Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
File: xt_rrIt1RREi-RT8oCTuH1QXyrs.mft (raw, json)
Hash identifier: SKlt2CcWJWSmAaoliuVbPDRxWzPNMkLQy7gZW6zdoXI=
Subject key identifier: 6C:5D:21:D1:7F:EA:D8:8B:4F:8D:5F:82:A4:75:77:F5:3A:FE:E5:44
Authority key identifier: C6:DF:EB:AC:8B:75:45:11:22:F9:14:FC:A0:24:EE:1F:54:17:CA:BB
Certificate issuer: /CN=c6dfebac8b75451122f914fca024ee1f5417cabb
Certificate serial: 019E31BC175F2F29BB83C287363B3FB727C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
Manifest number: 1913
Signing time: Sat 16 May 2026 17:01:10 +0000
Manifest this update: Sat 16 May 2026 17:01:10 +0000
Manifest next update: Sun 17 May 2026 17:01:10 +0000
Files and hashes: 1: LXxDQYBI8a2bgUeaO6Um5RWeWus.roa (hash: eyN2GAZCoXjAEdKeBKmxr2YBtVYHGsGtrSqCUIPElRo=)
2: xt_rrIt1RREi-RT8oCTuH1QXyrs.crl (hash: QklECmEx4CBOVGAkHSxTfRh2a4LkM4r0GxpCKkI2u7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:bc:17:5f:2f:29:bb:83:c2:87:36:3b:3f:b7:27:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6dfebac8b75451122f914fca024ee1f5417cabb
Validity
Not Before: May 16 17:01:10 2026 GMT
Not After : May 17 17:01:10 2026 GMT
Subject: CN=6c5d21d17fead88b4f8d5f82a47577f53afee544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:08:ff:7a:a0:da:5e:0d:33:bd:4e:2e:58:14:
05:8b:8e:a6:0b:9e:5e:cb:c8:a1:fb:ac:00:cf:65:
5c:8b:4c:e6:90:e8:0d:0f:fd:f9:40:ab:9b:ff:ed:
1f:dc:63:b8:f2:7e:65:3d:2d:ee:8f:2b:ca:fc:0b:
33:ca:2d:41:d6:8b:ea:5e:a9:fd:3e:39:c3:75:54:
af:25:c0:c2:20:ee:3c:f7:03:7d:39:4f:e9:49:45:
59:5e:d0:82:a6:74:99:3d:49:19:cf:84:0c:ce:1d:
74:02:0b:4f:e6:36:b7:44:a7:0c:41:96:3b:d7:f7:
7c:b6:3b:c8:a7:95:b9:c2:6e:f8:59:7e:8a:21:d6:
4e:e2:0e:79:5b:6a:47:01:a9:9b:11:72:2e:af:d0:
01:f3:bc:db:c7:b9:6e:36:c6:7e:cd:9e:eb:95:39:
98:64:9b:c7:3f:ee:b8:01:46:4b:54:e4:3a:f2:11:
46:8a:9d:ab:59:02:db:78:f5:d9:19:85:7d:e4:99:
63:21:4a:63:0c:f2:4d:33:d3:b0:cc:e2:af:10:fb:
ba:f6:7c:ad:21:d4:1d:9c:11:72:f5:fb:0d:b8:ba:
40:6a:00:99:cc:2b:55:a3:43:8b:bd:5b:f8:05:3f:
07:8d:e3:04:8f:c9:61:2e:21:4a:0a:17:91:ea:5f:
c7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:5D:21:D1:7F:EA:D8:8B:4F:8D:5F:82:A4:75:77:F5:3A:FE:E5:44
X509v3 Authority Key Identifier:
keyid:C6:DF:EB:AC:8B:75:45:11:22:F9:14:FC:A0:24:EE:1F:54:17:CA:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:e5:1f:df:cc:ed:a6:30:b1:03:6b:33:ce:54:73:c7:5a:85:
4d:9e:2b:bf:5a:18:71:18:cb:22:c0:b3:6f:58:a6:71:d5:1b:
61:b2:43:eb:cd:1e:3e:00:f0:7d:bd:1e:62:85:01:b0:23:4d:
22:df:35:a9:68:92:bc:c4:a1:6f:ad:b2:ef:e3:e6:34:9b:17:
ca:94:76:45:a5:62:62:6c:eb:17:d7:7a:11:b9:56:56:5e:9c:
b4:ee:30:34:6f:49:0e:a4:55:8d:fa:1f:9e:0d:c7:13:8f:ca:
f5:22:c4:27:44:74:d3:fd:de:d3:e5:59:ad:a2:f7:29:36:c1:
0c:99:32:08:8d:a1:43:9d:f1:bc:73:5c:84:5a:fe:54:3e:4f:
30:59:e6:48:f7:5d:c0:a3:36:7e:d0:96:04:2c:67:31:c1:28:
4a:59:11:a3:2e:a7:bd:a6:93:27:73:0c:d1:9a:70:d4:df:67:
60:bc:d5:b0:90:fc:c6:86:b1:e9:82:66:86:ff:b5:fe:dc:f6:
e8:2b:fb:35:87:b2:d5:52:a7:10:1f:c7:df:c1:e6:23:57:02:
3a:d2:a8:40:96:db:7c:9f:09:08:e9:08:c0:2d:fa:25:81:4a:
13:82:d9:96:eb:e2:5c:cb:17:dc:38:86:89:27:6e:ab:be:72:
99:e0:08:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xvBdfLym7g8KHNjs/tyfAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2ZGZlYmFjOGI3NTQ1MTEyMmY5MTRmY2EwMjRlZTFmNTQx
N2NhYmIwHhcNMjYwNTE2MTcwMTEwWhcNMjYwNTE3MTcwMTEwWjAzMTEwLwYDVQQD
Eyg2YzVkMjFkMTdmZWFkODhiNGY4ZDVmODJhNDc1NzdmNTNhZmVlNTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngj/eqDaXg0zvU4uWBQFi46mC55e
y8ih+6wAz2Vci0zmkOgND/35QKub/+0f3GO48n5lPS3ujyvK/Aszyi1B1ovqXqn9
PjnDdVSvJcDCIO489wN9OU/pSUVZXtCCpnSZPUkZz4QMzh10AgtP5ja3RKcMQZY7
1/d8tjvIp5W5wm74WX6KIdZO4g55W2pHAambEXIur9AB87zbx7luNsZ+zZ7rlTmY
ZJvHP+64AUZLVOQ68hFGip2rWQLbePXZGYV95JljIUpjDPJNM9OwzOKvEPu69nyt
IdQdnBFy9fsNuLpAagCZzCtVo0OLvVv4BT8HjeMEj8lhLiFKCheR6l/HNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGxdIdF/6tiLT41fgqR1d/U6/uVEMB8GA1UdIwQY
MBaAFMbf66yLdUURIvkU/KAk7h9UF8q7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHRfcnJJdDFSUkVpLVJUOG9DVHVIMVFYeXJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9hNjVhNDgtMDkzNS00YTc5LWFjMGYt
MzgwOTFiMTk3NjRiLzEveHRfcnJJdDFSUkVpLVJUOG9DVHVIMVFYeXJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9hNjVhNDgtMDkzNS00YTc5LWFjMGYtMzgwOTFiMTk3NjRi
LzEveHRfcnJJdDFSUkVpLVJUOG9DVHVIMVFYeXJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiOUf38zt
pjCxA2szzlRzx1qFTZ4rv1oYcRjLIsCzb1imcdUbYbJD680ePgDwfb0eYoUBsCNN
It81qWiSvMShb62y7+PmNJsXypR2RaViYmzrF9d6EblWVl6ctO4wNG9JDqRVjfof
ng3HE4/K9SLEJ0R00/3e0+VZraL3KTbBDJkyCI2hQ53xvHNchFr+VD5PMFnmSPdd
wKM2ftCWBCxnMcEoSlkRoy6nvaaTJ3MM0Zpw1N9nYLzVsJD8xoax6YJmhv+1/tz2
6Cv7NYey1VKnEB/H38HmI1cCOtKoQJbbfJ8JCOkIwC36JYFKE4LZluviXMsX3DiG
iSduq75ymeAIfA==
-----END CERTIFICATE-----
Generated at Sat May 16 22:41:19 2026 by rpki-client