Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
File: xhaXFtCuZAaHAxQKo3MON4j91MY.mft (raw, json)
Hash identifier: B2ry24C4wkB1OR25gaFI7BMR4u8lsTTmOsPdRqKTGHY=
Subject key identifier: 3A:4C:D9:CC:2F:CF:77:EB:28:26:62:E6:FE:8B:DD:95:B6:2B:C8:3F
Authority key identifier: C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
Certificate issuer: /CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Certificate serial: 019EC1B687EB4396D27087CA837E9026E61B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
Manifest number: 16C8
Signing time: Sat 13 Jun 2026 16:00:25 +0000
Manifest this update: Sat 13 Jun 2026 16:00:25 +0000
Manifest next update: Sun 14 Jun 2026 16:00:25 +0000
Files and hashes: 1: FWP58ajjb0tkpM-YIjMEubI9eHI.roa (hash: 8d5KqUUs2iCVjFLb2FSp+rBEK2zv9joKO9sjvkw4TqU=)
2: xhaXFtCuZAaHAxQKo3MON4j91MY.crl (hash: UbCVy3laMGKWAPsOhXBeAntcSRtjy3ntFjkTc7vYsX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 16:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b6:87:eb:43:96:d2:70:87:ca:83:7e:90:26:e6:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Validity
Not Before: Jun 13 16:00:25 2026 GMT
Not After : Jun 14 16:00:25 2026 GMT
Subject: CN=3a4cd9cc2fcf77eb282662e6fe8bdd95b62bc83f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e7:b6:c9:4e:63:e4:2d:50:67:45:bb:50:a2:
20:4e:37:6c:c0:4a:b0:75:c4:3d:60:e0:96:a9:79:
91:b7:9e:1b:cc:e8:53:3d:35:54:2e:74:fc:ec:0a:
75:21:f6:e6:ee:eb:86:37:15:d3:8f:1b:ca:05:0e:
2d:f3:fc:2d:21:cc:bf:20:8a:79:3b:d8:f2:a0:db:
ae:b0:7c:3b:8c:bf:3d:e6:d4:69:d9:d8:62:60:16:
2f:29:0f:a2:19:69:b1:d3:ac:4e:28:c2:4a:cd:f6:
b6:54:17:d1:b4:69:e7:21:d4:87:40:ed:0c:8e:01:
b7:ca:2f:05:0f:a5:70:17:43:6d:55:13:cf:9d:98:
7b:cc:f9:03:52:1e:5b:8a:46:4a:c7:00:a4:07:a4:
8c:d2:e3:fa:f3:cb:26:92:45:2c:01:03:69:8b:48:
16:fa:56:0f:0f:65:96:cf:94:31:37:6a:fb:39:48:
f0:9b:51:0a:d8:0c:2f:59:a3:4d:ec:f9:4d:73:d2:
d8:2c:98:16:d6:63:61:fd:f6:84:1f:27:a1:18:b1:
aa:e8:27:81:58:35:2b:8a:38:1b:80:73:e2:c5:60:
7e:2d:7e:79:92:b4:14:6d:44:99:db:a3:e9:59:95:
a4:94:7f:2c:ba:df:59:fa:07:f8:14:3c:1a:c6:f1:
86:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:4C:D9:CC:2F:CF:77:EB:28:26:62:E6:FE:8B:DD:95:B6:2B:C8:3F
X509v3 Authority Key Identifier:
keyid:C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:64:7b:7d:83:96:a0:01:88:9b:5e:8d:fa:f2:3c:62:46:ad:
8e:37:2b:f9:a9:c8:f4:db:8f:8a:c2:3a:e6:70:de:5f:3e:ed:
e6:ec:45:c6:d3:59:6e:6e:53:2c:aa:14:e4:9f:4c:03:14:34:
8c:3c:e7:3e:da:6b:2e:da:9d:51:ee:c6:14:3c:37:a1:35:47:
e1:74:aa:dd:18:a0:03:ed:14:33:f4:e0:ca:26:10:3b:17:9e:
95:c1:c3:0a:3b:35:6e:01:17:f9:a6:50:f7:69:9f:d2:e4:fc:
1f:0e:3b:75:a4:4e:35:fe:d2:73:67:a0:cb:06:68:e1:92:f3:
3a:9f:dc:87:36:80:61:49:c1:37:6f:38:38:50:77:d4:c7:75:
09:46:12:9d:a4:49:c9:80:90:00:b9:d3:bc:79:da:48:7f:d5:
4d:20:d9:4f:88:b3:36:6d:fa:d0:6e:c4:f5:36:ae:66:47:02:
3d:bc:0b:1b:dc:51:0b:97:53:9d:c7:a6:4d:90:e6:5f:b5:17:
94:e4:69:df:83:d1:11:16:13:b5:89:1b:9a:dc:36:36:fb:c5:
f0:99:53:1a:53:f5:fc:ef:46:45:e5:75:08:ef:3f:57:84:98:
02:cc:0d:43:c7:54:e8:e0:c3:43:69:4f:65:cb:df:c1:ee:17:
a8:85:af:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BtofrQ5bScIfKg36QJuYbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTY5NzE2ZDBhZTY0MDY4NzAzMTQwYWEzNzMwZTM3ODhm
ZGQ0YzYwHhcNMjYwNjEzMTYwMDI1WhcNMjYwNjE0MTYwMDI1WjAzMTEwLwYDVQQD
EygzYTRjZDljYzJmY2Y3N2ViMjgyNjYyZTZmZThiZGQ5NWI2MmJjODNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+e2yU5j5C1QZ0W7UKIgTjdswEqw
dcQ9YOCWqXmRt54bzOhTPTVULnT87Ap1Ifbm7uuGNxXTjxvKBQ4t8/wtIcy/IIp5
O9jyoNuusHw7jL895tRp2dhiYBYvKQ+iGWmx06xOKMJKzfa2VBfRtGnnIdSHQO0M
jgG3yi8FD6VwF0NtVRPPnZh7zPkDUh5bikZKxwCkB6SM0uP688smkkUsAQNpi0gW
+lYPD2WWz5QxN2r7OUjwm1EK2AwvWaNN7PlNc9LYLJgW1mNh/faEHyehGLGq6CeB
WDUrijgbgHPixWB+LX55krQUbUSZ26PpWZWklH8sut9Z+gf4FDwaxvGGFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDpM2cwvz3frKCZi5v6L3ZW2K8g/MB8GA1UdIwQY
MBaAFMYWlxbQrmQGhwMUCqNzDjeI/dTGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhhWEZ0Q3VaQWFIQXhRS28zTU9ONGo5MU1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC80MDA2ODUtZjQ4ZS00YWI5LThlM2Yt
MDQyNDQ2YjcwZmIxLzEveGhhWEZ0Q3VaQWFIQXhRS28zTU9ONGo5MU1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC80MDA2ODUtZjQ4ZS00YWI5LThlM2YtMDQyNDQ2YjcwZmIx
LzEveGhhWEZ0Q3VaQWFIQXhRS28zTU9ONGo5MU1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR2R7fYOW
oAGIm16N+vI8Ykatjjcr+anI9NuPisI65nDeXz7t5uxFxtNZbm5TLKoU5J9MAxQ0
jDznPtprLtqdUe7GFDw3oTVH4XSq3RigA+0UM/TgyiYQOxeelcHDCjs1bgEX+aZQ
92mf0uT8Hw47daRONf7Sc2egywZo4ZLzOp/chzaAYUnBN284OFB31Md1CUYSnaRJ
yYCQALnTvHnaSH/VTSDZT4izNm360G7E9TauZkcCPbwLG9xRC5dTncemTZDmX7UX
lORp34PRERYTtYkbmtw2NvvF8JlTGlP1/O9GReV1CO8/V4SYAswNQ8dU6ODDQ2lP
Zcvfwe4XqIWvMg==
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:10:09 2026 by rpki-client