Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.mft
File: xM-i_E8u6evIO-eTZrCulNHyv8c.mft (raw, json)
Hash identifier: IslM1z6deejILOLKn2n7JOFk3jABqWsfZG/hISeoZIc=
Subject key identifier: 26:B4:13:B7:71:4B:55:FB:2B:43:7D:D7:15:9F:22:8C:78:F3:5D:94
Authority key identifier: C4:CF:A2:FC:4F:2E:E9:EB:C8:3B:E7:93:66:B0:AE:94:D1:F2:BF:C7
Certificate issuer: /CN=c4cfa2fc4f2ee9ebc83be79366b0ae94d1f2bfc7
Certificate serial: 019EB6C5FB890A53390DDC30C9A46479BB61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM-i_E8u6evIO-eTZrCulNHyv8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.mft
Manifest number: 09B4
Signing time: Thu 11 Jun 2026 13:01:28 +0000
Manifest this update: Thu 11 Jun 2026 13:01:28 +0000
Manifest next update: Fri 12 Jun 2026 13:01:28 +0000
Files and hashes: 1: F30FN8U3Xj87k2Z9DAG1GB_A31Q.roa (hash: pnPZQBEXHi+ImRZ6WCYxFeNcDY9y0/l3lR4zkQuuaVQ=)
2: xM-i_E8u6evIO-eTZrCulNHyv8c.crl (hash: kVFHiUYQRS8q8vlCPkQ3sxeRbpVijfkvyhw+Ret3ET0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM-i_E8u6evIO-eTZrCulNHyv8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:c5:fb:89:0a:53:39:0d:dc:30:c9:a4:64:79:bb:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4cfa2fc4f2ee9ebc83be79366b0ae94d1f2bfc7
Validity
Not Before: Jun 11 13:01:28 2026 GMT
Not After : Jun 12 13:01:28 2026 GMT
Subject: CN=26b413b7714b55fb2b437dd7159f228c78f35d94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:84:4b:b9:d2:3d:69:b7:18:2b:ae:0d:91:c2:
b2:5e:c1:d3:54:0e:54:36:6f:26:db:03:d1:7a:db:
9d:ce:ce:24:99:5f:f8:95:4a:7e:09:91:41:f2:31:
49:e2:c4:c8:6e:9f:31:a8:6d:85:45:47:bf:c2:f2:
eb:ec:77:45:56:b0:27:77:1a:40:46:39:9f:7d:60:
1e:78:9d:80:44:9a:08:ce:ea:35:93:b5:43:52:9a:
54:03:93:d3:e4:55:53:6c:0b:7a:bc:79:44:57:6f:
0e:6e:72:df:a6:dd:c8:cc:b0:06:2e:41:75:33:55:
c3:9e:52:47:d9:36:51:4b:29:5e:bb:73:b5:47:cb:
16:8c:c9:02:75:b0:c1:97:a8:5b:14:9e:3b:00:6d:
9a:27:8b:0f:f5:b1:59:12:ca:34:29:49:12:76:a5:
e2:1f:32:fd:9e:f0:9d:34:92:90:88:67:a8:51:d2:
31:75:15:14:54:40:13:64:3c:da:0a:c0:2f:66:d0:
8a:08:59:18:64:3e:04:45:42:a6:9e:f4:6f:f4:17:
f8:d3:69:da:0f:68:13:a2:f6:25:ec:38:59:1d:5f:
f8:2d:ec:32:49:f5:9f:9d:f6:a4:21:36:04:d2:36:
9f:1a:a1:b3:5c:e5:dc:29:7d:bb:38:b7:ff:b9:f3:
f5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B4:13:B7:71:4B:55:FB:2B:43:7D:D7:15:9F:22:8C:78:F3:5D:94
X509v3 Authority Key Identifier:
keyid:C4:CF:A2:FC:4F:2E:E9:EB:C8:3B:E7:93:66:B0:AE:94:D1:F2:BF:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM-i_E8u6evIO-eTZrCulNHyv8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:65:63:4d:a1:4d:5a:ff:4d:14:68:2d:93:ae:d0:90:55:f3:
99:7a:eb:39:fc:48:a0:a8:f4:14:b6:e4:47:e5:04:db:6b:4d:
9b:ff:cb:6b:6d:6d:9b:a6:20:03:97:db:1f:1d:1d:5b:35:38:
56:53:fc:16:1d:ff:10:28:be:e4:09:99:dc:0e:73:c3:3d:e7:
64:94:f7:0d:d0:48:97:05:e0:f8:6e:91:46:91:fd:4f:46:c8:
13:5a:29:da:4e:9e:4f:56:ab:79:ba:26:1b:63:7a:f0:9d:39:
77:71:b0:91:6a:e3:16:7b:2d:48:0f:6b:1f:50:53:c3:c6:49:
a5:36:e1:7b:45:1b:5e:c9:7e:86:07:ca:94:ff:38:5b:70:e1:
eb:08:91:51:f9:7a:f0:4c:fe:4c:1b:7d:c0:5c:87:cd:3c:25:
53:de:fd:bd:dc:ec:02:21:79:58:c0:3b:1a:24:9b:1a:bd:dd:
32:c0:a1:9d:ee:cc:fd:77:3f:7c:70:0d:43:15:7d:ab:bc:9a:
16:b1:64:54:61:9e:b8:74:69:bd:04:a1:6f:a0:d2:65:e3:90:
a0:f4:72:99:9a:db:3d:97:4d:d6:06:f2:07:64:73:32:9f:dc:
50:3a:76:48:fe:4e:b6:b4:b7:b9:d3:b7:9d:e2:25:ea:30:cc:
aa:fc:9e:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ62xfuJClM5DdwwyaRkebthMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0Y2ZhMmZjNGYyZWU5ZWJjODNiZTc5MzY2YjBhZTk0ZDFm
MmJmYzcwHhcNMjYwNjExMTMwMTI4WhcNMjYwNjEyMTMwMTI4WjAzMTEwLwYDVQQD
EygyNmI0MTNiNzcxNGI1NWZiMmI0MzdkZDcxNTlmMjI4Yzc4ZjM1ZDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIRLudI9abcYK64NkcKyXsHTVA5U
Nm8m2wPRetudzs4kmV/4lUp+CZFB8jFJ4sTIbp8xqG2FRUe/wvLr7HdFVrAndxpA
RjmffWAeeJ2ARJoIzuo1k7VDUppUA5PT5FVTbAt6vHlEV28ObnLfpt3IzLAGLkF1
M1XDnlJH2TZRSyleu3O1R8sWjMkCdbDBl6hbFJ47AG2aJ4sP9bFZEso0KUkSdqXi
HzL9nvCdNJKQiGeoUdIxdRUUVEATZDzaCsAvZtCKCFkYZD4ERUKmnvRv9Bf402na
D2gTovYl7DhZHV/4LewySfWfnfakITYE0jafGqGzXOXcKX27OLf/ufP1PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCa0E7dxS1X7K0N91xWfIox4812UMB8GA1UdIwQY
MBaAFMTPovxPLunryDvnk2awrpTR8r/HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE0taV9FOHU2ZXZJTy1lVFpyQ3VsTkh5djhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS80Mzk2YzItOGVkMS00MzJlLTk5ZmIt
N2M1NzNiNmUwMGVhLzEveE0taV9FOHU2ZXZJTy1lVFpyQ3VsTkh5djhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS80Mzk2YzItOGVkMS00MzJlLTk5ZmItN2M1NzNiNmUwMGVh
LzEveE0taV9FOHU2ZXZJTy1lVFpyQ3VsTkh5djhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx2VjTaFN
Wv9NFGgtk67QkFXzmXrrOfxIoKj0FLbkR+UE22tNm//La21tm6YgA5fbHx0dWzU4
VlP8Fh3/ECi+5AmZ3A5zwz3nZJT3DdBIlwXg+G6RRpH9T0bIE1op2k6eT1arebom
G2N68J05d3GwkWrjFnstSA9rH1BTw8ZJpTbhe0UbXsl+hgfKlP84W3Dh6wiRUfl6
8Ez+TBt9wFyHzTwlU979vdzsAiF5WMA7GiSbGr3dMsChne7M/Xc/fHANQxV9q7ya
FrFkVGGeuHRpvQShb6DSZeOQoPRymZrbPZdN1gbyB2RzMp/cUDp2SP5OtrS3udO3
neIl6jDMqvyeLg==
-----END CERTIFICATE-----
Generated at Thu Jun 11 23:25:55 2026 by rpki-client