Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft
File: XEwop1rJaVHcOEAKgPnvOqryqss.mft (raw, json)
Hash identifier: Gb92zJkIN5nX7UG3/ZXsUqUHcnIrPWxAR2AfeK999d0=
Subject key identifier: B8:6E:84:98:F1:3C:25:C0:7B:53:0B:EA:3F:89:23:86:57:3D:B2:1C
Authority key identifier: 5C:4C:28:A7:5A:C9:69:51:DC:38:40:0A:80:F9:EF:3A:AA:F2:AA:CB
Certificate issuer: /CN=5c4c28a75ac96951dc38400a80f9ef3aaaf2aacb
Certificate serial: 019FA14DCAE41D1FE03850468801A066A505
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEwop1rJaVHcOEAKgPnvOqryqss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft
Manifest number: 19CF
Signing time: Mon 27 Jul 2026 02:00:57 +0000
Manifest this update: Mon 27 Jul 2026 02:00:57 +0000
Manifest next update: Tue 28 Jul 2026 02:00:57 +0000
Files and hashes: 1: 9hnY7Mi-DWWNXT8zxPWlDMpFkVY.roa (hash: KmgeWMyp8Cb4dRrZsFfQDYyQitlhpxsyGtinqL7w4YI=)
2: XEwop1rJaVHcOEAKgPnvOqryqss.crl (hash: w1AzGeqtqvQIbqUVXi2zrRnYEXAuxlPvfaCzU3EZP3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEwop1rJaVHcOEAKgPnvOqryqss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 02:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:ca:e4:1d:1f:e0:38:50:46:88:01:a0:66:a5:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c4c28a75ac96951dc38400a80f9ef3aaaf2aacb
Validity
Not Before: Jul 27 02:00:57 2026 GMT
Not After : Jul 28 02:00:57 2026 GMT
Subject: CN=b86e8498f13c25c07b530bea3f892386573db21c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:36:ba:ee:48:d7:51:71:53:bb:3b:ef:4d:b5:
6e:65:19:6a:c5:0b:78:17:5a:04:d4:0e:62:aa:ba:
0b:5a:0e:97:7d:70:ed:55:8a:8f:fd:64:e7:7b:58:
b2:4f:e8:41:a0:6e:8a:95:e8:d7:65:87:10:1f:b7:
96:8e:f0:28:3b:64:f3:4d:29:aa:17:3a:17:d8:ee:
50:0a:a2:7b:a5:9d:7f:24:94:30:08:a3:26:2f:bd:
70:b4:a0:b6:cf:23:b3:cb:ba:dc:8c:d7:64:27:cd:
f3:88:68:15:09:33:90:c7:fb:a2:95:73:3f:b0:09:
47:3e:8d:86:ab:65:5d:86:4c:b0:51:85:b9:77:48:
d9:ab:47:d0:cc:05:36:78:36:c7:76:91:f6:7b:67:
69:22:17:77:0a:45:7c:d0:18:52:9a:fc:ed:58:47:
f9:73:6e:ab:22:23:f5:48:74:cd:a6:4e:8c:2a:f1:
1a:46:06:17:dd:b2:78:0e:f1:6c:4a:cf:ea:51:a5:
80:bd:5c:98:f4:33:24:b0:9a:67:2b:25:2e:e6:16:
de:50:fb:e5:c1:10:20:e3:13:81:21:f3:ff:0e:4e:
0c:54:29:8d:ea:ad:e2:a4:50:9f:ce:63:e0:3a:7e:
1c:72:3e:97:19:70:85:51:7d:f3:3c:cf:0c:bb:fc:
a4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:6E:84:98:F1:3C:25:C0:7B:53:0B:EA:3F:89:23:86:57:3D:B2:1C
X509v3 Authority Key Identifier:
keyid:5C:4C:28:A7:5A:C9:69:51:DC:38:40:0A:80:F9:EF:3A:AA:F2:AA:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEwop1rJaVHcOEAKgPnvOqryqss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:e7:2c:88:24:4f:b3:d5:60:cb:b2:dc:d3:f1:91:63:25:62:
90:74:fe:2f:b9:82:e4:85:7f:61:e2:e6:d0:6c:eb:a0:9f:46:
e0:10:d1:0e:8f:66:b6:13:5e:d0:fe:4b:f7:f2:81:05:7a:2f:
b0:f8:b5:be:0f:af:3a:a1:d3:30:d9:70:6e:dd:0b:bb:46:eb:
72:a8:05:45:80:92:7e:99:d0:cd:7f:57:49:ea:63:c0:9c:b4:
80:67:9d:97:a9:08:5e:e5:a2:20:5e:31:c7:9e:5a:a7:e5:cb:
96:04:00:4b:23:89:84:16:44:85:24:5c:ef:d4:f3:14:fd:e6:
0d:45:9a:66:46:d9:87:32:c6:da:ee:5c:b0:09:cb:91:ef:3b:
ae:95:4c:20:47:ff:aa:cd:88:34:a5:01:41:8e:ff:5c:c4:fa:
c0:e7:59:06:9d:cb:ec:48:b2:11:47:21:c4:47:39:3b:0f:16:
f0:83:f4:f9:9c:ae:55:da:31:98:b5:93:ce:9c:b4:27:c7:aa:
f1:42:c1:33:2c:18:1a:4b:6b:45:86:4a:a8:bb:c7:de:19:39:
e5:14:da:00:8d:88:b9:51:cc:b9:b0:19:22:0c:f0:0a:d6:40:
9d:3b:b4:83:0b:b7:59:57:60:45:c3:81:e4:23:67:9d:5e:c6:
6d:af:ef:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+hTcrkHR/gOFBGiAGgZqUFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNGMyOGE3NWFjOTY5NTFkYzM4NDAwYTgwZjllZjNhYWFm
MmFhY2IwHhcNMjYwNzI3MDIwMDU3WhcNMjYwNzI4MDIwMDU3WjAzMTEwLwYDVQQD
EyhiODZlODQ5OGYxM2MyNWMwN2I1MzBiZWEzZjg5MjM4NjU3M2RiMjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDa67kjXUXFTuzvvTbVuZRlqxQt4
F1oE1A5iqroLWg6XfXDtVYqP/WTne1iyT+hBoG6KlejXZYcQH7eWjvAoO2TzTSmq
FzoX2O5QCqJ7pZ1/JJQwCKMmL71wtKC2zyOzy7rcjNdkJ83ziGgVCTOQx/uilXM/
sAlHPo2Gq2VdhkywUYW5d0jZq0fQzAU2eDbHdpH2e2dpIhd3CkV80BhSmvztWEf5
c26rIiP1SHTNpk6MKvEaRgYX3bJ4DvFsSs/qUaWAvVyY9DMksJpnKyUu5hbeUPvl
wRAg4xOBIfP/Dk4MVCmN6q3ipFCfzmPgOn4ccj6XGXCFUX3zPM8Mu/ykkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLhuhJjxPCXAe1ML6j+JI4ZXPbIcMB8GA1UdIwQY
MBaAFFxMKKdayWlR3DhACoD57zqq8qrLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEV3b3AxckphVkhjT0VBS2dQbnZPcXJ5cXNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wOTc3ZWUtYjk4ZC00YTNlLWIzYWYt
NjdjNzYzMjAxODZhLzEvWEV3b3AxckphVkhjT0VBS2dQbnZPcXJ5cXNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8wOTc3ZWUtYjk4ZC00YTNlLWIzYWYtNjdjNzYzMjAxODZh
LzEvWEV3b3AxckphVkhjT0VBS2dQbnZPcXJ5cXNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnucsiCRP
s9Vgy7Lc0/GRYyVikHT+L7mC5IV/YeLm0GzroJ9G4BDRDo9mthNe0P5L9/KBBXov
sPi1vg+vOqHTMNlwbt0Lu0brcqgFRYCSfpnQzX9XSepjwJy0gGedl6kIXuWiIF4x
x55ap+XLlgQASyOJhBZEhSRc79TzFP3mDUWaZkbZhzLG2u5csAnLke87rpVMIEf/
qs2INKUBQY7/XMT6wOdZBp3L7EiyEUchxEc5Ow8W8IP0+ZyuVdoxmLWTzpy0J8eq
8ULBMywYGktrRYZKqLvH3hk55RTaAI2IuVHMubAZIgzwCtZAnTu0gwu3WVdgRcOB
5CNnnV7Gba/vbQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 11:37:11 2026 by rpki-client