Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
File: cXHYtM9nc7WfBzLg6ejSWpt3P64.mft (raw, json)
Hash identifier: nDBHe9nPSj0sk9veuiOGQQxOuBEe7lHdwGCQ69KewoU=
Subject key identifier: 87:64:BE:2E:77:82:7F:D5:8A:06:99:50:A9:06:A2:4B:49:CF:02:D9
Authority key identifier: 71:71:D8:B4:CF:67:73:B5:9F:07:32:E0:E9:E8:D2:5A:9B:77:3F:AE
Certificate issuer: /CN=7171d8b4cf6773b59f0732e0e9e8d25a9b773fae
Certificate serial: 019E20FFF6F00560622329F1958957F4C5BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 11:01:46 +0000
Manifest this update: Wed 13 May 2026 11:01:46 +0000
Manifest next update: Thu 14 May 2026 11:01:46 +0000
Files and hashes: 1: cXHYtM9nc7WfBzLg6ejSWpt3P64.crl (hash: GkwxgSqxnZ9KNmTRl9v0RNt4YLgoCdPeL2QkCA0ULRI=)
2: mbuE0G4tXcvxYI0m6o1MnCuIyBo.roa (hash: Nc7NtzvPla6o9BhIFsNEzrhAOEqN5rOwpnDgkrScjgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:f6:f0:05:60:62:23:29:f1:95:89:57:f4:c5:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7171d8b4cf6773b59f0732e0e9e8d25a9b773fae
Validity
Not Before: May 13 11:01:46 2026 GMT
Not After : May 14 11:01:46 2026 GMT
Subject: CN=8764be2e77827fd58a069950a906a24b49cf02d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7d:d6:ed:d4:3b:52:ec:7a:f0:ff:6e:5c:53:
b5:95:20:7c:83:03:84:0d:9b:59:07:38:ae:f3:a1:
75:be:17:74:d7:7d:e5:b2:08:8b:74:c4:ef:ef:0b:
18:9a:05:bd:0a:91:65:f8:4c:9c:a5:cf:1f:22:51:
86:c6:25:16:19:77:5c:ae:e3:8c:64:06:ac:c6:d8:
95:63:df:15:3c:00:de:9a:aa:f5:66:8c:e9:01:c2:
e4:1f:22:1b:17:55:50:d6:50:30:8b:19:38:9d:ee:
a7:1d:b5:e8:85:32:9d:64:38:0f:0a:30:e7:af:08:
8c:27:9a:2c:59:76:2c:5c:f1:c1:50:47:bf:fe:1f:
54:7f:20:63:6d:8b:11:3a:77:44:64:41:0d:3a:ec:
ca:a0:00:2d:57:97:27:c0:2c:55:86:b4:d4:98:5c:
8c:7f:16:f4:ca:1b:37:a1:75:d7:ed:62:e9:f9:f6:
19:1a:f0:51:61:bd:5c:d7:f7:a6:41:d5:d3:39:89:
f4:b4:22:52:cf:61:17:38:ee:b9:eb:dc:0c:ea:47:
ea:1a:d8:6f:73:cb:5b:41:7e:78:7e:7e:5e:c4:12:
27:61:88:8b:f6:99:da:71:4e:63:cb:a8:d8:ce:1f:
65:a3:b5:0d:f4:14:5c:88:dc:c5:cb:a5:2b:dd:39:
d3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:64:BE:2E:77:82:7F:D5:8A:06:99:50:A9:06:A2:4B:49:CF:02:D9
X509v3 Authority Key Identifier:
keyid:71:71:D8:B4:CF:67:73:B5:9F:07:32:E0:E9:E8:D2:5A:9B:77:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:06:72:28:e5:7d:34:ac:d7:c5:c0:46:9e:e4:7e:26:2e:65:
ec:ef:ee:cc:af:ce:de:f9:3c:fc:d2:19:81:d3:40:b5:c7:06:
9f:8f:a6:b1:14:0c:3a:3d:70:0e:4d:62:18:b5:57:ab:8a:bd:
45:c0:8c:c6:63:cb:08:33:ca:2f:cc:dc:e5:32:fc:d9:bc:78:
39:b6:a5:74:5a:99:4a:9a:06:b7:eb:95:f9:ef:47:30:44:e6:
11:cc:73:d1:3f:c4:55:ef:fa:63:d1:41:a5:01:99:47:e4:84:
7d:b9:43:c3:4c:72:35:db:52:22:d7:3e:5d:d6:ab:26:e1:79:
f3:08:a3:d2:64:f1:8d:68:ae:99:cc:6a:42:cc:56:64:03:12:
c7:55:eb:39:c3:71:d7:26:79:3a:0b:24:32:46:a5:e0:07:6a:
46:70:bd:d8:4a:01:20:8f:a3:3f:b9:be:76:76:74:9f:dc:6e:
35:ab:6d:ed:0f:48:d9:d8:bc:d8:8a:ac:d3:64:ed:e7:d2:a8:
90:dc:5d:18:40:62:f6:49:40:d4:4f:ae:a8:cb:2a:8a:fb:46:
21:c9:72:bc:21:9e:b3:8c:91:03:c9:61:90:fd:a0:37:c8:cf:
7e:da:49:fb:0d:30:10:09:77:42:c5:66:7b:b9:d8:2d:65:fe:
83:72:ee:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4g//bwBWBiIynxlYlX9MW9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxNzFkOGI0Y2Y2NzczYjU5ZjA3MzJlMGU5ZThkMjVhOWI3
NzNmYWUwHhcNMjYwNTEzMTEwMTQ2WhcNMjYwNTE0MTEwMTQ2WjAzMTEwLwYDVQQD
Eyg4NzY0YmUyZTc3ODI3ZmQ1OGEwNjk5NTBhOTA2YTI0YjQ5Y2YwMmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsH3W7dQ7Uux68P9uXFO1lSB8gwOE
DZtZBziu86F1vhd0133lsgiLdMTv7wsYmgW9CpFl+Eycpc8fIlGGxiUWGXdcruOM
ZAasxtiVY98VPADemqr1ZozpAcLkHyIbF1VQ1lAwixk4ne6nHbXohTKdZDgPCjDn
rwiMJ5osWXYsXPHBUEe//h9UfyBjbYsROndEZEENOuzKoAAtV5cnwCxVhrTUmFyM
fxb0yhs3oXXX7WLp+fYZGvBRYb1c1/emQdXTOYn0tCJSz2EXOO6569wM6kfqGthv
c8tbQX54fn5exBInYYiL9pnacU5jy6jYzh9lo7UN9BRciNzFy6Ur3TnTKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIdkvi53gn/VigaZUKkGoktJzwLZMB8GA1UdIwQY
MBaAFHFx2LTPZ3O1nwcy4Ono0lqbdz+uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1hIWXRNOW5jN1dmQnpMZzZlalNXcHQzUDY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy85Nzc4YjYtZGMyYi00NTg2LTkxZGUt
NTNhMDczNjhiOWVhLzEvY1hIWXRNOW5jN1dmQnpMZzZlalNXcHQzUDY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy85Nzc4YjYtZGMyYi00NTg2LTkxZGUtNTNhMDczNjhiOWVh
LzEvY1hIWXRNOW5jN1dmQnpMZzZlalNXcHQzUDY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5QZyKOV9
NKzXxcBGnuR+Ji5l7O/uzK/O3vk8/NIZgdNAtccGn4+msRQMOj1wDk1iGLVXq4q9
RcCMxmPLCDPKL8zc5TL82bx4ObaldFqZSpoGt+uV+e9HMETmEcxz0T/EVe/6Y9FB
pQGZR+SEfblDw0xyNdtSItc+XdarJuF58wij0mTxjWiumcxqQsxWZAMSx1XrOcNx
1yZ5OgskMkal4AdqRnC92EoBII+jP7m+dnZ0n9xuNatt7Q9I2di82Iqs02Tt59Ko
kNxdGEBi9klA1E+uqMsqivtGIclyvCGes4yRA8lhkP2gN8jPftpJ+w0wEAl3QsVm
e7nYLWX+g3Lu5Q==
-----END CERTIFICATE-----
Generated at Wed May 13 14:06:55 2026 by rpki-client