
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
File: xVnUaTVVufKtaAe6ztxLWi5wGkg.mft (raw, json)
Hash identifier: 4tcggmTdlVjrLYS5NXynkF68q6RpOmeSmiK8156Wnwc=
Subject key identifier: FC:27:3B:F0:07:BC:4C:7C:D2:7B:C9:D5:71:D8:23:74:60:50:21:C7
Authority key identifier: C5:59:D4:69:35:55:B9:F2:AD:68:07:BA:CE:DC:4B:5A:2E:70:1A:48
Certificate issuer: /CN=c559d4693555b9f2ad6807bacedc4b5a2e701a48
Certificate serial: 019EC2244386864699EEB6C8BD77FC567C3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
Manifest number: 0C8A
Signing time: Sat 13 Jun 2026 18:00:16 +0000
Manifest this update: Sat 13 Jun 2026 18:00:16 +0000
Manifest next update: Sun 14 Jun 2026 18:00:16 +0000
Files and hashes: 1: Hi_yIbXB_AqEZvECw_6A2niKbbY.roa (hash: V9KwW6TEefSi+Nbg4IOw24z7gPz8KPWyVOeCLVyS3EY=)
2: xVnUaTVVufKtaAe6ztxLWi5wGkg.crl (hash: vq+/LEogg8KJUD9Wl2d1k5d+QQ6/ftcTLhc0YU4AR9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:24:43:86:86:46:99:ee:b6:c8:bd:77:fc:56:7c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c559d4693555b9f2ad6807bacedc4b5a2e701a48
Validity
Not Before: Jun 13 18:00:16 2026 GMT
Not After : Jun 14 18:00:16 2026 GMT
Subject: CN=fc273bf007bc4c7cd27bc9d571d82374605021c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1c:93:8f:ea:9e:a7:da:68:7c:ae:ee:a7:b2:
e5:54:ce:6e:23:02:a4:e8:4e:2b:d3:2c:dd:33:84:
19:cc:62:80:4d:44:e4:84:2d:f8:c8:c1:2f:06:bc:
51:72:3a:d7:db:0e:e2:17:0e:24:2b:ce:5c:44:a7:
3e:44:7a:bf:03:a9:9c:dd:ae:a6:af:7b:05:c1:c3:
4b:b7:28:d2:6d:47:29:cd:12:da:18:07:25:74:ff:
55:23:cd:a2:78:14:99:66:72:72:c6:80:9e:f4:b2:
76:95:70:be:61:66:76:99:62:58:12:62:35:bc:cc:
9d:b2:e8:3f:2d:4d:eb:db:b1:15:b7:49:ce:aa:34:
43:22:dd:59:c2:04:0a:5a:9b:22:4d:1c:0d:90:84:
ad:fe:94:16:51:cf:26:34:e0:11:36:5b:42:da:a3:
e3:05:e1:d9:7c:38:64:85:29:a5:80:db:8e:6b:d1:
7e:2b:bb:c8:4b:f3:f6:b3:fa:8d:46:2e:0f:9f:ad:
0d:72:ab:d5:a0:23:f9:0b:54:b6:c3:b0:39:50:9a:
5a:2b:25:cb:df:0c:4c:d6:8d:ed:93:0f:b8:9c:64:
fd:a8:6b:3b:fa:2f:5b:2f:a0:d8:0c:89:eb:8c:56:
82:0e:6e:5f:5a:92:70:a5:7e:71:b4:3a:4f:81:09:
2d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:27:3B:F0:07:BC:4C:7C:D2:7B:C9:D5:71:D8:23:74:60:50:21:C7
X509v3 Authority Key Identifier:
keyid:C5:59:D4:69:35:55:B9:F2:AD:68:07:BA:CE:DC:4B:5A:2E:70:1A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:c9:dd:c5:c8:02:81:06:23:4d:c8:26:f5:38:a0:dd:92:3e:
41:a2:00:1f:af:6a:0b:c9:43:e5:4f:d7:61:9f:ff:b9:95:87:
75:4f:f4:da:af:5a:ef:66:55:b0:66:1c:83:0e:3a:f0:38:de:
78:06:82:2b:c6:66:0c:7a:e3:42:4c:28:6b:d7:04:17:2c:04:
45:db:41:c2:dc:a8:0f:fd:26:97:18:a2:53:d8:c6:b7:0e:bc:
1e:58:ed:f8:6b:77:68:30:8d:64:76:79:22:0a:c8:5f:9b:24:
f1:f4:c3:0c:11:00:0f:cd:d3:2c:4e:27:ce:e2:dc:09:55:a9:
84:31:6c:b5:27:b6:e3:e8:12:68:72:11:76:5b:f3:0b:ba:16:
ca:54:43:35:05:67:9c:d8:07:34:3e:65:b7:73:39:fa:3b:c3:
5a:94:b4:4e:2f:0d:fb:26:42:46:5d:49:ae:e6:5f:c8:10:af:
ab:37:a2:07:09:df:74:84:0a:97:4f:d8:0b:ec:88:68:cb:75:
cb:a3:ec:01:3a:8d:ab:43:19:cf:f3:61:27:b0:8f:3d:48:22:
dc:c6:3b:6a:5b:98:f0:c2:fa:f3:35:97:f3:ae:df:ac:89:60:
e4:cf:42:6c:f4:fd:1f:19:8d:b6:32:7f:c4:7a:30:f0:a3:9c:
ab:43:93:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CJEOGhkaZ7rbIvXf8Vnw8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NTlkNDY5MzU1NWI5ZjJhZDY4MDdiYWNlZGM0YjVhMmU3
MDFhNDgwHhcNMjYwNjEzMTgwMDE2WhcNMjYwNjE0MTgwMDE2WjAzMTEwLwYDVQQD
EyhmYzI3M2JmMDA3YmM0YzdjZDI3YmM5ZDU3MWQ4MjM3NDYwNTAyMWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhyTj+qep9pofK7up7LlVM5uIwKk
6E4r0yzdM4QZzGKATUTkhC34yMEvBrxRcjrX2w7iFw4kK85cRKc+RHq/A6mc3a6m
r3sFwcNLtyjSbUcpzRLaGAcldP9VI82ieBSZZnJyxoCe9LJ2lXC+YWZ2mWJYEmI1
vMydsug/LU3r27EVt0nOqjRDIt1ZwgQKWpsiTRwNkISt/pQWUc8mNOARNltC2qPj
BeHZfDhkhSmlgNuOa9F+K7vIS/P2s/qNRi4Pn60NcqvVoCP5C1S2w7A5UJpaKyXL
3wxM1o3tkw+4nGT9qGs7+i9bL6DYDInrjFaCDm5fWpJwpX5xtDpPgQktEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPwnO/AHvEx80nvJ1XHYI3RgUCHHMB8GA1UdIwQY
MBaAFMVZ1Gk1VbnyrWgHus7cS1oucBpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFZuVWFUVlZ1Zkt0YUFlNnp0eExXaTV3R2tnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8zZjBmOGItYWY5My00MjNiLWJlYTUt
ZDJlMzUxNjA5NzU5LzEveFZuVWFUVlZ1Zkt0YUFlNnp0eExXaTV3R2tnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC8zZjBmOGItYWY5My00MjNiLWJlYTUtZDJlMzUxNjA5NzU5
LzEveFZuVWFUVlZ1Zkt0YUFlNnp0eExXaTV3R2tnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWsndxcgC
gQYjTcgm9Tig3ZI+QaIAH69qC8lD5U/XYZ//uZWHdU/02q9a72ZVsGYcgw468Dje
eAaCK8ZmDHrjQkwoa9cEFywERdtBwtyoD/0mlxiiU9jGtw68Hljt+Gt3aDCNZHZ5
IgrIX5sk8fTDDBEAD83TLE4nzuLcCVWphDFstSe24+gSaHIRdlvzC7oWylRDNQVn
nNgHND5lt3M5+jvDWpS0Ti8N+yZCRl1JruZfyBCvqzeiBwnfdIQKl0/YC+yIaMt1
y6PsATqNq0MZz/NhJ7CPPUgi3MY7aluY8ML68zWX867frIlg5M9CbPT9HxmNtjJ/
xHow8KOcq0OTjA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:34:28 2026 by rpki-client