Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
File: XsF2nT_wQhJGmOMcRytju_G7ta0.mft (raw, json)
Hash identifier: yohhOFq9bwMVpPKXHWTkydJTgtcxgu7r23QuAFCtWBI=
Subject key identifier: B5:4C:E6:55:5C:09:5E:4E:02:64:79:CF:AE:28:46:19:46:12:C8:42
Authority key identifier: 5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
Certificate issuer: /CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Certificate serial: 019E9B4E3E1AF6137FDD01C57A2D76C72467
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
Manifest number: 073C
Signing time: Sat 06 Jun 2026 05:00:56 +0000
Manifest this update: Sat 06 Jun 2026 05:00:56 +0000
Manifest next update: Sun 07 Jun 2026 05:00:56 +0000
Files and hashes: 1: Gkzr8cmq5l-SJW535VAbg6PLMB0.roa (hash: Y4hmK6YPKNo9n40cQMscOcZSxtVZskzUJfJT11sn8vQ=)
2: OpYOp0A5IPKJ7jbcXskpSxQGlaQ.roa (hash: rADmm3meTWoAJpb+yfOPFFjI2xZfTZaGcVmBPuOR9B8=)
3: XsF2nT_wQhJGmOMcRytju_G7ta0.crl (hash: kyU1BWBx+gMagkbvYbNTb6iQcqv4rAYa9Fqsxlz4HlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9b:4e:3e:1a:f6:13:7f:dd:01:c5:7a:2d:76:c7:24:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Validity
Not Before: Jun 6 05:00:56 2026 GMT
Not After : Jun 7 05:00:56 2026 GMT
Subject: CN=b54ce6555c095e4e026479cfae2846194612c842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7b:2c:62:79:71:4e:ba:7d:a5:57:57:7c:3f:
34:95:48:72:c4:64:d7:78:ca:e9:95:12:52:75:01:
2d:7b:db:6c:04:ab:cc:a5:99:8a:7a:07:f7:9b:10:
c2:a3:94:07:fc:22:53:83:9e:46:a6:be:2e:b0:10:
6c:4e:2a:18:f8:70:a8:5e:5e:b4:e8:e4:26:be:b2:
96:b7:e7:11:7a:51:ac:5e:1a:a8:2f:dc:46:81:8e:
7a:d6:36:26:e3:b2:f3:69:27:80:88:df:a3:b7:9e:
38:bc:b3:5c:20:8e:9b:7a:2b:d8:86:18:75:54:af:
1d:7f:c9:58:df:9b:8f:eb:d1:5f:4c:95:25:ab:82:
a0:dc:4e:78:2a:7d:14:49:a5:09:3c:9f:4a:6d:d3:
06:e1:bd:1b:14:c5:d0:01:38:59:39:c8:08:e1:ad:
59:05:2f:fc:5c:55:13:4e:e0:13:31:d8:b5:b0:23:
c1:91:ec:15:5d:53:58:4e:c3:51:b2:8f:ce:0a:8f:
b7:f5:11:f6:c3:92:a9:0c:0c:74:30:7b:24:9c:a6:
51:5d:e2:c7:a0:ff:fe:a3:97:7e:7d:f2:13:3c:1c:
b4:3f:f1:95:ca:84:22:16:87:26:dd:0f:00:05:c3:
05:9d:97:a5:fd:bc:ae:67:31:fc:f6:a0:ef:28:84:
dc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:4C:E6:55:5C:09:5E:4E:02:64:79:CF:AE:28:46:19:46:12:C8:42
X509v3 Authority Key Identifier:
keyid:5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:c7:17:7c:08:f2:c2:bd:f7:ca:a7:b0:c7:db:57:fd:4d:1c:
de:8a:22:6f:ef:aa:74:61:3c:ea:c5:6b:d6:73:1d:2d:f5:84:
6b:43:3d:85:79:0e:38:20:d4:7a:4a:eb:43:22:e1:f9:56:ef:
b1:30:24:d1:7f:be:89:d1:0e:3c:d8:d9:8c:0f:7b:e6:6c:58:
c0:86:2a:04:f8:bb:fc:71:7a:33:0d:ab:94:23:3f:57:b8:c7:
07:cc:e1:2a:5c:4e:fe:2e:57:2a:70:53:b4:d0:83:d8:a0:62:
f9:0b:01:6d:74:54:ca:08:a0:f8:97:83:d0:49:d3:3e:d5:47:
a1:a4:a6:29:77:51:3d:fc:31:83:c9:9c:a0:23:6b:b1:ab:31:
33:8a:08:88:33:83:a7:2b:5d:e7:d2:07:e0:ce:08:43:b4:56:
fa:80:6e:d9:77:4f:93:37:b2:3c:a5:65:60:04:fe:87:92:a3:
3f:80:c2:2f:7a:5d:fc:0f:8f:c5:64:cd:da:cc:a0:f2:e2:1e:
b7:f3:03:8b:87:84:3b:26:4e:32:5e:3e:72:19:5a:61:8e:28:
3e:07:43:43:47:f1:6e:65:b7:f0:4f:04:9c:75:90:be:7c:4c:
3c:db:51:53:a0:f3:eb:e5:18:fe:e1:b5:04:75:9b:de:0c:3b:
be:22:ec:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6bTj4a9hN/3QHFei12xyRnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlYzE3NjlkM2ZmMDQyMTI0Njk4ZTMxYzQ3MmI2M2JiZjFi
YmI1YWQwHhcNMjYwNjA2MDUwMDU2WhcNMjYwNjA3MDUwMDU2WjAzMTEwLwYDVQQD
EyhiNTRjZTY1NTVjMDk1ZTRlMDI2NDc5Y2ZhZTI4NDYxOTQ2MTJjODQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXssYnlxTrp9pVdXfD80lUhyxGTX
eMrplRJSdQEte9tsBKvMpZmKegf3mxDCo5QH/CJTg55Gpr4usBBsTioY+HCoXl60
6OQmvrKWt+cRelGsXhqoL9xGgY561jYm47LzaSeAiN+jt544vLNcII6beivYhhh1
VK8df8lY35uP69FfTJUlq4Kg3E54Kn0USaUJPJ9KbdMG4b0bFMXQAThZOcgI4a1Z
BS/8XFUTTuATMdi1sCPBkewVXVNYTsNRso/OCo+39RH2w5KpDAx0MHsknKZRXeLH
oP/+o5d+ffITPBy0P/GVyoQiFocm3Q8ABcMFnZel/byuZzH89qDvKITcfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLVM5lVcCV5OAmR5z64oRhlGEshCMB8GA1UdIwQY
MBaAFF7Bdp0/8EISRpjjHEcrY7vxu7WtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHNGMm5UX3dRaEpHbU9NY1J5dGp1X0c3dGEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8yOWZiMDQtZTA3Yi00ZTMwLWI4ZjUt
NTQyMDRkZGQyY2E2LzEvWHNGMm5UX3dRaEpHbU9NY1J5dGp1X0c3dGEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8yOWZiMDQtZTA3Yi00ZTMwLWI4ZjUtNTQyMDRkZGQyY2E2
LzEvWHNGMm5UX3dRaEpHbU9NY1J5dGp1X0c3dGEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL8cXfAjy
wr33yqewx9tX/U0c3ooib++qdGE86sVr1nMdLfWEa0M9hXkOOCDUekrrQyLh+Vbv
sTAk0X++idEOPNjZjA975mxYwIYqBPi7/HF6Mw2rlCM/V7jHB8zhKlxO/i5XKnBT
tNCD2KBi+QsBbXRUygig+JeD0EnTPtVHoaSmKXdRPfwxg8mcoCNrsasxM4oIiDOD
pytd59IH4M4IQ7RW+oBu2XdPkzeyPKVlYAT+h5KjP4DCL3pd/A+PxWTN2syg8uIe
t/MDi4eEOyZOMl4+chlaYY4oPgdDQ0fxbmW38E8EnHWQvnxMPNtRU6Dz6+UY/uG1
BHWb3gw7viLszw==
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:17:12 2026 by rpki-client