Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
File: _xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft (raw, json)
Hash identifier: BtzZ3UE3RQLeFqvP1Oi9whQEQjIDRQa0PaLrqIB/4Ps=
Subject key identifier: 0C:0E:35:82:97:CE:67:60:DE:EB:EF:F1:3E:6C:86:50:9C:63:E0:A0
Authority key identifier: FF:13:A2:1B:4E:8C:E1:4C:E7:D6:68:0C:99:0E:C6:BA:29:A0:27:C2
Certificate issuer: /CN=ff13a21b4e8ce14ce7d6680c990ec6ba29a027c2
Certificate serial: 019FABD1A258DC1AC694B773AC5F58E0581F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
Manifest number: 119D
Signing time: Wed 29 Jul 2026 03:01:10 +0000
Manifest this update: Wed 29 Jul 2026 03:01:10 +0000
Manifest next update: Thu 30 Jul 2026 03:01:10 +0000
Files and hashes: 1: XfPxNqw04f4ysUNycil0EQofl1M.roa (hash: JClRzQorRQbXDP0L/PC7A7JxisEaLLPV1aRUiLTnBv8=)
2: _xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl (hash: C4pV2WfVDfkPeL/nsG4iEMG7QPEnExOwXlTKtIEeGCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:a2:58:dc:1a:c6:94:b7:73:ac:5f:58:e0:58:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff13a21b4e8ce14ce7d6680c990ec6ba29a027c2
Validity
Not Before: Jul 29 03:01:10 2026 GMT
Not After : Jul 30 03:01:10 2026 GMT
Subject: CN=0c0e358297ce6760deebeff13e6c86509c63e0a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1e:09:8c:05:ed:a2:f5:00:ef:77:ae:b0:c5:
aa:9a:25:4f:41:6c:35:db:18:d5:ec:47:62:65:a5:
90:88:cc:a7:b5:36:36:01:a9:d7:16:f0:fc:0b:7c:
83:69:e9:42:32:4e:02:5c:74:d0:6c:07:b7:49:23:
66:6a:cf:88:7a:b2:33:45:2d:11:29:98:20:d4:21:
38:bf:4f:c7:d5:74:72:7e:27:3e:2b:96:9b:71:f9:
a6:41:ae:32:de:b4:86:ca:b7:bf:a6:38:93:67:31:
b4:e5:3c:11:fd:7f:49:f6:d0:9a:63:25:3a:f8:5c:
6b:b0:ad:0e:19:a2:38:53:68:8c:76:19:95:23:06:
9e:5b:39:b4:ad:65:1b:65:61:a1:38:3c:a1:ed:73:
d4:f7:ec:70:cd:fe:10:ae:67:b3:a0:22:c5:12:b3:
2f:1b:70:c1:d2:85:57:eb:3f:0f:e8:d4:7f:fc:90:
a2:da:6c:de:98:a7:14:fc:a3:09:c4:74:3c:68:1f:
46:b8:81:b5:55:7f:f6:71:0d:af:77:4b:74:b6:b3:
17:84:a1:9c:a7:97:89:eb:d6:14:04:0c:98:dc:62:
7a:4d:61:de:ee:f4:c7:22:d3:f3:7b:06:6a:d1:7d:
bd:35:f4:80:5c:c3:cd:5b:b4:72:92:df:27:0e:1e:
a4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:0E:35:82:97:CE:67:60:DE:EB:EF:F1:3E:6C:86:50:9C:63:E0:A0
X509v3 Authority Key Identifier:
keyid:FF:13:A2:1B:4E:8C:E1:4C:E7:D6:68:0C:99:0E:C6:BA:29:A0:27:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:4c:12:95:fa:2d:7e:b8:fa:99:a1:f8:92:f8:4c:ee:a1:ac:
1d:07:28:ee:ba:d0:ee:a9:3b:b9:e7:c0:86:56:2a:79:78:9d:
c7:43:04:f9:42:1f:cc:b4:86:af:58:1d:87:43:b4:c6:9c:f5:
7e:ec:2a:ea:87:2f:75:d2:5b:65:f7:5d:ca:59:4d:b4:ea:63:
e6:bf:be:35:75:81:35:f8:ca:1f:76:17:41:b5:48:8f:2e:cd:
71:0a:6d:24:f0:e7:9e:fa:fd:0b:e7:57:b6:c5:7b:8f:20:2d:
26:44:6e:08:58:64:45:68:b2:08:90:b0:25:cd:c9:aa:63:41:
df:ae:0c:53:ea:f2:30:42:4e:15:80:1b:88:1e:b9:16:a2:1f:
9e:f6:3a:1d:7a:d8:1e:7c:8d:0b:92:82:c5:d2:95:20:02:8e:
bb:2c:a3:91:98:0c:8c:a7:27:e6:05:75:84:76:01:e0:09:a3:
a8:f2:fc:50:66:70:d2:af:54:22:8b:84:b3:09:47:58:47:ee:
e2:99:1c:37:c9:9b:61:bd:b5:de:6f:2d:32:3b:7d:83:a6:7a:
31:3c:75:4b:3d:2d:27:25:ab:58:94:c3:dd:37:2d:42:1b:de:
ea:01:e1:13:8e:be:e3:09:7e:4b:88:97:98:0e:dc:c9:97:ec:
b7:ba:e7:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+r0aJY3BrGlLdzrF9Y4FgfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMTNhMjFiNGU4Y2UxNGNlN2Q2NjgwYzk5MGVjNmJhMjlh
MDI3YzIwHhcNMjYwNzI5MDMwMTEwWhcNMjYwNzMwMDMwMTEwWjAzMTEwLwYDVQQD
EygwYzBlMzU4Mjk3Y2U2NzYwZGVlYmVmZjEzZTZjODY1MDljNjNlMGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1x4JjAXtovUA73eusMWqmiVPQWw1
2xjV7EdiZaWQiMyntTY2AanXFvD8C3yDaelCMk4CXHTQbAe3SSNmas+IerIzRS0R
KZgg1CE4v0/H1XRyfic+K5abcfmmQa4y3rSGyre/pjiTZzG05TwR/X9J9tCaYyU6
+FxrsK0OGaI4U2iMdhmVIwaeWzm0rWUbZWGhODyh7XPU9+xwzf4QrmezoCLFErMv
G3DB0oVX6z8P6NR//JCi2mzemKcU/KMJxHQ8aB9GuIG1VX/2cQ2vd0t0trMXhKGc
p5eJ69YUBAyY3GJ6TWHe7vTHItPzewZq0X29NfSAXMPNW7Rykt8nDh6kVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAwONYKXzmdg3uvv8T5shlCcY+CgMB8GA1UdIwQY
MBaAFP8TohtOjOFM59ZoDJkOxropoCfCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3hPaUcwNk00VXpuMW1nTW1RN0d1aW1nSjhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9kNmNmZTktYzMwMS00MDc5LTg2Yjkt
N2ZiYzRlNTc5N2ExLzEvX3hPaUcwNk00VXpuMW1nTW1RN0d1aW1nSjhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9kNmNmZTktYzMwMS00MDc5LTg2YjktN2ZiYzRlNTc5N2Ex
LzEvX3hPaUcwNk00VXpuMW1nTW1RN0d1aW1nSjhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj0wSlfot
frj6maH4kvhM7qGsHQco7rrQ7qk7uefAhlYqeXidx0ME+UIfzLSGr1gdh0O0xpz1
fuwq6ocvddJbZfddyllNtOpj5r++NXWBNfjKH3YXQbVIjy7NcQptJPDnnvr9C+dX
tsV7jyAtJkRuCFhkRWiyCJCwJc3JqmNB364MU+ryMEJOFYAbiB65FqIfnvY6HXrY
HnyNC5KCxdKVIAKOuyyjkZgMjKcn5gV1hHYB4AmjqPL8UGZw0q9UIouEswlHWEfu
4pkcN8mbYb213m8tMjt9g6Z6MTx1Sz0tJyWrWJTD3TctQhve6gHhE46+4wl+S4iX
mA7cyZfst7rn+Q==
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:25:08 2026 by rpki-client