Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
File: XXg76LX3rdAI1xK0N72fmXwIT98.mft (raw, json)
Hash identifier: jgHoxqDpg9XvppkKs3lLrCrjeybl3mDQszVrr6VLnRM=
Subject key identifier: 80:CD:16:64:4B:AD:1C:64:2C:E4:91:33:35:D1:0B:A0:53:BB:A1:2D
Authority key identifier: 5D:78:3B:E8:B5:F7:AD:D0:08:D7:12:B4:37:BD:9F:99:7C:08:4F:DF
Certificate issuer: /CN=5d783be8b5f7add008d712b437bd9f997c084fdf
Certificate serial: 019D9B87CE99E9C24F4B893C1E1A48C0B2EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 13:01:01 +0000
Manifest this update: Fri 17 Apr 2026 13:01:01 +0000
Manifest next update: Sat 18 Apr 2026 13:01:01 +0000
Files and hashes: 1: 80ddEu08r1uFh6uix50N7d9F0o8.roa (hash: DtyowyLw2dVPCBg0r3cdDO/1HWaqkm/fNKE6IcB/i2Y=)
2: XXg76LX3rdAI1xK0N72fmXwIT98.crl (hash: ElkMk2WUEQfGdCLHs8kfkcrls+TnF5jNLi935z84Cv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:ce:99:e9:c2:4f:4b:89:3c:1e:1a:48:c0:b2:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d783be8b5f7add008d712b437bd9f997c084fdf
Validity
Not Before: Apr 17 13:01:01 2026 GMT
Not After : Apr 18 13:01:01 2026 GMT
Subject: CN=80cd16644bad1c642ce4913335d10ba053bba12d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b0:b1:a6:ab:66:c2:57:b1:bb:d0:4b:08:83:
e3:b6:70:fe:c2:56:4c:fb:88:bf:df:07:ac:84:4f:
49:68:8e:a6:ff:b8:c0:f6:f9:f9:52:90:f9:f7:32:
c4:c6:cb:ca:21:4c:82:fe:cb:b9:67:85:d2:b3:b0:
6e:9f:24:81:03:67:ff:60:81:54:41:5d:55:04:77:
24:11:a6:39:4c:2c:14:4d:ed:c8:c1:61:26:54:ef:
ab:29:a1:c1:c5:ec:58:f1:43:c7:06:20:f2:6e:f7:
12:be:e6:dc:20:32:4d:1e:dd:ae:c8:d3:a8:38:5b:
97:ab:6e:26:8e:44:05:d1:77:6c:a7:63:48:44:20:
44:1c:a0:f9:b5:a5:ba:7b:2b:5a:ef:21:17:08:f3:
74:ae:f9:05:ce:02:f4:30:7e:7a:b2:dd:63:4e:a1:
f3:06:7e:31:2d:64:d5:77:fa:cc:90:16:d5:28:58:
89:33:b6:79:47:34:55:03:73:0f:84:c0:d2:a6:99:
03:e6:df:16:1b:af:fc:4d:2e:38:7b:2d:75:a3:62:
e2:33:c6:f2:4d:ae:23:8f:85:ef:6b:c4:9b:84:e6:
af:38:dd:1a:59:55:7c:5e:a2:76:af:20:27:dc:f6:
e2:46:cb:9d:c6:ed:8e:7d:5f:e6:a9:db:b1:ac:f9:
0e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:CD:16:64:4B:AD:1C:64:2C:E4:91:33:35:D1:0B:A0:53:BB:A1:2D
X509v3 Authority Key Identifier:
keyid:5D:78:3B:E8:B5:F7:AD:D0:08:D7:12:B4:37:BD:9F:99:7C:08:4F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:33:1a:f0:e0:28:10:08:69:b7:59:86:fd:d9:9a:f4:9f:fb:
bb:d2:4c:13:cd:99:10:9e:18:6b:c2:53:8b:d5:5c:59:42:4f:
56:62:8a:57:e3:6b:9a:94:57:55:7c:71:9f:06:89:d0:e8:49:
cd:6e:66:f6:57:b4:85:c5:07:a1:de:eb:e2:73:8d:d2:27:3c:
ce:0f:37:59:34:21:5b:99:19:be:12:6b:41:44:14:fa:a0:25:
28:f8:90:7b:e8:44:77:c0:b6:14:26:61:ad:7b:f6:a1:51:47:
8d:33:9d:b3:7a:10:1d:2b:b1:01:31:8b:cd:b9:b1:e4:3f:f3:
ec:39:e1:71:a3:5c:67:d3:78:2e:58:1b:e1:4d:53:5d:37:82:
b5:69:71:fe:c8:d9:92:fb:01:ff:94:c1:17:8c:31:a2:e3:12:
16:5a:cd:32:4f:5a:79:ff:36:05:1c:b4:77:17:b7:aa:4d:e7:
53:d0:20:da:39:ba:56:fe:45:46:a5:bb:19:63:19:a9:69:c1:
f7:f7:eb:fd:d8:07:85:11:09:9a:19:fd:08:cc:83:e1:bb:eb:
07:eb:89:92:16:66:dc:16:68:c2:a9:20:f6:63:4a:68:d7:33:
f6:9a:0f:45:b6:0e:8c:77:c1:84:cb:3e:23:39:dd:31:56:06:
69:72:92:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bh86Z6cJPS4k8HhpIwLLsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkNzgzYmU4YjVmN2FkZDAwOGQ3MTJiNDM3YmQ5Zjk5N2Mw
ODRmZGYwHhcNMjYwNDE3MTMwMTAxWhcNMjYwNDE4MTMwMTAxWjAzMTEwLwYDVQQD
Eyg4MGNkMTY2NDRiYWQxYzY0MmNlNDkxMzMzNWQxMGJhMDUzYmJhMTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7Cxpqtmwlexu9BLCIPjtnD+wlZM
+4i/3weshE9JaI6m/7jA9vn5UpD59zLExsvKIUyC/su5Z4XSs7BunySBA2f/YIFU
QV1VBHckEaY5TCwUTe3IwWEmVO+rKaHBxexY8UPHBiDybvcSvubcIDJNHt2uyNOo
OFuXq24mjkQF0Xdsp2NIRCBEHKD5taW6eyta7yEXCPN0rvkFzgL0MH56st1jTqHz
Bn4xLWTVd/rMkBbVKFiJM7Z5RzRVA3MPhMDSppkD5t8WG6/8TS44ey11o2LiM8by
Ta4jj4Xva8SbhOavON0aWVV8XqJ2ryAn3PbiRsudxu2OfV/mqduxrPkOYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIDNFmRLrRxkLOSRMzXRC6BTu6EtMB8GA1UdIwQY
MBaAFF14O+i1963QCNcStDe9n5l8CE/fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFhnNzZMWDNyZEFJMXhLME43MmZtWHdJVDk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82MDY1ZGItOTNiMi00MWVjLWIxOWEt
Njg4Y2UwMTM2NzFlLzEvWFhnNzZMWDNyZEFJMXhLME43MmZtWHdJVDk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi82MDY1ZGItOTNiMi00MWVjLWIxOWEtNjg4Y2UwMTM2NzFl
LzEvWFhnNzZMWDNyZEFJMXhLME43MmZtWHdJVDk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhTMa8OAo
EAhpt1mG/dma9J/7u9JME82ZEJ4Ya8JTi9VcWUJPVmKKV+NrmpRXVXxxnwaJ0OhJ
zW5m9le0hcUHod7r4nON0ic8zg83WTQhW5kZvhJrQUQU+qAlKPiQe+hEd8C2FCZh
rXv2oVFHjTOds3oQHSuxATGLzbmx5D/z7DnhcaNcZ9N4Llgb4U1TXTeCtWlx/sjZ
kvsB/5TBF4wxouMSFlrNMk9aef82BRy0dxe3qk3nU9Ag2jm6Vv5FRqW7GWMZqWnB
9/fr/dgHhREJmhn9CMyD4bvrB+uJkhZm3BZowqkg9mNKaNcz9poPRbYOjHfBhMs+
IzndMVYGaXKSzQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:45:51 2026 by rpki-client