Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
File: xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft (raw, json)
Hash identifier: Q5YdY+Skt/vnHRx4YPPcv2crKcls+kfUfscIgOPEK4o=
Subject key identifier: 89:87:03:34:0F:1E:E9:0D:43:C6:72:08:6E:B9:B0:29:9E:B7:DE:F2
Authority key identifier: C6:3D:96:AE:FC:54:80:24:FA:36:FA:5C:E8:04:A4:8B:F7:CA:3A:40
Certificate issuer: /CN=c63d96aefc548024fa36fa5ce804a48bf7ca3a40
Certificate serial: 019F856906DC2670B230831AABAF10E57937
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
Manifest number: 19C2
Signing time: Tue 21 Jul 2026 16:01:20 +0000
Manifest this update: Tue 21 Jul 2026 16:01:20 +0000
Manifest next update: Wed 22 Jul 2026 16:01:20 +0000
Files and hashes: 1: Z4BDlr57O_FweazPHma0rDQN-Eg.roa (hash: RRUvm/U5FkAyaYrRTEjgZo8457PWupRX0eiUbSuUq0U=)
2: xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl (hash: Av213cY1OVqKVfKpWetiByABoX99TjHw80ZNizknpQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:69:06:dc:26:70:b2:30:83:1a:ab:af:10:e5:79:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c63d96aefc548024fa36fa5ce804a48bf7ca3a40
Validity
Not Before: Jul 21 16:01:20 2026 GMT
Not After : Jul 22 16:01:20 2026 GMT
Subject: CN=898703340f1ee90d43c672086eb9b0299eb7def2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5d:97:1e:7c:e9:98:29:55:bd:59:bb:75:db:
4d:04:bf:c1:44:70:62:2d:ea:77:ce:2d:78:83:bd:
7b:42:e3:a3:f0:dc:a4:88:49:74:14:20:1f:b8:b0:
51:04:92:d5:a0:92:d9:ee:78:da:b8:35:2e:d1:0a:
c2:6a:9b:16:ab:7f:5f:7f:03:c9:f7:f9:8e:ec:9a:
3a:52:4d:2b:a0:e9:d3:9f:0d:c5:b7:a4:d3:3b:fd:
dc:86:e1:ed:7c:e6:1c:89:3e:94:4d:0c:76:c4:d6:
00:41:27:99:3b:d3:fe:97:f8:4a:e5:72:a9:7f:b9:
6e:dd:5e:ca:6e:f3:88:aa:1d:36:6a:15:75:31:bb:
25:50:01:b0:0c:f3:c5:3d:1c:4a:77:8e:42:b4:7c:
8c:8a:e2:a1:ca:2e:a2:65:cd:8a:f1:80:12:91:7a:
81:88:59:df:4e:47:3d:da:4c:b4:53:59:57:a4:a0:
af:40:ae:8d:55:75:0f:3e:82:38:23:0f:90:80:23:
30:32:20:0a:fd:b0:aa:4b:21:e4:4a:86:e0:96:93:
a4:e7:93:f1:53:fd:8c:19:f6:16:70:9a:74:5f:9d:
44:38:a5:57:f7:8b:17:50:7d:5c:4f:a2:bf:b0:1e:
cd:8b:79:df:79:2c:ff:02:ff:70:4f:7f:22:aa:3e:
bf:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:87:03:34:0F:1E:E9:0D:43:C6:72:08:6E:B9:B0:29:9E:B7:DE:F2
X509v3 Authority Key Identifier:
keyid:C6:3D:96:AE:FC:54:80:24:FA:36:FA:5C:E8:04:A4:8B:F7:CA:3A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:e8:c9:5a:ba:f5:96:68:fe:8c:1d:49:92:39:ac:e3:4a:2f:
a3:6d:46:42:4f:5f:9b:85:95:96:6a:22:b1:51:0f:21:57:b8:
b2:09:bc:48:d9:f7:27:60:63:5d:e0:da:1a:d8:17:ff:17:63:
70:e8:c5:f3:f4:fa:bd:ac:a0:45:b8:84:49:f4:68:19:2a:9f:
59:59:33:40:85:fe:34:5a:aa:a5:77:9e:d3:cc:01:f6:aa:5f:
04:ce:ec:8c:09:0f:c2:88:e5:b6:93:04:b1:f7:f9:2e:b6:da:
a0:ec:ec:0c:d6:db:68:db:95:fc:06:c3:2a:3b:c8:b6:d0:b1:
01:fa:1c:05:5f:9f:15:ba:c7:d7:57:92:f8:92:2f:fa:e8:82:
73:2f:a3:de:f4:4e:46:e9:e8:21:b6:92:d8:0f:8d:ec:6f:be:
3e:ed:3e:f9:88:c7:be:04:dd:31:38:28:75:ce:13:6f:f8:79:
ac:cc:62:5e:0a:2f:0e:cc:f5:f5:f7:84:fa:14:b6:88:0f:1d:
99:36:d9:d3:ef:03:3f:d1:6e:27:6b:d2:90:a4:8d:81:f5:49:
b7:30:91:0b:b5:f5:e5:1f:ef:ec:cf:eb:7c:ef:16:f8:aa:c5:
5e:0a:8a:54:0f:c0:07:fc:3c:d0:34:8c:34:7d:9d:cc:6d:5c:
f7:53:e7:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+FaQbcJnCyMIMaq68Q5Xk3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2M2Q5NmFlZmM1NDgwMjRmYTM2ZmE1Y2U4MDRhNDhiZjdj
YTNhNDAwHhcNMjYwNzIxMTYwMTIwWhcNMjYwNzIyMTYwMTIwWjAzMTEwLwYDVQQD
Eyg4OTg3MDMzNDBmMWVlOTBkNDNjNjcyMDg2ZWI5YjAyOTllYjdkZWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr12XHnzpmClVvVm7ddtNBL/BRHBi
Lep3zi14g717QuOj8NykiEl0FCAfuLBRBJLVoJLZ7njauDUu0QrCapsWq39ffwPJ
9/mO7Jo6Uk0roOnTnw3Ft6TTO/3chuHtfOYciT6UTQx2xNYAQSeZO9P+l/hK5XKp
f7lu3V7KbvOIqh02ahV1MbslUAGwDPPFPRxKd45CtHyMiuKhyi6iZc2K8YASkXqB
iFnfTkc92ky0U1lXpKCvQK6NVXUPPoI4Iw+QgCMwMiAK/bCqSyHkSobglpOk55Px
U/2MGfYWcJp0X51EOKVX94sXUH1cT6K/sB7Ni3nfeSz/Av9wT38iqj6/AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFImHAzQPHukNQ8ZyCG65sCmet97yMB8GA1UdIwQY
MBaAFMY9lq78VIAk+jb6XOgEpIv3yjpAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGoyV3J2eFVnQ1Q2TnZwYzZBU2tpX2ZLT2tBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9lZGQ2YjgtYWJiZC00YjgxLTk3MDct
OTcxZDI4ZDQzYzE0LzEveGoyV3J2eFVnQ1Q2TnZwYzZBU2tpX2ZLT2tBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9lZGQ2YjgtYWJiZC00YjgxLTk3MDctOTcxZDI4ZDQzYzE0
LzEveGoyV3J2eFVnQ1Q2TnZwYzZBU2tpX2ZLT2tBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdejJWrr1
lmj+jB1Jkjms40ovo21GQk9fm4WVlmoisVEPIVe4sgm8SNn3J2BjXeDaGtgX/xdj
cOjF8/T6vaygRbiESfRoGSqfWVkzQIX+NFqqpXee08wB9qpfBM7sjAkPwojltpME
sff5LrbaoOzsDNbbaNuV/AbDKjvIttCxAfocBV+fFbrH11eS+JIv+uiCcy+j3vRO
RunoIbaS2A+N7G++Pu0++YjHvgTdMTgodc4Tb/h5rMxiXgovDsz19feE+hS2iA8d
mTbZ0+8DP9FuJ2vSkKSNgfVJtzCRC7X15R/v7M/rfO8W+KrFXgqKVA/AB/w80DSM
NH2dzG1c91Pnpw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:15:31 2026 by rpki-client