Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/af0620-dd9e-47e6-a874-265011f104d6/1/xWjveMPP6YXgHnU9X0XqZ1EbnkI.mft
File: xWjveMPP6YXgHnU9X0XqZ1EbnkI.mft (raw, json)
Hash identifier: SAOK1UP7+fX+nDKqUkpzub2KEb4eNSXmVQtREudYlPU=
Subject key identifier: 59:0F:01:A3:2F:E1:49:7B:67:29:C8:9C:46:D3:FB:04:F2:0E:93:33
Authority key identifier: C5:68:EF:78:C3:CF:E9:85:E0:1E:75:3D:5F:45:EA:67:51:1B:9E:42
Certificate issuer: /CN=c568ef78c3cfe985e01e753d5f45ea67511b9e42
Certificate serial: 019DDDD605B33953E43C0FE9538A70F09170
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xWjveMPP6YXgHnU9X0XqZ1EbnkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/af0620-dd9e-47e6-a874-265011f104d6/1/xWjveMPP6YXgHnU9X0XqZ1EbnkI.mft
Manifest number: 2B
Signing time: Thu 30 Apr 2026 10:01:23 +0000
Manifest this update: Thu 30 Apr 2026 10:01:23 +0000
Manifest next update: Fri 01 May 2026 10:01:23 +0000
Files and hashes: 1: YPZjGGUztC1i2ZNYvGgdAsuXTgo.asa (hash: K4CEQz/XSFN1g13QszcoyDmffxNfF6QeHPnFTt4rvN8=)
2: xWjveMPP6YXgHnU9X0XqZ1EbnkI.crl (hash: 8oxVmKjheD0O9cZTsVIdPu0ezqTk5yGzv3mIt+PwuSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/af0620-dd9e-47e6-a874-265011f104d6/1/xWjveMPP6YXgHnU9X0XqZ1EbnkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/af0620-dd9e-47e6-a874-265011f104d6/1/xWjveMPP6YXgHnU9X0XqZ1EbnkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xWjveMPP6YXgHnU9X0XqZ1EbnkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:d6:05:b3:39:53:e4:3c:0f:e9:53:8a:70:f0:91:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c568ef78c3cfe985e01e753d5f45ea67511b9e42
Validity
Not Before: Apr 30 10:01:23 2026 GMT
Not After : May 1 10:01:23 2026 GMT
Subject: CN=590f01a32fe1497b6729c89c46d3fb04f20e9333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:78:5e:9f:74:08:95:a9:e7:d8:c7:50:62:36:
1b:c6:ae:c6:5e:e4:a3:ec:03:22:50:2d:6f:ce:62:
17:20:ef:f5:d9:42:1a:a7:80:94:06:91:b5:00:21:
f5:d0:fb:50:e9:68:4b:c5:07:23:26:02:fb:69:fd:
02:a4:0a:49:36:0b:7b:2d:b9:8e:0e:2c:49:92:19:
b4:95:04:01:27:b4:46:06:eb:e3:bf:dc:f2:e5:21:
79:d9:4b:5a:9e:80:1c:b6:07:0e:4b:f2:90:b9:a8:
e1:88:b0:38:fb:7a:32:21:04:f1:9d:65:2b:39:2b:
58:90:20:fe:10:e2:f2:1a:e4:9b:1d:36:e3:39:ab:
60:e5:a2:69:7d:3d:b1:94:10:dd:e4:10:4e:92:e4:
fe:e5:21:02:19:0b:46:1a:0b:dc:02:d7:04:5e:89:
9b:a1:15:86:b0:70:ba:1c:05:03:41:24:b0:75:b0:
89:98:11:4e:11:d5:e8:da:1e:97:08:9a:b8:63:0c:
3a:04:73:21:18:ae:07:dd:f5:08:19:2f:67:11:85:
bc:d5:17:d2:25:6b:68:30:16:33:1a:fe:4e:df:31:
00:04:59:d4:10:d7:e2:9e:20:40:3d:76:1f:2a:9b:
12:38:f8:14:72:a0:85:ee:37:ef:99:0a:57:e7:aa:
f3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:0F:01:A3:2F:E1:49:7B:67:29:C8:9C:46:D3:FB:04:F2:0E:93:33
X509v3 Authority Key Identifier:
keyid:C5:68:EF:78:C3:CF:E9:85:E0:1E:75:3D:5F:45:EA:67:51:1B:9E:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xWjveMPP6YXgHnU9X0XqZ1EbnkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/af0620-dd9e-47e6-a874-265011f104d6/1/xWjveMPP6YXgHnU9X0XqZ1EbnkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/af0620-dd9e-47e6-a874-265011f104d6/1/xWjveMPP6YXgHnU9X0XqZ1EbnkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:66:21:0e:bc:ef:30:ef:f0:3c:d0:9b:f8:6d:1c:bb:e6:08:
76:2a:aa:1f:64:2a:85:dd:dd:43:3c:98:0d:c9:2b:18:3a:f8:
ab:b7:20:82:cf:fc:fc:85:56:4b:8b:ef:eb:ff:3e:ac:90:1e:
84:46:af:ae:bd:0d:09:6a:0e:22:c2:f8:47:de:df:f6:b3:e5:
62:b0:8f:fc:d5:fe:d7:37:73:6d:ca:5d:56:e0:d5:a9:45:77:
43:a0:71:05:1f:29:71:1d:58:f2:7c:1f:f1:07:65:3a:86:58:
c2:25:c4:49:01:64:2a:46:28:f8:da:61:89:4c:31:0b:46:53:
da:b7:94:d8:fe:d0:4a:aa:fa:26:d6:2a:af:7d:a2:a4:63:ac:
66:93:19:78:e1:b1:a0:d6:8e:ed:e3:fe:55:c8:10:51:51:f2:
75:cc:a1:2b:8f:5d:06:9f:0b:90:3f:0f:88:05:ea:4a:68:de:
d2:8c:e3:6e:2b:ef:68:c4:93:f1:6b:6f:78:4e:cc:a7:5f:91:
f6:c1:8f:68:b1:a3:76:e4:f7:e1:86:fd:91:58:cc:db:0c:41:
bb:a7:ed:29:13:88:d5:da:c4:ea:7c:2e:7a:51:fc:7a:38:e1:
65:c6:00:02:e0:70:7d:7e:24:35:df:c3:52:ea:51:7b:2b:82:
65:91:ae:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3d1gWzOVPkPA/pU4pw8JFwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NjhlZjc4YzNjZmU5ODVlMDFlNzUzZDVmNDVlYTY3NTEx
YjllNDIwHhcNMjYwNDMwMTAwMTIzWhcNMjYwNTAxMTAwMTIzWjAzMTEwLwYDVQQD
Eyg1OTBmMDFhMzJmZTE0OTdiNjcyOWM4OWM0NmQzZmIwNGYyMGU5MzMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnhen3QIlann2MdQYjYbxq7GXuSj
7AMiUC1vzmIXIO/12UIap4CUBpG1ACH10PtQ6WhLxQcjJgL7af0CpApJNgt7LbmO
DixJkhm0lQQBJ7RGBuvjv9zy5SF52UtanoActgcOS/KQuajhiLA4+3oyIQTxnWUr
OStYkCD+EOLyGuSbHTbjOatg5aJpfT2xlBDd5BBOkuT+5SECGQtGGgvcAtcEXomb
oRWGsHC6HAUDQSSwdbCJmBFOEdXo2h6XCJq4Yww6BHMhGK4H3fUIGS9nEYW81RfS
JWtoMBYzGv5O3zEABFnUENfiniBAPXYfKpsSOPgUcqCF7jfvmQpX56rzpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFkPAaMv4Ul7ZynInEbT+wTyDpMzMB8GA1UdIwQY
MBaAFMVo73jDz+mF4B51PV9F6mdRG55CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFdqdmVNUFA2WVhnSG5VOVgwWHFaMUVibmtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9hZjA2MjAtZGQ5ZS00N2U2LWE4NzQt
MjY1MDExZjEwNGQ2LzEveFdqdmVNUFA2WVhnSG5VOVgwWHFaMUVibmtJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9hZjA2MjAtZGQ5ZS00N2U2LWE4NzQtMjY1MDExZjEwNGQ2
LzEveFdqdmVNUFA2WVhnSG5VOVgwWHFaMUVibmtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj2YhDrzv
MO/wPNCb+G0cu+YIdiqqH2Qqhd3dQzyYDckrGDr4q7cggs/8/IVWS4vv6/8+rJAe
hEavrr0NCWoOIsL4R97f9rPlYrCP/NX+1zdzbcpdVuDVqUV3Q6BxBR8pcR1Y8nwf
8QdlOoZYwiXESQFkKkYo+NphiUwxC0ZT2reU2P7QSqr6JtYqr32ipGOsZpMZeOGx
oNaO7eP+VcgQUVHydcyhK49dBp8LkD8PiAXqSmje0ozjbivvaMST8WtveE7Mp1+R
9sGPaLGjduT34Yb9kVjM2wxBu6ftKROI1drE6nwuelH8ejjhZcYAAuBwfX4kNd/D
UupReyuCZZGuKg==
-----END CERTIFICATE-----
Generated at Thu Apr 30 12:47:09 2026 by rpki-client