Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
File: XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft (raw, json)
Hash identifier: qKYjjfjYd0uqFFhr/h3xcIlpfpMYGfNuOK2r9BBlvGc=
Subject key identifier: 06:19:76:77:AF:3B:A1:05:FE:AD:97:ED:2E:BF:17:6C:BC:A9:71:3F
Authority key identifier: 5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03
Certificate issuer: /CN=5c61dcd3eb50c83d68060bcba4af152204193503
Certificate serial: 019DFA5FE0ECE4F5AF7C674BD87131D355B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
Manifest number: 10B1
Signing time: Tue 05 May 2026 23:01:20 +0000
Manifest this update: Tue 05 May 2026 23:01:20 +0000
Manifest next update: Wed 06 May 2026 23:01:20 +0000
Files and hashes: 1: 2LxanPXEt-Ah2tA9EYIfUY7a7ZY.roa (hash: Uywc9u8hm/WxjQy7SxAxxYIxsP7UM6R3hTnst6UR3yE=)
2: XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl (hash: o5RRBLnAg2F8VQ+rqe1FnNNIbvvoPuPxi00eyZYE5HM=)
3: XN_BGWEzxZjhg6iXlmQqSDhpeZU.roa (hash: nt1Dqzzch0xHlTVsHiqUIJZJJ7P5OL+fpAG1RALu8GE=)
4: cDTj5s606sVgmgpZ3n6Z3dU4zwA.roa (hash: Tz/Xa89Xe7rgKjUL5hIFqnaSfDilwgGaKsizO4oAEvI=)
5: pwg2Pcu7xQM-Nr6mzrIBgEt_XFI.roa (hash: lF7Ckm/bTHOWi8Xtom4+V7QF19TxeutNBXq6gqp0Yv8=)
6: te3FBz79GYifGb3qq-rDfAn5q7I.roa (hash: 8JJ8Rj+5NIqp3neVi3adeudGuIpzTz7arVf+MmH6wks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 18:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fa:5f:e0:ec:e4:f5:af:7c:67:4b:d8:71:31:d3:55:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c61dcd3eb50c83d68060bcba4af152204193503
Validity
Not Before: May 5 23:01:20 2026 GMT
Not After : May 6 23:01:20 2026 GMT
Subject: CN=06197677af3ba105fead97ed2ebf176cbca9713f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fe:4f:c3:2b:57:f8:1c:a1:1b:e0:31:1b:b9:
a4:96:a5:ed:5d:86:c7:2a:f1:b7:6e:c5:5e:00:79:
8a:4c:43:fa:ad:64:f9:09:54:d4:0b:1f:32:aa:f7:
68:a6:71:3b:a4:bf:2d:65:a6:2b:b4:9d:a8:e8:97:
05:06:17:47:dd:b1:b3:90:d4:2e:40:e0:78:55:e5:
f0:dc:30:1e:57:b7:df:75:77:ba:5d:7c:77:2b:81:
41:fc:c1:5d:21:5b:7e:b9:ac:9b:d7:b5:26:e6:35:
b7:14:83:9f:b6:50:71:30:ca:2a:74:f6:3b:6e:42:
ae:57:8f:74:23:ef:8e:5c:8f:b0:d3:e8:a3:e2:84:
77:54:66:04:55:73:d2:f7:96:1a:a4:89:93:c5:c0:
4a:aa:e0:c5:85:3f:2a:b2:cd:00:33:27:9b:91:fc:
7d:af:f9:25:59:f9:a1:5a:5e:59:58:65:90:23:d4:
33:a5:d1:05:46:ff:f3:b9:5c:32:96:24:ac:3b:ca:
19:df:79:84:52:c3:64:67:26:78:5e:4c:bd:72:83:
23:9f:f6:6c:f9:be:a6:ca:b3:a3:72:23:c2:f9:ad:
2a:c5:7f:6a:9e:e8:70:a9:eb:de:aa:b9:86:7a:4c:
7c:9c:af:9d:b4:3c:87:70:4d:45:07:42:da:ca:db:
91:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:19:76:77:AF:3B:A1:05:FE:AD:97:ED:2E:BF:17:6C:BC:A9:71:3F
X509v3 Authority Key Identifier:
keyid:5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:53:7d:ac:f0:da:7b:ff:a7:39:6f:5a:c9:f0:84:f3:ce:0d:
ba:7a:7c:b8:60:6b:42:04:e9:11:81:12:98:27:1e:f3:b9:2e:
f1:18:c8:44:e7:d9:84:95:f4:af:35:aa:1d:a0:ed:6b:b3:df:
18:ae:14:68:b3:6e:de:ef:bc:d2:24:4e:52:59:3f:94:ee:f5:
27:b8:87:b6:1a:84:c5:93:09:6a:be:15:59:e1:54:80:a5:c1:
5c:55:ac:4c:c7:a2:74:66:13:53:49:89:58:b3:f3:18:50:88:
42:37:d5:97:e1:e7:00:ec:9f:4d:4c:2b:99:1f:ac:01:fa:91:
27:c6:54:c8:f5:6a:db:89:41:1e:3c:63:b0:97:39:8f:a7:68:
51:3a:bb:21:9a:57:d1:22:8b:bc:44:d7:21:db:24:5b:c2:f1:
5a:87:af:a1:57:f1:9b:dc:bf:22:1a:78:2f:a6:50:c1:3a:f9:
1f:d1:55:5d:3d:79:bf:7d:3c:f4:d6:c0:58:c6:d7:dd:10:bb:
92:aa:ff:c1:2f:c6:29:99:bf:5e:69:f2:9a:df:b4:73:e2:57:
db:35:95:22:61:6c:16:ef:8a:f5:c8:3f:4a:c5:cd:eb:dd:23:
71:a2:c2:08:21:45:e1:7f:01:eb:e0:8d:b3:c0:55:4c:06:bc:
c6:da:6a:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ36X+Ds5PWvfGdL2HEx01W3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNjFkY2QzZWI1MGM4M2Q2ODA2MGJjYmE0YWYxNTIyMDQx
OTM1MDMwHhcNMjYwNTA1MjMwMTIwWhcNMjYwNTA2MjMwMTIwWjAzMTEwLwYDVQQD
EygwNjE5NzY3N2FmM2JhMTA1ZmVhZDk3ZWQyZWJmMTc2Y2JjYTk3MTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmv5PwytX+ByhG+AxG7mklqXtXYbH
KvG3bsVeAHmKTEP6rWT5CVTUCx8yqvdopnE7pL8tZaYrtJ2o6JcFBhdH3bGzkNQu
QOB4VeXw3DAeV7ffdXe6XXx3K4FB/MFdIVt+uayb17Um5jW3FIOftlBxMMoqdPY7
bkKuV490I++OXI+w0+ij4oR3VGYEVXPS95YapImTxcBKquDFhT8qss0AMyebkfx9
r/klWfmhWl5ZWGWQI9QzpdEFRv/zuVwyliSsO8oZ33mEUsNkZyZ4Xky9coMjn/Zs
+b6myrOjciPC+a0qxX9qnuhwqeveqrmGekx8nK+dtDyHcE1FB0LaytuRzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAYZdnevO6EF/q2X7S6/F2y8qXE/MB8GA1UdIwQY
MBaAFFxh3NPrUMg9aAYLy6SvFSIEGTUDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEdIYzAtdFF5RDFvQmd2THBLOFZJZ1FaTlFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80NGExNTUtNGQwMi00MDAyLThmM2Qt
YzM2ZDFjNDYwZTJmLzEvWEdIYzAtdFF5RDFvQmd2THBLOFZJZ1FaTlFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS80NGExNTUtNGQwMi00MDAyLThmM2QtYzM2ZDFjNDYwZTJm
LzEvWEdIYzAtdFF5RDFvQmd2THBLOFZJZ1FaTlFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHlN9rPDa
e/+nOW9ayfCE884Nunp8uGBrQgTpEYESmCce87ku8RjIROfZhJX0rzWqHaDta7Pf
GK4UaLNu3u+80iROUlk/lO71J7iHthqExZMJar4VWeFUgKXBXFWsTMeidGYTU0mJ
WLPzGFCIQjfVl+HnAOyfTUwrmR+sAfqRJ8ZUyPVq24lBHjxjsJc5j6doUTq7IZpX
0SKLvETXIdskW8LxWoevoVfxm9y/Ihp4L6ZQwTr5H9FVXT15v3089NbAWMbX3RC7
kqr/wS/GKZm/Xmnymt+0c+JX2zWVImFsFu+K9cg/SsXN690jcaLCCCFF4X8B6+CN
s8BVTAa8xtpqfw==
-----END CERTIFICATE-----
Generated at Wed May 6 03:28:24 2026 by rpki-client