Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
File: xSJOpF0IHUAv_Wv03ZXj_28txIE.mft (raw, json)
Hash identifier: 49VcwiTw9XHE3cBGGtzDdvhImtJf/QWFMR7LV3s1jLs=
Subject key identifier: 22:33:02:AB:6D:95:E1:94:E3:7B:F5:0B:A4:3B:9F:2D:69:03:53:80
Authority key identifier: C5:22:4E:A4:5D:08:1D:40:2F:FD:6B:F4:DD:95:E3:FF:6F:2D:C4:81
Certificate issuer: /CN=c5224ea45d081d402ffd6bf4dd95e3ff6f2dc481
Certificate serial: 019DD0507CA52B87BAE563A9087A3455C497
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
Manifest number: 0D97
Signing time: Mon 27 Apr 2026 19:00:28 +0000
Manifest this update: Mon 27 Apr 2026 19:00:28 +0000
Manifest next update: Tue 28 Apr 2026 19:00:28 +0000
Files and hashes: 1: LpqEZBj1hD6LUjiFVP5RJmbjDc0.roa (hash: MkMyhvMq/UW3J/dY/hJ1MwyOPfnqAuGRvt2LQG0g8xw=)
2: xSJOpF0IHUAv_Wv03ZXj_28txIE.crl (hash: 91/B/VHwbYaoZEiqzLUon3sbHRNsLoBS0/S8dFLHNBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:50:7c:a5:2b:87:ba:e5:63:a9:08:7a:34:55:c4:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5224ea45d081d402ffd6bf4dd95e3ff6f2dc481
Validity
Not Before: Apr 27 19:00:28 2026 GMT
Not After : Apr 28 19:00:28 2026 GMT
Subject: CN=223302ab6d95e194e37bf50ba43b9f2d69035380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e8:c1:bc:42:14:a7:f5:78:7b:f3:cd:89:27:
e3:89:4f:b0:fd:75:ff:96:8e:70:37:e4:64:08:b0:
31:0a:40:66:4a:69:c9:6b:56:8a:21:bd:dc:92:62:
69:52:13:5f:73:24:ce:ca:fb:c1:09:f3:f6:ed:11:
17:3a:6c:7d:b8:1b:ca:71:33:01:fd:28:16:d3:df:
45:1b:30:08:87:76:6a:a1:58:c1:16:ae:f3:4b:30:
9e:d0:81:68:46:1e:78:fa:ae:d0:db:d3:93:83:ce:
94:4b:dd:16:53:81:d4:03:4a:50:13:45:d2:3e:9f:
04:f8:96:d9:80:bb:9c:58:ba:c5:7f:3f:38:73:90:
7e:5b:7b:18:71:b8:b0:53:2c:7d:90:98:ef:6a:3c:
2a:47:47:f6:f7:cf:c9:39:3a:dc:35:3b:af:4d:e3:
35:6f:ff:84:25:94:32:c2:7f:89:75:28:f4:3a:c7:
3b:7c:01:20:4e:1b:0f:7e:5f:41:5d:f3:41:32:b7:
f9:ce:05:b1:6b:7f:d7:68:5c:70:fd:23:6d:ed:5b:
40:eb:f6:62:b8:e9:16:4e:94:53:36:9e:c5:59:bd:
38:15:c8:9a:43:bd:a1:68:ef:4f:47:61:f7:9f:aa:
c3:5e:4f:2a:64:eb:4a:ad:16:93:e7:64:5d:60:4e:
81:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:33:02:AB:6D:95:E1:94:E3:7B:F5:0B:A4:3B:9F:2D:69:03:53:80
X509v3 Authority Key Identifier:
keyid:C5:22:4E:A4:5D:08:1D:40:2F:FD:6B:F4:DD:95:E3:FF:6F:2D:C4:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:c4:62:77:1a:1e:07:08:42:d6:36:64:61:88:d1:76:73:4f:
1a:6c:d2:85:a8:63:3b:b1:3b:f8:7e:84:f2:6d:36:f9:bd:63:
b2:aa:ff:2f:57:cb:33:a9:ac:bf:18:71:5f:38:9c:7b:2a:f6:
06:c9:93:16:38:5b:48:d3:91:2b:7e:44:1c:c8:e3:de:f5:d4:
cf:d8:1d:d5:e3:53:53:28:08:49:fa:19:60:3f:01:f0:b5:6b:
8f:f4:1e:f2:88:91:78:60:dd:bd:22:ef:33:0c:2e:af:95:96:
5c:c2:83:a3:7a:21:4f:d9:a8:03:b8:4e:76:89:52:f2:9e:c0:
60:96:07:63:38:07:03:77:bb:16:dc:59:34:ce:79:ab:bb:e7:
00:68:5e:72:e1:f2:7d:ff:8b:84:a1:2d:f0:02:85:fa:60:7a:
56:4d:10:84:d4:85:23:e0:ea:98:b1:bc:01:0d:80:c4:b5:86:
01:81:d8:b6:80:fd:fe:7e:d0:08:e2:89:a0:ed:e8:e7:91:2c:
4f:e3:d3:5a:72:41:18:b0:d7:85:f7:10:27:98:33:d5:32:97:
05:74:aa:b0:8d:f8:ba:dc:1f:96:40:30:9c:50:d6:93:11:7a:
30:97:f0:67:3c:b4:96:26:e9:d0:4c:7c:cb:7f:fc:7b:d3:7e:
98:be:60:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3QUHylK4e65WOpCHo0VcSXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MjI0ZWE0NWQwODFkNDAyZmZkNmJmNGRkOTVlM2ZmNmYy
ZGM0ODEwHhcNMjYwNDI3MTkwMDI4WhcNMjYwNDI4MTkwMDI4WjAzMTEwLwYDVQQD
EygyMjMzMDJhYjZkOTVlMTk0ZTM3YmY1MGJhNDNiOWYyZDY5MDM1MzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ujBvEIUp/V4e/PNiSfjiU+w/XX/
lo5wN+RkCLAxCkBmSmnJa1aKIb3ckmJpUhNfcyTOyvvBCfP27REXOmx9uBvKcTMB
/SgW099FGzAIh3ZqoVjBFq7zSzCe0IFoRh54+q7Q29OTg86US90WU4HUA0pQE0XS
Pp8E+JbZgLucWLrFfz84c5B+W3sYcbiwUyx9kJjvajwqR0f298/JOTrcNTuvTeM1
b/+EJZQywn+JdSj0Osc7fAEgThsPfl9BXfNBMrf5zgWxa3/XaFxw/SNt7VtA6/Zi
uOkWTpRTNp7FWb04FciaQ72haO9PR2H3n6rDXk8qZOtKrRaT52RdYE6B5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCIzAqttleGU43v1C6Q7ny1pA1OAMB8GA1UdIwQY
MBaAFMUiTqRdCB1AL/1r9N2V4/9vLcSBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFNKT3BGMElIVUF2X1d2MDNaWGpfMjh0eElFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy84MTU0ZTMtMjg2Yi00NmEzLWI4YTUt
NTIzNTZjZDVkYTkwLzEveFNKT3BGMElIVUF2X1d2MDNaWGpfMjh0eElFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy84MTU0ZTMtMjg2Yi00NmEzLWI4YTUtNTIzNTZjZDVkYTkw
LzEveFNKT3BGMElIVUF2X1d2MDNaWGpfMjh0eElFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANMRidxoe
BwhC1jZkYYjRdnNPGmzShahjO7E7+H6E8m02+b1jsqr/L1fLM6msvxhxXziceyr2
BsmTFjhbSNORK35EHMjj3vXUz9gd1eNTUygISfoZYD8B8LVrj/Qe8oiReGDdvSLv
Mwwur5WWXMKDo3ohT9moA7hOdolS8p7AYJYHYzgHA3e7FtxZNM55q7vnAGhecuHy
ff+LhKEt8AKF+mB6Vk0QhNSFI+DqmLG8AQ2AxLWGAYHYtoD9/n7QCOKJoO3o55Es
T+PTWnJBGLDXhfcQJ5gz1TKXBXSqsI34utwflkAwnFDWkxF6MJfwZzy0libp0Ex8
y3/8e9N+mL5gxw==
-----END CERTIFICATE-----
Generated at Mon Apr 27 21:05:08 2026 by rpki-client