Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
File: xpZo80fFWt13rFF-kzHd5_w1VqY.mft (raw, json)
Hash identifier: 8DM2QWaZlau/B91ZUKIdu3an7sTo0Ay0Eip2xp6xRjM=
Subject key identifier: 20:2B:BE:4D:C2:FB:24:8D:AC:C6:0B:F1:16:C7:80:F6:3A:7A:04:AE
Authority key identifier: C6:96:68:F3:47:C5:5A:DD:77:AC:51:7E:93:31:DD:E7:FC:35:56:A6
Certificate issuer: /CN=c69668f347c55add77ac517e9331dde7fc3556a6
Certificate serial: 019E322A3BF41949541A51FD251B9908FCF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpZo80fFWt13rFF-kzHd5_w1VqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
Manifest number: 1914
Signing time: Sat 16 May 2026 19:01:29 +0000
Manifest this update: Sat 16 May 2026 19:01:29 +0000
Manifest next update: Sun 17 May 2026 19:01:29 +0000
Files and hashes: 1: SQgk14LJvQD58GJwhzmdHvEGMpA.roa (hash: 9nEhhW/HaWe0QsWNlFcb5L1Nm0I/W7PdcIHoewo3ZNU=)
2: xpZo80fFWt13rFF-kzHd5_w1VqY.crl (hash: rm+DNciLxqkkLGnfv9v6g6PK+Ml5SnHO7AuZKCFNDPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpZo80fFWt13rFF-kzHd5_w1VqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:2a:3b:f4:19:49:54:1a:51:fd:25:1b:99:08:fc:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c69668f347c55add77ac517e9331dde7fc3556a6
Validity
Not Before: May 16 19:01:29 2026 GMT
Not After : May 17 19:01:29 2026 GMT
Subject: CN=202bbe4dc2fb248dacc60bf116c780f63a7a04ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:eb:77:24:b2:98:b5:f7:57:3c:92:bc:8e:40:
7d:15:27:b9:94:33:38:29:ab:59:4f:3c:d2:ff:f1:
41:ae:a2:b9:fe:de:2c:72:59:15:e9:8b:e4:04:02:
f7:b5:42:0a:d9:f7:42:50:ca:8c:2a:36:09:af:e3:
d2:8b:b7:e8:f0:cd:75:0c:d1:1e:c4:69:9c:4b:b7:
12:1c:a6:4d:af:c1:11:8d:d7:43:e5:84:2f:c5:e9:
6a:b0:b9:6d:e4:30:20:83:61:21:ac:14:4a:47:0e:
e8:1f:2b:90:bf:58:df:4d:f6:c5:a0:47:e1:fe:96:
76:d3:fd:07:ea:1e:4d:d0:a9:03:17:38:e9:76:c8:
27:a5:38:42:5b:b7:fc:35:53:94:9c:ef:33:3c:b1:
1a:78:ab:80:aa:e6:43:ef:7f:8e:49:79:1b:0f:2d:
fd:78:5e:48:c4:ec:ad:a3:8d:05:f5:69:00:7a:41:
19:3b:ea:46:72:37:42:69:be:b3:f1:c5:4e:1f:43:
31:6b:b9:8e:79:83:4b:3b:b7:37:f2:63:27:dd:d4:
84:e0:3f:2d:d6:4e:67:80:56:d3:f0:b4:1a:e9:69:
8a:c2:c2:31:67:cb:a8:ee:f2:af:4f:08:36:0c:a8:
7b:b3:44:ee:3f:e6:0d:28:b9:22:9d:81:a9:c3:40:
96:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:2B:BE:4D:C2:FB:24:8D:AC:C6:0B:F1:16:C7:80:F6:3A:7A:04:AE
X509v3 Authority Key Identifier:
keyid:C6:96:68:F3:47:C5:5A:DD:77:AC:51:7E:93:31:DD:E7:FC:35:56:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpZo80fFWt13rFF-kzHd5_w1VqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:3e:07:61:9b:53:4f:df:01:a6:29:26:02:df:d4:82:d5:ce:
2c:a0:9e:2c:78:bb:ed:6b:f1:50:04:83:fa:f7:7f:9a:79:7f:
67:ee:67:d1:54:aa:a9:34:f6:e5:77:8b:96:eb:93:d9:0d:3d:
3f:e6:84:0f:8d:9a:e2:ef:06:b8:f8:22:9d:12:99:f5:4a:ba:
c7:22:a9:e1:9e:83:69:69:ad:41:c1:ce:8c:a3:ab:b9:27:39:
2f:e1:35:1f:f3:12:8d:48:dd:a4:36:13:4f:f9:38:02:50:ab:
51:df:ed:b4:12:af:78:07:c3:18:85:df:d5:a0:e8:c3:01:b9:
a9:a4:cb:74:dc:32:ac:80:bb:ea:55:ff:ef:5e:82:b9:75:e6:
bd:d1:64:68:de:e6:bd:79:34:1b:71:c3:f0:fa:58:47:d3:4c:
19:4f:41:2f:66:36:78:04:e5:5f:8b:69:44:cc:d5:10:19:74:
1a:90:fa:f8:ec:f2:67:d8:00:47:19:ed:31:ac:05:e2:ed:33:
d1:68:0a:e2:dd:55:e7:f7:64:58:8f:6a:17:14:95:b2:2c:72:
6a:dd:0d:7b:5e:6c:b3:66:d5:d1:d0:c1:2b:d3:0a:2a:81:8c:
b0:5f:07:65:27:70:4b:75:40:f0:c4:c1:41:c2:9a:74:5a:1c:
74:db:6f:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4yKjv0GUlUGlH9JRuZCPzzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2OTY2OGYzNDdjNTVhZGQ3N2FjNTE3ZTkzMzFkZGU3ZmMz
NTU2YTYwHhcNMjYwNTE2MTkwMTI5WhcNMjYwNTE3MTkwMTI5WjAzMTEwLwYDVQQD
EygyMDJiYmU0ZGMyZmIyNDhkYWNjNjBiZjExNmM3ODBmNjNhN2EwNGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOt3JLKYtfdXPJK8jkB9FSe5lDM4
KatZTzzS//FBrqK5/t4sclkV6YvkBAL3tUIK2fdCUMqMKjYJr+PSi7fo8M11DNEe
xGmcS7cSHKZNr8ERjddD5YQvxelqsLlt5DAgg2EhrBRKRw7oHyuQv1jfTfbFoEfh
/pZ20/0H6h5N0KkDFzjpdsgnpThCW7f8NVOUnO8zPLEaeKuAquZD73+OSXkbDy39
eF5IxOyto40F9WkAekEZO+pGcjdCab6z8cVOH0Mxa7mOeYNLO7c38mMn3dSE4D8t
1k5ngFbT8LQa6WmKwsIxZ8uo7vKvTwg2DKh7s0TuP+YNKLkinYGpw0CWWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCArvk3C+ySNrMYL8RbHgPY6egSuMB8GA1UdIwQY
MBaAFMaWaPNHxVrdd6xRfpMx3ef8NVamMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHBabzgwZkZXdDEzckZGLWt6SGQ1X3cxVnFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8wNjA5NjktNWNhZi00MThmLThjMjUt
YWNiMjcyM2E1MDc2LzEveHBabzgwZkZXdDEzckZGLWt6SGQ1X3cxVnFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy8wNjA5NjktNWNhZi00MThmLThjMjUtYWNiMjcyM2E1MDc2
LzEveHBabzgwZkZXdDEzckZGLWt6SGQ1X3cxVnFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXT4HYZtT
T98BpikmAt/UgtXOLKCeLHi77WvxUASD+vd/mnl/Z+5n0VSqqTT25XeLluuT2Q09
P+aED42a4u8GuPginRKZ9Uq6xyKp4Z6DaWmtQcHOjKOruSc5L+E1H/MSjUjdpDYT
T/k4AlCrUd/ttBKveAfDGIXf1aDowwG5qaTLdNwyrIC76lX/716CuXXmvdFkaN7m
vXk0G3HD8PpYR9NMGU9BL2Y2eATlX4tpRMzVEBl0GpD6+OzyZ9gARxntMawF4u0z
0WgK4t1V5/dkWI9qFxSVsixyat0Ne15ss2bV0dDBK9MKKoGMsF8HZSdwS3VA8MTB
QcKadFocdNtv1A==
-----END CERTIFICATE-----
Generated at Sun May 17 00:30:05 2026 by rpki-client