Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft
File: XL6eQwJOzGksM1OYuy2WcRaqwtk.mft (raw, json)
Hash identifier: ry2lWzTSxGJd7VtobYf1529ddJ8zW+OY3+t6W6rRthk=
Subject key identifier: 6F:D4:FE:8B:59:DE:DC:17:8E:F2:07:5D:B2:23:24:0D:81:AB:DB:99
Authority key identifier: 5C:BE:9E:43:02:4E:CC:69:2C:33:53:98:BB:2D:96:71:16:AA:C2:D9
Certificate issuer: /CN=5cbe9e43024ecc692c335398bb2d967116aac2d9
Certificate serial: 019F9F5F092A42CAB64FEF1B8AD9E713A2FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XL6eQwJOzGksM1OYuy2WcRaqwtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft
Manifest number: 0F80
Signing time: Sun 26 Jul 2026 17:00:33 +0000
Manifest this update: Sun 26 Jul 2026 17:00:33 +0000
Manifest next update: Mon 27 Jul 2026 17:00:33 +0000
Files and hashes: 1: XL6eQwJOzGksM1OYuy2WcRaqwtk.crl (hash: G0ubMJc4hOBJgfaKHy5f7BxilGyvExxzlKTXkIxQQF8=)
2: cdVP4VMQTXg2CT86yVWAypk62nQ.roa (hash: LC40P/qPiuezV8f6FpcmDk2skf+yITxCG3dFo+ERAAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XL6eQwJOzGksM1OYuy2WcRaqwtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 17:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:5f:09:2a:42:ca:b6:4f:ef:1b:8a:d9:e7:13:a2:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cbe9e43024ecc692c335398bb2d967116aac2d9
Validity
Not Before: Jul 26 17:00:33 2026 GMT
Not After : Jul 27 17:00:33 2026 GMT
Subject: CN=6fd4fe8b59dedc178ef2075db223240d81abdb99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:df:f3:6d:e0:26:02:72:a1:79:bc:dc:9d:63:
06:aa:98:38:81:81:b3:1a:b7:66:5e:ae:89:88:63:
19:7e:d6:82:60:d4:77:2f:0b:83:cd:f4:10:1f:52:
75:32:f2:4f:f6:04:a0:10:7d:bf:1d:62:d4:4d:f8:
71:0f:49:81:a6:2d:89:bc:94:f7:ed:e1:e1:b7:fd:
8b:de:5c:18:f3:45:00:12:6d:d1:a2:9e:d2:d1:82:
d4:83:7d:0f:63:16:32:d1:d0:4d:36:af:63:b5:3e:
22:db:67:12:8f:24:77:b5:19:59:78:f9:14:30:c8:
4b:21:ce:25:70:2d:68:0a:0f:41:f5:1b:7b:3d:73:
07:d1:cc:b2:19:c9:8e:43:ca:15:69:5a:51:4d:23:
6c:c7:2c:25:11:88:cb:4e:06:eb:4f:c1:32:c0:5f:
1b:32:92:a5:2d:67:95:95:79:07:22:7f:86:09:d1:
30:89:db:11:b3:69:eb:c3:be:32:21:47:c9:1b:25:
82:c7:c6:ab:0b:3d:bc:c9:3d:fd:fd:f7:de:d4:0e:
bd:2d:8b:ae:31:20:b9:9b:e9:2a:5a:7a:69:bf:8c:
e5:fd:95:bd:4a:d5:22:fe:99:89:27:8c:a7:ca:a1:
60:38:61:79:eb:50:2e:37:8c:fc:45:d5:4c:35:d2:
a0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D4:FE:8B:59:DE:DC:17:8E:F2:07:5D:B2:23:24:0D:81:AB:DB:99
X509v3 Authority Key Identifier:
keyid:5C:BE:9E:43:02:4E:CC:69:2C:33:53:98:BB:2D:96:71:16:AA:C2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XL6eQwJOzGksM1OYuy2WcRaqwtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:41:d2:dd:f8:e6:1e:f4:d6:08:57:28:67:f8:76:a8:2f:ea:
df:4a:5a:27:e6:ad:4e:7c:38:08:3f:65:96:c6:61:96:85:2f:
a3:ff:46:12:1a:e7:6a:02:39:26:7d:df:d2:80:a0:32:f9:a7:
42:0f:8f:b9:75:aa:18:21:0b:fc:0f:ff:c0:17:1a:5f:e0:4a:
e1:97:85:95:04:e3:54:97:95:c7:a4:26:9c:64:c9:b3:54:23:
79:6d:39:96:47:a2:ae:97:11:89:cb:af:68:a9:a9:f1:da:9a:
83:8b:31:4c:91:52:4d:22:d0:03:85:c5:37:6e:22:ae:b9:b9:
79:24:06:2b:6f:76:7b:a2:90:d2:3d:4d:23:0f:69:a4:76:a7:
26:76:e1:d2:41:93:c7:aa:b2:19:11:0a:60:86:2b:74:32:17:
ac:df:e9:df:8e:8a:64:d5:c7:57:a0:63:97:cf:b1:fb:e0:0f:
40:90:d3:18:40:89:da:54:08:be:8e:9a:9b:ed:ca:9d:81:8c:
46:3f:ff:7e:70:86:22:0f:af:d6:b8:1a:f7:ce:a3:6e:83:dd:
d8:b3:87:a0:a7:44:52:8c:bd:d4:02:0a:af:3e:34:c5:c6:95:
59:a7:3a:f4:6c:99:84:24:f0:dd:ea:d2:82:45:69:23:9c:8e:
3c:19:34:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+fXwkqQsq2T+8bitnnE6L6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjYmU5ZTQzMDI0ZWNjNjkyYzMzNTM5OGJiMmQ5NjcxMTZh
YWMyZDkwHhcNMjYwNzI2MTcwMDMzWhcNMjYwNzI3MTcwMDMzWjAzMTEwLwYDVQQD
Eyg2ZmQ0ZmU4YjU5ZGVkYzE3OGVmMjA3NWRiMjIzMjQwZDgxYWJkYjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9/zbeAmAnKhebzcnWMGqpg4gYGz
GrdmXq6JiGMZftaCYNR3LwuDzfQQH1J1MvJP9gSgEH2/HWLUTfhxD0mBpi2JvJT3
7eHht/2L3lwY80UAEm3Rop7S0YLUg30PYxYy0dBNNq9jtT4i22cSjyR3tRlZePkU
MMhLIc4lcC1oCg9B9Rt7PXMH0cyyGcmOQ8oVaVpRTSNsxywlEYjLTgbrT8EywF8b
MpKlLWeVlXkHIn+GCdEwidsRs2nrw74yIUfJGyWCx8arCz28yT39/ffe1A69LYuu
MSC5m+kqWnppv4zl/ZW9StUi/pmJJ4ynyqFgOGF561AuN4z8RdVMNdKghwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG/U/otZ3twXjvIHXbIjJA2Bq9uZMB8GA1UdIwQY
MBaAFFy+nkMCTsxpLDNTmLstlnEWqsLZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEw2ZVF3Sk96R2tzTTFPWXV5MldjUmFxd3RrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8xYjA4OWMtZDc0Yi00OWE3LTg5Zjct
MjhhNTZlYTVjZjBiLzEvWEw2ZVF3Sk96R2tzTTFPWXV5MldjUmFxd3RrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8xYjA4OWMtZDc0Yi00OWE3LTg5ZjctMjhhNTZlYTVjZjBi
LzEvWEw2ZVF3Sk96R2tzTTFPWXV5MldjUmFxd3RrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADEHS3fjm
HvTWCFcoZ/h2qC/q30paJ+atTnw4CD9llsZhloUvo/9GEhrnagI5Jn3f0oCgMvmn
Qg+PuXWqGCEL/A//wBcaX+BK4ZeFlQTjVJeVx6QmnGTJs1QjeW05lkeirpcRicuv
aKmp8dqag4sxTJFSTSLQA4XFN24irrm5eSQGK292e6KQ0j1NIw9ppHanJnbh0kGT
x6qyGREKYIYrdDIXrN/p346KZNXHV6Bjl8+x++APQJDTGECJ2lQIvo6am+3KnYGM
Rj//fnCGIg+v1rga986jboPd2LOHoKdEUoy91AIKrz40xcaVWac69GyZhCTw3erS
gkVpI5yOPBk0hA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 00:54:05 2026 by rpki-client