
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
File: XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft (raw, json)
Hash identifier: T1zOsH5EyoBJZP3gQax9Sed/r5szc/uUbuwK6A1mPFo=
Subject key identifier: A7:E3:10:3D:7D:17:D2:2B:8C:6E:6B:9F:38:BE:66:45:23:12:CD:73
Authority key identifier: 5E:67:66:0A:F7:52:3C:61:B7:F9:5D:08:48:8D:58:3E:9D:51:4F:6B
Certificate issuer: /CN=5e67660af7523c61b7f95d08488d583e9d514f6b
Certificate serial: 019E228032640130DF0EBC7371E4F51BBF49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
Manifest number: 0925
Signing time: Wed 13 May 2026 18:01:27 +0000
Manifest this update: Wed 13 May 2026 18:01:27 +0000
Manifest next update: Thu 14 May 2026 18:01:27 +0000
Files and hashes: 1: XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl (hash: ufN/UERGpB/Rj1YSe8K2+j0Yzta1EIfLIBEMIp9ZUoE=)
2: i5WP_AihTIXhPy_BVXYv71HxOto.roa (hash: VJGbYlBp9HGyGJZxGUnm0bEpFbqRPbJagnJqTdbqGUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 18:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:22:80:32:64:01:30:df:0e:bc:73:71:e4:f5:1b:bf:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e67660af7523c61b7f95d08488d583e9d514f6b
Validity
Not Before: May 13 18:01:27 2026 GMT
Not After : May 14 18:01:27 2026 GMT
Subject: CN=a7e3103d7d17d22b8c6e6b9f38be66452312cd73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d0:21:cd:46:90:38:02:b3:fd:f2:c6:7a:bb:
c7:c7:67:a6:9f:95:d4:bd:91:63:72:79:cc:90:a1:
5c:a1:78:6f:bd:2c:dc:07:fa:b6:7e:b1:f3:79:e2:
72:ce:c6:3d:e3:67:f1:f4:98:64:f9:64:64:3b:e7:
e3:f3:78:00:87:f4:d8:95:a2:db:25:03:88:e1:39:
7a:9f:d4:5f:66:37:f6:83:10:bb:0e:6f:fd:88:cb:
82:3a:3c:72:23:4b:78:74:95:8f:0d:32:9f:30:1c:
c8:a0:7b:d1:39:6f:9f:39:52:b6:57:d3:b9:24:75:
5b:03:ac:7f:a7:aa:50:34:02:7c:39:b3:af:f1:ce:
71:2a:dc:ac:b4:1e:f5:56:ec:1b:d3:26:15:f3:62:
02:93:aa:c4:06:b9:23:71:bf:f4:4d:2c:5a:4d:06:
9a:a4:7c:02:68:b4:ad:58:07:c6:87:5d:c3:b0:7b:
c6:bd:9e:39:a3:56:8f:7a:04:59:0e:0c:dc:38:9f:
30:23:f9:61:e6:6e:ed:a4:44:42:2d:4a:d5:be:47:
2c:b0:87:19:46:83:b2:fe:f4:a3:7a:8b:11:29:99:
34:3d:54:c1:0a:c3:94:71:94:d6:89:e0:db:5d:a9:
7d:48:f5:bc:92:de:5c:37:1c:3d:36:74:c1:90:85:
51:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E3:10:3D:7D:17:D2:2B:8C:6E:6B:9F:38:BE:66:45:23:12:CD:73
X509v3 Authority Key Identifier:
keyid:5E:67:66:0A:F7:52:3C:61:B7:F9:5D:08:48:8D:58:3E:9D:51:4F:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:e9:1f:c1:7a:66:45:fe:b1:5a:20:ca:3a:36:a5:9b:f0:dc:
68:4e:a5:1c:c0:21:18:d1:2c:83:3c:18:d8:a8:43:7b:1a:aa:
1b:4d:cc:fd:78:f5:68:b5:4b:02:89:e2:95:bc:dc:97:99:17:
2f:62:32:e2:b7:b0:7d:8a:e7:05:04:dc:c1:e3:30:f7:3d:8a:
da:00:d5:99:cf:15:b4:4d:df:43:d1:b7:52:25:63:5c:9a:ce:
61:e1:21:ca:2c:8d:97:84:b7:8e:49:b2:5f:d3:f7:81:1c:66:
70:c2:e7:58:0e:21:21:d0:2e:ba:f0:29:fc:9a:2a:24:2a:29:
5b:ae:6e:92:d0:dc:7b:43:d1:e5:d5:c3:83:c8:94:8d:0d:8a:
f9:ed:2b:37:1d:1a:d0:e1:f9:f6:78:c8:b3:52:7a:57:e3:e5:
81:2f:ae:55:10:23:ce:32:15:41:90:a6:22:59:7f:87:03:10:
85:09:74:da:69:79:f7:b4:1e:16:ca:7a:31:ba:e0:32:06:55:
77:4e:5f:37:a8:25:be:13:63:b8:f0:16:ff:1f:89:81:5e:95:
dc:0e:8c:be:a1:76:60:f6:e0:3d:e0:56:b2:9d:e9:0e:e9:ad:
df:53:25:c2:d2:bb:7f:39:55:0f:1b:82:40:a4:80:52:ad:bf:
1d:ac:37:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4igDJkATDfDrxzceT1G79JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNjc2NjBhZjc1MjNjNjFiN2Y5NWQwODQ4OGQ1ODNlOWQ1
MTRmNmIwHhcNMjYwNTEzMTgwMTI3WhcNMjYwNTE0MTgwMTI3WjAzMTEwLwYDVQQD
EyhhN2UzMTAzZDdkMTdkMjJiOGM2ZTZiOWYzOGJlNjY0NTIzMTJjZDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9AhzUaQOAKz/fLGervHx2emn5XU
vZFjcnnMkKFcoXhvvSzcB/q2frHzeeJyzsY942fx9Jhk+WRkO+fj83gAh/TYlaLb
JQOI4Tl6n9RfZjf2gxC7Dm/9iMuCOjxyI0t4dJWPDTKfMBzIoHvROW+fOVK2V9O5
JHVbA6x/p6pQNAJ8ObOv8c5xKtystB71Vuwb0yYV82ICk6rEBrkjcb/0TSxaTQaa
pHwCaLStWAfGh13DsHvGvZ45o1aPegRZDgzcOJ8wI/lh5m7tpERCLUrVvkcssIcZ
RoOy/vSjeosRKZk0PVTBCsOUcZTWieDbXal9SPW8kt5cNxw9NnTBkIVRgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKfjED19F9IrjG5rnzi+ZkUjEs1zMB8GA1UdIwQY
MBaAFF5nZgr3Ujxht/ldCEiNWD6dUU9rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG1kbUN2ZFNQR0czLVYwSVNJMVlQcDFSVDJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85Nzg2ZGEtMWY0Yy00MDhjLWIyMDIt
MDBkMmZhYzVmMDEwLzEvWG1kbUN2ZFNQR0czLVYwSVNJMVlQcDFSVDJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85Nzg2ZGEtMWY0Yy00MDhjLWIyMDItMDBkMmZhYzVmMDEw
LzEvWG1kbUN2ZFNQR0czLVYwSVNJMVlQcDFSVDJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ+kfwXpm
Rf6xWiDKOjalm/DcaE6lHMAhGNEsgzwY2KhDexqqG03M/Xj1aLVLAonilbzcl5kX
L2Iy4rewfYrnBQTcweMw9z2K2gDVmc8VtE3fQ9G3UiVjXJrOYeEhyiyNl4S3jkmy
X9P3gRxmcMLnWA4hIdAuuvAp/JoqJCopW65uktDce0PR5dXDg8iUjQ2K+e0rNx0a
0OH59njIs1J6V+PlgS+uVRAjzjIVQZCmIll/hwMQhQl02ml597QeFsp6MbrgMgZV
d05fN6glvhNjuPAW/x+JgV6V3A6MvqF2YPbgPeBWsp3pDumt31MlwtK7fzlVDxuC
QKSAUq2/Haw3kg==
-----END CERTIFICATE-----
Generated at Thu May 14 03:17:29 2026 by rpki-client