Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
File: xFvSa8XYHu6cjhotDXjRDarggZU.mft (raw, json)
Hash identifier: liWE38nBRlF+9vV//7D3MXSZGgTlxLJ3uCrwLfdWX/8=
Subject key identifier: 9C:47:9C:96:A2:FE:EC:2B:7C:B9:12:82:A9:8B:CE:4A:DF:7F:57:B6
Authority key identifier: C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95
Certificate issuer: /CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195
Certificate serial: 019EB80EC229085766A0DD66660A6C3CAE9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
Manifest number: 1958
Signing time: Thu 11 Jun 2026 19:00:35 +0000
Manifest this update: Thu 11 Jun 2026 19:00:35 +0000
Manifest next update: Fri 12 Jun 2026 19:00:35 +0000
Files and hashes: 1: FX91S7TqeS_5eNXFwkhAJLeDMDY.roa (hash: 7/g0n2srHScQb2lUJNavUfjGDwgVOP/uF61M1Zy+4aU=)
2: xFvSa8XYHu6cjhotDXjRDarggZU.crl (hash: +qpLKC2aMjpbJSz4ddeSxx+WpFIgnfjAOq+Nc8Vmu64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 19:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:0e:c2:29:08:57:66:a0:dd:66:66:0a:6c:3c:ae:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195
Validity
Not Before: Jun 11 19:00:35 2026 GMT
Not After : Jun 12 19:00:35 2026 GMT
Subject: CN=9c479c96a2feec2b7cb91282a98bce4adf7f57b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:43:57:95:6f:83:94:44:c5:dc:0d:96:74:68:
34:34:04:e6:5c:f0:1f:fe:b8:04:d2:89:51:02:59:
67:fc:48:71:5e:a5:6c:07:89:24:4d:14:b7:6e:aa:
d3:b2:9e:72:ca:d9:84:f7:1d:f5:85:ed:29:97:4a:
49:45:4e:e0:04:e7:0b:95:9c:77:9f:8d:de:49:cb:
04:a9:13:72:40:9c:1b:bf:53:24:ae:f0:06:44:30:
a4:ff:00:4d:04:54:a9:f6:10:15:ab:a3:69:a6:ef:
68:58:c1:f4:3f:aa:da:4d:49:86:58:63:f1:25:c1:
ce:50:e6:c9:c9:49:6b:50:7e:52:75:b5:83:d2:c4:
1d:08:1e:2a:25:af:bc:2f:e0:4c:d0:39:15:64:26:
d6:8a:82:b3:d0:4e:7e:4a:bf:e2:3a:ff:4b:90:a1:
4f:a3:ab:01:51:2b:cd:66:4a:1a:ca:c4:3a:01:0c:
7a:0b:c5:c8:e8:5b:65:92:1d:b2:f2:ab:2e:0e:3f:
a6:27:a2:61:ec:20:f9:16:1c:10:b5:a3:b1:cb:f1:
b8:ef:36:23:e0:ad:1e:eb:80:ab:6c:c1:c1:45:e6:
3d:ca:a2:a2:11:52:39:e9:fe:c8:d3:7c:bd:b7:8d:
33:ab:ca:1c:22:c2:c1:a2:15:c9:7c:bc:e6:d3:8a:
ce:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:47:9C:96:A2:FE:EC:2B:7C:B9:12:82:A9:8B:CE:4A:DF:7F:57:B6
X509v3 Authority Key Identifier:
keyid:C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:55:f4:21:10:ee:ea:d7:ca:a2:d5:4a:c9:bf:85:97:04:4f:
1a:42:14:26:3b:3d:f7:8e:ec:3b:04:67:1c:51:fe:45:af:b0:
28:56:ac:3e:b0:ff:ef:4c:7a:64:d2:42:26:31:19:42:2a:20:
a5:5d:61:f7:ee:d8:55:22:bb:fa:68:3d:42:af:13:e6:cf:89:
33:59:cd:e4:53:79:64:cc:56:1a:12:84:ed:4b:95:45:11:ab:
0c:6e:ac:19:a3:f0:c2:b6:95:a5:d3:28:8a:67:c1:96:8f:b1:
cc:0f:c7:58:c1:c4:b8:2e:19:e4:bd:c5:95:d1:2d:ee:45:c2:
fb:f1:65:a2:95:07:4a:c7:51:b2:7e:ec:f1:40:16:32:47:13:
d5:59:b2:99:c4:73:ac:01:14:8d:4b:d5:c1:f1:10:9b:16:dd:
12:e7:5b:cf:fb:c0:ca:67:c4:73:36:c0:c9:29:d2:21:a0:29:
14:26:db:7d:0a:ea:6b:37:88:8c:31:47:6a:06:a3:41:3a:25:
3b:6e:3d:90:40:55:54:a1:ea:60:f0:72:99:7b:ca:48:f4:64:
99:eb:7e:4f:c8:30:36:69:95:34:f6:bd:12:f4:e6:1a:73:49:
4b:60:f6:8f:d1:f3:b0:bb:6f:1a:83:0e:e5:66:93:ec:59:03:
07:cc:ae:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ64DsIpCFdmoN1mZgpsPK6aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0NWJkMjZiYzVkODFlZWU5YzhlMWEyZDBkNzhkMTBkYWFl
MDgxOTUwHhcNMjYwNjExMTkwMDM1WhcNMjYwNjEyMTkwMDM1WjAzMTEwLwYDVQQD
Eyg5YzQ3OWM5NmEyZmVlYzJiN2NiOTEyODJhOThiY2U0YWRmN2Y1N2I2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kNXlW+DlETF3A2WdGg0NATmXPAf
/rgE0olRAlln/EhxXqVsB4kkTRS3bqrTsp5yytmE9x31he0pl0pJRU7gBOcLlZx3
n43eScsEqRNyQJwbv1MkrvAGRDCk/wBNBFSp9hAVq6Nppu9oWMH0P6raTUmGWGPx
JcHOUObJyUlrUH5SdbWD0sQdCB4qJa+8L+BM0DkVZCbWioKz0E5+Sr/iOv9LkKFP
o6sBUSvNZkoaysQ6AQx6C8XI6Ftlkh2y8qsuDj+mJ6Jh7CD5FhwQtaOxy/G47zYj
4K0e64CrbMHBReY9yqKiEVI56f7I03y9t40zq8ocIsLBohXJfLzm04rOqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJxHnJai/uwrfLkSgqmLzkrff1e2MB8GA1UdIwQY
MBaAFMRb0mvF2B7unI4aLQ140Q2q4IGVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEZ2U2E4WFlIdTZjamhvdERYalJEYXJnZ1pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC84NzgyOWEtZTMzMi00MjRmLTljNGYt
ZTQ0N2JlMmFjNjhlLzEveEZ2U2E4WFlIdTZjamhvdERYalJEYXJnZ1pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC84NzgyOWEtZTMzMi00MjRmLTljNGYtZTQ0N2JlMmFjNjhl
LzEveEZ2U2E4WFlIdTZjamhvdERYalJEYXJnZ1pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJlX0IRDu
6tfKotVKyb+FlwRPGkIUJjs9947sOwRnHFH+Ra+wKFasPrD/70x6ZNJCJjEZQiog
pV1h9+7YVSK7+mg9Qq8T5s+JM1nN5FN5ZMxWGhKE7UuVRRGrDG6sGaPwwraVpdMo
imfBlo+xzA/HWMHEuC4Z5L3FldEt7kXC+/FlopUHSsdRsn7s8UAWMkcT1VmymcRz
rAEUjUvVwfEQmxbdEudbz/vAymfEczbAySnSIaApFCbbfQrqazeIjDFHagajQTol
O249kEBVVKHqYPBymXvKSPRkmet+T8gwNmmVNPa9EvTmGnNJS2D2j9HzsLtvGoMO
5WaT7FkDB8yurw==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:20:50 2026 by rpki-client