Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
File: xhKt-r-RXfMxmJNYCM8N-XONyoc.mft (raw, json)
Hash identifier: MiKc5PUiFPOLMkZKi7dwewoGc4i3wTFFvQUyxchHNpw=
Subject key identifier: 85:D9:20:EF:AC:61:0E:7C:DB:BB:A3:51:80:E9:31:9D:F2:C3:17:D0
Authority key identifier: C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87
Certificate issuer: /CN=c612adfabf915df33198935808cf0df9738dca87
Certificate serial: 019FA9ABCEED734C4147B5E1F6608188F6EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
Manifest number: 19D6
Signing time: Tue 28 Jul 2026 17:00:36 +0000
Manifest this update: Tue 28 Jul 2026 17:00:36 +0000
Manifest next update: Wed 29 Jul 2026 17:00:36 +0000
Files and hashes: 1: 8bjq5CLAkMYnJtGthdYrockLCPY.roa (hash: eDG4zg9ilYUKjh0gJA5+ITJl6INuXH1V6df209hapIs=)
2: xhKt-r-RXfMxmJNYCM8N-XONyoc.crl (hash: eJGwF8E6/+pVl2seG75x3xdL0l0oSc8ABrcjTDTV7Uw=)
3: y6q-4aOfHflX0pozAnd7z21SiEw.roa (hash: BNrcMKA3+AgY/9eYfHPZuG3AM/va4c4zSTiZb/uHiLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:ce:ed:73:4c:41:47:b5:e1:f6:60:81:88:f6:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c612adfabf915df33198935808cf0df9738dca87
Validity
Not Before: Jul 28 17:00:36 2026 GMT
Not After : Jul 29 17:00:36 2026 GMT
Subject: CN=85d920efac610e7cdbbba35180e9319df2c317d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d9:cf:7d:04:4c:0e:33:8a:29:b9:c0:10:db:
69:8b:16:9b:58:06:16:ad:5c:f3:a6:0c:a4:fd:c5:
47:20:22:05:56:80:78:80:f2:c9:44:c1:50:de:96:
a8:45:c7:ab:6e:a3:d2:ff:13:af:2d:e3:dc:e5:75:
04:4a:f0:c3:fc:33:6a:76:85:ee:c9:f1:46:e4:a2:
5d:ad:15:f8:f8:08:58:a1:a0:f5:b2:ab:e7:ca:fb:
8d:05:21:08:07:ce:34:cf:a2:be:88:a8:f1:75:63:
39:4c:2d:7b:a1:5c:63:d4:fd:21:40:59:4c:d9:fa:
1e:3c:0b:34:d9:30:4e:55:43:bd:bc:3e:23:ba:b9:
70:60:97:23:04:ed:cf:fe:24:4e:71:33:6c:6e:5d:
a4:f6:f5:41:23:b7:15:8d:f9:42:63:26:ba:0b:2d:
84:19:f2:0f:48:10:b2:b2:c4:44:7a:f6:e8:62:ba:
96:72:68:74:c1:6f:93:31:fc:c9:43:c2:85:d6:c8:
f9:ee:31:32:2f:c3:35:16:91:4d:c4:a5:85:6c:5d:
61:86:45:0e:46:e1:54:10:93:0b:86:fa:aa:63:59:
11:7c:e8:93:5d:7c:ef:3b:11:33:41:7c:e8:c9:24:
03:20:c2:cb:0f:34:42:83:79:d2:d2:74:97:b0:e2:
fa:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D9:20:EF:AC:61:0E:7C:DB:BB:A3:51:80:E9:31:9D:F2:C3:17:D0
X509v3 Authority Key Identifier:
keyid:C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:e2:81:29:66:76:7b:bc:09:a7:4b:ae:a8:50:9b:fd:d2:89:
36:3a:3b:a3:46:49:74:dc:80:8c:f0:08:cf:54:02:03:f3:d4:
7f:6b:c7:75:6a:4d:89:0e:34:01:58:7f:b7:a9:f8:b8:a3:0b:
c1:64:ad:39:b2:b2:82:4a:76:55:fa:46:41:7e:c8:0b:e5:1d:
58:06:33:da:69:f2:95:df:c3:72:21:83:32:5c:48:fb:d8:09:
20:d1:97:15:cb:44:be:9f:1d:73:83:20:9a:af:20:3e:eb:a8:
9e:cf:b4:6e:7c:66:03:6b:43:23:e5:9f:95:9f:b7:31:a4:e6:
16:a7:1d:50:dc:60:c8:37:65:d7:8a:ef:db:88:47:14:2b:85:
ce:5e:ee:46:16:8b:3a:f2:39:52:3b:d5:40:5d:7b:25:4c:c3:
21:66:55:bd:e0:55:de:b9:aa:bb:ff:e2:26:50:e3:38:90:f4:
0b:35:21:51:64:35:69:17:76:d4:b7:6b:b8:19:53:21:cf:e5:
05:1d:d8:b5:51:b6:80:c5:41:fb:e9:d7:1d:85:50:62:da:7c:
26:d6:e9:9a:06:3b:57:c8:f2:1c:ac:51:c6:4b:27:17:13:7b:
dd:0e:65:3b:8c:04:8e:d2:a1:18:51:a2:9e:ae:40:70:29:20:
99:cb:39:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pq87tc0xBR7Xh9mCBiPbrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTJhZGZhYmY5MTVkZjMzMTk4OTM1ODA4Y2YwZGY5NzM4
ZGNhODcwHhcNMjYwNzI4MTcwMDM2WhcNMjYwNzI5MTcwMDM2WjAzMTEwLwYDVQQD
Eyg4NWQ5MjBlZmFjNjEwZTdjZGJiYmEzNTE4MGU5MzE5ZGYyYzMxN2QwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNnPfQRMDjOKKbnAENtpixabWAYW
rVzzpgyk/cVHICIFVoB4gPLJRMFQ3paoRcerbqPS/xOvLePc5XUESvDD/DNqdoXu
yfFG5KJdrRX4+AhYoaD1sqvnyvuNBSEIB840z6K+iKjxdWM5TC17oVxj1P0hQFlM
2foePAs02TBOVUO9vD4jurlwYJcjBO3P/iROcTNsbl2k9vVBI7cVjflCYya6Cy2E
GfIPSBCyssREevboYrqWcmh0wW+TMfzJQ8KF1sj57jEyL8M1FpFNxKWFbF1hhkUO
RuFUEJMLhvqqY1kRfOiTXXzvOxEzQXzoySQDIMLLDzRCg3nS0nSXsOL6pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIXZIO+sYQ5827ujUYDpMZ3ywxfQMB8GA1UdIwQY
MBaAFMYSrfq/kV3zMZiTWAjPDflzjcqHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhLdC1yLVJYZk14bUpOWUNNOE4tWE9OeW9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zMGFiMTgtZDM3OS00YWM3LWE5MDgt
ODFhNDZmNGY2ZDVhLzEveGhLdC1yLVJYZk14bUpOWUNNOE4tWE9OeW9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8zMGFiMTgtZDM3OS00YWM3LWE5MDgtODFhNDZmNGY2ZDVh
LzEveGhLdC1yLVJYZk14bUpOWUNNOE4tWE9OeW9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz+KBKWZ2
e7wJp0uuqFCb/dKJNjo7o0ZJdNyAjPAIz1QCA/PUf2vHdWpNiQ40AVh/t6n4uKML
wWStObKygkp2VfpGQX7IC+UdWAYz2mnyld/DciGDMlxI+9gJINGXFctEvp8dc4Mg
mq8gPuuons+0bnxmA2tDI+WflZ+3MaTmFqcdUNxgyDdl14rv24hHFCuFzl7uRhaL
OvI5UjvVQF17JUzDIWZVveBV3rmqu//iJlDjOJD0CzUhUWQ1aRd21LdruBlTIc/l
BR3YtVG2gMVB++nXHYVQYtp8JtbpmgY7V8jyHKxRxksnFxN73Q5lO4wEjtKhGFGi
nq5AcCkgmcs5pg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:25:46 2026 by rpki-client