Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft
File: xg8yRv3WG6G1eS_hrsStypjXWlw.mft (raw, json)
Hash identifier: yHs1ObMYDwS/+MAnPl8yCxhiu3IcATFk/63A3F/eYnc=
Subject key identifier: 6B:8B:FB:18:1A:3B:88:69:B8:15:D2:1A:F4:89:DF:2C:D2:F8:40:B3
Authority key identifier: C6:0F:32:46:FD:D6:1B:A1:B5:79:2F:E1:AE:C4:AD:CA:98:D7:5A:5C
Certificate issuer: /CN=c60f3246fdd61ba1b5792fe1aec4adca98d75a5c
Certificate serial: 019E3DF6F38F83EADEB13BF518F2823930E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xg8yRv3WG6G1eS_hrsStypjXWlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft
Manifest number: 02F8
Signing time: Tue 19 May 2026 02:00:54 +0000
Manifest this update: Tue 19 May 2026 02:00:54 +0000
Manifest next update: Wed 20 May 2026 02:00:54 +0000
Files and hashes: 1: MmQGKSoH5LF3BVkr3ibrE-H9I9E.roa (hash: yWJCfOrBqqRptAvrnSvVrhM/S/WywcoV/IXeHHMd0es=)
2: xg8yRv3WG6G1eS_hrsStypjXWlw.crl (hash: iHuHZ5Z6NSdV9lEucf7Scm5Eg55Tm7OyImk0tMcwMZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xg8yRv3WG6G1eS_hrsStypjXWlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 20 May 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3d:f6:f3:8f:83:ea:de:b1:3b:f5:18:f2:82:39:30:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c60f3246fdd61ba1b5792fe1aec4adca98d75a5c
Validity
Not Before: May 19 02:00:54 2026 GMT
Not After : May 20 02:00:54 2026 GMT
Subject: CN=6b8bfb181a3b8869b815d21af489df2cd2f840b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:76:b5:8f:41:5c:a9:9c:c3:f9:9b:0f:b3:70:
98:d2:7d:e4:9b:37:b1:9d:c3:eb:9e:d3:3d:b9:ea:
2a:6f:20:27:dd:cf:98:19:fb:70:c4:e5:21:90:d3:
d9:fd:31:eb:90:f8:92:10:f3:fc:98:40:d3:a8:63:
96:8c:bf:16:a0:43:20:9d:ff:a1:af:87:ac:aa:ef:
14:74:88:29:56:e1:94:03:84:b5:21:18:84:0a:a8:
64:0a:79:77:b5:f4:06:0c:16:4a:12:29:23:54:b5:
c8:ef:c5:d7:73:a7:1d:44:c5:5f:f5:40:82:de:a1:
2c:b4:e5:5d:18:3e:ea:eb:7c:5e:93:6a:d1:20:7c:
97:22:f5:eb:d6:fd:23:c0:69:74:83:b3:2a:c6:df:
e7:67:2b:dd:96:98:ad:cf:70:11:a0:7d:7c:08:a7:
03:67:5c:03:5d:7c:25:ef:4e:12:24:fc:73:d0:78:
4f:dd:05:02:a6:de:d0:78:e2:62:0f:14:8b:46:bd:
da:fa:3f:5f:e6:e7:9f:38:46:4b:04:66:16:8d:cc:
ed:3a:3e:f8:9b:b8:28:9f:76:dc:f4:72:c8:2c:bd:
ef:cb:f4:a7:13:e0:fa:96:68:40:d3:cb:60:44:07:
3c:24:bb:f0:bf:d0:12:28:57:6d:2e:b3:c8:63:a4:
2f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:8B:FB:18:1A:3B:88:69:B8:15:D2:1A:F4:89:DF:2C:D2:F8:40:B3
X509v3 Authority Key Identifier:
keyid:C6:0F:32:46:FD:D6:1B:A1:B5:79:2F:E1:AE:C4:AD:CA:98:D7:5A:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xg8yRv3WG6G1eS_hrsStypjXWlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:cd:cc:c8:02:c9:e5:4e:a8:a6:fc:70:8f:1e:11:60:b6:47:
51:0a:8f:22:91:5c:34:fd:47:f8:ac:04:d0:9a:9e:01:cc:c5:
be:36:31:9d:6e:1a:4e:d3:13:91:0e:cc:af:34:9d:aa:95:08:
ca:4c:6b:b3:3a:6f:42:97:df:ee:26:a9:31:7c:62:85:17:dc:
a5:8c:c4:c8:7c:8a:e7:74:b2:f9:52:6e:96:32:e2:35:2a:d1:
54:db:1a:16:21:d5:36:f0:b2:e7:21:d6:3b:a4:19:05:54:2d:
cb:41:03:14:9a:9d:c2:75:55:1c:da:d2:18:c2:e9:3e:fd:e8:
89:21:30:65:b1:06:ab:3b:79:f9:36:97:d6:4e:aa:1b:98:c2:
fe:6f:de:95:a7:8f:5e:20:9e:c1:51:3b:1c:f8:74:f1:4c:3d:
ef:d6:ce:8e:5d:39:f8:f2:d1:09:68:9a:52:ea:43:66:2a:1f:
52:54:4b:36:8a:9e:24:dc:42:e4:51:59:67:3c:d5:60:22:09:
c5:31:1d:66:6e:33:4c:d2:04:84:a9:da:57:4d:4c:2d:bb:a1:
90:ec:9f:bf:b3:a6:7f:ad:9f:44:aa:db:4f:d9:0b:3c:3f:8c:
fa:64:1f:50:a8:cd:72:31:72:8e:28:56:72:a0:ab:01:ba:2b:
6c:1c:f0:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ499vOPg+resTv1GPKCOTDmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MGYzMjQ2ZmRkNjFiYTFiNTc5MmZlMWFlYzRhZGNhOThk
NzVhNWMwHhcNMjYwNTE5MDIwMDU0WhcNMjYwNTIwMDIwMDU0WjAzMTEwLwYDVQQD
Eyg2YjhiZmIxODFhM2I4ODY5YjgxNWQyMWFmNDg5ZGYyY2QyZjg0MGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA53a1j0FcqZzD+ZsPs3CY0n3kmzex
ncPrntM9ueoqbyAn3c+YGftwxOUhkNPZ/THrkPiSEPP8mEDTqGOWjL8WoEMgnf+h
r4esqu8UdIgpVuGUA4S1IRiECqhkCnl3tfQGDBZKEikjVLXI78XXc6cdRMVf9UCC
3qEstOVdGD7q63xek2rRIHyXIvXr1v0jwGl0g7Mqxt/nZyvdlpitz3ARoH18CKcD
Z1wDXXwl704SJPxz0HhP3QUCpt7QeOJiDxSLRr3a+j9f5uefOEZLBGYWjcztOj74
m7gon3bc9HLILL3vy/SnE+D6lmhA08tgRAc8JLvwv9ASKFdtLrPIY6Qv7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGuL+xgaO4hpuBXSGvSJ3yzS+ECzMB8GA1UdIwQY
MBaAFMYPMkb91huhtXkv4a7ErcqY11pcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGc4eVJ2M1dHNkcxZVNfaHJzU3R5cGpYV2x3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8yYTY1NmEtOTMyMy00NDI0LThmYjUt
MTc5NzkyNzY4ZGFlLzEveGc4eVJ2M1dHNkcxZVNfaHJzU3R5cGpYV2x3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8yYTY1NmEtOTMyMy00NDI0LThmYjUtMTc5NzkyNzY4ZGFl
LzEveGc4eVJ2M1dHNkcxZVNfaHJzU3R5cGpYV2x3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp83MyALJ
5U6opvxwjx4RYLZHUQqPIpFcNP1H+KwE0JqeAczFvjYxnW4aTtMTkQ7MrzSdqpUI
ykxrszpvQpff7iapMXxihRfcpYzEyHyK53Sy+VJuljLiNSrRVNsaFiHVNvCy5yHW
O6QZBVQty0EDFJqdwnVVHNrSGMLpPv3oiSEwZbEGqzt5+TaX1k6qG5jC/m/elaeP
XiCewVE7HPh08Uw979bOjl05+PLRCWiaUupDZiofUlRLNoqeJNxC5FFZZzzVYCIJ
xTEdZm4zTNIEhKnaV01MLbuhkOyfv7Omf62fRKrbT9kLPD+M+mQfUKjNcjFyjihW
cqCrAborbBzwOw==
-----END CERTIFICATE-----
Generated at Tue May 19 11:43:51 2026 by rpki-client