Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.mft
File: xfFStqDQBGJ9KF2Hmqg-WEYast8.mft (raw, json)
Hash identifier: M8yPZ81GIcz8KX3oBTLWCAQ+slndVb+gWISovzd2lG8=
Subject key identifier: 1D:64:CE:57:81:D9:38:0E:11:E2:03:04:B2:9B:F2:CF:33:DA:84:AA
Authority key identifier: C5:F1:52:B6:A0:D0:04:62:7D:28:5D:87:9A:A8:3E:58:46:1A:B2:DF
Certificate issuer: /CN=c5f152b6a0d004627d285d879aa83e58461ab2df
Certificate serial: 019D9A06D0CE99B72FE71141AB997C8DF7C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfFStqDQBGJ9KF2Hmqg-WEYast8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.mft
Manifest number: 14E6
Signing time: Fri 17 Apr 2026 06:00:31 +0000
Manifest this update: Fri 17 Apr 2026 06:00:31 +0000
Manifest next update: Sat 18 Apr 2026 06:00:31 +0000
Files and hashes: 1: NwvDc-yJwXeNivsjoY0gJyIcmR4.roa (hash: FEVqQwQ9gr8Xh59AeGfQNtLNsq4t+I6eMLo4jtBSrFY=)
2: xfFStqDQBGJ9KF2Hmqg-WEYast8.crl (hash: 2tiMAKayZROo+/vRCJISBk5B7LdJIWYEgBEcPPAkAh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xfFStqDQBGJ9KF2Hmqg-WEYast8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:d0:ce:99:b7:2f:e7:11:41:ab:99:7c:8d:f7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5f152b6a0d004627d285d879aa83e58461ab2df
Validity
Not Before: Apr 17 06:00:31 2026 GMT
Not After : Apr 18 06:00:31 2026 GMT
Subject: CN=1d64ce5781d9380e11e20304b29bf2cf33da84aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e2:4d:11:7b:82:6f:42:7f:42:e2:92:b7:97:
47:25:ee:11:be:e2:07:dc:8a:30:79:af:8c:74:36:
df:c3:14:41:a4:ff:c5:19:f6:92:f5:bb:8c:1c:96:
b3:2b:79:35:31:d2:93:83:e7:2a:ad:b1:19:a0:1c:
0a:2a:dd:f5:03:5d:b5:d5:69:24:4c:c5:13:f5:c6:
8d:0d:d7:67:53:e6:88:da:0e:9b:5c:1a:62:5f:55:
71:b2:8e:0f:12:54:23:00:f0:de:21:af:42:83:25:
e5:2d:91:ad:0a:af:c5:79:e9:3b:bf:0a:67:52:ef:
38:bf:9a:7e:19:c9:63:44:5e:b9:cc:d0:4c:9f:a2:
e0:6e:98:75:bb:6d:35:e8:8f:5f:14:71:bc:c6:a7:
00:28:44:ed:9d:fc:34:a3:37:74:66:cd:61:a0:37:
ae:19:51:84:75:3a:2f:2a:71:6c:81:4a:3b:6d:5e:
b0:00:02:e6:f8:b1:aa:8b:d2:d3:c9:77:39:e4:9e:
36:48:7b:ec:81:9f:84:11:62:25:98:e1:3b:e3:26:
f2:9c:8d:90:8b:52:e0:3c:a9:cd:61:33:61:3d:07:
c1:10:b1:11:d6:a2:68:57:c7:a0:3b:fd:73:d8:fb:
b1:e8:da:5f:ed:40:96:11:fe:f2:30:a5:56:7e:84:
88:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:64:CE:57:81:D9:38:0E:11:E2:03:04:B2:9B:F2:CF:33:DA:84:AA
X509v3 Authority Key Identifier:
keyid:C5:F1:52:B6:A0:D0:04:62:7D:28:5D:87:9A:A8:3E:58:46:1A:B2:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfFStqDQBGJ9KF2Hmqg-WEYast8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:47:24:2f:6e:4c:c2:39:5d:b0:0d:0b:1b:54:ba:81:c9:3a:
c3:1b:33:b4:c8:98:88:be:60:ac:59:76:de:66:05:0e:1a:6a:
9a:54:14:46:8e:0d:44:1e:89:87:08:c2:c7:a5:5b:c0:37:e2:
4d:ca:4c:b1:a9:36:00:1a:36:e1:10:be:25:0a:38:9b:52:19:
df:c0:c0:28:3b:48:73:7b:67:1d:86:f6:f5:d9:be:89:a7:75:
25:3a:eb:75:eb:0c:45:01:22:bf:2e:ca:63:d6:79:20:e6:12:
50:02:4e:35:51:37:36:f5:65:7b:01:27:9c:a3:34:c2:57:74:
df:4e:8b:d0:ee:00:e9:06:83:48:c6:dc:79:36:08:ef:9a:95:
d7:e7:aa:49:7e:8a:bd:2b:c3:4b:46:74:e0:c7:3b:6a:e1:66:
3c:49:d2:0f:eb:79:a3:1a:58:c3:da:5d:22:87:35:b5:7d:38:
19:0a:ac:ef:3d:ca:da:93:41:3c:96:4d:76:83:fe:f8:62:9a:
ca:62:34:56:b3:18:ca:d2:59:e9:8d:e3:83:5e:f8:57:ce:53:
50:54:de:e1:fb:cc:0f:e3:66:51:9b:c6:0b:04:1f:14:c3:cf:
5e:c4:0c:fc:83:e3:8f:01:85:17:b7:6b:33:9f:f0:4a:c8:df:
3c:31:74:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aBtDOmbcv5xFBq5l8jffAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1ZjE1MmI2YTBkMDA0NjI3ZDI4NWQ4NzlhYTgzZTU4NDYx
YWIyZGYwHhcNMjYwNDE3MDYwMDMxWhcNMjYwNDE4MDYwMDMxWjAzMTEwLwYDVQQD
EygxZDY0Y2U1NzgxZDkzODBlMTFlMjAzMDRiMjliZjJjZjMzZGE4NGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOJNEXuCb0J/QuKSt5dHJe4RvuIH
3Iowea+MdDbfwxRBpP/FGfaS9buMHJazK3k1MdKTg+cqrbEZoBwKKt31A1211Wkk
TMUT9caNDddnU+aI2g6bXBpiX1Vxso4PElQjAPDeIa9CgyXlLZGtCq/Feek7vwpn
Uu84v5p+GcljRF65zNBMn6Lgbph1u2016I9fFHG8xqcAKETtnfw0ozd0Zs1hoDeu
GVGEdTovKnFsgUo7bV6wAALm+LGqi9LTyXc55J42SHvsgZ+EEWIlmOE74ybynI2Q
i1LgPKnNYTNhPQfBELER1qJoV8egO/1z2Pux6Npf7UCWEf7yMKVWfoSIRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB1kzleB2TgOEeIDBLKb8s8z2oSqMB8GA1UdIwQY
MBaAFMXxUrag0ARifShdh5qoPlhGGrLfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGZGU3RxRFFCR0o5S0YySG1xZy1XRVlhc3Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81M2FkNWEtMGEzNy00ZjY1LWE2YzYt
NzM3ZTc4Yzg3MDEyLzEveGZGU3RxRFFCR0o5S0YySG1xZy1XRVlhc3Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi81M2FkNWEtMGEzNy00ZjY1LWE2YzYtNzM3ZTc4Yzg3MDEy
LzEveGZGU3RxRFFCR0o5S0YySG1xZy1XRVlhc3Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApUckL25M
wjldsA0LG1S6gck6wxsztMiYiL5grFl23mYFDhpqmlQURo4NRB6JhwjCx6VbwDfi
TcpMsak2ABo24RC+JQo4m1IZ38DAKDtIc3tnHYb29dm+iad1JTrrdesMRQEivy7K
Y9Z5IOYSUAJONVE3NvVlewEnnKM0wld0306L0O4A6QaDSMbceTYI75qV1+eqSX6K
vSvDS0Z04Mc7auFmPEnSD+t5oxpYw9pdIoc1tX04GQqs7z3K2pNBPJZNdoP++GKa
ymI0VrMYytJZ6Y3jg174V85TUFTe4fvMD+NmUZvGCwQfFMPPXsQM/IPjjwGFF7dr
M5/wSsjfPDF0Rg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:23:29 2026 by rpki-client