Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
File: xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft (raw, json)
Hash identifier: zNniOhMFLagbqxuAueLYrRP+KsIflPuGc4GghmRtC0s=
Subject key identifier: 86:1F:F8:0B:34:57:C3:99:39:8A:AD:08:64:B2:46:85:7D:EB:56:8B
Authority key identifier: C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05
Certificate issuer: /CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
Certificate serial: 019FA18419DF646F7126FEBB27328D686C80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
Manifest number: 19DC
Signing time: Mon 27 Jul 2026 03:00:16 +0000
Manifest this update: Mon 27 Jul 2026 03:00:16 +0000
Manifest next update: Tue 28 Jul 2026 03:00:16 +0000
Files and hashes: 1: 7qKY5-kl-qaVMoRIB3RG5oNUdf0.roa (hash: L6u//TWO0oG/8Tdr3Tg8lfsVqZiNaM1y0Ryf8hK01sg=)
2: PPXNJhyqSJSHAcVtgk0VztMlglY.roa (hash: ex9cUqmNLS12UIvKYIuoCv8mQvwQVbCS289sS1wTF3M=)
3: e6h2n9XnoiZKNpyZDuWS--kogbA.roa (hash: tWYIKN6aFchD9ZG77xZYhxaLu1YeirWOa5ux4eeE0kw=)
4: lNE8D9GJWfcd-D9egVK1TMPitC0.roa (hash: 2CmJCZprp/LCt6ibHBoiFVrP1YcZuqexjzFdiTh77oM=)
5: xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl (hash: hbeYAF/N7JcDRkRpSkrj2AlmcyuxlptTyMOScM9eKRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 03:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:84:19:df:64:6f:71:26:fe:bb:27:32:8d:68:6c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
Validity
Not Before: Jul 27 03:00:16 2026 GMT
Not After : Jul 28 03:00:16 2026 GMT
Subject: CN=861ff80b3457c399398aad0864b246857deb568b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:87:21:0f:9d:ca:99:21:30:03:4d:e7:1a:de:
d5:9d:3d:46:79:f7:67:e2:5d:d4:b1:eb:74:0d:53:
de:5b:9b:08:8f:7a:05:f2:d4:9c:d2:0c:72:91:68:
79:13:95:d0:0e:a2:17:e7:5c:aa:2e:39:b3:1a:2e:
5f:9d:e2:a4:a8:4a:3a:e1:c3:43:52:21:a0:c0:fd:
e5:da:6c:9d:67:5e:de:41:75:09:a3:56:c1:e6:09:
6e:c7:ab:3b:d7:5b:fe:4e:a4:d7:45:4e:32:34:bc:
ab:94:5c:74:c4:95:5f:1e:69:f9:d6:0c:fa:d9:b8:
c5:dc:e1:9e:0e:a9:cd:ca:80:0c:06:c4:33:c3:02:
28:70:fc:61:b4:62:12:fd:e2:81:08:d7:f9:16:65:
46:b1:0b:f2:59:6e:e8:03:a9:92:4f:52:a0:89:66:
ef:a5:9a:7c:c2:3f:b6:e0:d6:78:16:a7:3b:14:37:
df:a1:70:b5:f9:33:e2:10:6f:86:92:25:d2:9f:22:
c7:2c:81:64:dc:e7:97:af:a1:d1:30:a8:23:65:1f:
45:b0:58:83:e2:13:c2:2b:d6:68:34:c5:f9:7c:97:
c0:9e:06:1b:f1:66:cf:db:ff:fc:fb:17:1d:43:6a:
34:6d:87:cc:3c:de:f0:36:e5:57:6b:d5:aa:06:ff:
33:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:1F:F8:0B:34:57:C3:99:39:8A:AD:08:64:B2:46:85:7D:EB:56:8B
X509v3 Authority Key Identifier:
keyid:C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:4b:d9:a2:f6:c9:59:e5:58:6a:be:88:2f:d4:05:f1:c8:f0:
09:36:fb:4c:34:58:63:c6:c6:c6:6d:f9:d0:ce:b3:59:31:77:
65:fc:59:d2:26:2c:fe:62:c1:50:93:21:d7:80:54:5c:81:64:
7d:d5:45:71:d4:85:9d:4e:02:58:54:22:e2:af:53:2f:44:f7:
f8:ee:d0:97:f7:b5:91:e2:75:34:9c:d4:6e:1e:f7:2e:8e:d0:
b5:8a:0c:61:2f:f0:f5:70:43:ae:86:54:7a:91:18:da:43:5b:
ca:ee:2b:94:0b:45:d5:4a:a6:fd:3b:1b:1a:0b:d3:44:ad:d6:
57:0f:2f:e2:44:73:f9:24:95:e9:52:27:92:be:de:7e:50:f2:
e1:2b:4f:64:75:dd:e0:82:aa:4e:1d:2f:63:5d:87:fa:1c:d6:
2d:14:64:56:da:b9:cb:f2:d0:4e:9f:2e:79:3d:cb:f5:fe:5b:
70:a8:99:64:ab:53:cd:0c:9e:73:a7:2c:0c:93:a1:a8:64:62:
ca:98:04:9c:03:87:20:e3:85:df:88:f0:e7:89:6d:3c:3c:01:
ff:9e:b6:32:6b:16:6d:74:5f:87:73:15:fd:9b:b0:d9:dd:f2:
08:65:84:95:c5:ed:0e:5f:6d:22:4c:ac:a7:83:fb:65:2c:77:
88:1d:ee:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+hhBnfZG9xJv67JzKNaGyAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0YjIxYzg5YmM3ZTJiMjE0MDY3ZjMwNzA3YTRhMDNkYzM0
NmVlMDUwHhcNMjYwNzI3MDMwMDE2WhcNMjYwNzI4MDMwMDE2WjAzMTEwLwYDVQQD
Eyg4NjFmZjgwYjM0NTdjMzk5Mzk4YWFkMDg2NGIyNDY4NTdkZWI1NjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxochD53KmSEwA03nGt7VnT1Gefdn
4l3Uset0DVPeW5sIj3oF8tSc0gxykWh5E5XQDqIX51yqLjmzGi5fneKkqEo64cND
UiGgwP3l2mydZ17eQXUJo1bB5glux6s711v+TqTXRU4yNLyrlFx0xJVfHmn51gz6
2bjF3OGeDqnNyoAMBsQzwwIocPxhtGIS/eKBCNf5FmVGsQvyWW7oA6mST1KgiWbv
pZp8wj+24NZ4Fqc7FDffoXC1+TPiEG+GkiXSnyLHLIFk3OeXr6HRMKgjZR9FsFiD
4hPCK9ZoNMX5fJfAngYb8WbP2//8+xcdQ2o0bYfMPN7wNuVXa9WqBv8zQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIYf+As0V8OZOYqtCGSyRoV961aLMB8GA1UdIwQY
MBaAFMSyHIm8fishQGfzBwekoD3DRu4FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveExJY2lieC1LeUZBWl9NSEI2U2dQY05HN2dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi82MTM3YjgtMTM4My00YjcxLWExODkt
MDYzYjQwMTc0NTk3LzEveExJY2lieC1LeUZBWl9NSEI2U2dQY05HN2dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi82MTM3YjgtMTM4My00YjcxLWExODktMDYzYjQwMTc0NTk3
LzEveExJY2lieC1LeUZBWl9NSEI2U2dQY05HN2dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOkvZovbJ
WeVYar6IL9QF8cjwCTb7TDRYY8bGxm350M6zWTF3ZfxZ0iYs/mLBUJMh14BUXIFk
fdVFcdSFnU4CWFQi4q9TL0T3+O7Ql/e1keJ1NJzUbh73Lo7QtYoMYS/w9XBDroZU
epEY2kNbyu4rlAtF1Uqm/TsbGgvTRK3WVw8v4kRz+SSV6VInkr7eflDy4StPZHXd
4IKqTh0vY12H+hzWLRRkVtq5y/LQTp8ueT3L9f5bcKiZZKtTzQyec6csDJOhqGRi
ypgEnAOHIOOF34jw54ltPDwB/562MmsWbXRfh3MV/Zuw2d3yCGWElcXtDl9tIkys
p4P7ZSx3iB3ujg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 13:18:37 2026 by rpki-client