Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.mft
File: XM97P9h86bzpn5ALZBmdYGvxYGk.mft (raw, json)
Hash identifier: bVTTSzwmnSdKWE1bj2PoUabPER9rSYX25OgbKtatSjg=
Subject key identifier: 43:80:9A:01:1E:E7:F8:7D:F2:85:9D:3C:5E:2F:15:A7:26:10:B0:B5
Authority key identifier: 5C:CF:7B:3F:D8:7C:E9:BC:E9:9F:90:0B:64:19:9D:60:6B:F1:60:69
Certificate issuer: /CN=5ccf7b3fd87ce9bce99f900b64199d606bf16069
Certificate serial: 019F97382FB062F8B52BB0290273F2C2AC2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XM97P9h86bzpn5ALZBmdYGvxYGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.mft
Manifest number: 195C
Signing time: Sat 25 Jul 2026 03:01:09 +0000
Manifest this update: Sat 25 Jul 2026 03:01:09 +0000
Manifest next update: Sun 26 Jul 2026 03:01:09 +0000
Files and hashes: 1: KhLnM9UHZFCOQul_YnhOlrlNWQg.roa (hash: F9XQk4xPu6hZHYNZKH9uTFT9zpakfltc+2j9WkGLNVk=)
2: XM97P9h86bzpn5ALZBmdYGvxYGk.crl (hash: 523w8KEeF2guBn2Hj2hG6VcyClEJNBm+MVbd9y2cJnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XM97P9h86bzpn5ALZBmdYGvxYGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 20:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:97:38:2f:b0:62:f8:b5:2b:b0:29:02:73:f2:c2:ac:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ccf7b3fd87ce9bce99f900b64199d606bf16069
Validity
Not Before: Jul 25 03:01:09 2026 GMT
Not After : Jul 26 03:01:09 2026 GMT
Subject: CN=43809a011ee7f87df2859d3c5e2f15a72610b0b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:12:4b:06:1e:ef:ec:5c:c7:1e:a7:07:02:e5:
e4:4b:ab:73:ce:45:48:fc:e1:fa:fa:4b:91:51:32:
9d:2d:be:b6:c3:d6:28:9f:09:47:af:62:0e:c2:c9:
cc:41:86:80:63:75:61:59:ba:31:c1:17:4c:d4:bb:
00:6c:cc:75:7e:e1:76:f1:98:fc:82:72:93:2e:49:
11:a6:9b:9e:ee:e7:89:fa:6e:20:63:61:5e:77:64:
7f:61:2f:d9:7a:13:22:1c:01:2f:11:94:4e:c2:83:
c1:1a:46:24:1b:ff:8f:3a:b4:72:28:3e:44:b2:eb:
d9:78:f9:be:89:c6:9d:c5:ce:de:0c:72:84:04:e7:
29:4e:84:67:25:62:fe:d4:29:6f:6e:97:ea:5f:2c:
36:bc:ea:0c:6a:5d:d7:69:6d:d2:f0:a2:3d:7e:f8:
86:1a:f5:03:5d:55:5f:23:4b:1b:8a:91:04:0e:6c:
2b:92:43:7e:d0:31:56:04:64:4e:fc:07:dd:4f:b4:
d1:84:6a:5a:e1:15:69:a7:ee:4b:61:ae:c5:23:50:
76:78:f4:a2:ad:74:20:30:99:8d:02:04:70:f6:cd:
4c:62:8e:00:0f:61:2f:77:ae:65:1d:dc:b7:8a:28:
29:eb:85:ba:f8:9c:f3:c8:6d:fd:55:fa:63:4f:f1:
cd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:80:9A:01:1E:E7:F8:7D:F2:85:9D:3C:5E:2F:15:A7:26:10:B0:B5
X509v3 Authority Key Identifier:
keyid:5C:CF:7B:3F:D8:7C:E9:BC:E9:9F:90:0B:64:19:9D:60:6B:F1:60:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XM97P9h86bzpn5ALZBmdYGvxYGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:24:47:b8:69:7b:39:d6:0b:3f:2e:8c:f6:d7:61:3a:c0:b1:
f2:72:9f:ec:fc:e3:22:7b:c2:de:6b:16:09:59:14:7f:fc:50:
2f:7b:52:1c:25:90:f7:d3:de:fd:c3:36:74:a7:fb:33:af:5f:
a9:07:ae:89:a0:0e:98:18:d9:40:9e:a2:74:40:0c:f9:e7:42:
67:6c:ff:ae:14:0f:45:1b:47:c8:19:cf:ea:47:aa:59:e2:da:
dd:46:48:9b:db:99:6d:c9:af:48:64:65:01:85:62:45:10:36:
72:39:20:75:aa:90:d7:db:00:1b:c2:46:38:b8:d0:05:eb:db:
6d:ad:6e:fb:83:8a:d7:6f:46:75:4f:53:2d:7b:66:e6:c2:03:
b6:fd:16:8e:d6:6c:be:15:73:8a:78:15:87:90:af:b7:cd:71:
b7:0b:b4:0c:a2:70:90:ad:bd:fb:4f:e5:a8:b7:1e:8d:83:8e:
9d:df:2e:26:9a:2a:e8:9b:f4:96:17:c5:47:e5:16:dc:e4:5f:
75:a4:48:c6:b4:47:17:0d:42:45:e1:cd:c0:81:d9:d9:cc:07:
27:45:1e:35:99:61:f9:c4:52:4e:d7:e9:cf:bb:28:f7:55:9a:
55:a6:f2:14:99:b6:1f:56:68:e6:03:c3:7c:34:87:fb:70:8f:
db:94:b2:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+XOC+wYvi1K7ApAnPywqwvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjY2Y3YjNmZDg3Y2U5YmNlOTlmOTAwYjY0MTk5ZDYwNmJm
MTYwNjkwHhcNMjYwNzI1MDMwMTA5WhcNMjYwNzI2MDMwMTA5WjAzMTEwLwYDVQQD
Eyg0MzgwOWEwMTFlZTdmODdkZjI4NTlkM2M1ZTJmMTVhNzI2MTBiMGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBJLBh7v7FzHHqcHAuXkS6tzzkVI
/OH6+kuRUTKdLb62w9YonwlHr2IOwsnMQYaAY3VhWboxwRdM1LsAbMx1fuF28Zj8
gnKTLkkRppue7ueJ+m4gY2Fed2R/YS/ZehMiHAEvEZROwoPBGkYkG/+POrRyKD5E
suvZePm+icadxc7eDHKEBOcpToRnJWL+1ClvbpfqXyw2vOoMal3XaW3S8KI9fviG
GvUDXVVfI0sbipEEDmwrkkN+0DFWBGRO/AfdT7TRhGpa4RVpp+5LYa7FI1B2ePSi
rXQgMJmNAgRw9s1MYo4AD2Evd65lHdy3iigp64W6+JzzyG39VfpjT/HNdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEOAmgEe5/h98oWdPF4vFacmELC1MB8GA1UdIwQY
MBaAFFzPez/YfOm86Z+QC2QZnWBr8WBpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWE05N1A5aDg2YnpwbjVBTFpCbWRZR3Z4WUdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC81NGRlYmItZDBiNi00NGQxLThlNTgt
OGNmOWU2ZjhhYjQ1LzEvWE05N1A5aDg2YnpwbjVBTFpCbWRZR3Z4WUdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC81NGRlYmItZDBiNi00NGQxLThlNTgtOGNmOWU2ZjhhYjQ1
LzEvWE05N1A5aDg2YnpwbjVBTFpCbWRZR3Z4WUdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAISRHuGl7
OdYLPy6M9tdhOsCx8nKf7PzjInvC3msWCVkUf/xQL3tSHCWQ99Pe/cM2dKf7M69f
qQeuiaAOmBjZQJ6idEAM+edCZ2z/rhQPRRtHyBnP6keqWeLa3UZIm9uZbcmvSGRl
AYViRRA2cjkgdaqQ19sAG8JGOLjQBevbba1u+4OK129GdU9TLXtm5sIDtv0WjtZs
vhVzingVh5Cvt81xtwu0DKJwkK29+0/lqLcejYOOnd8uJpoq6Jv0lhfFR+UW3ORf
daRIxrRHFw1CReHNwIHZ2cwHJ0UeNZlh+cRSTtfpz7so91WaVabyFJm2H1Zo5gPD
fDSH+3CP25Sy8g==
-----END CERTIFICATE-----
Generated at Sat Jul 25 05:13:03 2026 by rpki-client