Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
File: xAZEdsLEf3eEdKFIFsHgakCBPlw.mft (raw, json)
Hash identifier: VBurLYSZ0OWRKMkCJn8j/F7U9r9OH3ObXagi3LL7jhk=
Subject key identifier: 12:8F:A7:65:C6:BF:61:E1:8B:86:2E:A9:78:09:02:FC:56:85:15:25
Authority key identifier: C4:06:44:76:C2:C4:7F:77:84:74:A1:48:16:C1:E0:6A:40:81:3E:5C
Certificate issuer: /CN=c4064476c2c47f778474a14816c1e06a40813e5c
Certificate serial: 019E2C287B8D516965CC295758074BFC8CD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
Manifest number: 190F
Signing time: Fri 15 May 2026 15:01:50 +0000
Manifest this update: Fri 15 May 2026 15:01:50 +0000
Manifest next update: Sat 16 May 2026 15:01:50 +0000
Files and hashes: 1: pl4G0drpVsiUnTNv0aNJRxAq40Y.roa (hash: TIrmY5F1mz/rcq5o0AaF7KuNyHFmI5rxVVBApqp6+Ig=)
2: uCT5qS0TatwLKR2syBgBgC34NYE.roa (hash: 6Pav0LB8Y/JGRbLI7vMShFMSStiFyP+H+ECIrWK519s=)
3: xAZEdsLEf3eEdKFIFsHgakCBPlw.crl (hash: dONNKBmDnPv2qJY0yVR0oJs64KXU7VeRj5CmJ3NlLmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2c:28:7b:8d:51:69:65:cc:29:57:58:07:4b:fc:8c:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4064476c2c47f778474a14816c1e06a40813e5c
Validity
Not Before: May 15 15:01:50 2026 GMT
Not After : May 16 15:01:50 2026 GMT
Subject: CN=128fa765c6bf61e18b862ea9780902fc56851525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9e:0d:e9:bf:9d:3a:94:98:33:62:17:82:ee:
2d:c7:51:90:c6:fa:a3:5c:b1:e1:3f:91:0e:e7:d7:
77:05:02:97:77:5e:17:d8:b6:7b:6f:77:3d:61:b5:
51:8c:48:78:9d:82:b8:e5:ad:1b:42:60:b0:5c:62:
11:77:2c:36:74:dd:be:22:dc:9b:14:c7:9c:56:9d:
0a:c0:dd:59:ad:40:94:d8:df:f8:97:5d:dd:bd:29:
6f:2e:1e:50:8b:72:80:0e:20:00:d5:58:5b:09:6e:
dd:50:e0:12:8d:6e:ef:dd:8a:da:27:fc:f5:4a:08:
e2:eb:1a:1a:90:46:73:bd:75:e8:60:fd:33:d4:ba:
c7:33:4a:9c:7e:35:20:77:b8:ed:c6:ac:ba:89:b6:
c4:87:cc:9e:34:b2:bc:71:f2:15:8f:b2:c4:5f:73:
e6:25:02:a3:71:9c:f3:7c:4c:44:4d:b0:81:7b:ed:
ff:67:0d:01:b5:cc:fc:9b:e9:ea:92:47:30:7f:4c:
dd:0b:2a:43:b2:23:dc:64:f2:cd:a0:df:f0:d5:31:
48:ea:93:03:10:93:b6:80:52:05:bd:d5:f1:e5:0e:
dd:0d:47:20:76:29:d4:b4:59:1b:d7:56:b5:ff:49:
ea:cb:ba:19:c3:40:4b:3c:bb:dc:9d:fa:3e:af:03:
63:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:8F:A7:65:C6:BF:61:E1:8B:86:2E:A9:78:09:02:FC:56:85:15:25
X509v3 Authority Key Identifier:
keyid:C4:06:44:76:C2:C4:7F:77:84:74:A1:48:16:C1:E0:6A:40:81:3E:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:cf:71:9d:d6:a9:e2:df:6a:88:b0:bc:ff:b3:ff:d3:f6:27:
db:5d:30:8d:28:e8:36:40:06:a9:30:75:33:8e:68:78:61:a9:
49:f5:6e:90:da:d6:0b:95:ee:3f:32:d2:a9:16:51:ad:89:06:
70:5b:49:b2:00:e3:17:44:22:a8:68:92:e6:71:17:4a:e3:d1:
01:57:c7:40:d1:51:82:9c:57:33:4b:1a:a7:64:c8:e2:aa:8b:
b6:99:2d:d6:27:0e:6b:49:18:af:59:f6:b4:dc:d5:5e:98:db:
e1:bb:d9:c8:7b:30:09:80:72:a4:14:86:25:33:7e:81:be:3a:
01:9a:7c:e9:b5:5f:00:75:ef:72:7f:16:00:c2:a5:d9:67:80:
16:e1:03:e1:dc:2d:12:e2:7b:ec:49:fe:35:09:4a:42:93:ab:
12:6d:c3:28:a0:2c:43:8f:bc:59:ed:9e:23:50:fd:68:a3:97:
47:b9:a2:e3:95:41:f4:11:fd:66:ed:57:4f:16:6d:5b:a2:ce:
ac:cc:2a:17:27:6b:07:b3:0e:24:1e:67:e3:3f:32:88:f7:5a:
f1:d3:49:86:44:07:df:14:b3:ae:31:44:89:1f:de:dd:00:32:
5a:b1:f9:2b:8c:03:6d:d6:77:a7:0e:21:31:1f:e5:ba:eb:9c:
a0:94:c1:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4sKHuNUWllzClXWAdL/IzUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0MDY0NDc2YzJjNDdmNzc4NDc0YTE0ODE2YzFlMDZhNDA4
MTNlNWMwHhcNMjYwNTE1MTUwMTUwWhcNMjYwNTE2MTUwMTUwWjAzMTEwLwYDVQQD
EygxMjhmYTc2NWM2YmY2MWUxOGI4NjJlYTk3ODA5MDJmYzU2ODUxNTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA054N6b+dOpSYM2IXgu4tx1GQxvqj
XLHhP5EO59d3BQKXd14X2LZ7b3c9YbVRjEh4nYK45a0bQmCwXGIRdyw2dN2+Ityb
FMecVp0KwN1ZrUCU2N/4l13dvSlvLh5Qi3KADiAA1VhbCW7dUOASjW7v3YraJ/z1
Sgji6xoakEZzvXXoYP0z1LrHM0qcfjUgd7jtxqy6ibbEh8yeNLK8cfIVj7LEX3Pm
JQKjcZzzfExETbCBe+3/Zw0Btcz8m+nqkkcwf0zdCypDsiPcZPLNoN/w1TFI6pMD
EJO2gFIFvdXx5Q7dDUcgdinUtFkb11a1/0nqy7oZw0BLPLvcnfo+rwNjAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBKPp2XGv2Hhi4YuqXgJAvxWhRUlMB8GA1UdIwQY
MBaAFMQGRHbCxH93hHShSBbB4GpAgT5cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEFaRWRzTEVmM2VFZEtGSUZzSGdha0NCUGx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC85YTdkZjctMThiYS00MWY3LTg4MGEt
NzQ2Nzc3ZTIxYzViLzEveEFaRWRzTEVmM2VFZEtGSUZzSGdha0NCUGx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC85YTdkZjctMThiYS00MWY3LTg4MGEtNzQ2Nzc3ZTIxYzVi
LzEveEFaRWRzTEVmM2VFZEtGSUZzSGdha0NCUGx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVM9xndap
4t9qiLC8/7P/0/Yn210wjSjoNkAGqTB1M45oeGGpSfVukNrWC5XuPzLSqRZRrYkG
cFtJsgDjF0QiqGiS5nEXSuPRAVfHQNFRgpxXM0sap2TI4qqLtpkt1icOa0kYr1n2
tNzVXpjb4bvZyHswCYBypBSGJTN+gb46AZp86bVfAHXvcn8WAMKl2WeAFuED4dwt
EuJ77En+NQlKQpOrEm3DKKAsQ4+8We2eI1D9aKOXR7mi45VB9BH9Zu1XTxZtW6LO
rMwqFydrB7MOJB5n4z8yiPda8dNJhkQH3xSzrjFEiR/e3QAyWrH5K4wDbdZ3pw4h
MR/luuucoJTBvA==
-----END CERTIFICATE-----
Generated at Fri May 15 18:18:48 2026 by rpki-client