Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
File: xBCR00cDwD74-NKcu9zZjD5wb4Q.mft (raw, json)
Hash identifier: wzfOPQfsMfTBQJQv690GKB40mxeOQOvipfVBmuo8fyg=
Subject key identifier: 91:B5:19:13:F5:8A:74:26:39:89:7C:89:B3:13:22:70:A0:C6:1C:34
Authority key identifier: C4:10:91:D3:47:03:C0:3E:F8:F8:D2:9C:BB:DC:D9:8C:3E:70:6F:84
Certificate issuer: /CN=c41091d34703c03ef8f8d29cbbdcd98c3e706f84
Certificate serial: 019E9213B1DBDC443E428F11ECD3D55B462A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
Manifest number: 0EA5
Signing time: Thu 04 Jun 2026 10:00:24 +0000
Manifest this update: Thu 04 Jun 2026 10:00:24 +0000
Manifest next update: Fri 05 Jun 2026 10:00:24 +0000
Files and hashes: 1: wj36KuC4KkbAWGdbhxPcToGipcw.roa (hash: /SiPmXieUUyR1/NuMTzivGKUx8ZGueEIDbGfwzhdLBk=)
2: xBCR00cDwD74-NKcu9zZjD5wb4Q.crl (hash: wtT0GxQ+5jIhsV29q/g4XMFqRDyOfUcE1XFKJJttyQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:92:13:b1:db:dc:44:3e:42:8f:11:ec:d3:d5:5b:46:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c41091d34703c03ef8f8d29cbbdcd98c3e706f84
Validity
Not Before: Jun 4 10:00:24 2026 GMT
Not After : Jun 5 10:00:24 2026 GMT
Subject: CN=91b51913f58a742639897c89b3132270a0c61c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:64:b6:1c:d3:0b:1c:0a:44:5d:68:e6:1c:c9:
92:e2:4d:e7:48:5f:53:9e:cb:97:d8:b0:03:30:ac:
47:16:17:16:e4:a3:da:52:94:bf:a3:d8:12:52:6a:
c4:3c:31:57:97:88:19:bb:d5:74:2c:96:19:de:64:
e2:f6:65:64:b8:af:de:10:e7:c3:5f:0e:db:cd:25:
05:02:37:ae:08:af:8a:f6:9a:b1:62:fd:26:37:b8:
2e:26:ce:53:f2:1a:32:32:21:75:fd:4f:bf:ef:a9:
d5:57:9b:6e:28:a2:ab:4c:fd:3c:86:19:92:a4:27:
fb:1f:3b:98:c3:e1:0d:f0:0a:5d:1d:e9:ec:30:c3:
68:4c:d5:15:83:00:7b:e8:3e:4d:c7:24:d0:38:ea:
6d:dc:5c:cb:41:dc:c4:fd:00:4b:c2:b1:5a:1c:cf:
09:45:17:b9:6e:77:13:e9:fd:0a:8b:d9:d7:ea:a7:
80:83:a6:23:90:ac:93:c8:8c:90:ac:69:5f:62:c1:
99:89:67:06:cc:14:34:9f:93:cc:ba:72:4d:4b:87:
aa:91:4d:b2:41:c8:0e:32:f8:93:2d:8d:57:c8:34:
d8:00:5d:4c:a3:be:b5:51:dd:b7:76:77:8c:08:f3:
ed:02:75:ca:ef:28:84:d2:bb:4e:7a:78:3c:2e:ca:
5e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B5:19:13:F5:8A:74:26:39:89:7C:89:B3:13:22:70:A0:C6:1C:34
X509v3 Authority Key Identifier:
keyid:C4:10:91:D3:47:03:C0:3E:F8:F8:D2:9C:BB:DC:D9:8C:3E:70:6F:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:85:82:44:6d:86:7c:ae:7b:4a:a3:f6:27:bd:77:01:77:32:
c2:da:c8:9f:7f:2c:f5:ba:6b:fb:19:4a:fe:a6:e9:1c:81:4b:
4a:d1:61:14:eb:12:d0:53:57:73:4d:63:55:f7:46:ed:f2:df:
3b:d3:ac:c5:db:ee:ef:1d:3f:58:22:d2:15:62:06:85:2c:39:
26:a9:b5:14:20:bb:7d:f3:91:54:56:07:39:fa:63:dc:bf:d5:
82:78:31:f0:21:fc:dc:81:68:9c:d2:84:b8:eb:8d:58:2e:c9:
38:ee:2a:b4:95:8a:d2:38:b3:a5:12:46:7a:51:84:eb:21:fe:
bb:c8:ef:6b:6e:c6:e9:40:8e:22:96:3e:48:01:3a:80:99:4b:
91:80:01:b2:1a:6b:a2:7d:e4:78:d7:c7:bd:3c:02:fd:a0:1c:
6f:85:51:d1:ce:29:f8:43:e3:bd:a7:88:59:d9:16:84:8e:2e:
df:b8:15:d2:be:a2:1c:de:2f:2e:6a:d0:a5:68:7f:8f:35:d8:
dd:05:f6:e5:8c:ff:97:83:20:a9:80:55:a9:30:9c:26:96:a1:
99:79:78:c1:f2:8d:e7:03:96:22:93:3b:68:6b:4b:da:fe:d1:
47:23:ab:b3:d3:d9:ee:6b:4c:f6:88:3a:ed:c1:db:76:42:73:
27:38:26:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6SE7Hb3EQ+Qo8R7NPVW0YqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0MTA5MWQzNDcwM2MwM2VmOGY4ZDI5Y2JiZGNkOThjM2U3
MDZmODQwHhcNMjYwNjA0MTAwMDI0WhcNMjYwNjA1MTAwMDI0WjAzMTEwLwYDVQQD
Eyg5MWI1MTkxM2Y1OGE3NDI2Mzk4OTdjODliMzEzMjI3MGEwYzYxYzM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmS2HNMLHApEXWjmHMmS4k3nSF9T
nsuX2LADMKxHFhcW5KPaUpS/o9gSUmrEPDFXl4gZu9V0LJYZ3mTi9mVkuK/eEOfD
Xw7bzSUFAjeuCK+K9pqxYv0mN7guJs5T8hoyMiF1/U+/76nVV5tuKKKrTP08hhmS
pCf7HzuYw+EN8ApdHensMMNoTNUVgwB76D5NxyTQOOpt3FzLQdzE/QBLwrFaHM8J
RRe5bncT6f0Ki9nX6qeAg6YjkKyTyIyQrGlfYsGZiWcGzBQ0n5PMunJNS4eqkU2y
QcgOMviTLY1XyDTYAF1Mo761Ud23dneMCPPtAnXK7yiE0rtOeng8LspezQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJG1GRP1inQmOYl8ibMTInCgxhw0MB8GA1UdIwQY
MBaAFMQQkdNHA8A++PjSnLvc2Yw+cG+EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEJDUjAwY0R3RDc0LU5LY3U5elpqRDV3YjRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8yNzg5NTItOTM1My00YWZkLWEwMGQt
ZjdlN2JiMDE0ZGI4LzEveEJDUjAwY0R3RDc0LU5LY3U5elpqRDV3YjRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8yNzg5NTItOTM1My00YWZkLWEwMGQtZjdlN2JiMDE0ZGI4
LzEveEJDUjAwY0R3RDc0LU5LY3U5elpqRDV3YjRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAoWCRG2G
fK57SqP2J713AXcywtrIn38s9bpr+xlK/qbpHIFLStFhFOsS0FNXc01jVfdG7fLf
O9Osxdvu7x0/WCLSFWIGhSw5Jqm1FCC7ffORVFYHOfpj3L/Vgngx8CH83IFonNKE
uOuNWC7JOO4qtJWK0jizpRJGelGE6yH+u8jva27G6UCOIpY+SAE6gJlLkYABshpr
on3keNfHvTwC/aAcb4VR0c4p+EPjvaeIWdkWhI4u37gV0r6iHN4vLmrQpWh/jzXY
3QX25Yz/l4MgqYBVqTCcJpahmXl4wfKN5wOWIpM7aGtL2v7RRyOrs9PZ7mtM9og6
7cHbdkJzJzgmtw==
-----END CERTIFICATE-----
Generated at Thu Jun 4 13:23:41 2026 by rpki-client