Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft
File: XS8h5aT74BUgX2zviK-uGc0GphI.mft (raw, json)
Hash identifier: 3WQYetosKvGaXzsSoqDLOkWOG1lz3b4krCCNvpLEy3Y=
Subject key identifier: 0E:89:93:FB:0A:C2:D8:1F:B6:75:00:84:91:F2:FF:EC:1B:4F:79:19
Authority key identifier: 5D:2F:21:E5:A4:FB:E0:15:20:5F:6C:EF:88:AF:AE:19:CD:06:A6:12
Certificate issuer: /CN=5d2f21e5a4fbe015205f6cef88afae19cd06a612
Certificate serial: 019EDC1C40503EC5D30B746C7744011DBB3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XS8h5aT74BUgX2zviK-uGc0GphI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft
Manifest number: 18FC
Signing time: Thu 18 Jun 2026 19:01:39 +0000
Manifest this update: Thu 18 Jun 2026 19:01:39 +0000
Manifest next update: Fri 19 Jun 2026 19:01:39 +0000
Files and hashes: 1: TsOOfWYO7s3iDHFcR1k7ZOE39Ec.roa (hash: j+9fyMphVuQhWbTHtgX76YqDUNucL2DHLde2/xPrgJg=)
2: XS8h5aT74BUgX2zviK-uGc0GphI.crl (hash: 7MTo5bWm2u4pWDwyDF2EOz0ZgXhS7wHnp3N9Z69cms4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XS8h5aT74BUgX2zviK-uGc0GphI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Jun 2026 19:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:dc:1c:40:50:3e:c5:d3:0b:74:6c:77:44:01:1d:bb:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d2f21e5a4fbe015205f6cef88afae19cd06a612
Validity
Not Before: Jun 18 19:01:39 2026 GMT
Not After : Jun 19 19:01:39 2026 GMT
Subject: CN=0e8993fb0ac2d81fb675008491f2ffec1b4f7919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:79:62:90:22:0f:c2:0d:10:0f:a6:38:21:c9:
8d:be:3b:a1:5b:fb:e6:04:89:76:3d:c9:36:cd:c5:
22:24:17:0e:cd:8a:c4:e5:38:de:50:de:5d:ed:ec:
08:f4:de:7b:a7:01:23:1a:e9:93:27:b3:5b:1d:4b:
97:19:30:97:3c:3b:ca:88:f5:bf:31:6a:31:26:a9:
98:d2:1a:6e:09:33:48:df:90:fd:bd:be:14:6f:2b:
c6:6e:ff:00:d3:17:2a:1f:e9:39:ad:56:33:af:0c:
2a:b2:55:af:39:49:17:16:3a:26:6e:f2:03:d1:6d:
df:3d:9f:67:37:b9:15:40:ef:42:54:62:38:ca:9f:
62:b3:05:ad:f1:2b:00:b9:b5:3c:3e:09:9f:ff:64:
23:44:fc:20:7a:57:19:a2:c4:10:2b:70:40:40:68:
e3:b3:f3:65:64:02:5e:f0:b6:be:f4:32:78:f3:47:
9f:cf:f4:12:44:8f:14:2f:44:68:0f:5b:21:05:f4:
a9:e9:93:7c:0b:26:e5:80:8d:7b:43:38:25:72:98:
48:fc:b0:36:43:7d:f6:b7:1c:0c:3c:61:01:59:48:
9a:8b:e7:84:6d:66:e7:be:fd:9c:bc:66:90:1c:70:
37:22:df:93:2c:31:1f:d6:f4:58:e7:d5:98:e1:cd:
d6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:89:93:FB:0A:C2:D8:1F:B6:75:00:84:91:F2:FF:EC:1B:4F:79:19
X509v3 Authority Key Identifier:
keyid:5D:2F:21:E5:A4:FB:E0:15:20:5F:6C:EF:88:AF:AE:19:CD:06:A6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XS8h5aT74BUgX2zviK-uGc0GphI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:4a:b0:24:99:e8:ba:e2:06:4e:91:93:a0:73:5b:bc:b0:23:
e9:81:36:ec:b2:4a:e9:d5:32:bd:ae:e6:52:8d:90:83:9d:06:
44:77:08:5a:04:13:f7:c3:1f:f4:3b:a4:6f:f2:f3:63:6a:e6:
f6:2c:6c:9d:71:6f:95:b9:83:69:5d:cc:e8:76:8c:f9:2d:83:
3b:0d:ed:04:47:81:ae:8a:d5:f8:b4:77:d3:f5:45:5d:a7:43:
b1:82:06:60:f5:7c:c2:78:52:aa:9f:73:96:d5:97:d3:56:79:
08:bf:d0:52:05:ad:34:b0:6e:15:db:52:42:4a:e6:b3:f1:b6:
c0:f8:99:a3:fd:46:89:21:e7:03:7c:46:18:b5:ea:7c:e5:41:
2f:88:30:48:b9:b8:71:88:cf:f9:0b:4b:4e:ad:99:94:bf:55:
c5:6e:1a:e2:9b:34:5d:f2:ec:40:ba:24:f1:64:f4:f2:ab:73:
13:e6:c0:2a:6e:23:4f:5b:3b:78:75:23:9e:06:12:71:88:0a:
55:26:d6:8e:9a:16:0f:b0:0e:bc:0c:b9:31:4f:47:c1:cc:61:
fb:11:db:b0:38:54:d0:01:58:93:b5:b3:68:99:65:03:80:da:
58:3f:b4:08:3a:46:ba:9b:d0:de:92:6a:82:cf:09:e8:e0:4b:
bb:05:be:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7cHEBQPsXTC3Rsd0QBHbs8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkMmYyMWU1YTRmYmUwMTUyMDVmNmNlZjg4YWZhZTE5Y2Qw
NmE2MTIwHhcNMjYwNjE4MTkwMTM5WhcNMjYwNjE5MTkwMTM5WjAzMTEwLwYDVQQD
EygwZTg5OTNmYjBhYzJkODFmYjY3NTAwODQ5MWYyZmZlYzFiNGY3OTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHlikCIPwg0QD6Y4IcmNvjuhW/vm
BIl2Pck2zcUiJBcOzYrE5TjeUN5d7ewI9N57pwEjGumTJ7NbHUuXGTCXPDvKiPW/
MWoxJqmY0hpuCTNI35D9vb4UbyvGbv8A0xcqH+k5rVYzrwwqslWvOUkXFjombvID
0W3fPZ9nN7kVQO9CVGI4yp9iswWt8SsAubU8Pgmf/2QjRPwgelcZosQQK3BAQGjj
s/NlZAJe8La+9DJ480efz/QSRI8UL0RoD1shBfSp6ZN8CyblgI17QzglcphI/LA2
Q332txwMPGEBWUiai+eEbWbnvv2cvGaQHHA3It+TLDEf1vRY59WY4c3W5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA6Jk/sKwtgftnUAhJHy/+wbT3kZMB8GA1UdIwQY
MBaAFF0vIeWk++AVIF9s74ivrhnNBqYSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFM4aDVhVDc0QlVnWDJ6dmlLLXVHYzBHcGhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi80OWUzNmMtNzRiNi00NTQ3LTg4YWIt
MjE0YTc2MjEwZmQ2LzEvWFM4aDVhVDc0QlVnWDJ6dmlLLXVHYzBHcGhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi80OWUzNmMtNzRiNi00NTQ3LTg4YWItMjE0YTc2MjEwZmQ2
LzEvWFM4aDVhVDc0QlVnWDJ6dmlLLXVHYzBHcGhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPEqwJJno
uuIGTpGToHNbvLAj6YE27LJK6dUyva7mUo2Qg50GRHcIWgQT98Mf9Dukb/LzY2rm
9ixsnXFvlbmDaV3M6HaM+S2DOw3tBEeBrorV+LR30/VFXadDsYIGYPV8wnhSqp9z
ltWX01Z5CL/QUgWtNLBuFdtSQkrms/G2wPiZo/1GiSHnA3xGGLXqfOVBL4gwSLm4
cYjP+QtLTq2ZlL9VxW4a4ps0XfLsQLok8WT08qtzE+bAKm4jT1s7eHUjngYScYgK
VSbWjpoWD7AOvAy5MU9Hwcxh+xHbsDhU0AFYk7WzaJllA4DaWD+0CDpGupvQ3pJq
gs8J6OBLuwW+hg==
-----END CERTIFICATE-----
Generated at Fri Jun 19 04:31:25 2026 by rpki-client