Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/rxxaicQTkD_UwrlE07xJezIZYsY.mft
File: rxxaicQTkD_UwrlE07xJezIZYsY.mft (raw, json)
Hash identifier: LNbzD7FjvEn1gbgGrzBAvazxUuOt/lH6Ze+T08HqS6k=
Subject key identifier: CE:6E:D9:4B:42:70:F8:50:17:50:EC:55:F5:32:1F:18:6E:5A:90:13
Authority key identifier: AF:1C:5A:89:C4:13:90:3F:D4:C2:B9:44:D3:BC:49:7B:32:19:62:C6
Certificate issuer: /CN=af1c5a89c413903fd4c2b944d3bc497b321962c6
Certificate serial: 019F85D61990F0E5FE7725024F8D759DEBA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxxaicQTkD_UwrlE07xJezIZYsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/rxxaicQTkD_UwrlE07xJezIZYsY.mft
Manifest number: 3A
Signing time: Tue 21 Jul 2026 18:00:28 +0000
Manifest this update: Tue 21 Jul 2026 18:00:28 +0000
Manifest next update: Wed 22 Jul 2026 18:00:28 +0000
Files and hashes: 1: a7niK7itDYSAcUcCWKLaVdepvNQ.roa (hash: zEoozmz189Usv1lYQlwpIyRkVXe/3xP6YFoEE3AiyZQ=)
2: rxxaicQTkD_UwrlE07xJezIZYsY.crl (hash: Rv9aYXFwB6hdfXZVuHotp8LuHsw8dN9Oc+LPwnc+5zg=)
3: tE6JJBGGYfL7pOmd9ScGG-PBKR0.roa (hash: U6b+qcJDlZitVxi4VTwdzLaOqGFdF5aocVEDkGTIcVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/rxxaicQTkD_UwrlE07xJezIZYsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/rxxaicQTkD_UwrlE07xJezIZYsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rxxaicQTkD_UwrlE07xJezIZYsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d6:19:90:f0:e5:fe:77:25:02:4f:8d:75:9d:eb:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af1c5a89c413903fd4c2b944d3bc497b321962c6
Validity
Not Before: Jul 21 18:00:28 2026 GMT
Not After : Jul 22 18:00:28 2026 GMT
Subject: CN=ce6ed94b4270f8501750ec55f5321f186e5a9013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c5:7a:4a:c1:49:ed:18:a5:75:d5:c1:96:9c:
a0:6a:99:9f:83:cc:29:0c:c9:68:5c:15:58:f2:ed:
1f:65:08:e2:cd:ef:ee:54:25:d3:8a:76:ed:a3:91:
c6:27:03:0a:4b:c3:52:51:54:0b:02:fa:69:12:38:
4a:f3:a0:36:32:55:8d:6c:54:2a:93:1f:a3:d4:be:
7b:19:d1:26:01:1f:ae:aa:00:27:41:8b:ed:58:4f:
d2:0c:35:eb:fe:5f:11:a6:0d:66:94:a0:84:bd:bf:
ba:95:fb:d3:3e:b0:ef:b0:96:7b:83:e9:e6:b9:53:
04:0d:d2:44:ff:83:13:30:e7:3d:83:09:e8:ba:ec:
2f:94:82:6b:e3:ce:f3:64:e0:7b:62:03:31:63:54:
89:c4:6c:98:11:e4:b0:0f:85:e6:40:b2:23:e7:2b:
f7:2f:3e:7b:27:22:b7:b4:c0:f1:d7:f1:6c:1d:dd:
f4:86:05:59:ee:90:b0:1b:90:ec:d4:bf:bc:62:ee:
5f:7e:04:0d:bb:08:2a:9e:1e:65:5a:f0:8e:97:42:
a8:af:d6:fc:d1:13:e3:ef:61:f1:62:5a:79:6d:2a:
e2:5a:85:9f:57:59:87:92:4b:e5:6d:9c:e1:4e:0f:
ff:a2:aa:4f:16:98:4f:b5:cf:4a:6f:fe:62:db:db:
32:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:6E:D9:4B:42:70:F8:50:17:50:EC:55:F5:32:1F:18:6E:5A:90:13
X509v3 Authority Key Identifier:
keyid:AF:1C:5A:89:C4:13:90:3F:D4:C2:B9:44:D3:BC:49:7B:32:19:62:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxxaicQTkD_UwrlE07xJezIZYsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/rxxaicQTkD_UwrlE07xJezIZYsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/rxxaicQTkD_UwrlE07xJezIZYsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:b0:41:a1:4e:48:19:77:d9:93:fa:4d:42:e6:4d:dc:85:ca:
8e:1f:cf:d9:a3:3b:be:52:72:8a:54:24:0f:2d:88:c4:7c:ab:
df:cd:64:96:4c:2c:d6:d7:fb:d0:50:87:97:97:f8:26:6b:22:
45:31:b3:f1:42:e0:41:58:b3:73:1a:2d:d8:59:a2:22:34:37:
a8:b8:43:ab:44:ec:1e:bc:bb:59:2e:1d:72:c0:75:53:0d:d7:
5a:41:fb:cf:74:a7:d1:5e:be:e8:7c:fd:a5:54:50:9b:70:3d:
a4:3a:0e:cb:31:35:c4:fc:2e:68:d7:ea:39:7b:6e:1d:14:88:
66:58:40:80:f2:f8:43:df:57:cd:68:7a:74:a6:c3:68:16:5b:
a3:87:32:27:e9:ab:22:44:6e:5e:e3:20:e8:69:28:de:ee:a2:
cd:f9:e0:8f:12:5e:8e:cd:ed:27:04:4e:67:95:16:21:96:71:
da:bd:a0:3e:ed:c3:a3:2c:df:44:20:27:1f:00:8d:e0:19:c9:
9c:6d:cb:2f:8f:56:db:29:33:2b:6d:eb:37:fe:ee:a1:4b:25:
4c:80:67:79:89:8a:69:e0:5e:9a:b7:d6:52:46:4c:d1:05:a3:
91:56:61:94:ac:ca:2f:4e:00:30:1d:07:c1:c6:f8:a8:2d:a8:
0f:bb:1d:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+F1hmQ8OX+dyUCT411neuhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMWM1YTg5YzQxMzkwM2ZkNGMyYjk0NGQzYmM0OTdiMzIx
OTYyYzYwHhcNMjYwNzIxMTgwMDI4WhcNMjYwNzIyMTgwMDI4WjAzMTEwLwYDVQQD
EyhjZTZlZDk0YjQyNzBmODUwMTc1MGVjNTVmNTMyMWYxODZlNWE5MDEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5sV6SsFJ7RilddXBlpygapmfg8wp
DMloXBVY8u0fZQjize/uVCXTinbto5HGJwMKS8NSUVQLAvppEjhK86A2MlWNbFQq
kx+j1L57GdEmAR+uqgAnQYvtWE/SDDXr/l8Rpg1mlKCEvb+6lfvTPrDvsJZ7g+nm
uVMEDdJE/4MTMOc9gwnouuwvlIJr487zZOB7YgMxY1SJxGyYEeSwD4XmQLIj5yv3
Lz57JyK3tMDx1/FsHd30hgVZ7pCwG5Ds1L+8Yu5ffgQNuwgqnh5lWvCOl0Kor9b8
0RPj72HxYlp5bSriWoWfV1mHkkvlbZzhTg//oqpPFphPtc9Kb/5i29syvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM5u2UtCcPhQF1DsVfUyHxhuWpATMB8GA1UdIwQY
MBaAFK8cWonEE5A/1MK5RNO8SXsyGWLGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnh4YWljUVRrRF9Vd3JsRTA3eEpleklaWXNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My82MzhkODgtNDk1Mi00OTYwLTg3NzQt
YzFjNGQ4Y2JmNDU5LzEvcnh4YWljUVRrRF9Vd3JsRTA3eEpleklaWXNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My82MzhkODgtNDk1Mi00OTYwLTg3NzQtYzFjNGQ4Y2JmNDU5
LzEvcnh4YWljUVRrRF9Vd3JsRTA3eEpleklaWXNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQLBBoU5I
GXfZk/pNQuZN3IXKjh/P2aM7vlJyilQkDy2IxHyr381klkws1tf70FCHl5f4Jmsi
RTGz8ULgQVizcxot2FmiIjQ3qLhDq0TsHry7WS4dcsB1Uw3XWkH7z3Sn0V6+6Hz9
pVRQm3A9pDoOyzE1xPwuaNfqOXtuHRSIZlhAgPL4Q99XzWh6dKbDaBZbo4cyJ+mr
IkRuXuMg6Gko3u6izfngjxJejs3tJwROZ5UWIZZx2r2gPu3DoyzfRCAnHwCN4BnJ
nG3LL49W2ykzK23rN/7uoUslTIBneYmKaeBemrfWUkZM0QWjkVZhlKzKL04AMB0H
wcb4qC2oD7sdkQ==
-----END CERTIFICATE-----
Generated at Tue Jul 21 21:02:19 2026 by rpki-client