Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
File: Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft (raw, json)
Hash identifier: 2Px/Zo8SyD2b1pPk4m4LGx6us41UoMz9R6E6nXXy2FQ=
Subject key identifier: 22:B7:84:25:27:9F:1F:26:1B:9B:38:4F:CF:54:60:4C:D5:06:76:4A
Authority key identifier: 5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6
Certificate issuer: /CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6
Certificate serial: 019F03CDC05E7CD096DB286240643FDF3D1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
Manifest number: 0E6F
Signing time: Fri 26 Jun 2026 12:00:43 +0000
Manifest this update: Fri 26 Jun 2026 12:00:43 +0000
Manifest next update: Sat 27 Jun 2026 12:00:43 +0000
Files and hashes: 1: RrwlRSSdwln9HbzArcN9f7ThR9c.roa (hash: Ic3y0/hXv+5FL5zNAqt7WX+ncQH0cGC5wuQsjbsXF7I=)
2: Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl (hash: XU0gKOkLBebdqicbk/vQq03MtnbQrN9yWq5iBj4SS3E=)
3: fWpL_ta7aXoIKT8lwYmDL0nQegU.roa (hash: r+7J0jRgrAdlkGpSk5T7jtJhr78GxAY9zYWBhS85+uQ=)
4: l5tw0iDO7abT_AibKjZJaQ4nwWc.roa (hash: r+71S+WnEwowT4NhvO1eI4eYiERh6tzaeOlSbc80Img=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Jun 2026 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:03:cd:c0:5e:7c:d0:96:db:28:62:40:64:3f:df:3d:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6
Validity
Not Before: Jun 26 12:00:43 2026 GMT
Not After : Jun 27 12:00:43 2026 GMT
Subject: CN=22b78425279f1f261b9b384fcf54604cd506764a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:69:fb:3b:16:24:18:03:c8:6e:51:34:e4:b6:
24:70:2e:9a:74:4f:7a:db:43:95:37:14:f4:d8:e2:
0f:de:8f:23:1b:15:be:11:16:8e:bb:e1:1f:c7:27:
13:63:af:a2:04:c5:82:89:f6:3b:c7:6f:18:0e:d9:
61:07:f8:46:a2:43:6f:d3:e5:81:25:25:eb:2a:47:
0f:31:2a:4d:15:7e:0c:0d:3e:1b:9c:14:a2:92:15:
22:59:9b:74:9c:14:da:5f:15:87:a5:37:93:b4:d8:
02:9a:70:d5:1e:b2:6a:2f:de:1f:0e:81:28:d1:de:
50:7e:db:31:dd:30:2b:65:75:c9:ed:eb:5d:0c:b0:
90:89:09:e6:b6:bb:44:8a:07:68:25:bc:eb:a4:6a:
61:25:90:81:4b:e1:95:5a:78:4e:4a:6d:61:1a:e0:
92:c1:3c:51:2e:0d:bc:ef:2d:fe:06:31:5c:15:89:
90:7f:cf:d7:b5:fd:e7:2b:17:34:12:2a:3f:cd:37:
17:2e:a9:9d:b8:40:7a:3b:cf:e9:c1:d6:47:9a:7c:
93:f9:ea:a3:e5:b9:36:37:a7:bb:96:1d:61:92:8f:
97:7e:0b:25:e7:aa:de:63:fe:30:29:8e:af:4c:00:
18:04:78:0e:26:4f:34:ce:2a:df:df:3a:3d:9a:f6:
99:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B7:84:25:27:9F:1F:26:1B:9B:38:4F:CF:54:60:4C:D5:06:76:4A
X509v3 Authority Key Identifier:
keyid:5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:9a:6e:2e:8e:e9:1e:b0:22:a1:3d:8d:1a:ce:f0:01:dd:6c:
e5:f6:52:8e:91:ac:e5:7b:d5:a4:d6:a8:16:19:68:70:1b:44:
65:9d:6f:dc:02:4c:c6:a2:f6:45:f4:e9:3d:0b:40:fa:9a:94:
12:81:38:05:63:01:ff:5a:ec:8f:b0:b7:d0:24:34:af:9f:d6:
0e:19:6f:37:d0:e7:c2:ff:e8:c2:58:2f:35:c6:30:f1:cf:7c:
79:f6:cd:cd:05:7e:6d:fd:bd:06:12:68:24:ac:17:37:af:46:
a1:65:c9:96:df:87:12:53:98:b2:07:1b:4c:93:b5:1f:a6:5a:
d6:b3:c1:44:57:52:99:44:6f:6e:aa:3d:67:c0:d2:1d:be:e5:
22:61:c3:6a:2a:f3:9a:14:2a:58:6a:96:3e:d0:c2:d3:82:a6:
79:a7:4f:dd:60:62:33:c4:2b:bb:cc:06:0e:6f:88:fa:14:23:
6b:a8:ee:6f:2c:85:05:33:92:d1:d8:4d:47:46:da:40:8b:46:
3c:04:34:e8:c7:00:5b:07:ed:d4:af:ef:bd:5d:8c:8a:74:de:
86:14:af:c6:34:78:d7:81:8f:bd:9f:3a:34:f7:ff:3f:4d:17:
b1:03:3b:c2:70:42:1d:1b:65:84:48:4f:de:8f:8f:65:cb:3b:
b4:6a:1b:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8DzcBefNCW2yhiQGQ/3z0cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMWYyMTNiOGM3OTJiN2UwMTNmYTUwNDFmNWI4OTk3MWU2
ZjYyZDYwHhcNMjYwNjI2MTIwMDQzWhcNMjYwNjI3MTIwMDQzWjAzMTEwLwYDVQQD
EygyMmI3ODQyNTI3OWYxZjI2MWI5YjM4NGZjZjU0NjA0Y2Q1MDY3NjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGn7OxYkGAPIblE05LYkcC6adE96
20OVNxT02OIP3o8jGxW+ERaOu+EfxycTY6+iBMWCifY7x28YDtlhB/hGokNv0+WB
JSXrKkcPMSpNFX4MDT4bnBSikhUiWZt0nBTaXxWHpTeTtNgCmnDVHrJqL94fDoEo
0d5Qftsx3TArZXXJ7etdDLCQiQnmtrtEigdoJbzrpGphJZCBS+GVWnhOSm1hGuCS
wTxRLg287y3+BjFcFYmQf8/Xtf3nKxc0Eio/zTcXLqmduEB6O8/pwdZHmnyT+eqj
5bk2N6e7lh1hko+Xfgsl56reY/4wKY6vTAAYBHgOJk80zirf3zo9mvaZgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCK3hCUnnx8mG5s4T89UYEzVBnZKMB8GA1UdIwQY
MBaAFF8fITuMeSt+AT+lBB9biZceb2LWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHg4aE80eDVLMzRCUDZVRUgxdUpseDV2WXRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zMmY4ZDMtNzMyOC00NWYwLWEwMDct
NDAyMjM4NjM4ZWEzLzEvWHg4aE80eDVLMzRCUDZVRUgxdUpseDV2WXRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zMmY4ZDMtNzMyOC00NWYwLWEwMDctNDAyMjM4NjM4ZWEz
LzEvWHg4aE80eDVLMzRCUDZVRUgxdUpseDV2WXRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT5puLo7p
HrAioT2NGs7wAd1s5fZSjpGs5XvVpNaoFhlocBtEZZ1v3AJMxqL2RfTpPQtA+pqU
EoE4BWMB/1rsj7C30CQ0r5/WDhlvN9Dnwv/owlgvNcYw8c98efbNzQV+bf29BhJo
JKwXN69GoWXJlt+HElOYsgcbTJO1H6Za1rPBRFdSmURvbqo9Z8DSHb7lImHDairz
mhQqWGqWPtDC04KmeadP3WBiM8Qru8wGDm+I+hQja6jubyyFBTOS0dhNR0baQItG
PAQ06McAWwft1K/vvV2MinTehhSvxjR414GPvZ86NPf/P00XsQM7wnBCHRtlhEhP
3o+PZcs7tGobgw==
-----END CERTIFICATE-----
Generated at Fri Jun 26 22:21:32 2026 by rpki-client