Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.mft
File: xx85HWDhoTnMxCsXoyqVNj31z7A.mft (raw, json)
Hash identifier: C1YHyukndg7Tfk4RCO8mlVEkpstrWnwFdmQR6iBIl1s=
Subject key identifier: 63:95:AC:C8:49:F0:F0:C2:E5:12:83:22:B6:64:46:E4:66:D1:F8:AF
Authority key identifier: C7:1F:39:1D:60:E1:A1:39:CC:C4:2B:17:A3:2A:95:36:3D:F5:CF:B0
Certificate issuer: /CN=c71f391d60e1a139ccc42b17a32a95363df5cfb0
Certificate serial: 019EBA347488A28E2ADC7DB5DD703AB50C08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xx85HWDhoTnMxCsXoyqVNj31z7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.mft
Manifest number: 0275
Signing time: Fri 12 Jun 2026 05:01:00 +0000
Manifest this update: Fri 12 Jun 2026 05:01:00 +0000
Manifest next update: Sat 13 Jun 2026 05:01:00 +0000
Files and hashes: 1: 5Ac1xGg2xzacy1Elgpwm7Fl9gOY.roa (hash: VWmcJPkpnJaJdz3GW3aT+bj0R6mJFxMSWGrX3LD0Zyk=)
2: xx85HWDhoTnMxCsXoyqVNj31z7A.crl (hash: jAAWbF5koWfPqNxjon02e/RU6KDdLdNnAhaTxuqeCXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/xx85HWDhoTnMxCsXoyqVNj31z7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ba:34:74:88:a2:8e:2a:dc:7d:b5:dd:70:3a:b5:0c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c71f391d60e1a139ccc42b17a32a95363df5cfb0
Validity
Not Before: Jun 12 05:01:00 2026 GMT
Not After : Jun 13 05:01:00 2026 GMT
Subject: CN=6395acc849f0f0c2e5128322b66446e466d1f8af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:df:2e:03:5b:08:02:c1:51:cf:59:a7:f1:e0:
a8:79:b6:36:d9:71:25:bc:bf:d4:83:9a:69:9b:6d:
2d:67:fe:7a:6a:0f:21:44:c2:d2:75:a8:43:c9:15:
25:78:3b:14:d8:ab:66:43:4c:5a:5a:9a:aa:94:d1:
7b:c2:9c:1c:9c:39:fa:7e:ba:18:71:50:ab:8b:af:
7e:06:cf:31:13:47:48:04:2d:c1:93:c9:76:25:31:
f4:b8:f6:88:41:83:3f:90:a4:40:59:0f:90:f8:91:
9e:1d:c2:de:1b:4f:38:d2:7a:5c:2e:92:82:3f:34:
27:e2:e2:6a:86:ee:5c:83:b7:b9:37:39:51:b8:95:
de:32:3e:93:53:1e:04:73:a8:e6:d0:ea:71:72:9d:
0c:39:d9:3f:e0:d8:b7:f8:80:fd:58:60:18:49:9c:
7b:a9:a7:d5:05:ec:75:11:94:ad:35:33:d6:1c:d7:
9d:83:ca:e5:79:b0:d7:07:2a:c5:1f:1d:32:df:8d:
fc:c7:6b:ec:19:d4:c5:b0:2c:ce:95:79:63:e1:db:
6a:e9:37:6f:ad:54:70:43:74:a4:b1:9a:b3:35:80:
bd:8b:65:fc:f1:76:53:4b:7b:79:ec:2d:88:a0:56:
5e:0e:49:18:b9:38:29:61:a3:73:8c:9a:4c:6a:db:
16:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:95:AC:C8:49:F0:F0:C2:E5:12:83:22:B6:64:46:E4:66:D1:F8:AF
X509v3 Authority Key Identifier:
keyid:C7:1F:39:1D:60:E1:A1:39:CC:C4:2B:17:A3:2A:95:36:3D:F5:CF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xx85HWDhoTnMxCsXoyqVNj31z7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ae:c5:88:cd:24:6b:79:4d:b1:3f:59:7f:c9:be:76:7b:c5:
00:db:34:89:a5:51:50:ea:2b:4f:3a:b6:c9:48:23:03:6a:e0:
39:95:d7:c1:76:79:ea:23:06:e0:71:61:e4:66:ba:7c:81:71:
d1:e9:22:69:99:1f:43:2b:70:ee:c2:96:98:9d:47:5c:e2:38:
0e:6c:28:1e:29:51:56:20:1b:d2:10:52:aa:15:5c:3f:37:ce:
57:02:d4:db:6b:14:86:07:e4:7f:b1:27:5b:5b:c7:07:d0:10:
20:ba:0f:e2:3a:1b:93:07:95:9a:dc:45:9c:cc:86:32:9c:2f:
a8:e4:0a:93:ae:90:97:58:fe:34:31:3c:85:d8:89:9f:ae:b6:
2a:54:62:f3:35:b4:83:78:96:dc:81:dd:52:14:66:f5:b5:04:
a5:23:4c:6b:0e:cb:d8:28:d0:f9:9e:22:0f:25:8d:e3:e5:cc:
51:38:85:6e:4f:df:f1:ac:8d:ee:64:06:45:f1:d3:0e:86:45:
b2:f8:d0:db:eb:d0:6c:c2:3d:b5:1e:25:e3:90:05:51:9d:25:
c0:81:c8:c8:b0:39:e4:bc:17:59:b6:1d:38:f9:9d:89:6a:ff:
56:a1:d1:2a:aa:51:a7:84:0d:9e:52:97:c6:b1:87:db:33:51:
be:37:d3:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ66NHSIoo4q3H213XA6tQwIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3MWYzOTFkNjBlMWExMzljY2M0MmIxN2EzMmE5NTM2M2Rm
NWNmYjAwHhcNMjYwNjEyMDUwMTAwWhcNMjYwNjEzMDUwMTAwWjAzMTEwLwYDVQQD
Eyg2Mzk1YWNjODQ5ZjBmMGMyZTUxMjgzMjJiNjY0NDZlNDY2ZDFmOGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxt8uA1sIAsFRz1mn8eCoebY22XEl
vL/Ug5ppm20tZ/56ag8hRMLSdahDyRUleDsU2KtmQ0xaWpqqlNF7wpwcnDn6froY
cVCri69+Bs8xE0dIBC3Bk8l2JTH0uPaIQYM/kKRAWQ+Q+JGeHcLeG0840npcLpKC
PzQn4uJqhu5cg7e5NzlRuJXeMj6TUx4Ec6jm0Opxcp0MOdk/4Ni3+ID9WGAYSZx7
qafVBex1EZStNTPWHNedg8rlebDXByrFHx0y3438x2vsGdTFsCzOlXlj4dtq6Tdv
rVRwQ3SksZqzNYC9i2X88XZTS3t57C2IoFZeDkkYuTgpYaNzjJpMatsWoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGOVrMhJ8PDC5RKDIrZkRuRm0fivMB8GA1UdIwQY
MBaAFMcfOR1g4aE5zMQrF6MqlTY99c+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHg4NUhXRGhvVG5NeENzWG95cVZOajMxejdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9kZTlmZmMtNDQ3Ny00ZTMwLTk1NzAt
NjU0MWNjMDA2ZWFjLzEveHg4NUhXRGhvVG5NeENzWG95cVZOajMxejdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9kZTlmZmMtNDQ3Ny00ZTMwLTk1NzAtNjU0MWNjMDA2ZWFj
LzEveHg4NUhXRGhvVG5NeENzWG95cVZOajMxejdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgq7FiM0k
a3lNsT9Zf8m+dnvFANs0iaVRUOorTzq2yUgjA2rgOZXXwXZ56iMG4HFh5Ga6fIFx
0ekiaZkfQytw7sKWmJ1HXOI4DmwoHilRViAb0hBSqhVcPzfOVwLU22sUhgfkf7En
W1vHB9AQILoP4jobkweVmtxFnMyGMpwvqOQKk66Ql1j+NDE8hdiJn662KlRi8zW0
g3iW3IHdUhRm9bUEpSNMaw7L2CjQ+Z4iDyWN4+XMUTiFbk/f8ayN7mQGRfHTDoZF
svjQ2+vQbMI9tR4l45AFUZ0lwIHIyLA55LwXWbYdOPmdiWr/VqHRKqpRp4QNnlKX
xrGH2zNRvjfT1Q==
-----END CERTIFICATE-----
Generated at Fri Jun 12 11:04:32 2026 by rpki-client