Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft
File: xg8yRv3WG6G1eS_hrsStypjXWlw.mft (raw, json)
Hash identifier: MWEPVPgQrU1lyhrgwF+0wY/LR5ZkWm0sNDqESsZ0Ktc=
Subject key identifier: E5:13:D1:16:A0:AE:C1:98:C8:27:DA:73:20:98:77:CA:A0:2A:6B:5B
Authority key identifier: C6:0F:32:46:FD:D6:1B:A1:B5:79:2F:E1:AE:C4:AD:CA:98:D7:5A:5C
Certificate issuer: /CN=c60f3246fdd61ba1b5792fe1aec4adca98d75a5c
Certificate serial: 019D9BBE47AFDD5076579E82E164F9574DF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xg8yRv3WG6G1eS_hrsStypjXWlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft
Manifest number: 02A4
Signing time: Fri 17 Apr 2026 14:00:31 +0000
Manifest this update: Fri 17 Apr 2026 14:00:31 +0000
Manifest next update: Sat 18 Apr 2026 14:00:31 +0000
Files and hashes: 1: MmQGKSoH5LF3BVkr3ibrE-H9I9E.roa (hash: yWJCfOrBqqRptAvrnSvVrhM/S/WywcoV/IXeHHMd0es=)
2: xg8yRv3WG6G1eS_hrsStypjXWlw.crl (hash: CrR0AAN1nn4DkcrfoOlmMSv8cmdxzvr4CH0qiUKBbXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xg8yRv3WG6G1eS_hrsStypjXWlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:47:af:dd:50:76:57:9e:82:e1:64:f9:57:4d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c60f3246fdd61ba1b5792fe1aec4adca98d75a5c
Validity
Not Before: Apr 17 14:00:31 2026 GMT
Not After : Apr 18 14:00:31 2026 GMT
Subject: CN=e513d116a0aec198c827da73209877caa02a6b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3f:67:64:c6:df:8d:f5:6c:e3:6b:b0:65:61:
ce:9b:fa:3e:49:86:a7:84:1f:cc:4a:6d:6a:5c:40:
49:86:51:10:57:a5:5f:95:dc:55:75:72:8c:f1:d4:
13:5f:b3:4d:49:c6:ce:75:f2:47:e6:49:48:d7:60:
7e:d1:84:bd:c3:7c:e6:e3:31:d0:e2:10:e9:6f:4f:
3d:8c:d1:cc:4d:3a:9d:e7:af:9f:7a:27:e0:63:eb:
c9:b5:f1:1e:b9:7f:aa:33:48:ce:78:48:2b:20:fa:
73:c5:d2:09:49:5f:3c:47:1d:c6:dc:27:34:d0:59:
fa:7e:2a:94:ec:ef:50:73:c2:38:11:e3:c1:95:c1:
f2:67:57:91:20:6d:59:0c:c2:b3:a0:c9:0d:8a:34:
e5:c4:54:cb:f6:b0:f7:25:2e:64:94:84:e6:c7:2d:
d5:b3:e8:f6:79:83:9e:df:38:ca:3c:7a:1c:0c:e4:
4b:cd:27:75:56:16:88:7b:a9:83:91:ef:84:10:79:
4e:7c:bb:9c:f1:09:ee:cc:48:84:d7:a1:98:da:43:
aa:49:b6:21:02:d6:d3:ca:05:f4:17:18:b4:06:4a:
9a:6d:2d:83:9b:10:b7:f4:75:03:18:83:96:a1:56:
cb:e1:8c:49:e9:15:30:7b:79:2b:28:94:d0:a4:40:
42:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:13:D1:16:A0:AE:C1:98:C8:27:DA:73:20:98:77:CA:A0:2A:6B:5B
X509v3 Authority Key Identifier:
keyid:C6:0F:32:46:FD:D6:1B:A1:B5:79:2F:E1:AE:C4:AD:CA:98:D7:5A:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xg8yRv3WG6G1eS_hrsStypjXWlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:5a:fa:72:c8:f1:57:83:95:a8:ad:ea:95:b3:93:dc:58:c1:
d0:f1:8f:08:11:cf:84:35:4e:df:3d:78:86:e4:dc:a0:c9:2a:
12:09:6b:32:c2:82:58:81:25:5c:99:48:76:9e:a9:a0:28:a3:
0c:2c:4e:a0:79:e0:0b:ee:a9:fa:b2:50:01:2a:0c:55:72:46:
38:a0:72:fd:98:49:77:bd:3c:7b:33:10:27:39:bb:9a:a6:e7:
6f:01:20:bf:c6:9b:f8:41:a4:eb:d2:ad:96:14:1a:de:b2:8e:
61:4c:bf:0c:8d:a0:e0:af:cf:fa:19:f1:ac:42:7d:ef:42:52:
99:b1:d4:71:ba:3c:39:98:f7:9b:0b:8c:a9:93:66:62:a7:70:
5e:a4:b4:aa:b3:51:c6:89:d9:fb:41:41:96:83:a2:4a:c5:5b:
2e:26:9f:6c:96:1a:f4:19:da:5f:ff:35:d7:99:24:d8:a9:d7:
69:a0:22:35:6b:59:c5:17:83:34:17:8b:5f:f8:90:e4:0d:7d:
43:48:a6:d1:13:b8:18:3c:bc:35:bb:5e:e3:51:3a:5d:01:36:
36:9b:a1:93:71:36:c6:bc:35:1d:ef:2f:bd:04:76:8c:29:2f:
ed:e2:58:ac:93:5d:96:4f:88:6c:c7:b9:b2:74:cb:14:eb:95:
66:98:16:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bvkev3VB2V56C4WT5V03yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MGYzMjQ2ZmRkNjFiYTFiNTc5MmZlMWFlYzRhZGNhOThk
NzVhNWMwHhcNMjYwNDE3MTQwMDMxWhcNMjYwNDE4MTQwMDMxWjAzMTEwLwYDVQQD
EyhlNTEzZDExNmEwYWVjMTk4YzgyN2RhNzMyMDk4NzdjYWEwMmE2YjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvj9nZMbfjfVs42uwZWHOm/o+SYan
hB/MSm1qXEBJhlEQV6VfldxVdXKM8dQTX7NNScbOdfJH5klI12B+0YS9w3zm4zHQ
4hDpb089jNHMTTqd56+feifgY+vJtfEeuX+qM0jOeEgrIPpzxdIJSV88Rx3G3Cc0
0Fn6fiqU7O9Qc8I4EePBlcHyZ1eRIG1ZDMKzoMkNijTlxFTL9rD3JS5klITmxy3V
s+j2eYOe3zjKPHocDORLzSd1VhaIe6mDke+EEHlOfLuc8QnuzEiE16GY2kOqSbYh
AtbTygX0Fxi0BkqabS2DmxC39HUDGIOWoVbL4YxJ6RUwe3krKJTQpEBCKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOUT0RagrsGYyCfacyCYd8qgKmtbMB8GA1UdIwQY
MBaAFMYPMkb91huhtXkv4a7ErcqY11pcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGc4eVJ2M1dHNkcxZVNfaHJzU3R5cGpYV2x3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8yYTY1NmEtOTMyMy00NDI0LThmYjUt
MTc5NzkyNzY4ZGFlLzEveGc4eVJ2M1dHNkcxZVNfaHJzU3R5cGpYV2x3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8yYTY1NmEtOTMyMy00NDI0LThmYjUtMTc5NzkyNzY4ZGFl
LzEveGc4eVJ2M1dHNkcxZVNfaHJzU3R5cGpYV2x3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjFr6csjx
V4OVqK3qlbOT3FjB0PGPCBHPhDVO3z14huTcoMkqEglrMsKCWIElXJlIdp6poCij
DCxOoHngC+6p+rJQASoMVXJGOKBy/ZhJd708ezMQJzm7mqbnbwEgv8ab+EGk69Kt
lhQa3rKOYUy/DI2g4K/P+hnxrEJ970JSmbHUcbo8OZj3mwuMqZNmYqdwXqS0qrNR
xonZ+0FBloOiSsVbLiafbJYa9BnaX/8115kk2KnXaaAiNWtZxReDNBeLX/iQ5A19
Q0im0RO4GDy8Nbte41E6XQE2Npuhk3E2xrw1He8vvQR2jCkv7eJYrJNdlk+IbMe5
snTLFOuVZpgWAA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:17:06 2026 by rpki-client