Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
File: X4KumjBKwILBiiiRZm9kzugdXKg.mft (raw, json)
Hash identifier: s+2KS8u3ThaQ5Gtif6FNeHhAhqVfT4IAXtOJcwOBzGk=
Subject key identifier: EF:5F:5A:88:9E:C4:EE:92:58:EE:AC:13:43:48:FA:0C:72:EB:B8:16
Authority key identifier: 5F:82:AE:9A:30:4A:C0:82:C1:8A:28:91:66:6F:64:CE:E8:1D:5C:A8
Certificate issuer: /CN=5f82ae9a304ac082c18a2891666f64cee81d5ca8
Certificate serial: 019F859F43F9FA08E8130CE791E2FA37E6F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
Manifest number: 1126
Signing time: Tue 21 Jul 2026 17:00:35 +0000
Manifest this update: Tue 21 Jul 2026 17:00:35 +0000
Manifest next update: Wed 22 Jul 2026 17:00:35 +0000
Files and hashes: 1: FpMR3_wbyPoQ3SpLC3msQFuHBCc.roa (hash: mnRTyPfeR1b8jfxG5BpoCLK6zLk4lmp1OJjO9At2igc=)
2: X4KumjBKwILBiiiRZm9kzugdXKg.crl (hash: OwWxEcjG9UgYeBuEvV5Q5CZhCf1tI6gnYeQZe9aZfBE=)
3: YcE6ReHh6unnU83H-TjyslkyeUw.roa (hash: McwZCMtZVwtttRxvoSUbvLr+7AkamJmadn/zlM3onqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 17:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:9f:43:f9:fa:08:e8:13:0c:e7:91:e2:fa:37:e6:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f82ae9a304ac082c18a2891666f64cee81d5ca8
Validity
Not Before: Jul 21 17:00:35 2026 GMT
Not After : Jul 22 17:00:35 2026 GMT
Subject: CN=ef5f5a889ec4ee9258eeac134348fa0c72ebb816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bf:76:f4:1a:8e:7e:68:0e:d7:0c:46:bc:e2:
66:7b:db:8c:75:4f:c8:17:9d:f8:31:67:0b:60:dd:
f2:cd:e7:7a:d3:ad:6a:d5:c8:26:cf:ef:e2:ae:31:
97:34:09:55:b0:74:5b:f7:95:87:99:b6:79:5c:97:
b1:e1:17:3b:76:ed:cc:c9:29:cf:d9:4e:b3:ff:6a:
c7:98:07:fe:9a:ca:e1:5d:1b:3a:d8:2c:0e:fa:9f:
c1:f3:02:29:73:42:55:29:2a:fa:9c:90:ec:a0:da:
99:1e:93:0d:42:2d:4a:63:44:36:8e:52:d9:80:79:
ae:aa:ce:48:26:d0:d5:d5:9f:e8:3f:7c:c8:d8:0f:
76:65:20:21:e5:6d:b1:a0:31:7a:0b:fb:14:82:48:
a8:f0:71:bc:7d:4f:0a:3b:be:3a:5f:ca:c6:65:40:
58:e7:be:c1:69:10:22:2f:55:03:d0:ed:60:e8:be:
b6:c6:f4:66:2e:b8:49:2d:22:52:e9:69:c5:02:b7:
fa:fc:fe:d5:33:75:14:e1:64:9f:d0:6a:fd:a2:6d:
b0:7f:00:fc:84:59:30:0e:f6:d5:eb:03:11:51:b4:
49:b5:e4:9e:f9:45:85:89:50:57:25:77:ed:22:98:
9d:d3:a3:0b:8a:45:24:47:46:39:65:b0:06:04:2a:
d8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:5F:5A:88:9E:C4:EE:92:58:EE:AC:13:43:48:FA:0C:72:EB:B8:16
X509v3 Authority Key Identifier:
keyid:5F:82:AE:9A:30:4A:C0:82:C1:8A:28:91:66:6F:64:CE:E8:1D:5C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:40:23:86:de:1d:fb:88:01:23:ba:db:2a:4b:08:e0:e8:0f:
49:c8:d3:a7:21:bb:8b:02:16:94:3d:2b:a3:36:21:32:b8:ca:
b2:a0:8d:7e:b4:61:7c:84:33:64:be:e2:1a:e2:60:86:9c:a1:
ab:e8:63:69:8a:fb:8a:cc:e8:d1:e2:5c:aa:2e:21:ac:eb:aa:
b3:b1:ca:56:be:78:f2:08:c8:54:68:ba:0d:98:43:a9:16:93:
48:8b:46:83:d1:80:a9:df:78:c8:e4:08:78:47:f2:72:b2:7c:
2a:7f:2b:5e:e6:ce:7b:25:ba:1e:7e:49:8e:28:3e:4b:d6:d1:
f7:0a:4f:24:3e:69:4b:4e:f7:f5:eb:66:dd:24:a8:e7:09:97:
41:6a:5f:70:20:1f:21:ee:8b:46:26:98:b2:31:2e:0f:23:bc:
e1:3a:4b:66:b2:4a:95:2a:36:1c:4c:94:6e:b7:45:98:78:88:
19:ea:e1:db:f3:a4:e3:07:a7:e1:5a:85:7d:74:20:15:37:44:
6e:d5:6f:36:a6:02:dc:4f:82:24:a9:f9:a8:35:9e:62:b0:3e:
9f:c0:a5:af:d3:07:73:ef:c8:07:3c:a3:d4:5c:7a:f7:7f:ca:
a5:42:07:89:a2:a9:6b:a3:05:bd:f5:e3:dd:06:a1:2e:61:a2:
11:23:07:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Fn0P5+gjoEwznkeL6N+bwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmODJhZTlhMzA0YWMwODJjMThhMjg5MTY2NmY2NGNlZTgx
ZDVjYTgwHhcNMjYwNzIxMTcwMDM1WhcNMjYwNzIyMTcwMDM1WjAzMTEwLwYDVQQD
EyhlZjVmNWE4ODllYzRlZTkyNThlZWFjMTM0MzQ4ZmEwYzcyZWJiODE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArr929BqOfmgO1wxGvOJme9uMdU/I
F534MWcLYN3yzed6061q1cgmz+/irjGXNAlVsHRb95WHmbZ5XJex4Rc7du3MySnP
2U6z/2rHmAf+msrhXRs62CwO+p/B8wIpc0JVKSr6nJDsoNqZHpMNQi1KY0Q2jlLZ
gHmuqs5IJtDV1Z/oP3zI2A92ZSAh5W2xoDF6C/sUgkio8HG8fU8KO746X8rGZUBY
577BaRAiL1UD0O1g6L62xvRmLrhJLSJS6WnFArf6/P7VM3UU4WSf0Gr9om2wfwD8
hFkwDvbV6wMRUbRJteSe+UWFiVBXJXftIpid06MLikUkR0Y5ZbAGBCrY+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO9fWoiexO6SWO6sE0NI+gxy67gWMB8GA1UdIwQY
MBaAFF+CrpowSsCCwYookWZvZM7oHVyoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDRLdW1qQkt3SUxCaWlpUlptOWt6dWdkWEtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9kNmRiZDgtNjQ2Ni00OGQwLWE1OTct
M2VjNDQ3MzEwZGZiLzEvWDRLdW1qQkt3SUxCaWlpUlptOWt6dWdkWEtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9kNmRiZDgtNjQ2Ni00OGQwLWE1OTctM2VjNDQ3MzEwZGZi
LzEvWDRLdW1qQkt3SUxCaWlpUlptOWt6dWdkWEtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGUAjht4d
+4gBI7rbKksI4OgPScjTpyG7iwIWlD0rozYhMrjKsqCNfrRhfIQzZL7iGuJghpyh
q+hjaYr7iszo0eJcqi4hrOuqs7HKVr548gjIVGi6DZhDqRaTSItGg9GAqd94yOQI
eEfycrJ8Kn8rXubOeyW6Hn5Jjig+S9bR9wpPJD5pS0739etm3SSo5wmXQWpfcCAf
Ie6LRiaYsjEuDyO84TpLZrJKlSo2HEyUbrdFmHiIGerh2/Ok4wen4VqFfXQgFTdE
btVvNqYC3E+CJKn5qDWeYrA+n8Clr9MHc+/IBzyj1Fx693/KpUIHiaKpa6MFvfXj
3QahLmGiESMHPA==
-----END CERTIFICATE-----
Generated at Wed Jul 22 02:37:25 2026 by rpki-client