Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft
File: xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft (raw, json)
Hash identifier: Pl+PIbXnhvQlP8iTquoV51k+jCDNYcH+FA39gR70cJU=
Subject key identifier: 64:31:06:54:82:58:4C:9F:DF:4A:B1:67:15:4D:DC:22:CC:0A:8E:80
Authority key identifier: C5:0E:72:37:F1:45:9A:FF:4D:5A:E0:94:BD:2C:85:25:6E:2E:2E:3D
Certificate issuer: /CN=c50e7237f1459aff4d5ae094bd2c85256e2e2e3d
Certificate serial: 019DCE631F639F1628E0822502F646E0C32B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft
Manifest number: 04C2
Signing time: Mon 27 Apr 2026 10:01:35 +0000
Manifest this update: Mon 27 Apr 2026 10:01:35 +0000
Manifest next update: Tue 28 Apr 2026 10:01:35 +0000
Files and hashes: 1: KzL1NrpF1fIv1UZ-w1843U42opY.roa (hash: e/MBTifLcIfwIpz3DnQOZZoxAp3TFvcIxij/7Ilh7dM=)
2: xQ5yN_FFmv9NWuCUvSyFJW4uLj0.crl (hash: iJsAEzEoSR2ry1xWI2BGVFq0dAtuQxfY5xabhyuy1zY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:63:1f:63:9f:16:28:e0:82:25:02:f6:46:e0:c3:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50e7237f1459aff4d5ae094bd2c85256e2e2e3d
Validity
Not Before: Apr 27 10:01:35 2026 GMT
Not After : Apr 28 10:01:35 2026 GMT
Subject: CN=6431065482584c9fdf4ab167154ddc22cc0a8e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bd:7b:b0:6e:dd:74:3a:cb:60:a7:3f:5c:5f:
f8:3b:eb:18:75:a7:8a:d2:8a:da:44:1c:31:60:e1:
f8:ec:2d:61:f3:d0:c4:31:e4:80:c5:c1:d2:2f:fc:
00:e1:aa:b4:29:cf:39:02:a6:75:bc:54:77:bb:9d:
4d:79:58:08:9a:c0:df:54:51:7e:7a:bd:68:c0:c2:
00:f9:77:f6:0a:e1:44:0c:32:c3:5c:2f:e5:cc:76:
70:6b:e6:9b:29:98:af:e8:50:d3:c7:e6:a2:38:95:
02:7c:b9:66:2e:f3:b5:41:d7:ce:2a:dd:35:d6:60:
9a:ec:6e:b6:8a:1b:18:ff:d4:fb:47:de:6d:f0:95:
ff:4d:d2:b4:99:52:88:e5:b0:ac:fe:12:68:f8:5a:
e5:30:a1:cc:00:20:3e:b6:4f:91:7f:c4:97:ef:94:
d3:4d:6e:ee:78:90:13:d8:70:f7:46:18:43:a0:ba:
2c:86:06:de:02:5f:60:a4:5d:21:66:58:07:15:1a:
3f:bb:7d:fa:7b:39:07:2c:f6:63:7d:1f:0f:90:e1:
2d:1c:af:93:a2:05:43:26:eb:5f:f4:07:b3:65:4c:
d1:16:43:ef:61:c2:76:ab:af:a3:ca:da:7b:57:67:
c9:03:34:18:31:28:d0:97:23:08:0b:69:c3:30:57:
ba:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:31:06:54:82:58:4C:9F:DF:4A:B1:67:15:4D:DC:22:CC:0A:8E:80
X509v3 Authority Key Identifier:
keyid:C5:0E:72:37:F1:45:9A:FF:4D:5A:E0:94:BD:2C:85:25:6E:2E:2E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:a6:fc:64:22:a0:13:dd:90:bf:8d:49:ab:a5:62:d7:41:54:
9e:35:29:04:a5:58:41:b3:e0:95:d2:ea:f6:d6:00:09:58:c7:
7e:2d:37:b9:1a:a3:29:0b:1e:f9:03:1f:db:bc:83:b4:88:69:
95:49:d2:a2:62:e6:4f:5e:2c:e9:18:47:06:f9:da:5a:81:68:
84:1e:bd:f5:ff:19:b9:b3:cc:2c:51:4b:77:91:e4:81:15:f6:
9c:96:e2:16:19:42:ee:66:6b:fc:38:16:d5:37:80:1e:f2:22:
82:b0:e0:a6:2f:af:f5:7d:e1:61:22:d3:30:65:f0:93:74:9d:
d7:48:6b:0f:25:77:d3:9c:ec:d6:01:54:b7:10:2a:ee:5b:fa:
81:4b:ad:f7:c1:c3:f2:aa:15:3b:91:de:c0:a7:d2:69:d4:6b:
b6:ab:93:2f:03:57:a7:06:50:9d:5d:c4:73:49:35:1c:13:d6:
92:1b:dc:bb:15:db:29:a1:25:44:d9:73:d8:6b:3b:c6:93:38:
16:53:d1:1b:24:fc:5d:7a:5e:1f:19:3c:73:b6:01:ce:89:e3:
38:dc:fa:f1:4a:6e:32:3f:16:8e:ed:f5:d8:1a:83:c2:bc:60:
ce:f8:8d:e8:9d:9b:5d:36:22:e4:61:5e:a6:3a:df:4a:03:6a:
cd:98:1b:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3OYx9jnxYo4IIlAvZG4MMrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MGU3MjM3ZjE0NTlhZmY0ZDVhZTA5NGJkMmM4NTI1NmUy
ZTJlM2QwHhcNMjYwNDI3MTAwMTM1WhcNMjYwNDI4MTAwMTM1WjAzMTEwLwYDVQQD
Eyg2NDMxMDY1NDgyNTg0YzlmZGY0YWIxNjcxNTRkZGMyMmNjMGE4ZTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAur17sG7ddDrLYKc/XF/4O+sYdaeK
0oraRBwxYOH47C1h89DEMeSAxcHSL/wA4aq0Kc85AqZ1vFR3u51NeVgImsDfVFF+
er1owMIA+Xf2CuFEDDLDXC/lzHZwa+abKZiv6FDTx+aiOJUCfLlmLvO1QdfOKt01
1mCa7G62ihsY/9T7R95t8JX/TdK0mVKI5bCs/hJo+FrlMKHMACA+tk+Rf8SX75TT
TW7ueJAT2HD3RhhDoLoshgbeAl9gpF0hZlgHFRo/u336ezkHLPZjfR8PkOEtHK+T
ogVDJutf9AezZUzRFkPvYcJ2q6+jytp7V2fJAzQYMSjQlyMIC2nDMFe6CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGQxBlSCWEyf30qxZxVN3CLMCo6AMB8GA1UdIwQY
MBaAFMUOcjfxRZr/TVrglL0shSVuLi49MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFE1eU5fRkZtdjlOV3VDVXZTeUZKVzR1TGowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8wMzY1MGMtZDdiYi00ZjEzLWIyMDAt
NTBkMDE4YmIwYmY2LzEveFE1eU5fRkZtdjlOV3VDVXZTeUZKVzR1TGowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8wMzY1MGMtZDdiYi00ZjEzLWIyMDAtNTBkMDE4YmIwYmY2
LzEveFE1eU5fRkZtdjlOV3VDVXZTeUZKVzR1TGowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArab8ZCKg
E92Qv41Jq6Vi10FUnjUpBKVYQbPgldLq9tYACVjHfi03uRqjKQse+QMf27yDtIhp
lUnSomLmT14s6RhHBvnaWoFohB699f8ZubPMLFFLd5HkgRX2nJbiFhlC7mZr/DgW
1TeAHvIigrDgpi+v9X3hYSLTMGXwk3Sd10hrDyV305zs1gFUtxAq7lv6gUut98HD
8qoVO5HewKfSadRrtquTLwNXpwZQnV3Ec0k1HBPWkhvcuxXbKaElRNlz2Gs7xpM4
FlPRGyT8XXpeHxk8c7YBzonjONz68UpuMj8Wju312BqDwrxgzviN6J2bXTYi5GFe
pjrfSgNqzZgbZQ==
-----END CERTIFICATE-----
Generated at Mon Apr 27 18:25:03 2026 by rpki-client