC84Njg5OGUtZTZlNi00Yjg4LTg4MTEtZGI4Y2FiY2VlMjFl
LzEveFRHMlBSR216QzBjNXA0VEVjaDZ3YWFuQnpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABUELN/kO
t2l3eDL3kFYT2ZsjiRycGlBgVhmdmtf+sWHC3zbHRag2DWa0T+EFLdShcenbf+gH
mwlJe4sO4ZzI4VW5TIXxhdAw6M2bC87+RipGcAjMRPeLtnoaogyUHX1ufvxFFxrt
mDLxFuVHc3ezEnzQMTYLED2Dd8+hiSQWbc9PzrQilpUykgZO5Gt6tKJREmmPbRp6
p0N6utH/XC0LetS6nsHs2nfJcjTkBt18iQDuSFH5YhfURBzTPw4IXL6dGnWXcaBe
b8wSMYRmGXvUFvemRu2AW/0UvX9suzGhIsSdDx6vXKys7D7jWVqO7yisqRG7xXyV
Fyl/3GyIY1FKFA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:24:14 2026 by rpki-client