Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft
File: xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft (raw, json)
Hash identifier: CFayZlYiR+NWCuplqrX8/t4sm3Y9erHIYN27lbH5/T8=
Subject key identifier: 5F:47:5D:C2:F8:F3:05:A1:F2:06:6E:64:77:3B:E9:7F:9E:10:1E:07
Authority key identifier: C6:9C:EB:12:40:84:4C:DE:8A:16:88:97:E4:7C:1D:F5:D6:EC:BF:21
Certificate issuer: /CN=c69ceb1240844cde8a168897e47c1df5d6ecbf21
Certificate serial: 019FA2293DAE6677E7CECCFB2072B21EBD92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpzrEkCETN6KFoiX5Hwd9dbsvyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft
Manifest number: 19CE
Signing time: Mon 27 Jul 2026 06:00:39 +0000
Manifest this update: Mon 27 Jul 2026 06:00:39 +0000
Manifest next update: Tue 28 Jul 2026 06:00:39 +0000
Files and hashes: 1: BQk9R-N3GOOYrja30Pn_XVDUf88.roa (hash: Yweym3mWkXHkGOyAmG6nDG9vHGdFCmlWDKJNXExlolQ=)
2: Z16EOuIvCScFGsV_p1V2RWzx1ZA.roa (hash: rAhtAVQwXrS7vputjJ+v+BvlJ+PvCNgskZKO8Cfnpys=)
3: xpzrEkCETN6KFoiX5Hwd9dbsvyE.crl (hash: X1cY4BRH6M0btZtOsqwnqDr923vQ/IZI+nLFReJcOuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpzrEkCETN6KFoiX5Hwd9dbsvyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:29:3d:ae:66:77:e7:ce:cc:fb:20:72:b2:1e:bd:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c69ceb1240844cde8a168897e47c1df5d6ecbf21
Validity
Not Before: Jul 27 06:00:39 2026 GMT
Not After : Jul 28 06:00:39 2026 GMT
Subject: CN=5f475dc2f8f305a1f2066e64773be97f9e101e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a1:d7:0a:78:b8:9d:6d:ee:c4:40:b6:60:ad:
52:43:4c:1b:74:0e:35:73:02:f0:f0:4d:84:1c:21:
89:e1:57:7f:d9:4e:3f:dd:e6:8e:b2:35:df:b3:b8:
26:29:00:c2:d0:ff:e9:f9:71:8d:ba:e2:30:6d:89:
df:1a:be:6a:14:e1:cd:ee:e2:ac:55:c7:c4:4d:31:
d2:80:52:a2:d2:b6:b6:9b:48:32:08:8b:4c:e0:0d:
0d:ca:69:03:3b:0e:5a:e1:39:16:70:e8:99:13:66:
96:af:83:e3:c5:1b:a0:c4:62:2e:d5:6c:fe:cf:27:
af:62:a2:4c:da:0a:d0:9d:5c:f4:f4:c6:dc:9f:4e:
b6:2e:b4:09:1c:64:e1:5b:ef:17:6c:01:e0:70:97:
92:4a:37:8c:6e:cb:d5:57:eb:9a:f6:84:48:33:e0:
ff:e8:d5:17:b7:c5:6f:36:9c:e6:73:13:29:37:44:
a3:b8:09:b5:69:fd:f0:19:3d:32:31:a2:03:b0:71:
f8:0e:51:a4:29:d4:77:00:24:12:9f:9f:b9:e2:6f:
8c:7b:cb:17:b1:d4:d9:df:3b:ec:bc:2c:ca:16:cf:
70:68:32:bb:68:80:ac:9c:a6:44:33:fe:f9:61:3b:
b8:5b:91:dc:c8:d9:8e:6d:87:24:66:a6:eb:24:a3:
f1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:47:5D:C2:F8:F3:05:A1:F2:06:6E:64:77:3B:E9:7F:9E:10:1E:07
X509v3 Authority Key Identifier:
keyid:C6:9C:EB:12:40:84:4C:DE:8A:16:88:97:E4:7C:1D:F5:D6:EC:BF:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpzrEkCETN6KFoiX5Hwd9dbsvyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:a5:f7:c8:20:bc:ff:78:e4:eb:1b:65:de:7c:c4:95:1c:ce:
4b:cf:f3:a6:da:c3:88:c3:aa:70:24:b5:52:e5:50:2a:a4:da:
30:3b:68:bd:4c:41:9f:ae:23:fd:45:25:f4:00:7a:ab:39:af:
4c:2f:cd:c4:86:44:72:2d:15:27:33:4f:07:fe:09:a8:b1:35:
3f:5c:08:f0:56:95:a2:bf:31:f2:9d:79:fa:f8:28:5a:bc:64:
e9:b3:d2:70:48:a3:ba:77:38:7c:bf:bf:6e:38:20:f1:ed:8c:
2d:53:1b:c2:2e:21:de:1a:2d:c6:29:05:60:dd:15:0d:f6:00:
ef:de:a9:3f:2e:76:a5:fd:86:79:41:fb:b0:10:de:ae:87:b5:
07:5d:47:6c:65:15:1e:91:d7:78:22:30:04:59:b1:74:b9:a8:
82:d1:f1:42:0c:9a:f9:8f:fa:9e:9c:dc:7b:58:1e:53:7c:68:
b0:95:70:ae:02:72:00:3b:98:19:d7:a8:5a:93:05:11:1a:fe:
0d:e2:ef:f1:49:2d:21:26:9c:cb:c6:cc:56:49:05:69:55:cc:
b0:38:14:3d:2d:8f:cc:69:8c:15:fa:c7:29:ab:5a:61:16:05:
7e:20:99:e3:11:bf:65:0e:f2:20:ba:44:a1:ca:5d:ba:0b:a9:
ca:fc:ba:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+iKT2uZnfnzsz7IHKyHr2SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2OWNlYjEyNDA4NDRjZGU4YTE2ODg5N2U0N2MxZGY1ZDZl
Y2JmMjEwHhcNMjYwNzI3MDYwMDM5WhcNMjYwNzI4MDYwMDM5WjAzMTEwLwYDVQQD
Eyg1ZjQ3NWRjMmY4ZjMwNWExZjIwNjZlNjQ3NzNiZTk3ZjllMTAxZTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKHXCni4nW3uxEC2YK1SQ0wbdA41
cwLw8E2EHCGJ4Vd/2U4/3eaOsjXfs7gmKQDC0P/p+XGNuuIwbYnfGr5qFOHN7uKs
VcfETTHSgFKi0ra2m0gyCItM4A0NymkDOw5a4TkWcOiZE2aWr4PjxRugxGIu1Wz+
zyevYqJM2grQnVz09Mbcn062LrQJHGThW+8XbAHgcJeSSjeMbsvVV+ua9oRIM+D/
6NUXt8VvNpzmcxMpN0SjuAm1af3wGT0yMaIDsHH4DlGkKdR3ACQSn5+54m+Me8sX
sdTZ3zvsvCzKFs9waDK7aICsnKZEM/75YTu4W5HcyNmObYckZqbrJKPxUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF9HXcL48wWh8gZuZHc76X+eEB4HMB8GA1UdIwQY
MBaAFMac6xJAhEzeihaIl+R8HfXW7L8hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHB6ckVrQ0VUTjZLRm9pWDVId2Q5ZGJzdnlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8wZmJkOGQtODIwZC00OTc5LTgxYTMt
OGJlOTU3MWViMTBkLzEveHB6ckVrQ0VUTjZLRm9pWDVId2Q5ZGJzdnlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy8wZmJkOGQtODIwZC00OTc5LTgxYTMtOGJlOTU3MWViMTBk
LzEveHB6ckVrQ0VUTjZLRm9pWDVId2Q5ZGJzdnlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb6X3yCC8
/3jk6xtl3nzElRzOS8/zptrDiMOqcCS1UuVQKqTaMDtovUxBn64j/UUl9AB6qzmv
TC/NxIZEci0VJzNPB/4JqLE1P1wI8FaVor8x8p15+vgoWrxk6bPScEijunc4fL+/
bjgg8e2MLVMbwi4h3hotxikFYN0VDfYA796pPy52pf2GeUH7sBDeroe1B11HbGUV
HpHXeCIwBFmxdLmogtHxQgya+Y/6npzce1geU3xosJVwrgJyADuYGdeoWpMFERr+
DeLv8UktISacy8bMVkkFaVXMsDgUPS2PzGmMFfrHKataYRYFfiCZ4xG/ZQ7yILpE
ocpdugupyvy6Ug==
-----END CERTIFICATE-----
Generated at Mon Jul 27 14:22:21 2026 by rpki-client