Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.mft
File: xU9qEXeCbFq2S9OvATiptXpLkeU.mft (raw, json)
Hash identifier: V139hQz1FStsYFxYTbgUnnATlLt3XMalnJTxtpDRy3A=
Subject key identifier: 7F:B7:33:3A:AE:C1:95:46:97:F2:F8:DB:B3:80:A5:90:3D:FA:C5:F3
Authority key identifier: C5:4F:6A:11:77:82:6C:5A:B6:4B:D3:AF:01:38:A9:B5:7A:4B:91:E5
Certificate issuer: /CN=c54f6a1177826c5ab64bd3af0138a9b57a4b91e5
Certificate serial: 019F721842A308D3C52505E586072E965D3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xU9qEXeCbFq2S9OvATiptXpLkeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.mft
Manifest number: 0249
Signing time: Fri 17 Jul 2026 22:00:20 +0000
Manifest this update: Fri 17 Jul 2026 22:00:20 +0000
Manifest next update: Sat 18 Jul 2026 22:00:20 +0000
Files and hashes: 1: AAL-YY9GVuWqbLX5GG1k3ImctWA.roa (hash: dOcDqpARrTucPUNtlVinnlKcwBaTZo2MLnDCrG84YIw=)
2: xU9qEXeCbFq2S9OvATiptXpLkeU.crl (hash: usdFpEWJ8VQqdiwjZ6p5rpcs99dNnO7rEa394xsy0hs=)
3: x_VjdL15EqUB70pwRzrAehHyTNo.asa (hash: roR1zfTDox/ACVmuA2wDu2cHX32k232PLN3hkotoI04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xU9qEXeCbFq2S9OvATiptXpLkeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:72:18:42:a3:08:d3:c5:25:05:e5:86:07:2e:96:5d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c54f6a1177826c5ab64bd3af0138a9b57a4b91e5
Validity
Not Before: Jul 17 22:00:20 2026 GMT
Not After : Jul 18 22:00:20 2026 GMT
Subject: CN=7fb7333aaec1954697f2f8dbb380a5903dfac5f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ba:b8:87:50:f2:64:10:b5:82:a7:79:c0:c2:
34:98:7d:4c:e9:21:ec:d8:68:fe:2a:83:11:f5:ff:
0d:3a:03:0d:78:0a:43:2d:9e:b0:e3:9d:2b:68:a9:
8a:64:8d:2f:32:05:25:57:c6:20:5c:7b:ae:4c:c6:
1f:6a:d6:5a:bc:fe:2c:26:62:c9:96:e7:81:4a:8c:
7d:73:37:11:81:00:70:e7:c5:61:af:bb:b4:11:df:
b5:45:f2:45:78:f5:0f:b8:49:1e:90:45:e0:e7:1e:
3a:75:2e:09:c0:83:44:af:2d:7e:37:c7:24:e9:98:
70:9d:00:49:59:f3:ca:75:30:d4:b7:cc:78:ac:0e:
ed:94:65:9b:f8:59:85:6c:f0:63:8d:c2:42:15:37:
4c:17:db:78:16:f8:da:43:17:c0:f7:43:14:70:51:
3b:72:0f:cb:91:03:25:f5:23:28:cb:bd:b0:3e:e1:
03:a3:b7:d5:d7:4e:fd:91:48:37:3e:2d:c7:c4:86:
b0:05:f4:ae:ce:85:09:d3:0e:89:5b:f5:d3:bb:af:
f6:fe:fb:b7:dc:6b:11:85:28:e3:20:f1:c0:ff:f2:
4f:f6:10:57:11:53:08:b7:5f:9c:49:d8:7f:f6:3a:
75:d4:dd:63:b9:e2:d4:17:63:52:81:bf:e2:81:6b:
8a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B7:33:3A:AE:C1:95:46:97:F2:F8:DB:B3:80:A5:90:3D:FA:C5:F3
X509v3 Authority Key Identifier:
keyid:C5:4F:6A:11:77:82:6C:5A:B6:4B:D3:AF:01:38:A9:B5:7A:4B:91:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xU9qEXeCbFq2S9OvATiptXpLkeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:03:85:a0:9b:49:54:8f:80:84:f6:ad:16:ef:60:e3:ce:a1:
42:7e:71:66:d2:7e:dd:97:cf:b5:5d:e4:65:6f:54:b6:aa:fc:
2f:20:31:b6:9c:62:1d:19:d0:b9:38:b1:1f:42:c5:8d:16:23:
61:a9:8c:6e:f7:af:c5:ee:a6:96:bf:14:0d:63:df:35:5c:ff:
4f:01:a8:4a:b9:a6:6c:cb:fe:20:d4:ae:b3:cd:eb:09:6f:4d:
5c:31:97:a1:e9:fd:44:af:e5:e9:ba:f1:f4:c8:5f:6d:55:ca:
2f:1d:aa:9a:b6:ec:60:68:ed:f4:3e:54:4f:87:1b:17:21:89:
dc:7b:3a:66:e1:81:4b:cc:ed:ca:20:37:73:44:76:10:f1:f4:
c1:54:3c:03:35:c6:4d:26:b1:09:a4:71:39:93:08:33:60:8a:
91:14:c9:e1:ae:93:c4:3c:58:6e:c7:0a:7e:4e:a1:e8:85:e3:
56:55:1f:38:5b:45:57:fd:16:14:a3:16:f7:b0:b3:9b:c4:17:
9e:8b:b7:67:f0:53:02:81:d5:2e:ca:44:97:6b:60:c3:cb:06:
0b:9f:0d:97:58:3a:0c:4e:a9:10:54:3e:31:53:f2:24:0b:76:
99:a9:2b:7e:e6:d4:8c:a5:7c:46:b0:c0:ae:e9:ce:db:cc:e1:
1e:0f:a4:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ9yGEKjCNPFJQXlhgcull08MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NGY2YTExNzc4MjZjNWFiNjRiZDNhZjAxMzhhOWI1N2E0
YjkxZTUwHhcNMjYwNzE3MjIwMDIwWhcNMjYwNzE4MjIwMDIwWjAzMTEwLwYDVQQD
Eyg3ZmI3MzMzYWFlYzE5NTQ2OTdmMmY4ZGJiMzgwYTU5MDNkZmFjNWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47q4h1DyZBC1gqd5wMI0mH1M6SHs
2Gj+KoMR9f8NOgMNeApDLZ6w450raKmKZI0vMgUlV8YgXHuuTMYfatZavP4sJmLJ
lueBSox9czcRgQBw58Vhr7u0Ed+1RfJFePUPuEkekEXg5x46dS4JwINEry1+N8ck
6ZhwnQBJWfPKdTDUt8x4rA7tlGWb+FmFbPBjjcJCFTdMF9t4FvjaQxfA90MUcFE7
cg/LkQMl9SMoy72wPuEDo7fV1079kUg3Pi3HxIawBfSuzoUJ0w6JW/XTu6/2/vu3
3GsRhSjjIPHA//JP9hBXEVMIt1+cSdh/9jp11N1jueLUF2NSgb/igWuKuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH+3MzquwZVGl/L427OApZA9+sXzMB8GA1UdIwQY
MBaAFMVPahF3gmxatkvTrwE4qbV6S5HlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFU5cUVYZUNiRnEyUzlPdkFUaXB0WHBMa2VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xNGYzNjctM2I5ZS00OWQ0LTk2ODYt
MmVhOGFjZTViOTVlLzEveFU5cUVYZUNiRnEyUzlPdkFUaXB0WHBMa2VVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS8xNGYzNjctM2I5ZS00OWQ0LTk2ODYtMmVhOGFjZTViOTVl
LzEveFU5cUVYZUNiRnEyUzlPdkFUaXB0WHBMa2VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASAOFoJtJ
VI+AhPatFu9g486hQn5xZtJ+3ZfPtV3kZW9Utqr8LyAxtpxiHRnQuTixH0LFjRYj
YamMbvevxe6mlr8UDWPfNVz/TwGoSrmmbMv+INSus83rCW9NXDGXoen9RK/l6brx
9MhfbVXKLx2qmrbsYGjt9D5UT4cbFyGJ3Hs6ZuGBS8ztyiA3c0R2EPH0wVQ8AzXG
TSaxCaRxOZMIM2CKkRTJ4a6TxDxYbscKfk6h6IXjVlUfOFtFV/0WFKMW97Czm8QX
nou3Z/BTAoHVLspEl2tgw8sGC58Nl1g6DE6pEFQ+MVPyJAt2makrfubUjKV8RrDA
runO28zhHg+kzA==
-----END CERTIFICATE-----
Generated at Sat Jul 18 02:17:36 2026 by rpki-client