Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.mft
File: xDx0Aiy78LPP_2Ax1tLeA2nJnk4.mft (raw, json)
Hash identifier: v3NM2Sb9yBa6AI3PRQHgKG8129FAHXB1XBd6zBfRy9I=
Subject key identifier: D7:4D:34:07:74:F1:8F:66:68:3D:EB:30:5A:A0:27:BC:B4:BB:C9:8B
Authority key identifier: C4:3C:74:02:2C:BB:F0:B3:CF:FF:60:31:D6:D2:DE:03:69:C9:9E:4E
Certificate issuer: /CN=c43c74022cbbf0b3cfff6031d6d2de0369c99e4e
Certificate serial: 019F905A8CEE38972261CC950FC8A39EE4CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.mft
Manifest number: 0B64
Signing time: Thu 23 Jul 2026 19:01:21 +0000
Manifest this update: Thu 23 Jul 2026 19:01:21 +0000
Manifest next update: Fri 24 Jul 2026 19:01:21 +0000
Files and hashes: 1: bkpFrc_6laoYbGdkqTlHlW-Qe80.roa (hash: p/3gwRkkBDXycKoUYkEzWpJbWT3T+RMybdZ5AMyzIgo=)
2: xDx0Aiy78LPP_2Ax1tLeA2nJnk4.crl (hash: WTIwTsIXT9gjlV5VCAGsO5a6qllfNjUZeldPu5J+K0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:8c:ee:38:97:22:61:cc:95:0f:c8:a3:9e:e4:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43c74022cbbf0b3cfff6031d6d2de0369c99e4e
Validity
Not Before: Jul 23 19:01:21 2026 GMT
Not After : Jul 24 19:01:21 2026 GMT
Subject: CN=d74d340774f18f66683deb305aa027bcb4bbc98b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b9:e2:32:9a:02:09:cf:d9:1c:44:92:d0:0a:
e8:a6:7b:75:55:74:7c:3a:7b:ca:7a:d3:87:39:f1:
ea:5a:b2:6a:88:cb:b7:ec:0f:6e:b3:0d:4e:1c:e8:
49:2e:cc:14:01:55:9a:5c:34:00:54:99:82:69:b9:
e5:e5:d4:1b:62:09:35:76:f2:0b:60:0f:ed:2d:0e:
d5:a9:0e:93:40:36:1e:e8:24:40:cd:ba:17:8e:83:
05:cb:04:1b:f5:a9:3f:f4:db:70:b3:fb:92:d0:ba:
c0:6b:99:ee:2e:d3:00:27:6a:94:5c:06:02:55:45:
8e:7e:97:db:0d:ae:a7:bb:f6:84:e0:a7:67:c4:fd:
46:e6:f0:86:a3:39:c3:d6:62:b5:54:e1:25:f5:87:
34:0c:ce:ba:12:84:58:1c:1a:6e:d1:74:70:2d:ae:
a0:0e:dd:b4:99:be:12:2b:f5:fe:8e:ea:37:3b:f6:
ee:20:7f:28:6a:68:cc:2d:df:5a:39:59:4c:46:31:
e5:34:3a:b7:d4:ac:bb:ee:b3:ca:cc:65:97:b2:09:
7f:03:18:20:9b:df:88:c4:44:83:5a:f6:a6:ca:df:
91:18:bb:7a:3b:c1:24:1f:be:c6:bc:b0:05:9e:d6:
ce:92:fe:0d:56:69:14:1b:27:84:80:49:ff:54:d7:
8e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:4D:34:07:74:F1:8F:66:68:3D:EB:30:5A:A0:27:BC:B4:BB:C9:8B
X509v3 Authority Key Identifier:
keyid:C4:3C:74:02:2C:BB:F0:B3:CF:FF:60:31:D6:D2:DE:03:69:C9:9E:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:14:4d:79:74:e4:bb:b4:e5:e3:3c:19:ac:18:7e:48:28:39:
22:36:c7:09:2b:ea:91:02:90:30:9e:5e:d4:86:1f:19:76:f3:
f2:28:1c:c0:ae:91:b5:02:7f:fe:73:ce:cd:e0:86:05:4a:6f:
22:6b:9c:be:67:82:d6:f5:f7:e9:aa:85:74:f1:e3:16:5a:96:
c0:57:2c:91:f5:0f:c7:ce:69:1f:b5:5f:da:27:7e:ee:a3:45:
c8:df:ff:bb:6a:a5:8e:63:7c:42:91:8c:3c:3b:f6:7b:e8:09:
fa:41:7a:67:66:2d:ab:f4:48:a1:5d:6c:d3:8a:48:66:60:0b:
be:5f:6f:8f:d9:45:94:d3:f9:6e:2b:67:c4:80:88:44:5a:0a:
51:cb:df:6b:12:11:20:03:8d:85:a7:d1:c5:47:91:d9:28:bd:
f7:78:8d:dd:d6:9f:bb:b6:a9:5f:75:cc:7c:64:0e:77:a7:3a:
45:1d:91:48:83:8a:43:5a:90:59:f4:c5:42:9b:38:65:38:54:
6f:aa:db:18:b1:11:4c:3a:ec:7c:da:56:65:e6:3b:e3:09:75:
64:46:62:bd:42:6e:3c:e2:89:a3:66:11:c6:d1:b3:86:5c:a1:
48:6d:14:cc:8c:14:fe:8d:3b:b2:39:d4:4f:a4:1a:26:e7:31:
cb:0f:c8:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QWozuOJciYcyVD8ijnuTLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0M2M3NDAyMmNiYmYwYjNjZmZmNjAzMWQ2ZDJkZTAzNjlj
OTllNGUwHhcNMjYwNzIzMTkwMTIxWhcNMjYwNzI0MTkwMTIxWjAzMTEwLwYDVQQD
EyhkNzRkMzQwNzc0ZjE4ZjY2NjgzZGViMzA1YWEwMjdiY2I0YmJjOThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbniMpoCCc/ZHESS0Aropnt1VXR8
OnvKetOHOfHqWrJqiMu37A9usw1OHOhJLswUAVWaXDQAVJmCabnl5dQbYgk1dvIL
YA/tLQ7VqQ6TQDYe6CRAzboXjoMFywQb9ak/9Ntws/uS0LrAa5nuLtMAJ2qUXAYC
VUWOfpfbDa6nu/aE4KdnxP1G5vCGoznD1mK1VOEl9Yc0DM66EoRYHBpu0XRwLa6g
Dt20mb4SK/X+juo3O/buIH8oamjMLd9aOVlMRjHlNDq31Ky77rPKzGWXsgl/Axgg
m9+IxESDWvamyt+RGLt6O8EkH77GvLAFntbOkv4NVmkUGyeEgEn/VNeOjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNdNNAd08Y9maD3rMFqgJ7y0u8mLMB8GA1UdIwQY
MBaAFMQ8dAIsu/Czz/9gMdbS3gNpyZ5OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveER4MEFpeTc4TFBQXzJBeDF0TGVBMm5Kbms0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9lZDVkM2EtYjg2OS00Y2RhLTlkMzIt
MjUwZTU1YjlkNGE5LzEveER4MEFpeTc4TFBQXzJBeDF0TGVBMm5Kbms0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9lZDVkM2EtYjg2OS00Y2RhLTlkMzItMjUwZTU1YjlkNGE5
LzEveER4MEFpeTc4TFBQXzJBeDF0TGVBMm5Kbms0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANBRNeXTk
u7Tl4zwZrBh+SCg5IjbHCSvqkQKQMJ5e1IYfGXbz8igcwK6RtQJ//nPOzeCGBUpv
ImucvmeC1vX36aqFdPHjFlqWwFcskfUPx85pH7Vf2id+7qNFyN//u2qljmN8QpGM
PDv2e+gJ+kF6Z2Ytq/RIoV1s04pIZmALvl9vj9lFlNP5bitnxICIRFoKUcvfaxIR
IAONhafRxUeR2Si993iN3dafu7apX3XMfGQOd6c6RR2RSIOKQ1qQWfTFQps4ZThU
b6rbGLERTDrsfNpWZeY74wl1ZEZivUJuPOKJo2YRxtGzhlyhSG0UzIwU/o07sjnU
T6QaJucxyw/IJg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:41:12 2026 by rpki-client