Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
File: xhaXFtCuZAaHAxQKo3MON4j91MY.mft (raw, json)
Hash identifier: 9ZVsRpwmzaTL8Do1X9jmGInylzPNQFy7QRF1XvHOjRs=
Subject key identifier: 8B:C3:03:25:9B:9A:CC:5D:A3:BA:FA:78:3C:DA:37:8F:E4:8F:9C:81
Authority key identifier: C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
Certificate issuer: /CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Certificate serial: 019F82D4EEA759C9D3EEDDD9F4B025C60642
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
Manifest number: 172C
Signing time: Tue 21 Jul 2026 04:00:20 +0000
Manifest this update: Tue 21 Jul 2026 04:00:20 +0000
Manifest next update: Wed 22 Jul 2026 04:00:20 +0000
Files and hashes: 1: FWP58ajjb0tkpM-YIjMEubI9eHI.roa (hash: 8d5KqUUs2iCVjFLb2FSp+rBEK2zv9joKO9sjvkw4TqU=)
2: xhaXFtCuZAaHAxQKo3MON4j91MY.crl (hash: BhVmw5VcEADfFO7s1+dmkiC+kLa5tAKqLBlbW3jrp4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:82:d4:ee:a7:59:c9:d3:ee:dd:d9:f4:b0:25:c6:06:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Validity
Not Before: Jul 21 04:00:20 2026 GMT
Not After : Jul 22 04:00:20 2026 GMT
Subject: CN=8bc303259b9acc5da3bafa783cda378fe48f9c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cc:76:91:83:59:b9:a8:b5:a3:7c:93:04:60:
36:86:22:83:f6:08:6d:c4:30:66:48:f8:b1:62:14:
14:35:da:44:1b:2f:35:5d:15:8f:ea:34:6e:dc:7b:
7d:e8:f1:63:6b:d8:eb:11:eb:c4:7e:27:9e:4e:34:
17:6e:0d:a7:5d:41:55:1a:07:33:fa:cd:a3:d1:72:
46:58:83:b3:85:ec:3c:6b:a9:67:51:06:4f:a5:ca:
d3:e7:0b:ad:2d:6b:13:67:fd:13:04:d4:dc:c4:d7:
72:97:4b:29:9e:62:26:e3:77:78:62:66:a0:fa:1b:
38:34:3f:bd:22:c8:57:4b:5e:b5:ed:09:27:51:63:
d3:4a:5f:e6:5c:37:07:09:d5:44:eb:78:e6:97:5e:
45:bb:49:34:86:f9:4c:1b:38:28:31:e0:6b:62:f0:
9a:5f:33:48:06:ab:72:3c:01:e8:75:ee:75:79:57:
c7:aa:d9:da:e7:a5:73:3c:93:b2:b4:7c:0a:8d:c8:
5e:64:62:46:83:95:d7:b1:69:d6:d2:a6:c6:ba:c7:
69:60:fe:29:bb:d9:a6:c1:7e:c6:e3:24:50:61:d1:
3c:c2:2f:59:84:bc:88:7b:fd:dc:6d:6c:5f:c4:0a:
51:16:3a:eb:27:d2:bb:0d:21:20:54:d4:f9:96:75:
5a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C3:03:25:9B:9A:CC:5D:A3:BA:FA:78:3C:DA:37:8F:E4:8F:9C:81
X509v3 Authority Key Identifier:
keyid:C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:3f:80:15:1a:f0:82:64:1d:a3:c7:51:57:8f:ee:d4:cc:d5:
2c:e0:2e:91:a9:ae:57:03:3a:8f:3e:5e:9b:98:28:12:58:e7:
3b:60:88:29:8a:ed:89:a4:1a:f8:13:f2:03:3f:d7:f4:68:b4:
7d:3e:91:72:f4:1b:16:67:94:8d:49:02:8a:fe:6c:1d:ce:0e:
69:d8:c4:c0:68:79:60:29:94:36:72:67:35:50:1c:4a:12:c2:
0f:6c:e8:ad:40:2d:0b:8e:e7:92:71:55:99:e5:40:ce:11:16:
c4:9b:9b:a7:bb:72:00:4c:e1:7d:38:80:03:a4:29:7b:b6:ff:
84:db:3f:bd:12:53:f8:e0:73:14:35:3a:c3:3a:cd:34:cb:1a:
1b:d4:8d:35:f5:51:34:5e:14:02:de:ac:48:47:8e:37:58:fc:
d9:fe:17:86:3e:b4:4b:6d:dc:8b:6d:7b:57:1d:ed:49:14:3b:
26:1f:b2:28:88:6a:63:2a:23:19:91:91:25:7c:90:1b:2d:44:
c0:64:85:ac:2a:67:e2:6e:fe:53:3d:9b:de:8e:de:85:e9:3e:
00:e2:f6:68:9d:72:e3:cc:65:0a:7a:66:b7:70:7d:0a:13:24:
ae:04:0f:74:7e:34:29:69:3f:bd:eb:40:52:2a:91:72:7f:2f:
17:27:25:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+C1O6nWcnT7t3Z9LAlxgZCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTY5NzE2ZDBhZTY0MDY4NzAzMTQwYWEzNzMwZTM3ODhm
ZGQ0YzYwHhcNMjYwNzIxMDQwMDIwWhcNMjYwNzIyMDQwMDIwWjAzMTEwLwYDVQQD
Eyg4YmMzMDMyNTliOWFjYzVkYTNiYWZhNzgzY2RhMzc4ZmU0OGY5YzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMx2kYNZuai1o3yTBGA2hiKD9ght
xDBmSPixYhQUNdpEGy81XRWP6jRu3Ht96PFja9jrEevEfieeTjQXbg2nXUFVGgcz
+s2j0XJGWIOzhew8a6lnUQZPpcrT5wutLWsTZ/0TBNTcxNdyl0spnmIm43d4Ymag
+hs4ND+9IshXS1617QknUWPTSl/mXDcHCdVE63jml15Fu0k0hvlMGzgoMeBrYvCa
XzNIBqtyPAHode51eVfHqtna56VzPJOytHwKjcheZGJGg5XXsWnW0qbGusdpYP4p
u9mmwX7G4yRQYdE8wi9ZhLyIe/3cbWxfxApRFjrrJ9K7DSEgVNT5lnVajwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIvDAyWbmsxdo7r6eDzaN4/kj5yBMB8GA1UdIwQY
MBaAFMYWlxbQrmQGhwMUCqNzDjeI/dTGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhhWEZ0Q3VaQWFIQXhRS28zTU9ONGo5MU1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC80MDA2ODUtZjQ4ZS00YWI5LThlM2Yt
MDQyNDQ2YjcwZmIxLzEveGhhWEZ0Q3VaQWFIQXhRS28zTU9ONGo5MU1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC80MDA2ODUtZjQ4ZS00YWI5LThlM2YtMDQyNDQ2YjcwZmIx
LzEveGhhWEZ0Q3VaQWFIQXhRS28zTU9ONGo5MU1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXz+AFRrw
gmQdo8dRV4/u1MzVLOAukamuVwM6jz5em5goEljnO2CIKYrtiaQa+BPyAz/X9Gi0
fT6RcvQbFmeUjUkCiv5sHc4OadjEwGh5YCmUNnJnNVAcShLCD2zorUAtC47nknFV
meVAzhEWxJubp7tyAEzhfTiAA6Qpe7b/hNs/vRJT+OBzFDU6wzrNNMsaG9SNNfVR
NF4UAt6sSEeON1j82f4Xhj60S23ci217Vx3tSRQ7Jh+yKIhqYyojGZGRJXyQGy1E
wGSFrCpn4m7+Uz2b3o7ehek+AOL2aJ1y48xlCnpmt3B9ChMkrgQPdH40KWk/vetA
UiqRcn8vFyclrA==
-----END CERTIFICATE-----
Generated at Tue Jul 21 12:21:43 2026 by rpki-client