Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
File: xJsfdrtbrG0MeWukcTDHaLHHOxw.mft (raw, json)
Hash identifier: NSB7KE8Q5NwowkoGfgam0usxs0+4W+b9Wx7Kj1Qf3KA=
Subject key identifier: 36:B5:27:F7:F9:FC:99:45:9B:2C:52:C9:3F:68:18:84:CA:EE:10:AB
Authority key identifier: C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C
Certificate issuer: /CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
Certificate serial: 019E1DFE0537103B79949E68B8488F638739
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
Manifest number: 1905
Signing time: Tue 12 May 2026 21:00:47 +0000
Manifest this update: Tue 12 May 2026 21:00:47 +0000
Manifest next update: Wed 13 May 2026 21:00:47 +0000
Files and hashes: 1: Ng0DQWDHTBmFSx5wv3FJ35llgcs.roa (hash: rjml5J5gqgFMe9KzjlWTkxUk0orx3tU+r2zl+R9xROo=)
2: wcLWWQG314JWSm8pfpN9yL_5EII.roa (hash: D4VS38hxLq9k1urmiJ5Azd8OYDvuYJ5hUnqD5WiA9F0=)
3: xJsfdrtbrG0MeWukcTDHaLHHOxw.crl (hash: N7yFDB1iH1VnaKEf5RY7EFUrXgvFWWyuV57Yz5r2pqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:05:37:10:3b:79:94:9e:68:b8:48:8f:63:87:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
Validity
Not Before: May 12 21:00:47 2026 GMT
Not After : May 13 21:00:47 2026 GMT
Subject: CN=36b527f7f9fc99459b2c52c93f681884caee10ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b4:b5:6e:bf:b4:77:4a:23:07:fa:45:b1:7b:
26:11:1c:d9:e9:4f:f4:a1:31:78:9b:56:38:e4:e1:
be:12:85:b7:e0:ae:de:af:b3:42:b4:2d:a6:60:8f:
ca:71:fd:10:0d:db:06:45:b1:34:42:c9:8d:b5:df:
0f:ba:2a:fa:0c:d4:59:56:b8:e0:13:5c:8e:c4:76:
9d:18:e7:04:7a:48:45:4b:0a:ab:0a:55:81:7f:0f:
86:32:ec:d4:ff:ce:9d:5a:45:eb:49:35:9d:97:7d:
30:4b:07:cb:5f:21:f2:9b:a4:20:34:05:c5:d9:e3:
26:80:22:53:5e:6d:a5:1d:f5:30:7b:66:78:67:12:
cc:99:69:b0:86:29:11:84:5f:ae:bb:fa:05:aa:bb:
66:cb:9a:21:8a:00:a5:61:da:9c:be:0d:dd:90:a0:
34:b8:49:60:bd:e8:96:86:3d:ef:b4:9c:a7:33:86:
84:c6:70:dd:01:ea:8b:64:cd:42:ea:cd:b7:08:92:
e0:ff:1f:8c:54:9e:60:7b:2b:95:ee:e2:bc:22:c3:
be:17:2d:7f:8e:75:0d:c5:f4:ef:10:34:29:0f:9c:
f1:0e:cc:25:34:da:4e:54:3e:4a:e1:c8:c1:55:2d:
d5:fe:bb:12:ac:b8:ca:33:0f:23:d1:89:db:d0:c7:
41:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B5:27:F7:F9:FC:99:45:9B:2C:52:C9:3F:68:18:84:CA:EE:10:AB
X509v3 Authority Key Identifier:
keyid:C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:0b:dc:1e:1a:d5:de:86:b3:c5:2e:80:b2:14:61:26:1c:ed:
92:f9:5e:6d:0c:d1:98:ec:d5:57:5b:18:d9:3b:09:12:a9:61:
b3:16:91:ec:91:69:6b:f5:79:6c:85:1e:b5:f8:94:cf:3d:2b:
78:2b:1f:44:39:13:01:71:6c:32:4b:24:2a:b9:73:a0:2c:84:
e0:27:7f:e5:81:d2:d1:cb:f8:7a:82:8b:aa:d8:6a:23:ca:38:
8a:62:a4:3a:ba:87:13:29:b5:da:e7:19:20:36:f9:c3:0e:59:
cb:c3:71:cd:82:66:1a:3e:cf:18:05:a9:78:1b:b7:60:1a:f5:
3f:55:c0:59:ce:ea:ac:68:c3:d9:a7:13:88:fb:9a:48:a1:a3:
e2:67:a7:97:5e:33:9e:33:b6:49:a0:de:3d:30:08:cf:e8:3a:
7f:37:27:e9:41:f7:fc:31:2e:54:de:4b:3e:5f:d2:9a:8b:84:
16:33:d1:9b:8a:29:4b:03:7f:27:de:cb:e1:78:8a:4f:99:66:
f7:9b:a9:2c:09:e1:ef:bd:1a:f0:31:c2:ec:4a:2f:10:b6:6b:
f8:33:78:48:e1:c6:0c:9e:ed:1b:3e:5e:0a:bb:0d:fc:19:f0:
1e:09:ec:4d:ef:44:f9:58:5e:28:84:37:53:94:75:48:31:61:
fc:9f:0c:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/gU3EDt5lJ5ouEiPY4c5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0OWIxZjc2YmI1YmFjNmQwYzc5NmJhNDcxMzBjNzY4YjFj
NzNiMWMwHhcNMjYwNTEyMjEwMDQ3WhcNMjYwNTEzMjEwMDQ3WjAzMTEwLwYDVQQD
EygzNmI1MjdmN2Y5ZmM5OTQ1OWIyYzUyYzkzZjY4MTg4NGNhZWUxMGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybS1br+0d0ojB/pFsXsmERzZ6U/0
oTF4m1Y45OG+EoW34K7er7NCtC2mYI/Kcf0QDdsGRbE0QsmNtd8Puir6DNRZVrjg
E1yOxHadGOcEekhFSwqrClWBfw+GMuzU/86dWkXrSTWdl30wSwfLXyHym6QgNAXF
2eMmgCJTXm2lHfUwe2Z4ZxLMmWmwhikRhF+uu/oFqrtmy5ohigClYdqcvg3dkKA0
uElgveiWhj3vtJynM4aExnDdAeqLZM1C6s23CJLg/x+MVJ5geyuV7uK8IsO+Fy1/
jnUNxfTvEDQpD5zxDswlNNpOVD5K4cjBVS3V/rsSrLjKMw8j0Ynb0MdBOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDa1J/f5/JlFmyxSyT9oGITK7hCrMB8GA1UdIwQY
MBaAFMSbH3a7W6xtDHlrpHEwx2ixxzscMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEpzZmRydGJyRzBNZVd1a2NUREhhTEhIT3h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi84Njg2Y2QtMWYxYy00ODQ1LTgxMmQt
NGFkNDAzNWZhZTdiLzEveEpzZmRydGJyRzBNZVd1a2NUREhhTEhIT3h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi84Njg2Y2QtMWYxYy00ODQ1LTgxMmQtNGFkNDAzNWZhZTdi
LzEveEpzZmRydGJyRzBNZVd1a2NUREhhTEhIT3h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWgvcHhrV
3oazxS6AshRhJhztkvlebQzRmOzVV1sY2TsJEqlhsxaR7JFpa/V5bIUetfiUzz0r
eCsfRDkTAXFsMkskKrlzoCyE4Cd/5YHS0cv4eoKLqthqI8o4imKkOrqHEym12ucZ
IDb5ww5Zy8NxzYJmGj7PGAWpeBu3YBr1P1XAWc7qrGjD2acTiPuaSKGj4menl14z
njO2SaDePTAIz+g6fzcn6UH3/DEuVN5LPl/SmouEFjPRm4opSwN/J97L4XiKT5lm
95upLAnh770a8DHC7EovELZr+DN4SOHGDJ7tGz5eCrsN/BnwHgnsTe9E+VheKIQ3
U5R1SDFh/J8McA==
-----END CERTIFICATE-----
Generated at Wed May 13 03:06:07 2026 by rpki-client