Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/83e5ea-9fe4-4814-83c6-1bb430606535/1/xRvfUzN6yxiydpUsNX6RmAvMWww.mft
File: xRvfUzN6yxiydpUsNX6RmAvMWww.mft (raw, json)
Hash identifier: c2Sqy+iMaaGdvSqeSDiyGk/lgxHMajvIrnuejSwgoEE=
Subject key identifier: 8A:9B:79:76:12:B4:D6:34:B5:6A:C1:4C:C1:28:68:40:7E:CA:3A:8C
Authority key identifier: C5:1B:DF:53:33:7A:CB:18:B2:76:95:2C:35:7E:91:98:0B:CC:5B:0C
Certificate issuer: /CN=c51bdf53337acb18b276952c357e91980bcc5b0c
Certificate serial: 019FA26069A4D84E7FD77B2650C5F6821F27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRvfUzN6yxiydpUsNX6RmAvMWww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/83e5ea-9fe4-4814-83c6-1bb430606535/1/xRvfUzN6yxiydpUsNX6RmAvMWww.mft
Manifest number: 0DDE
Signing time: Mon 27 Jul 2026 07:00:55 +0000
Manifest this update: Mon 27 Jul 2026 07:00:55 +0000
Manifest next update: Tue 28 Jul 2026 07:00:55 +0000
Files and hashes: 1: xRvfUzN6yxiydpUsNX6RmAvMWww.crl (hash: uqSQ35knvwclB9uoz2uRYGPFdutQ18afFpm6nyvomOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/83e5ea-9fe4-4814-83c6-1bb430606535/1/xRvfUzN6yxiydpUsNX6RmAvMWww.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/83e5ea-9fe4-4814-83c6-1bb430606535/1/xRvfUzN6yxiydpUsNX6RmAvMWww.mft
rsync://rpki.ripe.net/repository/DEFAULT/xRvfUzN6yxiydpUsNX6RmAvMWww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:60:69:a4:d8:4e:7f:d7:7b:26:50:c5:f6:82:1f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c51bdf53337acb18b276952c357e91980bcc5b0c
Validity
Not Before: Jul 27 07:00:55 2026 GMT
Not After : Jul 28 07:00:55 2026 GMT
Subject: CN=8a9b797612b4d634b56ac14cc12868407eca3a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:da:31:2b:a6:94:26:0a:9a:17:1b:16:5a:3d:
e6:be:7c:05:9a:cc:1f:8b:7a:be:88:d1:df:73:4d:
fe:9e:e6:eb:fe:db:de:ca:b0:3f:d7:ba:c5:74:14:
30:85:da:1c:60:79:dc:ac:12:29:59:f4:24:d5:52:
1e:1d:af:4b:dc:ca:5f:26:ca:d3:46:60:55:ff:59:
7c:71:2f:51:0c:67:aa:a3:0a:13:a4:e7:d9:1e:02:
55:24:18:e9:84:c0:c8:6e:b2:29:63:3f:fd:2c:5a:
e9:1b:22:48:a8:5e:cd:1d:bc:82:ab:d6:97:bd:b3:
a4:44:bb:f4:04:32:79:5d:9f:d5:17:4e:71:cf:66:
b1:92:55:a1:44:c9:b7:12:2a:20:d7:8d:33:6c:60:
8d:f9:e6:34:7d:03:ba:ef:43:df:49:73:3f:ec:20:
72:27:cc:f3:02:bc:a3:28:16:ff:82:e1:8e:7c:49:
e0:d2:d9:4c:91:de:76:64:b0:24:df:18:c7:b3:3c:
f0:e3:b3:0c:13:ea:8c:ab:60:0a:0f:c2:9a:92:53:
ee:c9:08:f5:a2:c6:22:8b:e0:3b:7a:0c:13:00:3b:
fd:d1:16:10:d4:0f:5b:ae:e4:86:d0:73:2d:34:f4:
0b:1a:21:ee:de:7c:d8:cf:b3:e3:2c:0c:a3:69:87:
cc:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:9B:79:76:12:B4:D6:34:B5:6A:C1:4C:C1:28:68:40:7E:CA:3A:8C
X509v3 Authority Key Identifier:
keyid:C5:1B:DF:53:33:7A:CB:18:B2:76:95:2C:35:7E:91:98:0B:CC:5B:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRvfUzN6yxiydpUsNX6RmAvMWww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/83e5ea-9fe4-4814-83c6-1bb430606535/1/xRvfUzN6yxiydpUsNX6RmAvMWww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/83e5ea-9fe4-4814-83c6-1bb430606535/1/xRvfUzN6yxiydpUsNX6RmAvMWww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:7b:b8:78:d9:b6:83:0f:b2:13:6c:4b:3b:dc:7e:9e:0f:d9:
e7:26:e1:ba:c2:07:82:16:d9:4c:15:00:d4:f7:1a:5d:da:d6:
86:89:21:fd:b1:0c:db:a1:77:61:c6:f7:aa:38:70:33:bf:34:
9a:ca:91:e6:16:28:fd:e1:34:4f:cd:ee:8a:1e:c9:51:01:51:
d2:45:cb:55:18:ce:08:45:25:95:f3:e4:1c:96:dd:4d:c6:66:
69:30:fc:12:72:c5:21:e7:58:8a:55:70:ff:cf:79:4f:11:53:
60:e2:b7:bf:7f:de:aa:0c:53:8a:32:69:c2:ff:ce:df:19:dc:
b7:38:d5:32:38:27:e5:4f:b3:5c:34:05:93:29:ac:ea:3f:34:
d5:6f:61:c7:6d:26:42:35:d9:e4:a5:c6:b8:55:5d:49:0c:66:
5c:f4:36:5f:b0:db:71:65:20:d6:4f:97:5e:de:d7:17:a0:89:
91:4d:6d:0f:e3:1f:c8:a1:3e:44:bf:3e:35:97:83:a9:60:c3:
d9:81:40:a5:1b:0a:39:95:5a:14:8d:3a:c9:7d:a6:f9:62:7d:
ca:cf:11:09:a2:90:46:7b:40:40:6e:f5:42:e6:a2:ae:97:9e:
a0:a0:a4:6b:c7:a9:b1:ee:f0:e5:7a:65:8e:02:67:ca:b2:ee:
ef:46:54:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+iYGmk2E5/13smUMX2gh8nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MWJkZjUzMzM3YWNiMThiMjc2OTUyYzM1N2U5MTk4MGJj
YzViMGMwHhcNMjYwNzI3MDcwMDU1WhcNMjYwNzI4MDcwMDU1WjAzMTEwLwYDVQQD
Eyg4YTliNzk3NjEyYjRkNjM0YjU2YWMxNGNjMTI4Njg0MDdlY2EzYThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdoxK6aUJgqaFxsWWj3mvnwFmswf
i3q+iNHfc03+nubr/tveyrA/17rFdBQwhdocYHncrBIpWfQk1VIeHa9L3MpfJsrT
RmBV/1l8cS9RDGeqowoTpOfZHgJVJBjphMDIbrIpYz/9LFrpGyJIqF7NHbyCq9aX
vbOkRLv0BDJ5XZ/VF05xz2axklWhRMm3Eiog140zbGCN+eY0fQO670PfSXM/7CBy
J8zzAryjKBb/guGOfEng0tlMkd52ZLAk3xjHszzw47MME+qMq2AKD8KaklPuyQj1
osYii+A7egwTADv90RYQ1A9bruSG0HMtNPQLGiHu3nzYz7PjLAyjaYfMhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIqbeXYStNY0tWrBTMEoaEB+yjqMMB8GA1UdIwQY
MBaAFMUb31MzessYsnaVLDV+kZgLzFsMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFJ2ZlV6TjZ5eGl5ZHBVc05YNlJtQXZNV3d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS84M2U1ZWEtOWZlNC00ODE0LTgzYzYt
MWJiNDMwNjA2NTM1LzEveFJ2ZlV6TjZ5eGl5ZHBVc05YNlJtQXZNV3d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS84M2U1ZWEtOWZlNC00ODE0LTgzYzYtMWJiNDMwNjA2NTM1
LzEveFJ2ZlV6TjZ5eGl5ZHBVc05YNlJtQXZNV3d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhXu4eNm2
gw+yE2xLO9x+ng/Z5ybhusIHghbZTBUA1PcaXdrWhokh/bEM26F3Ycb3qjhwM780
msqR5hYo/eE0T83uih7JUQFR0kXLVRjOCEUllfPkHJbdTcZmaTD8EnLFIedYilVw
/895TxFTYOK3v3/eqgxTijJpwv/O3xnctzjVMjgn5U+zXDQFkyms6j801W9hx20m
QjXZ5KXGuFVdSQxmXPQ2X7DbcWUg1k+XXt7XF6CJkU1tD+MfyKE+RL8+NZeDqWDD
2YFApRsKOZVaFI06yX2m+WJ9ys8RCaKQRntAQG71QuairpeeoKCka8epse7w5Xpl
jgJnyrLu70ZUuw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 12:47:53 2026 by rpki-client