Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
File: XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft (raw, json)
Hash identifier: PRfeCkzmkc+9y5AH9AIOuAqmdAG0wOmVXQdz8mSME8s=
Subject key identifier: EC:95:B6:B7:BF:F5:E0:04:DC:48:0A:A1:C0:91:ED:F6:2F:E9:3F:BA
Authority key identifier: 5E:06:6D:E9:82:9B:76:1E:DC:E1:71:E8:EA:3C:59:35:E4:4F:4E:9A
Certificate issuer: /CN=5e066de9829b761edce171e8ea3c5935e44f4e9a
Certificate serial: 019EC0DB35324FD9C63597BB8271F512998C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
Manifest number: 0890
Signing time: Sat 13 Jun 2026 12:00:51 +0000
Manifest this update: Sat 13 Jun 2026 12:00:51 +0000
Manifest next update: Sun 14 Jun 2026 12:00:51 +0000
Files and hashes: 1: O9do_tpuJS2IYg238tFeLgPwuLo.roa (hash: inPkQd2M/OOC4cE+kZAGV36qocuoxkiJ2VIdZgql1s8=)
2: OQMR_FkQfBmNWWsOByMgzVQchtc.roa (hash: E+VXuwQXys0IVzb1O36G+Zcgxr0/sBSG/vjRsxKVhO0=)
3: XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl (hash: /dSpVH8+T7PJM4Fj7i6QC/Ew4hgf7PMw1O1G7gChq8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:35:32:4f:d9:c6:35:97:bb:82:71:f5:12:99:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e066de9829b761edce171e8ea3c5935e44f4e9a
Validity
Not Before: Jun 13 12:00:51 2026 GMT
Not After : Jun 14 12:00:51 2026 GMT
Subject: CN=ec95b6b7bff5e004dc480aa1c091edf62fe93fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:66:56:81:58:c8:99:38:62:c5:43:32:42:90:
8a:89:2d:79:02:02:0b:d1:a4:92:4a:26:6b:76:ad:
7f:80:07:d7:d4:b1:bc:24:09:eb:9f:e7:09:63:eb:
4d:cd:26:ee:15:13:54:7a:8e:41:ce:2d:15:e5:1a:
78:3a:af:bb:1c:75:5f:64:09:7c:cf:68:4b:9d:61:
58:6e:d8:9c:13:dd:c8:e8:89:4e:75:b5:bd:76:42:
7d:28:0e:8a:22:74:b1:33:83:13:c4:98:ed:19:42:
be:e7:58:06:0e:f2:3e:30:93:66:33:11:e9:de:c3:
5f:ed:8d:76:7f:09:aa:55:2d:db:59:f7:00:58:3a:
27:bf:a5:ce:c1:bf:57:62:2c:e2:9d:01:14:1d:8d:
90:4a:5e:1c:5b:4d:6d:99:bb:c6:c7:7a:e8:18:f8:
19:4d:09:54:66:c7:9c:d4:3f:81:da:f7:a9:80:5c:
5f:73:3b:b4:f4:1f:77:21:00:71:7d:2e:9a:0a:9b:
26:12:75:0d:84:9b:20:8c:5b:f3:f5:3d:f5:97:14:
56:d0:53:82:41:d9:3b:7a:1c:90:2c:a1:30:c4:f5:
c0:6d:23:69:f7:d0:ef:0b:b1:d2:73:e6:b4:11:1a:
23:c5:73:a8:a1:73:a8:d3:62:52:51:93:a1:17:be:
f9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:95:B6:B7:BF:F5:E0:04:DC:48:0A:A1:C0:91:ED:F6:2F:E9:3F:BA
X509v3 Authority Key Identifier:
keyid:5E:06:6D:E9:82:9B:76:1E:DC:E1:71:E8:EA:3C:59:35:E4:4F:4E:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:12:1b:39:fa:a8:4f:45:da:1a:ee:90:ed:50:21:74:bf:93:
f5:ad:79:11:9d:23:e1:c8:cb:9f:93:60:da:2b:ef:5a:3f:be:
05:86:2d:84:47:a2:5d:f5:d1:c9:f5:a8:fa:f2:be:4b:9a:23:
23:56:0f:f3:16:56:9d:7f:c2:6d:39:11:cc:1c:80:73:52:e4:
9d:f7:2d:ba:1b:b7:80:c0:3d:4f:27:a4:5b:fc:67:19:3a:fd:
5d:36:16:1c:eb:fc:c6:91:e9:c0:c2:ae:cb:e5:9b:ab:5d:06:
4e:77:dd:9f:bf:e2:4f:de:27:93:e8:85:7f:61:74:0d:51:85:
65:99:79:27:9f:00:c4:4a:2b:c6:a4:19:fb:e0:0d:0e:25:8b:
da:d4:e6:1a:65:2a:cf:0a:69:57:dc:f8:66:b0:a1:70:dd:7a:
43:86:76:35:0a:7d:60:0b:0d:be:ea:1f:51:0c:5a:90:ae:e8:
bb:71:75:04:05:a6:0d:66:46:4a:79:8a:a7:7f:97:9f:5e:ae:
6b:24:9b:4b:02:4d:60:dc:c8:8b:0c:7d:11:4d:c1:f9:b6:49:
df:fc:7f:e4:63:21:a6:8d:17:9f:43:35:5b:89:52:bb:0f:da:
5c:79:a3:80:07:d7:fd:83:82:d0:b3:8a:64:a1:98:e6:e1:1b:
88:f7:48:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7A2zUyT9nGNZe7gnH1EpmMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMDY2ZGU5ODI5Yjc2MWVkY2UxNzFlOGVhM2M1OTM1ZTQ0
ZjRlOWEwHhcNMjYwNjEzMTIwMDUxWhcNMjYwNjE0MTIwMDUxWjAzMTEwLwYDVQQD
EyhlYzk1YjZiN2JmZjVlMDA0ZGM0ODBhYTFjMDkxZWRmNjJmZTkzZmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7WZWgVjImThixUMyQpCKiS15AgIL
0aSSSiZrdq1/gAfX1LG8JAnrn+cJY+tNzSbuFRNUeo5Bzi0V5Rp4Oq+7HHVfZAl8
z2hLnWFYbticE93I6IlOdbW9dkJ9KA6KInSxM4MTxJjtGUK+51gGDvI+MJNmMxHp
3sNf7Y12fwmqVS3bWfcAWDonv6XOwb9XYizinQEUHY2QSl4cW01tmbvGx3roGPgZ
TQlUZsec1D+B2vepgFxfczu09B93IQBxfS6aCpsmEnUNhJsgjFvz9T31lxRW0FOC
Qdk7ehyQLKEwxPXAbSNp99DvC7HSc+a0ERojxXOooXOo02JSUZOhF775gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOyVtre/9eAE3EgKocCR7fYv6T+6MB8GA1UdIwQY
MBaAFF4GbemCm3Ye3OFx6Oo8WTXkT06aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGdadDZZS2JkaDdjNFhIbzZqeFpOZVJQVHBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jYWM5YzQtZjliYi00NmQ0LWJiNjIt
NDc1YWRmM2FhN2IxLzEvWGdadDZZS2JkaDdjNFhIbzZqeFpOZVJQVHBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9jYWM5YzQtZjliYi00NmQ0LWJiNjItNDc1YWRmM2FhN2Ix
LzEvWGdadDZZS2JkaDdjNFhIbzZqeFpOZVJQVHBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqBIbOfqo
T0XaGu6Q7VAhdL+T9a15EZ0j4cjLn5Ng2ivvWj++BYYthEeiXfXRyfWo+vK+S5oj
I1YP8xZWnX/CbTkRzByAc1Lknfctuhu3gMA9TyekW/xnGTr9XTYWHOv8xpHpwMKu
y+Wbq10GTnfdn7/iT94nk+iFf2F0DVGFZZl5J58AxEorxqQZ++ANDiWL2tTmGmUq
zwppV9z4ZrChcN16Q4Z2NQp9YAsNvuofUQxakK7ou3F1BAWmDWZGSnmKp3+Xn16u
aySbSwJNYNzIiwx9EU3B+bZJ3/x/5GMhpo0Xn0M1W4lSuw/aXHmjgAfX/YOC0LOK
ZKGY5uEbiPdIkA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:47:54 2026 by rpki-client