
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft
File: xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft (raw, json)
Hash identifier: MCgWQdgHXxNsbzoPX3voBgse+KuUn96NBTe8TwuZGig=
Subject key identifier: DB:BA:16:E9:F8:2C:63:1C:53:02:04:B4:99:6A:73:D8:23:A5:1E:0C
Authority key identifier: C5:3F:43:88:AA:DF:0A:E4:FF:5E:E7:BD:37:26:3C:9F:1E:84:67:C7
Certificate issuer: /CN=c53f4388aadf0ae4ff5ee7bd37263c9f1e8467c7
Certificate serial: 019D9B19DC90B5BBBE77DDCBE8BE1398C13E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft
Manifest number: 0EC2
Signing time: Fri 17 Apr 2026 11:00:56 +0000
Manifest this update: Fri 17 Apr 2026 11:00:56 +0000
Manifest next update: Sat 18 Apr 2026 11:00:56 +0000
Files and hashes: 1: RO-P37ZaJBhYTx2bPXE9-XaK6mc.roa (hash: qyOlC1NYVIRV04UnpCxjxHKBjKTFjIWJJFf105WAhVM=)
2: xT9DiKrfCuT_Xue9NyY8nx6EZ8c.crl (hash: HoZ1Nf9ArvJPXG4aqTT9l2aKAZVlIzsyoDWHP8+1egg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:dc:90:b5:bb:be:77:dd:cb:e8:be:13:98:c1:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53f4388aadf0ae4ff5ee7bd37263c9f1e8467c7
Validity
Not Before: Apr 17 11:00:56 2026 GMT
Not After : Apr 18 11:00:56 2026 GMT
Subject: CN=dbba16e9f82c631c530204b4996a73d823a51e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8f:df:c7:e4:f1:89:77:8c:2f:31:a2:9d:d2:
7b:a1:7a:da:b7:87:71:43:2e:d6:e5:47:9b:aa:31:
e5:ec:bb:43:20:68:65:cf:ad:b2:a2:48:86:2d:10:
d3:30:71:61:9b:90:85:04:73:59:ed:ac:52:db:89:
c7:fa:8d:93:5a:c8:61:2e:c8:e3:33:c4:71:e0:e1:
39:48:67:57:61:89:34:04:c9:42:d5:58:fe:db:53:
71:7d:da:c7:b0:c2:cf:42:6d:5d:ca:8f:93:fb:9f:
00:01:74:bf:33:61:b1:9f:94:d7:46:ef:dc:46:bd:
6b:d5:49:9a:91:ea:bf:d3:10:42:41:03:5a:99:80:
60:40:40:93:4d:ad:ab:18:39:a7:2e:00:a1:de:d5:
c8:5f:d4:b8:a2:58:8a:02:02:ac:3b:7b:1f:00:1b:
a6:b4:9f:a2:71:a1:d4:a1:8b:df:44:56:be:e1:0c:
ca:0b:e4:02:0e:c1:a2:05:19:0e:c1:e3:5f:fa:03:
d2:8a:fc:10:4c:7c:aa:8f:fa:16:9e:a9:85:c3:12:
cc:a8:a9:54:cc:45:d2:bc:2c:64:c8:fd:e1:7b:66:
d5:a3:55:43:40:12:80:ec:67:d8:41:a3:b2:6f:07:
dd:ab:dd:7a:6e:45:e1:5e:b7:14:4e:39:ac:a9:a3:
99:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:BA:16:E9:F8:2C:63:1C:53:02:04:B4:99:6A:73:D8:23:A5:1E:0C
X509v3 Authority Key Identifier:
keyid:C5:3F:43:88:AA:DF:0A:E4:FF:5E:E7:BD:37:26:3C:9F:1E:84:67:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:c9:3a:8d:9f:bb:91:1a:19:e5:27:50:3c:9f:c1:3e:9a:93:
a3:4e:45:01:9b:f5:b8:a9:1a:69:6c:24:5f:60:83:2e:8d:bf:
2d:d2:96:de:d5:9d:62:28:9d:2f:cd:9d:32:32:fa:2d:04:1d:
59:ff:01:81:6a:68:a5:4d:bf:0f:23:2c:22:f2:f4:be:69:13:
38:2b:4a:13:fc:86:ff:c4:3e:0a:bf:37:dd:56:ef:f5:2f:53:
7e:89:70:ed:00:b0:b2:35:15:68:ed:7d:b4:76:8c:26:9e:02:
af:61:6b:53:5a:73:3e:15:1a:b4:88:20:5f:13:cd:e3:7a:fa:
f6:9b:75:74:c6:14:f2:68:7d:7a:bf:a1:47:30:c5:57:b2:76:
95:0d:90:65:94:d4:bf:4f:3f:39:7c:89:76:bc:ad:08:4a:25:
3f:67:be:ba:7e:35:f4:1e:95:37:ff:49:3a:07:5e:ef:4a:8f:
22:c9:92:d3:36:b1:53:cd:e7:d5:96:4d:d5:29:52:d6:6b:60:
3f:0a:9d:f5:b5:9b:ab:9d:16:49:89:88:99:0e:b6:f7:09:72:
49:23:fe:8d:5b:c2:fd:4a:33:bc:75:24:00:85:d6:7c:bc:b8:
3f:62:3c:dd:86:e6:bd:4d:46:84:01:68:ea:55:4d:ee:c8:49:
2f:8c:bc:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bGdyQtbu+d93L6L4TmME+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1M2Y0Mzg4YWFkZjBhZTRmZjVlZTdiZDM3MjYzYzlmMWU4
NDY3YzcwHhcNMjYwNDE3MTEwMDU2WhcNMjYwNDE4MTEwMDU2WjAzMTEwLwYDVQQD
EyhkYmJhMTZlOWY4MmM2MzFjNTMwMjA0YjQ5OTZhNzNkODIzYTUxZTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzI/fx+TxiXeMLzGindJ7oXrat4dx
Qy7W5UebqjHl7LtDIGhlz62yokiGLRDTMHFhm5CFBHNZ7axS24nH+o2TWshhLsjj
M8Rx4OE5SGdXYYk0BMlC1Vj+21NxfdrHsMLPQm1dyo+T+58AAXS/M2Gxn5TXRu/c
Rr1r1Umakeq/0xBCQQNamYBgQECTTa2rGDmnLgCh3tXIX9S4oliKAgKsO3sfABum
tJ+icaHUoYvfRFa+4QzKC+QCDsGiBRkOweNf+gPSivwQTHyqj/oWnqmFwxLMqKlU
zEXSvCxkyP3he2bVo1VDQBKA7GfYQaOybwfdq916bkXhXrcUTjmsqaOZ/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNu6Fun4LGMcUwIEtJlqc9gjpR4MMB8GA1UdIwQY
MBaAFMU/Q4iq3wrk/17nvTcmPJ8ehGfHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFQ5RGlLcmZDdVRfWHVlOU55WThueDZFWjhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9hYjU1Y2UtNzVmZi00MzliLWJjYjUt
ZGRhMzUwYjExZjAyLzEveFQ5RGlLcmZDdVRfWHVlOU55WThueDZFWjhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9hYjU1Y2UtNzVmZi00MzliLWJjYjUtZGRhMzUwYjExZjAy
LzEveFQ5RGlLcmZDdVRfWHVlOU55WThueDZFWjhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVsk6jZ+7
kRoZ5SdQPJ/BPpqTo05FAZv1uKkaaWwkX2CDLo2/LdKW3tWdYiidL82dMjL6LQQd
Wf8BgWpopU2/DyMsIvL0vmkTOCtKE/yG/8Q+Cr833Vbv9S9Tfolw7QCwsjUVaO19
tHaMJp4Cr2FrU1pzPhUatIggXxPN43r69pt1dMYU8mh9er+hRzDFV7J2lQ2QZZTU
v08/OXyJdrytCEolP2e+un419B6VN/9JOgde70qPIsmS0zaxU83n1ZZN1SlS1mtg
Pwqd9bWbq50WSYmImQ629wlySSP+jVvC/UozvHUkAIXWfLy4P2I83YbmvU1GhAFo
6lVN7shJL4y8Xg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:04:17 2026 by rpki-client