Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/xBOLshC3wajwZm4HWfR18AZN8fc.mft
File: xBOLshC3wajwZm4HWfR18AZN8fc.mft (raw, json)
Hash identifier: c98WqCgq2OysQQOBOanEuMgSv5mkxa73WXUBvFJ+744=
Subject key identifier: 1B:08:6A:F5:47:19:84:F1:51:54:9B:D7:3C:5E:C7:4D:98:BB:6A:69
Authority key identifier: C4:13:8B:B2:10:B7:C1:A8:F0:66:6E:07:59:F4:75:F0:06:4D:F1:F7
Certificate issuer: /CN=c4138bb210b7c1a8f0666e0759f475f0064df1f7
Certificate serial: 019EC0DB10D9FD601F5B648A4B547FCFE579
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBOLshC3wajwZm4HWfR18AZN8fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/xBOLshC3wajwZm4HWfR18AZN8fc.mft
Manifest number: 0173
Signing time: Sat 13 Jun 2026 12:00:42 +0000
Manifest this update: Sat 13 Jun 2026 12:00:42 +0000
Manifest next update: Sun 14 Jun 2026 12:00:42 +0000
Files and hashes: 1: 7h5eSPNlffr_391YlxjHN1ItANQ.roa (hash: XEuG2vwGeCYbNa542z5LaRxd5TGJ34KJdQn28qGEDr0=)
2: KiNMgdfJ-jED44ngYXhsk4y4eUo.roa (hash: a7w7sWRkPS/IylXEpEG2ZktzWT1XLIn8MRkkpzcobUA=)
3: xBOLshC3wajwZm4HWfR18AZN8fc.crl (hash: 9jwPDDCPDPpgRak8zTlJy8pvMIvysRM2EdHmjU7Sxxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/xBOLshC3wajwZm4HWfR18AZN8fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/xBOLshC3wajwZm4HWfR18AZN8fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBOLshC3wajwZm4HWfR18AZN8fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:10:d9:fd:60:1f:5b:64:8a:4b:54:7f:cf:e5:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4138bb210b7c1a8f0666e0759f475f0064df1f7
Validity
Not Before: Jun 13 12:00:42 2026 GMT
Not After : Jun 14 12:00:42 2026 GMT
Subject: CN=1b086af5471984f151549bd73c5ec74d98bb6a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5f:88:b4:48:d5:bf:ef:2b:8f:f6:6c:66:f8:
61:b7:ea:a3:e7:1e:3b:d8:1b:bd:e9:e3:c3:c4:f5:
ad:80:a3:4a:33:b3:8f:4b:25:42:6a:36:39:3b:a2:
de:90:39:e5:1a:54:71:73:59:0d:01:95:da:da:39:
30:c3:31:76:72:51:41:92:d6:d0:7c:41:69:07:c6:
89:45:db:25:40:9c:55:71:a9:fb:0b:33:fc:5a:f3:
96:a9:9e:4a:f6:c8:ec:d2:2e:5b:7b:13:a6:9f:12:
4d:31:4f:0e:6a:8b:98:80:45:3d:71:c4:ba:63:94:
a7:7f:35:e7:e5:5b:c1:72:cf:e5:18:7f:d9:79:ca:
82:b8:70:df:03:c9:0e:9d:2f:35:0d:a1:42:2d:01:
5a:c1:db:de:e7:e1:39:24:ae:43:e0:70:66:e0:dc:
62:c6:d9:82:10:f3:80:4e:49:0b:ec:60:21:37:de:
16:48:ca:8b:30:35:24:d0:cb:1b:fa:0d:99:b5:b8:
a2:c9:ab:d6:0b:cd:b9:be:3f:de:5f:0d:aa:40:92:
37:ae:10:b1:ca:5a:d5:88:61:75:50:1f:5e:bd:87:
a5:f8:99:09:7c:5d:c8:4a:77:ee:0d:84:3e:f8:11:
80:0d:b9:d7:30:47:2c:57:db:fb:69:ad:3d:cb:89:
60:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:08:6A:F5:47:19:84:F1:51:54:9B:D7:3C:5E:C7:4D:98:BB:6A:69
X509v3 Authority Key Identifier:
keyid:C4:13:8B:B2:10:B7:C1:A8:F0:66:6E:07:59:F4:75:F0:06:4D:F1:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBOLshC3wajwZm4HWfR18AZN8fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/xBOLshC3wajwZm4HWfR18AZN8fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/xBOLshC3wajwZm4HWfR18AZN8fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:87:fb:4a:28:65:b5:f8:e3:35:b2:a1:10:22:0a:1f:dc:7b:
9e:14:75:6e:d0:42:c6:c0:f1:d7:06:a3:ce:0b:b6:b7:64:2e:
b8:5b:a1:18:83:5a:cb:82:e1:f1:86:6f:f8:01:2d:78:a5:d0:
b1:32:ec:fb:ec:cf:3f:b2:59:1d:0e:7c:1b:71:54:94:ab:84:
15:ff:53:c3:e1:ac:9d:67:a7:5e:2b:4c:92:7b:a6:47:c7:68:
0b:85:10:dd:0b:56:5b:4d:24:6b:8d:67:3c:db:e6:e0:c6:ce:
93:48:df:92:61:95:92:8f:e8:ac:07:7f:64:db:a9:0a:7a:bc:
d5:0e:f1:a5:4d:09:c7:00:f7:8b:79:95:34:8c:fb:ce:c1:1d:
dc:f0:06:aa:06:21:52:a5:49:1f:6b:28:85:9e:e0:0e:9c:e6:
77:53:2f:82:3c:73:99:b7:04:ce:77:f1:46:de:f5:df:10:d5:
6c:58:70:8e:dd:54:40:99:b8:5d:f4:dd:04:be:eb:db:32:39:
7b:2a:45:89:41:f4:cb:e5:db:fa:2f:be:da:c5:7b:2c:68:9a:
be:bc:e5:88:3e:8f:77:da:bc:e9:eb:40:d5:c4:35:aa:6c:a4:
ed:67:a8:ea:dd:df:ae:36:d1:63:d2:d4:a0:88:d6:62:df:54:
6b:2b:4d:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7A2xDZ/WAfW2SKS1R/z+V5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0MTM4YmIyMTBiN2MxYThmMDY2NmUwNzU5ZjQ3NWYwMDY0
ZGYxZjcwHhcNMjYwNjEzMTIwMDQyWhcNMjYwNjE0MTIwMDQyWjAzMTEwLwYDVQQD
EygxYjA4NmFmNTQ3MTk4NGYxNTE1NDliZDczYzVlYzc0ZDk4YmI2YTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAql+ItEjVv+8rj/ZsZvhht+qj5x47
2Bu96ePDxPWtgKNKM7OPSyVCajY5O6LekDnlGlRxc1kNAZXa2jkwwzF2clFBktbQ
fEFpB8aJRdslQJxVcan7CzP8WvOWqZ5K9sjs0i5bexOmnxJNMU8OaouYgEU9ccS6
Y5SnfzXn5VvBcs/lGH/ZecqCuHDfA8kOnS81DaFCLQFawdve5+E5JK5D4HBm4Nxi
xtmCEPOATkkL7GAhN94WSMqLMDUk0Msb+g2ZtbiiyavWC825vj/eXw2qQJI3rhCx
ylrViGF1UB9evYel+JkJfF3ISnfuDYQ++BGADbnXMEcsV9v7aa09y4lgJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBsIavVHGYTxUVSb1zxex02Yu2ppMB8GA1UdIwQY
MBaAFMQTi7IQt8Go8GZuB1n0dfAGTfH3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEJPTHNoQzN3YWp3Wm00SFdmUjE4QVpOOGZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC85ZmE1NGEtYTk4My00OTU4LWE5MmUt
ZmIxZjJhYWM1NjdlLzEveEJPTHNoQzN3YWp3Wm00SFdmUjE4QVpOOGZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC85ZmE1NGEtYTk4My00OTU4LWE5MmUtZmIxZjJhYWM1Njdl
LzEveEJPTHNoQzN3YWp3Wm00SFdmUjE4QVpOOGZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOof7Sihl
tfjjNbKhECIKH9x7nhR1btBCxsDx1wajzgu2t2QuuFuhGINay4Lh8YZv+AEteKXQ
sTLs++zPP7JZHQ58G3FUlKuEFf9Tw+GsnWenXitMknumR8doC4UQ3QtWW00ka41n
PNvm4MbOk0jfkmGVko/orAd/ZNupCnq81Q7xpU0JxwD3i3mVNIz7zsEd3PAGqgYh
UqVJH2sohZ7gDpzmd1MvgjxzmbcEznfxRt713xDVbFhwjt1UQJm4XfTdBL7r2zI5
eypFiUH0y+Xb+i++2sV7LGiavrzliD6Pd9q86etA1cQ1qmyk7Weo6t3frjbRY9LU
oIjWYt9UaytNkA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:56:58 2026 by rpki-client