Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
File: X4KumjBKwILBiiiRZm9kzugdXKg.mft (raw, json)
Hash identifier: S4ONxYFmhIsA+NNodGFtlO+Vta+mecA0QDcF4xYDEm0=
Subject key identifier: DE:6E:4D:EA:E7:F7:EA:47:35:73:32:6A:23:2E:13:5B:96:46:9D:41
Authority key identifier: 5F:82:AE:9A:30:4A:C0:82:C1:8A:28:91:66:6F:64:CE:E8:1D:5C:A8
Certificate issuer: /CN=5f82ae9a304ac082c18a2891666f64cee81d5ca8
Certificate serial: 019ED3F409DF33204E7D5B835D1F785F85CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
Manifest number: 10CA
Signing time: Wed 17 Jun 2026 05:00:46 +0000
Manifest this update: Wed 17 Jun 2026 05:00:46 +0000
Manifest next update: Thu 18 Jun 2026 05:00:46 +0000
Files and hashes: 1: FpMR3_wbyPoQ3SpLC3msQFuHBCc.roa (hash: mnRTyPfeR1b8jfxG5BpoCLK6zLk4lmp1OJjO9At2igc=)
2: X4KumjBKwILBiiiRZm9kzugdXKg.crl (hash: dBCJu4S4DbqNJlJRayIEWjB983Ahz0v6JyMcWXnC6lk=)
3: YcE6ReHh6unnU83H-TjyslkyeUw.roa (hash: McwZCMtZVwtttRxvoSUbvLr+7AkamJmadn/zlM3onqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d3:f4:09:df:33:20:4e:7d:5b:83:5d:1f:78:5f:85:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f82ae9a304ac082c18a2891666f64cee81d5ca8
Validity
Not Before: Jun 17 05:00:46 2026 GMT
Not After : Jun 18 05:00:46 2026 GMT
Subject: CN=de6e4deae7f7ea473573326a232e135b96469d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:af:35:c2:ac:7b:00:de:d0:85:10:37:8b:ac:
ef:6b:93:5d:7b:ca:8a:c5:f3:3a:cb:15:40:fe:d2:
42:bc:67:75:a0:df:ba:5e:69:63:b4:f5:c4:98:ae:
3c:ef:84:3d:db:4c:0b:45:c6:38:d9:3f:3a:06:8c:
36:29:32:25:1f:f1:12:28:04:da:e5:cf:c4:24:0f:
a7:ec:f5:c4:4e:61:c2:67:b5:17:bf:5f:69:24:61:
93:b0:40:18:54:c5:28:23:85:38:f9:11:5e:11:59:
dd:91:e3:ff:4d:13:ce:1d:29:7c:92:44:6c:93:c9:
79:8c:f3:1d:bc:a6:41:4f:87:60:6f:ee:0d:74:0f:
6f:8e:47:7d:39:ad:c3:01:ba:ee:00:0d:70:86:7d:
8a:4d:13:73:06:33:04:b5:00:2d:08:72:68:6e:4d:
eb:f1:16:38:e2:d2:10:5f:ac:c9:a1:70:8d:7d:cd:
bc:a9:73:ce:d0:2d:b0:6f:25:18:ae:c8:5b:6c:c4:
12:37:5d:15:11:0a:78:dd:b5:27:09:28:a0:7d:ea:
e9:49:14:f9:94:e0:cc:7b:79:f5:03:ba:1b:36:32:
73:c9:b9:b5:99:85:f3:39:08:73:97:2f:1b:83:17:
27:74:8b:57:88:72:c9:e2:b5:5f:52:17:7a:8d:86:
7b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:6E:4D:EA:E7:F7:EA:47:35:73:32:6A:23:2E:13:5B:96:46:9D:41
X509v3 Authority Key Identifier:
keyid:5F:82:AE:9A:30:4A:C0:82:C1:8A:28:91:66:6F:64:CE:E8:1D:5C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:96:be:97:25:e5:5d:b2:8f:56:a8:42:13:72:12:6a:09:64:
b8:b8:90:90:b2:dc:0a:cb:44:a2:d8:27:22:57:77:56:ac:cc:
41:0e:34:08:2b:e1:b6:63:15:f9:90:5d:17:e4:55:3b:60:ed:
d6:d6:6a:26:7b:c3:94:3a:b3:d3:19:be:8a:b8:82:7d:0b:c2:
63:44:ec:81:2c:42:d8:de:a9:15:7d:23:cd:c0:48:ca:d4:c1:
3f:ca:0e:fb:df:98:f6:a9:62:4b:91:ab:1b:8f:e8:09:05:e8:
be:73:2c:d9:48:c2:23:96:6c:7c:75:92:41:57:a2:da:d6:03:
ef:c2:7c:25:36:20:ac:23:3e:e9:6b:9c:4e:be:10:fd:95:20:
06:3d:c1:18:07:d7:a6:a9:a8:75:7b:a8:88:73:cf:91:3f:0f:
58:fa:7d:21:76:9b:dc:4b:6f:82:ca:cc:cb:5e:61:be:70:6e:
5b:16:7b:97:67:dc:07:0b:20:20:60:00:85:0f:1e:c0:c3:b3:
12:79:2d:4e:27:f2:45:0e:ea:d1:fd:9c:91:9e:b6:f2:bb:46:
a2:9f:18:8c:81:96:0a:67:4a:c4:a8:bf:95:2f:10:6a:e3:ca:
65:39:fd:65:02:d6:90:81:a4:7b:15:aa:08:c7:ef:ea:0e:48:
01:82:f5:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7T9AnfMyBOfVuDXR94X4XLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmODJhZTlhMzA0YWMwODJjMThhMjg5MTY2NmY2NGNlZTgx
ZDVjYTgwHhcNMjYwNjE3MDUwMDQ2WhcNMjYwNjE4MDUwMDQ2WjAzMTEwLwYDVQQD
EyhkZTZlNGRlYWU3ZjdlYTQ3MzU3MzMyNmEyMzJlMTM1Yjk2NDY5ZDQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5q81wqx7AN7QhRA3i6zva5Nde8qK
xfM6yxVA/tJCvGd1oN+6XmljtPXEmK4874Q920wLRcY42T86Bow2KTIlH/ESKATa
5c/EJA+n7PXETmHCZ7UXv19pJGGTsEAYVMUoI4U4+RFeEVndkeP/TRPOHSl8kkRs
k8l5jPMdvKZBT4dgb+4NdA9vjkd9Oa3DAbruAA1whn2KTRNzBjMEtQAtCHJobk3r
8RY44tIQX6zJoXCNfc28qXPO0C2wbyUYrshbbMQSN10VEQp43bUnCSigferpSRT5
lODMe3n1A7obNjJzybm1mYXzOQhzly8bgxcndItXiHLJ4rVfUhd6jYZ7YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN5uTern9+pHNXMyaiMuE1uWRp1BMB8GA1UdIwQY
MBaAFF+CrpowSsCCwYookWZvZM7oHVyoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDRLdW1qQkt3SUxCaWlpUlptOWt6dWdkWEtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9kNmRiZDgtNjQ2Ni00OGQwLWE1OTct
M2VjNDQ3MzEwZGZiLzEvWDRLdW1qQkt3SUxCaWlpUlptOWt6dWdkWEtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9kNmRiZDgtNjQ2Ni00OGQwLWE1OTctM2VjNDQ3MzEwZGZi
LzEvWDRLdW1qQkt3SUxCaWlpUlptOWt6dWdkWEtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnJa+lyXl
XbKPVqhCE3ISaglkuLiQkLLcCstEotgnIld3VqzMQQ40CCvhtmMV+ZBdF+RVO2Dt
1tZqJnvDlDqz0xm+iriCfQvCY0TsgSxC2N6pFX0jzcBIytTBP8oO+9+Y9qliS5Gr
G4/oCQXovnMs2UjCI5ZsfHWSQVei2tYD78J8JTYgrCM+6WucTr4Q/ZUgBj3BGAfX
pqmodXuoiHPPkT8PWPp9IXab3EtvgsrMy15hvnBuWxZ7l2fcBwsgIGAAhQ8ewMOz
EnktTifyRQ7q0f2ckZ628rtGop8YjIGWCmdKxKi/lS8QauPKZTn9ZQLWkIGkexWq
CMfv6g5IAYL13g==
-----END CERTIFICATE-----
Generated at Wed Jun 17 11:55:24 2026 by rpki-client