
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
File: Xka_H_gWvgukxiFxI0IzCp-ti9o.mft (raw, json)
Hash identifier: gPmJgxywrOMEzBu8yB2yP8YQt3JCJeWFLe8tb/4LFBY=
Subject key identifier: 81:CD:B1:F5:7D:6D:7F:7E:4C:F5:14:B0:75:48:4A:9E:98:BA:65:E6
Authority key identifier: 5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA
Certificate issuer: /CN=5e46bf1ff816be0ba4c621712342330a9fad8bda
Certificate serial: 019E9EF3D01E1BCAFA948DB679353F1A31D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
Manifest number: 1973
Signing time: Sat 06 Jun 2026 22:00:39 +0000
Manifest this update: Sat 06 Jun 2026 22:00:39 +0000
Manifest next update: Sun 07 Jun 2026 22:00:39 +0000
Files and hashes: 1: Xka_H_gWvgukxiFxI0IzCp-ti9o.crl (hash: NC7geKyU473wDdFEN3xzv2zvg2jbUeCllIYF7vgc1Mk=)
2: coRfEXrfHGck2d3kTCu4-WIF828.roa (hash: seMqqalk2GBduoeIME3C50KibF4OKg4MDnKjSiFIduo=)
3: sVAfKvrvvhMbIUsWh385vVnIquc.roa (hash: M9eQGOQqKf4XTtZds1m1OGeYS0UwjPbRi7yLdnFl6LQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 21:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9e:f3:d0:1e:1b:ca:fa:94:8d:b6:79:35:3f:1a:31:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e46bf1ff816be0ba4c621712342330a9fad8bda
Validity
Not Before: Jun 6 22:00:39 2026 GMT
Not After : Jun 7 22:00:39 2026 GMT
Subject: CN=81cdb1f57d6d7f7e4cf514b075484a9e98ba65e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b6:0f:5b:47:58:91:d1:7e:8f:74:b4:8c:51:
71:7c:71:a8:55:d7:22:db:21:f1:17:ab:5d:35:95:
f1:4d:54:fe:9a:01:b8:cf:16:24:bc:e9:cf:d3:71:
d5:3e:8b:58:70:17:42:95:76:c6:22:48:88:d2:dc:
21:72:48:9a:ce:ef:4c:dc:fc:66:04:42:b0:ad:2b:
c4:72:29:6e:e0:00:4e:3b:85:56:b0:2f:b0:f7:2f:
b7:bd:07:a7:9a:0c:62:ec:f7:f8:70:dc:2b:02:12:
f2:01:34:e4:e6:70:d6:d7:94:a5:41:ab:5b:86:6c:
51:b5:c8:59:7c:a0:a3:33:69:d7:1b:7b:fe:0e:b4:
e1:cb:52:1b:c8:b0:4f:7c:84:ea:99:81:79:01:8f:
dc:2c:06:51:cf:5d:a9:eb:1b:c4:72:fb:86:7a:f4:
b3:fc:9c:c9:76:cf:29:b8:3e:c6:29:6b:04:a8:be:
82:23:d5:38:4a:ce:61:70:eb:1a:f4:34:53:bf:d5:
2a:3a:44:fc:21:b3:06:77:41:74:b2:76:0c:5b:f5:
33:9c:5e:bb:9b:5b:a0:3a:b7:03:0a:ec:1b:09:91:
6e:6c:01:9a:9c:25:97:98:e4:0f:29:e5:36:b8:ed:
ee:b4:a4:75:c7:78:05:45:d2:0b:98:44:40:b2:23:
a8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:CD:B1:F5:7D:6D:7F:7E:4C:F5:14:B0:75:48:4A:9E:98:BA:65:E6
X509v3 Authority Key Identifier:
keyid:5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:79:bd:5c:29:da:f8:67:bd:39:04:e2:a8:fe:4b:53:25:13:
7f:da:52:fa:1d:29:59:6a:7b:3e:ad:04:91:b4:44:72:1a:84:
ee:b3:10:a4:0d:a2:45:fe:be:44:e2:ba:38:69:bb:2e:74:be:
6b:af:d9:b3:1e:26:4b:73:5c:04:06:f0:a1:17:8d:43:05:45:
c9:b9:f9:0e:06:e1:90:47:af:b5:8b:64:65:23:9d:50:03:cc:
6a:bd:5a:67:47:94:bf:12:9f:2c:42:13:22:5b:d5:1a:a2:d0:
3d:06:de:ac:d0:cf:88:a1:3e:19:27:4d:c6:02:a8:dd:b6:c6:
dc:69:3a:1e:16:3f:38:72:b4:4c:33:80:ab:94:d6:7e:fb:64:
69:58:12:d2:05:15:2a:03:d5:5d:f3:75:d8:bf:f0:1d:1a:79:
0f:59:c7:bc:34:e2:04:31:da:74:df:6b:5a:ed:25:ed:e9:29:
a0:45:43:9b:cd:6c:99:29:ac:0b:4b:f6:eb:89:9e:8c:74:62:
04:ba:16:07:e4:7e:8a:33:b3:14:7f:01:cd:a2:a4:21:d7:a0:
34:b1:bf:de:9e:ae:e8:b3:da:8a:b2:73:e5:1a:c2:52:e0:90:
d5:6e:58:e5:9c:18:4f:b6:1d:f7:07:c2:04:4e:43:68:fd:a9:
d8:41:ce:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6e89AeG8r6lI22eTU/GjHWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNDZiZjFmZjgxNmJlMGJhNGM2MjE3MTIzNDIzMzBhOWZh
ZDhiZGEwHhcNMjYwNjA2MjIwMDM5WhcNMjYwNjA3MjIwMDM5WjAzMTEwLwYDVQQD
Eyg4MWNkYjFmNTdkNmQ3ZjdlNGNmNTE0YjA3NTQ4NGE5ZTk4YmE2NWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbYPW0dYkdF+j3S0jFFxfHGoVdci
2yHxF6tdNZXxTVT+mgG4zxYkvOnP03HVPotYcBdClXbGIkiI0twhckiazu9M3Pxm
BEKwrSvEcilu4ABOO4VWsC+w9y+3vQenmgxi7Pf4cNwrAhLyATTk5nDW15SlQatb
hmxRtchZfKCjM2nXG3v+DrThy1IbyLBPfITqmYF5AY/cLAZRz12p6xvEcvuGevSz
/JzJds8puD7GKWsEqL6CI9U4Ss5hcOsa9DRTv9UqOkT8IbMGd0F0snYMW/UznF67
m1ugOrcDCuwbCZFubAGanCWXmOQPKeU2uO3utKR1x3gFRdILmERAsiOoawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIHNsfV9bX9+TPUUsHVISp6YumXmMB8GA1UdIwQY
MBaAFF5Gvx/4Fr4LpMYhcSNCMwqfrYvaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGthX0hfZ1d2Z3VreGlGeEkwSXpDcC10aTlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9jOGNmNTYtYzQ4Yy00ZTYyLTk4ZWUt
YjhkYjE1YjUzMWEyLzEvWGthX0hfZ1d2Z3VreGlGeEkwSXpDcC10aTlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9jOGNmNTYtYzQ4Yy00ZTYyLTk4ZWUtYjhkYjE1YjUzMWEy
LzEvWGthX0hfZ1d2Z3VreGlGeEkwSXpDcC10aTlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlXm9XCna
+Ge9OQTiqP5LUyUTf9pS+h0pWWp7Pq0EkbREchqE7rMQpA2iRf6+ROK6OGm7LnS+
a6/Zsx4mS3NcBAbwoReNQwVFybn5DgbhkEevtYtkZSOdUAPMar1aZ0eUvxKfLEIT
IlvVGqLQPQberNDPiKE+GSdNxgKo3bbG3Gk6HhY/OHK0TDOAq5TWfvtkaVgS0gUV
KgPVXfN12L/wHRp5D1nHvDTiBDHadN9rWu0l7ekpoEVDm81smSmsC0v264mejHRi
BLoWB+R+ijOzFH8BzaKkIdegNLG/3p6u6LPairJz5RrCUuCQ1W5Y5ZwYT7Yd9wfC
BE5DaP2p2EHOQQ==
-----END CERTIFICATE-----
Generated at Sun Jun 7 01:50:12 2026 by rpki-client