Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/b2598f-0631-4b5a-afe5-5ad9864532a7/1/xC4WYonhwfw6mLVFQLzHMUbXSII.mft
File: xC4WYonhwfw6mLVFQLzHMUbXSII.mft (raw, json)
Hash identifier: plPOV0NeBikRpiokLvWtnqAn6A7M6F3tU3k0IZQ4ejM=
Subject key identifier: AA:95:5F:1B:66:22:D8:B0:9C:6E:D8:3F:B1:1D:CC:EB:D0:98:3B:47
Authority key identifier: C4:2E:16:62:89:E1:C1:FC:3A:98:B5:45:40:BC:C7:31:46:D7:48:82
Certificate issuer: /CN=c42e166289e1c1fc3a98b54540bcc73146d74882
Certificate serial: 019FABD125EF01F830314FA475DDE54943C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xC4WYonhwfw6mLVFQLzHMUbXSII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/b2598f-0631-4b5a-afe5-5ad9864532a7/1/xC4WYonhwfw6mLVFQLzHMUbXSII.mft
Manifest number: 01D4
Signing time: Wed 29 Jul 2026 03:00:38 +0000
Manifest this update: Wed 29 Jul 2026 03:00:38 +0000
Manifest next update: Thu 30 Jul 2026 03:00:38 +0000
Files and hashes: 1: Lte9ihIhwLMJEwykODf0-Ea8xPQ.roa (hash: v/rTSSPoZthEpEjHR7Sqj/7dnyWCaWiGBnHcyQGxAwA=)
2: xC4WYonhwfw6mLVFQLzHMUbXSII.crl (hash: NrlabPe1JEqPwNIBGy98JTtdOffSDOXiODMBQB0iyZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/b2598f-0631-4b5a-afe5-5ad9864532a7/1/xC4WYonhwfw6mLVFQLzHMUbXSII.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/b2598f-0631-4b5a-afe5-5ad9864532a7/1/xC4WYonhwfw6mLVFQLzHMUbXSII.mft
rsync://rpki.ripe.net/repository/DEFAULT/xC4WYonhwfw6mLVFQLzHMUbXSII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:25:ef:01:f8:30:31:4f:a4:75:dd:e5:49:43:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42e166289e1c1fc3a98b54540bcc73146d74882
Validity
Not Before: Jul 29 03:00:38 2026 GMT
Not After : Jul 30 03:00:38 2026 GMT
Subject: CN=aa955f1b6622d8b09c6ed83fb11dccebd0983b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:cd:1f:a5:a2:9a:e1:aa:ed:92:62:8c:53:5a:
a5:88:0d:60:cc:07:55:df:4d:96:79:5c:27:77:63:
39:62:c9:8f:f9:03:2a:c2:c5:13:b8:a6:70:f4:89:
ad:2b:22:65:81:ee:18:78:5e:36:39:c2:11:8e:e0:
d9:30:e8:fe:e7:d5:d0:b5:30:de:1a:f6:83:7e:82:
d4:d7:33:4d:8a:2f:aa:9d:55:ac:5f:b0:86:30:84:
83:64:ef:7c:64:8e:88:75:05:e1:52:0b:ad:c8:9c:
16:2e:af:42:ec:a8:1b:a1:76:5f:5d:81:cd:71:4d:
7b:dc:6f:30:04:e5:07:63:bc:bf:2e:7d:d1:7e:2e:
72:ee:83:53:b0:08:94:a7:50:cd:2c:27:8e:28:bb:
19:97:be:e7:90:65:94:4e:dd:91:1d:0e:a1:b2:ec:
b5:69:9b:bd:49:9e:6e:63:b0:a8:78:08:95:b1:39:
7c:18:02:21:61:08:df:b5:54:62:0c:fa:e2:87:32:
3f:ff:ac:74:d7:4c:6d:ec:27:79:fa:4b:5b:09:88:
9e:f6:6a:16:bd:6b:cc:9f:bf:b5:ae:bc:1e:9b:4a:
e7:47:cf:dc:74:e0:ee:72:92:e0:30:00:80:28:4f:
18:69:7d:43:05:d4:6c:2c:a9:06:dd:d7:36:75:3d:
f1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:95:5F:1B:66:22:D8:B0:9C:6E:D8:3F:B1:1D:CC:EB:D0:98:3B:47
X509v3 Authority Key Identifier:
keyid:C4:2E:16:62:89:E1:C1:FC:3A:98:B5:45:40:BC:C7:31:46:D7:48:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xC4WYonhwfw6mLVFQLzHMUbXSII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b2598f-0631-4b5a-afe5-5ad9864532a7/1/xC4WYonhwfw6mLVFQLzHMUbXSII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b2598f-0631-4b5a-afe5-5ad9864532a7/1/xC4WYonhwfw6mLVFQLzHMUbXSII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:d9:cf:f9:e4:bb:d6:59:57:ce:d0:23:1e:93:b5:36:d6:a1:
4a:b6:7c:f4:bd:27:23:15:7f:ae:7a:3b:d1:e2:c3:e5:8d:2a:
4d:b6:75:18:b3:c1:b4:ee:58:70:41:4d:07:c5:57:c9:89:fa:
4d:2a:f5:21:e5:66:78:70:f4:94:72:2d:87:4b:9d:75:af:5b:
ca:2a:e2:e1:6f:21:0a:d0:5c:ce:c3:5a:2f:4c:65:e1:d0:1a:
a8:08:ec:c0:7a:ec:b7:77:af:3e:e0:ab:f3:94:29:78:e4:a0:
b0:87:3c:03:77:aa:9a:72:55:cb:c1:78:5e:18:ab:1d:2c:79:
e3:33:96:58:20:ae:6f:5e:ce:bf:f8:57:e3:8d:4f:e0:d7:23:
ed:c1:63:e4:9b:a4:76:1b:83:c3:55:1b:49:d1:3a:da:43:86:
72:28:59:40:b5:10:5f:52:f6:d8:98:3d:80:10:f0:f4:37:4f:
d4:ba:83:75:ad:4f:98:1c:a8:e6:bc:86:32:00:40:53:3e:34:
d6:e6:35:70:19:23:66:39:d8:47:8d:14:a7:a5:92:90:11:67:
83:06:fa:f9:62:5d:ad:97:69:f0:8e:44:82:be:1b:12:a1:40:
df:3e:aa:2e:4f:e4:d2:15:c2:b2:f1:f2:d6:17:f6:bf:e8:96:
4b:d4:f8:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+r0SXvAfgwMU+kdd3lSUPIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0MmUxNjYyODllMWMxZmMzYTk4YjU0NTQwYmNjNzMxNDZk
NzQ4ODIwHhcNMjYwNzI5MDMwMDM4WhcNMjYwNzMwMDMwMDM4WjAzMTEwLwYDVQQD
EyhhYTk1NWYxYjY2MjJkOGIwOWM2ZWQ4M2ZiMTFkY2NlYmQwOTgzYjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5c0fpaKa4artkmKMU1qliA1gzAdV
302WeVwnd2M5YsmP+QMqwsUTuKZw9ImtKyJlge4YeF42OcIRjuDZMOj+59XQtTDe
GvaDfoLU1zNNii+qnVWsX7CGMISDZO98ZI6IdQXhUgutyJwWLq9C7KgboXZfXYHN
cU173G8wBOUHY7y/Ln3Rfi5y7oNTsAiUp1DNLCeOKLsZl77nkGWUTt2RHQ6hsuy1
aZu9SZ5uY7CoeAiVsTl8GAIhYQjftVRiDPrihzI//6x010xt7Cd5+ktbCYie9moW
vWvMn7+1rrwem0rnR8/cdODucpLgMACAKE8YaX1DBdRsLKkG3dc2dT3xHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKqVXxtmItiwnG7YP7EdzOvQmDtHMB8GA1UdIwQY
MBaAFMQuFmKJ4cH8Opi1RUC8xzFG10iCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEM0V1lvbmh3Znc2bUxWRlFMekhNVWJYU0lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9iMjU5OGYtMDYzMS00YjVhLWFmZTUt
NWFkOTg2NDUzMmE3LzEveEM0V1lvbmh3Znc2bUxWRlFMekhNVWJYU0lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9iMjU5OGYtMDYzMS00YjVhLWFmZTUtNWFkOTg2NDUzMmE3
LzEveEM0V1lvbmh3Znc2bUxWRlFMekhNVWJYU0lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUtnP+eS7
1llXztAjHpO1NtahSrZ89L0nIxV/rno70eLD5Y0qTbZ1GLPBtO5YcEFNB8VXyYn6
TSr1IeVmeHD0lHIth0udda9byiri4W8hCtBczsNaL0xl4dAaqAjswHrst3evPuCr
85QpeOSgsIc8A3eqmnJVy8F4XhirHSx54zOWWCCub17Ov/hX441P4Ncj7cFj5Juk
dhuDw1UbSdE62kOGcihZQLUQX1L22Jg9gBDw9DdP1LqDda1PmByo5ryGMgBAUz40
1uY1cBkjZjnYR40Up6WSkBFngwb6+WJdrZdp8I5Egr4bEqFA3z6qLk/k0hXCsvHy
1hf2v+iWS9T41w==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:06:46 2026 by rpki-client