Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft
File: XEwop1rJaVHcOEAKgPnvOqryqss.mft (raw, json)
Hash identifier: tqa/aWgW7C5iwsufdaVRDV3Q9LtfoM2AZfN7Yfoh4U4=
Subject key identifier: FF:20:F9:6E:46:FD:C9:AA:FA:88:C2:85:59:E5:B0:32:E8:F6:F5:21
Authority key identifier: 5C:4C:28:A7:5A:C9:69:51:DC:38:40:0A:80:F9:EF:3A:AA:F2:AA:CB
Certificate issuer: /CN=5c4c28a75ac96951dc38400a80f9ef3aaaf2aacb
Certificate serial: 019EC1495A6919760765EB895E32E574E2C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEwop1rJaVHcOEAKgPnvOqryqss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft
Manifest number: 195B
Signing time: Sat 13 Jun 2026 14:01:10 +0000
Manifest this update: Sat 13 Jun 2026 14:01:10 +0000
Manifest next update: Sun 14 Jun 2026 14:01:10 +0000
Files and hashes: 1: 9hnY7Mi-DWWNXT8zxPWlDMpFkVY.roa (hash: KmgeWMyp8Cb4dRrZsFfQDYyQitlhpxsyGtinqL7w4YI=)
2: XEwop1rJaVHcOEAKgPnvOqryqss.crl (hash: /1u//ApfvI2H9urJQxVrfik86kRxYvb0vYqobEg748I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEwop1rJaVHcOEAKgPnvOqryqss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:49:5a:69:19:76:07:65:eb:89:5e:32:e5:74:e2:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c4c28a75ac96951dc38400a80f9ef3aaaf2aacb
Validity
Not Before: Jun 13 14:01:10 2026 GMT
Not After : Jun 14 14:01:10 2026 GMT
Subject: CN=ff20f96e46fdc9aafa88c28559e5b032e8f6f521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:00:85:ca:5c:1c:ec:1e:9f:6d:a7:da:73:07:
2c:82:e4:2d:ad:22:02:63:df:b0:be:95:3d:32:52:
c1:a3:fd:27:9f:7a:44:dd:e0:bd:69:44:e9:c6:bb:
c0:34:93:b3:82:12:65:be:89:32:70:89:6a:e6:03:
49:33:a4:c0:4f:a7:e8:8d:76:8d:84:6b:18:c4:49:
30:87:57:ea:88:7f:80:12:21:78:8c:ae:62:b2:04:
f1:94:17:db:11:ab:a0:43:93:3e:5c:da:11:6d:f7:
9f:ec:4d:22:2b:4f:f6:4b:24:5a:6b:2d:e3:0c:3a:
80:84:28:cd:66:a6:f9:c6:e0:06:34:af:09:5f:74:
a0:b5:c4:65:eb:cf:69:5a:6d:44:8b:b6:d0:d3:88:
b7:6e:20:c3:18:af:5d:2f:d0:7f:33:68:53:24:e2:
b8:1a:64:77:b7:24:f4:ab:23:79:3d:44:48:10:84:
4b:68:16:e1:32:4e:0c:8f:52:21:3f:a1:2a:28:fc:
28:95:3e:3f:63:6f:81:cd:d5:19:90:36:49:ae:e5:
f4:d7:cf:2c:69:72:c5:0b:68:f5:f6:e1:95:47:f7:
ca:0a:6e:68:8c:5a:a1:d6:0b:ef:8e:42:bd:89:93:
0f:6a:54:5c:4e:b9:a0:d2:c5:f0:ee:ec:fa:e8:f3:
cd:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:20:F9:6E:46:FD:C9:AA:FA:88:C2:85:59:E5:B0:32:E8:F6:F5:21
X509v3 Authority Key Identifier:
keyid:5C:4C:28:A7:5A:C9:69:51:DC:38:40:0A:80:F9:EF:3A:AA:F2:AA:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEwop1rJaVHcOEAKgPnvOqryqss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:16:f6:2f:8d:76:16:ce:00:66:17:c0:34:1e:e1:a9:dc:a8:
19:70:f8:96:24:dd:4a:72:fb:a6:c9:ea:e3:6a:0f:43:7c:79:
3a:df:9d:08:5d:fe:09:49:26:43:da:c3:08:db:99:7d:b2:12:
81:d3:74:ae:95:ff:d7:a9:05:79:ec:45:a9:6d:07:cb:ab:aa:
d1:a7:a1:3d:4f:3c:64:3b:f0:fb:00:38:c2:cd:07:ab:8c:db:
d2:e4:75:01:a9:ef:ff:ab:2a:c9:39:1c:92:2f:73:64:a7:c2:
03:35:6c:2c:57:c4:b9:2d:7a:b6:80:73:17:ce:1a:81:76:a5:
40:34:a3:7d:f3:21:48:12:c5:dd:74:8d:62:ba:4c:a7:94:b6:
86:f3:56:4e:34:49:29:74:0f:0a:13:20:24:d7:25:29:61:14:
d1:b0:6f:29:b4:96:1e:c7:c0:93:0b:df:59:d8:c2:dc:29:67:
a9:d7:04:6f:78:29:9b:76:7c:b8:0f:50:17:d1:87:ac:f1:3f:
00:51:de:e0:8a:f2:5d:7b:a7:18:57:71:b5:93:cf:51:5f:0f:
18:2f:46:6f:47:7f:9a:d6:f2:6f:08:7c:65:54:e6:c1:96:01:
0f:86:98:5e:09:a8:9b:21:dc:79:20:64:1f:7a:37:bc:f2:0d:
98:49:f4:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BSVppGXYHZeuJXjLldOLGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNGMyOGE3NWFjOTY5NTFkYzM4NDAwYTgwZjllZjNhYWFm
MmFhY2IwHhcNMjYwNjEzMTQwMTEwWhcNMjYwNjE0MTQwMTEwWjAzMTEwLwYDVQQD
EyhmZjIwZjk2ZTQ2ZmRjOWFhZmE4OGMyODU1OWU1YjAzMmU4ZjZmNTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ACFylwc7B6fbafacwcsguQtrSIC
Y9+wvpU9MlLBo/0nn3pE3eC9aUTpxrvANJOzghJlvokycIlq5gNJM6TAT6fojXaN
hGsYxEkwh1fqiH+AEiF4jK5isgTxlBfbEaugQ5M+XNoRbfef7E0iK0/2SyRaay3j
DDqAhCjNZqb5xuAGNK8JX3SgtcRl689pWm1Ei7bQ04i3biDDGK9dL9B/M2hTJOK4
GmR3tyT0qyN5PURIEIRLaBbhMk4Mj1IhP6EqKPwolT4/Y2+BzdUZkDZJruX0188s
aXLFC2j19uGVR/fKCm5ojFqh1gvvjkK9iZMPalRcTrmg0sXw7uz66PPNRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP8g+W5G/cmq+ojChVnlsDLo9vUhMB8GA1UdIwQY
MBaAFFxMKKdayWlR3DhACoD57zqq8qrLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEV3b3AxckphVkhjT0VBS2dQbnZPcXJ5cXNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wOTc3ZWUtYjk4ZC00YTNlLWIzYWYt
NjdjNzYzMjAxODZhLzEvWEV3b3AxckphVkhjT0VBS2dQbnZPcXJ5cXNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8wOTc3ZWUtYjk4ZC00YTNlLWIzYWYtNjdjNzYzMjAxODZh
LzEvWEV3b3AxckphVkhjT0VBS2dQbnZPcXJ5cXNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMxb2L412
Fs4AZhfANB7hqdyoGXD4liTdSnL7psnq42oPQ3x5Ot+dCF3+CUkmQ9rDCNuZfbIS
gdN0rpX/16kFeexFqW0Hy6uq0aehPU88ZDvw+wA4ws0Hq4zb0uR1Aanv/6sqyTkc
ki9zZKfCAzVsLFfEuS16toBzF84agXalQDSjffMhSBLF3XSNYrpMp5S2hvNWTjRJ
KXQPChMgJNclKWEU0bBvKbSWHsfAkwvfWdjC3ClnqdcEb3gpm3Z8uA9QF9GHrPE/
AFHe4IryXXunGFdxtZPPUV8PGC9Gb0d/mtbybwh8ZVTmwZYBD4aYXgmomyHceSBk
H3o3vPINmEn0/w==
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:04:30 2026 by rpki-client