Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/xBOLshC3wajwZm4HWfR18AZN8fc.mft
File: xBOLshC3wajwZm4HWfR18AZN8fc.mft (raw, json)
Hash identifier: R+MEvIvjFouQDiR7aDRNTqmEyyhZEjGtnEpKg1dge8I=
Subject key identifier: A0:DD:BB:DE:6B:83:69:B6:95:5C:94:69:3B:D2:92:BC:F3:88:D6:A6
Authority key identifier: C4:13:8B:B2:10:B7:C1:A8:F0:66:6E:07:59:F4:75:F0:06:4D:F1:F7
Certificate issuer: /CN=c4138bb210b7c1a8f0666e0759f475f0064df1f7
Certificate serial: 019E1EA2DEC33FF22761757ACBB370289EA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBOLshC3wajwZm4HWfR18AZN8fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/xBOLshC3wajwZm4HWfR18AZN8fc.mft
Manifest number: 011F
Signing time: Wed 13 May 2026 00:00:50 +0000
Manifest this update: Wed 13 May 2026 00:00:50 +0000
Manifest next update: Thu 14 May 2026 00:00:50 +0000
Files and hashes: 1: 7h5eSPNlffr_391YlxjHN1ItANQ.roa (hash: XEuG2vwGeCYbNa542z5LaRxd5TGJ34KJdQn28qGEDr0=)
2: KiNMgdfJ-jED44ngYXhsk4y4eUo.roa (hash: a7w7sWRkPS/IylXEpEG2ZktzWT1XLIn8MRkkpzcobUA=)
3: xBOLshC3wajwZm4HWfR18AZN8fc.crl (hash: 8XTHueaTmEPwAkRNzaF+2Q4V8jEokc06rC0fIqQbBkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/xBOLshC3wajwZm4HWfR18AZN8fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/xBOLshC3wajwZm4HWfR18AZN8fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBOLshC3wajwZm4HWfR18AZN8fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:de:c3:3f:f2:27:61:75:7a:cb:b3:70:28:9e:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4138bb210b7c1a8f0666e0759f475f0064df1f7
Validity
Not Before: May 13 00:00:50 2026 GMT
Not After : May 14 00:00:50 2026 GMT
Subject: CN=a0ddbbde6b8369b6955c94693bd292bcf388d6a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:56:a4:5e:19:a8:01:13:1f:bc:88:92:0d:65:
2c:fe:28:2d:df:2b:db:7a:56:65:84:5a:78:5f:04:
9e:0e:86:4d:79:27:83:cb:31:77:c7:96:28:69:63:
bf:4b:0b:d3:c4:aa:d7:76:15:f8:5d:95:9e:52:79:
44:3a:69:6d:04:a4:e9:8c:1f:ce:ee:cc:15:25:8b:
74:55:8e:05:86:3d:69:02:62:73:68:47:48:2b:f6:
c8:fd:ff:18:88:3b:b1:ff:d1:0b:f3:8b:9c:35:1c:
d9:12:0b:ef:49:26:70:30:29:cf:20:11:33:7b:7e:
77:e7:37:60:05:8f:87:80:76:bf:85:f1:23:1d:e2:
e7:ce:1f:f5:ab:08:b2:d4:1f:55:2b:2c:2b:9e:2b:
42:bc:b4:1c:70:44:6d:e7:c8:67:44:47:83:51:11:
1b:1b:12:a6:b0:38:76:70:0d:b6:05:74:84:aa:ad:
0f:c9:5c:28:81:36:1a:77:32:5b:51:17:60:35:72:
11:9f:19:8c:14:9b:eb:ec:7e:a2:6e:43:5b:77:b6:
b8:54:5e:7d:6b:6d:70:04:25:e9:e2:a5:dc:fe:bb:
2e:5c:a2:77:97:31:69:3f:48:03:c1:a2:4c:30:a8:
d3:fc:72:4c:20:8c:d3:27:0f:5c:e9:16:b1:10:45:
fe:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:DD:BB:DE:6B:83:69:B6:95:5C:94:69:3B:D2:92:BC:F3:88:D6:A6
X509v3 Authority Key Identifier:
keyid:C4:13:8B:B2:10:B7:C1:A8:F0:66:6E:07:59:F4:75:F0:06:4D:F1:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBOLshC3wajwZm4HWfR18AZN8fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/xBOLshC3wajwZm4HWfR18AZN8fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/xBOLshC3wajwZm4HWfR18AZN8fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:9f:83:8c:14:39:ba:bc:9a:bf:c9:0b:cb:a3:23:a2:43:d8:
66:34:d6:a2:39:e8:23:d4:9f:70:aa:04:4b:4c:77:68:96:13:
27:8f:57:2c:a7:d4:c8:f0:54:aa:e3:38:5c:d4:19:e8:d7:d9:
65:e7:8e:47:66:77:c0:f7:c7:e7:20:d2:dd:7b:c7:32:6b:1c:
e6:e8:eb:4a:33:34:e2:0d:7e:2b:d8:19:16:7f:05:ad:19:89:
66:fb:d4:73:d7:cd:54:e4:79:31:02:b0:0f:49:46:a1:29:b1:
45:fd:5c:28:d7:98:2f:18:82:14:e8:a4:e7:49:7f:7c:ba:9c:
7c:19:24:38:2b:55:20:c1:17:f1:32:96:1f:73:db:e9:60:23:
38:90:35:5d:36:47:8e:39:fd:85:1c:71:89:a5:37:6b:4f:4b:
1c:2b:15:1a:18:d6:95:52:dd:41:f5:48:44:f6:3d:92:cf:9d:
06:fd:1c:5b:2b:a2:01:f7:fa:16:7c:d9:3a:a3:81:82:26:52:
04:e9:28:18:6d:b8:69:16:77:3b:d1:ee:2a:07:16:37:56:c4:
0c:be:17:17:f8:cf:e6:45:8d:cb:dd:25:cd:88:59:64:97:24:
be:8b:ee:0a:73:3f:49:d4:e1:16:56:99:8e:94:26:0e:8b:61:
ec:d6:e5:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eot7DP/InYXV6y7NwKJ6mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0MTM4YmIyMTBiN2MxYThmMDY2NmUwNzU5ZjQ3NWYwMDY0
ZGYxZjcwHhcNMjYwNTEzMDAwMDUwWhcNMjYwNTE0MDAwMDUwWjAzMTEwLwYDVQQD
EyhhMGRkYmJkZTZiODM2OWI2OTU1Yzk0NjkzYmQyOTJiY2YzODhkNmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5FakXhmoARMfvIiSDWUs/igt3yvb
elZlhFp4XwSeDoZNeSeDyzF3x5YoaWO/SwvTxKrXdhX4XZWeUnlEOmltBKTpjB/O
7swVJYt0VY4Fhj1pAmJzaEdIK/bI/f8YiDux/9EL84ucNRzZEgvvSSZwMCnPIBEz
e3535zdgBY+HgHa/hfEjHeLnzh/1qwiy1B9VKywrnitCvLQccERt58hnREeDUREb
GxKmsDh2cA22BXSEqq0PyVwogTYadzJbURdgNXIRnxmMFJvr7H6ibkNbd7a4VF59
a21wBCXp4qXc/rsuXKJ3lzFpP0gDwaJMMKjT/HJMIIzTJw9c6RaxEEX+jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKDdu95rg2m2lVyUaTvSkrzziNamMB8GA1UdIwQY
MBaAFMQTi7IQt8Go8GZuB1n0dfAGTfH3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEJPTHNoQzN3YWp3Wm00SFdmUjE4QVpOOGZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC85ZmE1NGEtYTk4My00OTU4LWE5MmUt
ZmIxZjJhYWM1NjdlLzEveEJPTHNoQzN3YWp3Wm00SFdmUjE4QVpOOGZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC85ZmE1NGEtYTk4My00OTU4LWE5MmUtZmIxZjJhYWM1Njdl
LzEveEJPTHNoQzN3YWp3Wm00SFdmUjE4QVpOOGZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW5+DjBQ5
uryav8kLy6MjokPYZjTWojnoI9SfcKoES0x3aJYTJ49XLKfUyPBUquM4XNQZ6NfZ
ZeeOR2Z3wPfH5yDS3XvHMmsc5ujrSjM04g1+K9gZFn8FrRmJZvvUc9fNVOR5MQKw
D0lGoSmxRf1cKNeYLxiCFOik50l/fLqcfBkkOCtVIMEX8TKWH3Pb6WAjOJA1XTZH
jjn9hRxxiaU3a09LHCsVGhjWlVLdQfVIRPY9ks+dBv0cWyuiAff6FnzZOqOBgiZS
BOkoGG24aRZ3O9HuKgcWN1bEDL4XF/jP5kWNy90lzYhZZJckvovuCnM/SdThFlaZ
jpQmDoth7Nbl+g==
-----END CERTIFICATE-----
Generated at Wed May 13 04:43:12 2026 by rpki-client