Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
File: xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft (raw, json)
Hash identifier: /raO0Z4XwxUgrNiTqYeXDX+8fns+8Z1HuIp8oOo2r/o=
Subject key identifier: 14:D1:0C:E9:5B:22:51:F8:11:8B:72:28:52:70:76:C7:69:4D:9F:D6
Authority key identifier: C6:3D:96:AE:FC:54:80:24:FA:36:FA:5C:E8:04:A4:8B:F7:CA:3A:40
Certificate issuer: /CN=c63d96aefc548024fa36fa5ce804a48bf7ca3a40
Certificate serial: 019F92EDEE05E35BF4E068F37D54F9F19A1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 07:01:34 +0000
Manifest this update: Fri 24 Jul 2026 07:01:34 +0000
Manifest next update: Sat 25 Jul 2026 07:01:34 +0000
Files and hashes: 1: Z4BDlr57O_FweazPHma0rDQN-Eg.roa (hash: RRUvm/U5FkAyaYrRTEjgZo8457PWupRX0eiUbSuUq0U=)
2: xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl (hash: YPn1BlTvasLjdxQX6OD3274A5lO1Aabcdc1lmCUOk9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:ee:05:e3:5b:f4:e0:68:f3:7d:54:f9:f1:9a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c63d96aefc548024fa36fa5ce804a48bf7ca3a40
Validity
Not Before: Jul 24 07:01:34 2026 GMT
Not After : Jul 25 07:01:34 2026 GMT
Subject: CN=14d10ce95b2251f8118b7228527076c7694d9fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:43:48:15:f0:ca:93:44:8f:76:01:e1:3d:f5:
40:cd:4a:c5:80:c7:e2:38:33:62:4c:15:e4:d9:36:
ed:87:70:09:6a:23:64:cb:c4:85:88:c2:4f:20:8a:
e7:87:5f:6c:a6:b9:d9:3a:f2:26:d4:9f:9b:3f:f2:
d8:76:04:30:ca:da:0c:ef:24:b0:80:f3:6e:fb:57:
dc:9b:bc:b4:a3:c3:bc:42:81:6b:dd:f3:96:d2:51:
aa:73:b8:3d:04:73:d8:88:a5:1a:9c:72:1a:a7:32:
5d:75:38:eb:8b:2e:95:11:af:6c:54:bd:ea:57:5e:
5d:5c:7c:48:3c:07:13:17:54:c1:68:df:5b:33:38:
21:81:21:9f:a0:f5:a9:d3:a1:f0:4d:26:11:67:75:
cc:ea:af:de:b7:aa:b8:d3:00:0c:ec:48:a7:cb:7c:
ac:b4:5e:fa:1a:3d:ba:e7:b7:d3:77:d4:0d:bd:5d:
66:e9:29:cd:25:40:e7:f7:57:6e:6d:16:c9:09:84:
4a:e5:e4:9f:38:ad:65:41:3f:46:a0:98:17:b9:31:
18:19:8f:4d:b5:1c:38:90:ca:68:e3:36:5c:c6:8a:
5a:81:20:69:c8:6c:ce:2c:e6:b5:d3:92:99:5d:c1:
a0:62:2a:3e:45:20:13:95:b7:03:61:37:ca:03:d7:
8d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D1:0C:E9:5B:22:51:F8:11:8B:72:28:52:70:76:C7:69:4D:9F:D6
X509v3 Authority Key Identifier:
keyid:C6:3D:96:AE:FC:54:80:24:FA:36:FA:5C:E8:04:A4:8B:F7:CA:3A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ac:6d:3c:77:7b:f1:39:6b:2e:b4:6f:7d:40:62:10:ad:15:
ff:5a:99:86:4f:a4:25:71:9d:0a:13:d5:2c:f5:e5:73:09:c9:
31:1c:3f:a9:9e:3b:38:c6:24:b0:b4:89:8c:62:f2:8b:a3:a4:
e0:3a:4c:bb:a1:b4:83:f5:4c:0f:f1:7d:74:75:5a:b5:a0:4f:
0c:72:dd:46:f3:50:bc:9e:02:c0:bc:6f:dd:89:72:04:82:76:
2e:ee:76:68:a6:1c:10:9b:5b:cf:54:2e:84:05:dd:30:22:15:
a6:90:38:fa:ac:76:5a:45:44:2b:d9:d6:52:95:f5:f7:dd:30:
e2:50:34:d0:9d:c5:8f:09:ed:65:ca:14:98:a0:19:72:47:4c:
83:d1:4b:63:84:a7:6b:88:0f:25:2f:27:b9:5c:7f:27:b0:67:
af:e4:ac:2c:a5:9d:af:9c:04:1a:55:e9:fb:bc:f4:ca:4d:d0:
2e:26:6a:e3:5a:e6:b2:2d:51:50:80:eb:35:bb:c7:02:07:67:
d8:49:94:e1:3f:5a:8e:e5:c5:56:38:6e:0f:31:cb:39:ca:e9:
28:6d:09:b7:0a:67:00:30:9b:0f:9c:bb:a4:cb:1b:c5:e3:f3:
66:22:3a:cc:82:99:6b:5a:bc:bd:fc:d2:db:66:47:a0:b2:f4:
95:ce:26:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+S7e4F41v04GjzfVT58ZodMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2M2Q5NmFlZmM1NDgwMjRmYTM2ZmE1Y2U4MDRhNDhiZjdj
YTNhNDAwHhcNMjYwNzI0MDcwMTM0WhcNMjYwNzI1MDcwMTM0WjAzMTEwLwYDVQQD
EygxNGQxMGNlOTViMjI1MWY4MTE4YjcyMjg1MjcwNzZjNzY5NGQ5ZmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUNIFfDKk0SPdgHhPfVAzUrFgMfi
ODNiTBXk2Tbth3AJaiNky8SFiMJPIIrnh19sprnZOvIm1J+bP/LYdgQwytoM7ySw
gPNu+1fcm7y0o8O8QoFr3fOW0lGqc7g9BHPYiKUanHIapzJddTjriy6VEa9sVL3q
V15dXHxIPAcTF1TBaN9bMzghgSGfoPWp06HwTSYRZ3XM6q/et6q40wAM7Einy3ys
tF76Gj2657fTd9QNvV1m6SnNJUDn91dubRbJCYRK5eSfOK1lQT9GoJgXuTEYGY9N
tRw4kMpo4zZcxopagSBpyGzOLOa105KZXcGgYio+RSATlbcDYTfKA9eNMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBTRDOlbIlH4EYtyKFJwdsdpTZ/WMB8GA1UdIwQY
MBaAFMY9lq78VIAk+jb6XOgEpIv3yjpAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGoyV3J2eFVnQ1Q2TnZwYzZBU2tpX2ZLT2tBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9lZGQ2YjgtYWJiZC00YjgxLTk3MDct
OTcxZDI4ZDQzYzE0LzEveGoyV3J2eFVnQ1Q2TnZwYzZBU2tpX2ZLT2tBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9lZGQ2YjgtYWJiZC00YjgxLTk3MDctOTcxZDI4ZDQzYzE0
LzEveGoyV3J2eFVnQ1Q2TnZwYzZBU2tpX2ZLT2tBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi6xtPHd7
8TlrLrRvfUBiEK0V/1qZhk+kJXGdChPVLPXlcwnJMRw/qZ47OMYksLSJjGLyi6Ok
4DpMu6G0g/VMD/F9dHVataBPDHLdRvNQvJ4CwLxv3YlyBIJ2Lu52aKYcEJtbz1Qu
hAXdMCIVppA4+qx2WkVEK9nWUpX1990w4lA00J3FjwntZcoUmKAZckdMg9FLY4Sn
a4gPJS8nuVx/J7Bnr+SsLKWdr5wEGlXp+7z0yk3QLiZq41rmsi1RUIDrNbvHAgdn
2EmU4T9ajuXFVjhuDzHLOcrpKG0JtwpnADCbD5y7pMsbxePzZiI6zIKZa1q8vfzS
22ZHoLL0lc4mCg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:02:30 2026 by rpki-client