Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.mft
File: xM-i_E8u6evIO-eTZrCulNHyv8c.mft (raw, json)
Hash identifier: 2v0I6e/3Xn2t8Pi9/G1FUXXc5xe2QRZn1As+xgDLA+0=
Subject key identifier: 81:21:DE:7E:2F:D9:88:26:17:ED:DE:AF:66:30:C5:85:B7:E1:70:49
Authority key identifier: C4:CF:A2:FC:4F:2E:E9:EB:C8:3B:E7:93:66:B0:AE:94:D1:F2:BF:C7
Certificate issuer: /CN=c4cfa2fc4f2ee9ebc83be79366b0ae94d1f2bfc7
Certificate serial: 019FA072022E18BA46819D8824D09994C8ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM-i_E8u6evIO-eTZrCulNHyv8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.mft
Manifest number: 0A2D
Signing time: Sun 26 Jul 2026 22:00:53 +0000
Manifest this update: Sun 26 Jul 2026 22:00:53 +0000
Manifest next update: Mon 27 Jul 2026 22:00:53 +0000
Files and hashes: 1: F30FN8U3Xj87k2Z9DAG1GB_A31Q.roa (hash: pnPZQBEXHi+ImRZ6WCYxFeNcDY9y0/l3lR4zkQuuaVQ=)
2: xM-i_E8u6evIO-eTZrCulNHyv8c.crl (hash: qAzAuw3wZyf3P1pAg5TRXZTybx7+ebPqBd/POWpSUsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM-i_E8u6evIO-eTZrCulNHyv8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:72:02:2e:18:ba:46:81:9d:88:24:d0:99:94:c8:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4cfa2fc4f2ee9ebc83be79366b0ae94d1f2bfc7
Validity
Not Before: Jul 26 22:00:53 2026 GMT
Not After : Jul 27 22:00:53 2026 GMT
Subject: CN=8121de7e2fd9882617eddeaf6630c585b7e17049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d1:9d:78:c3:c3:e2:37:4c:9e:ea:9e:67:4e:
db:38:a3:fa:09:d6:4f:d3:a4:79:3e:c2:d8:c9:ab:
7f:6b:be:fe:a6:69:3d:8c:2b:91:cc:aa:76:26:c5:
f7:cf:cd:4f:d9:bd:77:be:72:d9:cd:64:4a:80:4b:
ca:93:85:bb:ee:b9:cc:a3:a6:bf:d2:2c:55:ae:2b:
32:fb:b5:7f:96:a2:7e:66:08:1c:44:fa:2c:fe:98:
47:ef:56:23:49:79:5c:03:19:de:c9:2f:ba:80:f1:
ae:5f:fd:e7:74:5a:54:8a:d9:1b:e8:e8:11:c0:0f:
2b:f7:ae:8a:6f:89:8a:73:86:be:a4:17:15:f0:bb:
9b:e9:e5:aa:f8:a7:f6:99:04:10:ff:fa:0a:89:59:
77:7e:9f:db:f9:4f:1f:f7:d7:e3:87:51:7d:db:b7:
66:54:02:b0:57:a5:55:93:8a:ca:c2:07:5a:8a:0d:
c8:8b:2c:0a:30:e7:f8:31:7e:7a:55:00:5a:17:68:
85:72:77:2e:57:e7:8a:30:a1:dd:7d:7d:fd:ba:b7:
96:9a:18:bc:bc:d3:03:9f:bf:11:d3:b3:9f:28:f2:
76:72:b2:51:82:61:4f:f1:66:16:01:b7:17:fb:24:
bd:ef:67:18:e2:bb:6e:9d:1b:f0:76:b2:ed:16:98:
09:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:21:DE:7E:2F:D9:88:26:17:ED:DE:AF:66:30:C5:85:B7:E1:70:49
X509v3 Authority Key Identifier:
keyid:C4:CF:A2:FC:4F:2E:E9:EB:C8:3B:E7:93:66:B0:AE:94:D1:F2:BF:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM-i_E8u6evIO-eTZrCulNHyv8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:4c:52:2b:2a:0f:8c:ad:ea:ec:b4:93:74:fc:b0:57:ec:38:
20:0f:8b:da:6b:4c:eb:63:cf:56:d7:e8:ef:2f:6f:0d:e8:34:
3b:a2:fb:7d:6f:2e:b0:91:76:66:81:e1:2e:ef:37:78:48:98:
84:08:c9:d2:2a:ce:49:2b:aa:f8:ba:1b:10:40:e4:06:97:c3:
05:9f:8b:5d:af:8d:2b:bd:13:f0:aa:ad:22:22:65:14:9a:e3:
73:c6:13:ff:70:5e:e8:11:6a:58:1b:3c:03:1b:dc:da:90:f5:
ea:4a:af:e3:81:61:b4:26:29:75:50:24:dc:be:d9:4a:e4:bf:
db:4b:36:c2:6d:7d:fc:05:32:fa:9b:6f:15:68:69:fd:e1:3c:
60:ec:08:68:17:f0:71:46:1d:a8:0c:07:1b:93:f1:b0:2f:76:
01:9e:90:e2:2e:af:bc:1d:56:08:33:39:eb:cd:5a:f4:8b:35:
18:e7:ba:27:72:36:f3:95:7b:55:38:fc:bb:dc:80:83:fb:4a:
96:ab:11:6e:83:cf:68:f7:59:2a:a6:3e:cb:88:4b:06:e2:54:
69:5a:b9:50:25:ad:9d:bd:d5:25:92:27:e7:b4:65:75:b4:dc:
5c:24:1f:9a:28:9f:f4:cf:89:96:cc:81:05:9c:bd:0d:6b:bf:
59:c2:61:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+gcgIuGLpGgZ2IJNCZlMjtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0Y2ZhMmZjNGYyZWU5ZWJjODNiZTc5MzY2YjBhZTk0ZDFm
MmJmYzcwHhcNMjYwNzI2MjIwMDUzWhcNMjYwNzI3MjIwMDUzWjAzMTEwLwYDVQQD
Eyg4MTIxZGU3ZTJmZDk4ODI2MTdlZGRlYWY2NjMwYzU4NWI3ZTE3MDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdGdeMPD4jdMnuqeZ07bOKP6CdZP
06R5PsLYyat/a77+pmk9jCuRzKp2JsX3z81P2b13vnLZzWRKgEvKk4W77rnMo6a/
0ixVrisy+7V/lqJ+ZggcRPos/phH71YjSXlcAxneyS+6gPGuX/3ndFpUitkb6OgR
wA8r966Kb4mKc4a+pBcV8Lub6eWq+Kf2mQQQ//oKiVl3fp/b+U8f99fjh1F927dm
VAKwV6VVk4rKwgdaig3IiywKMOf4MX56VQBaF2iFcncuV+eKMKHdfX39ureWmhi8
vNMDn78R07OfKPJ2crJRgmFP8WYWAbcX+yS972cY4rtunRvwdrLtFpgJiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIEh3n4v2YgmF+3er2YwxYW34XBJMB8GA1UdIwQY
MBaAFMTPovxPLunryDvnk2awrpTR8r/HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE0taV9FOHU2ZXZJTy1lVFpyQ3VsTkh5djhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS80Mzk2YzItOGVkMS00MzJlLTk5ZmIt
N2M1NzNiNmUwMGVhLzEveE0taV9FOHU2ZXZJTy1lVFpyQ3VsTkh5djhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS80Mzk2YzItOGVkMS00MzJlLTk5ZmItN2M1NzNiNmUwMGVh
LzEveE0taV9FOHU2ZXZJTy1lVFpyQ3VsTkh5djhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgExSKyoP
jK3q7LSTdPywV+w4IA+L2mtM62PPVtfo7y9vDeg0O6L7fW8usJF2ZoHhLu83eEiY
hAjJ0irOSSuq+LobEEDkBpfDBZ+LXa+NK70T8KqtIiJlFJrjc8YT/3Be6BFqWBs8
Axvc2pD16kqv44FhtCYpdVAk3L7ZSuS/20s2wm19/AUy+ptvFWhp/eE8YOwIaBfw
cUYdqAwHG5PxsC92AZ6Q4i6vvB1WCDM5681a9Is1GOe6J3I285V7VTj8u9yAg/tK
lqsRboPPaPdZKqY+y4hLBuJUaVq5UCWtnb3VJZIn57RldbTcXCQfmiif9M+JlsyB
BZy9DWu/WcJhSQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 04:48:23 2026 by rpki-client