Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
File: XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft (raw, json)
Hash identifier: yeH7QQEfxRD2JMZMStWWF0lBQxmsegTxlV2w4Aq/CCY=
Subject key identifier: 5B:C2:EF:27:94:B2:11:60:8D:F0:8E:2B:D9:81:F7:60:7C:BF:DD:FC
Authority key identifier: 5E:05:CB:67:20:9B:BD:19:83:F4:32:77:16:52:3E:B1:77:7F:D4:FA
Certificate issuer: /CN=5e05cb67209bbd1983f4327716523eb1777fd4fa
Certificate serial: 019EFC166B2928672606B8E3F186ACE3D21F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
Manifest number: 197C
Signing time: Thu 25 Jun 2026 00:03:07 +0000
Manifest this update: Thu 25 Jun 2026 00:03:07 +0000
Manifest next update: Fri 26 Jun 2026 00:03:07 +0000
Files and hashes: 1: 4PuIVLEIj4zZmZW-uUpD3PaA49w.roa (hash: ywwR6jVCoJoX2GD3atJ7KKAi8JK9J3yhYoAwj8Jfgz4=)
2: XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl (hash: ZgUETcb6SjvOX5JhkkgGRxEmqjkxHBNLy+vHSKrTpf0=)
3: rVLmDTrtM8fRD2YrBcUhwt9PtiE.roa (hash: qzKX309DgizvFnW/1CNilCV4HRwfLRrE8VOSlsECFro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 19:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fc:16:6b:29:28:67:26:06:b8:e3:f1:86:ac:e3:d2:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e05cb67209bbd1983f4327716523eb1777fd4fa
Validity
Not Before: Jun 25 00:03:07 2026 GMT
Not After : Jun 26 00:03:07 2026 GMT
Subject: CN=5bc2ef2794b211608df08e2bd981f7607cbfddfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:57:95:b5:43:c5:03:1a:1f:72:bc:e8:b4:d2:
1e:26:31:62:df:65:44:b3:58:e8:de:17:eb:be:e4:
47:3c:ec:56:a3:7e:b1:74:2a:cd:69:3d:6f:fc:8b:
70:df:eb:5a:24:6a:14:bc:7d:39:98:b9:bd:cf:cb:
30:8c:b1:b1:2b:5b:45:76:a0:ae:e2:6d:96:ae:53:
53:f0:58:73:60:4e:01:be:a6:79:38:97:96:44:ed:
c5:3c:b5:ad:f4:0d:a7:85:83:3f:54:fc:a3:9d:3b:
7f:c6:34:0b:b1:e7:81:64:75:10:c1:c7:5d:e3:d9:
fb:16:3b:b2:41:6b:b9:0b:bd:b0:77:78:cf:00:22:
a7:bb:9e:ec:0b:ad:a2:7b:03:84:c9:32:e1:1b:95:
ec:7b:4a:07:07:f2:e6:a1:3c:de:a9:b2:1b:1c:20:
4b:d2:a9:a0:d6:58:ec:2a:7b:29:6a:8e:e1:35:44:
61:3c:74:8b:c4:7d:90:30:ee:b0:0a:7c:cb:07:b5:
49:bb:ad:0f:1a:f1:c0:ad:33:7f:d6:a1:5d:18:a6:
7f:5f:91:69:48:b7:d2:66:eb:3a:01:67:d3:35:77:
f2:b7:33:fd:3a:a9:1a:99:92:5f:c0:3f:51:63:a1:
ee:34:76:c2:66:28:57:16:84:1f:04:cb:5a:44:b5:
98:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C2:EF:27:94:B2:11:60:8D:F0:8E:2B:D9:81:F7:60:7C:BF:DD:FC
X509v3 Authority Key Identifier:
keyid:5E:05:CB:67:20:9B:BD:19:83:F4:32:77:16:52:3E:B1:77:7F:D4:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:4f:f2:23:5d:db:eb:5e:85:25:c0:1e:ed:95:6e:71:63:b3:
68:cb:d8:75:cd:ae:ac:3d:13:78:9c:3a:ec:16:c4:b1:ec:24:
00:41:26:67:2e:bd:c3:8e:d9:1b:ae:06:e2:a3:06:96:39:a4:
40:ff:a3:a0:ec:23:2a:45:05:ab:ed:74:ac:ab:fd:1e:37:16:
52:b5:20:dd:8f:8a:c3:6b:8e:16:4e:df:f5:91:7c:dd:1c:d6:
e8:30:86:e3:4a:fb:fd:5c:96:f1:28:eb:98:b3:74:0b:ff:f4:
8e:67:4b:5f:9e:54:d8:d3:70:4a:d3:03:1c:ae:96:16:c7:e2:
bd:7a:b4:44:f0:87:78:91:39:53:53:24:7e:7f:e5:cb:7d:c4:
cc:2d:52:19:fc:2d:1b:0c:55:4a:95:86:ec:e3:58:62:0d:45:
6a:cf:a3:9a:20:8e:d5:0e:c7:e6:a1:7a:b9:d2:ef:a4:d3:79:
61:4a:73:23:97:4a:4f:21:9d:b2:cd:e0:52:f1:5b:90:12:ea:
20:3c:a3:01:b6:fb:4d:50:44:51:d2:12:3d:ab:87:3d:85:fa:
6e:41:ff:c0:85:31:31:71:d2:ac:e1:a6:8c:2b:77:47:32:02:
d5:0a:ad:54:67:bb:9c:8e:4a:45:6f:15:68:99:9d:3d:ae:bd:
53:9e:f0:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ78FmspKGcmBrjj8Yas49IfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMDVjYjY3MjA5YmJkMTk4M2Y0MzI3NzE2NTIzZWIxNzc3
ZmQ0ZmEwHhcNMjYwNjI1MDAwMzA3WhcNMjYwNjI2MDAwMzA3WjAzMTEwLwYDVQQD
Eyg1YmMyZWYyNzk0YjIxMTYwOGRmMDhlMmJkOTgxZjc2MDdjYmZkZGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1eVtUPFAxofcrzotNIeJjFi32VE
s1jo3hfrvuRHPOxWo36xdCrNaT1v/Itw3+taJGoUvH05mLm9z8swjLGxK1tFdqCu
4m2WrlNT8FhzYE4BvqZ5OJeWRO3FPLWt9A2nhYM/VPyjnTt/xjQLseeBZHUQwcdd
49n7FjuyQWu5C72wd3jPACKnu57sC62iewOEyTLhG5Xse0oHB/LmoTzeqbIbHCBL
0qmg1ljsKnspao7hNURhPHSLxH2QMO6wCnzLB7VJu60PGvHArTN/1qFdGKZ/X5Fp
SLfSZus6AWfTNXfytzP9OqkamZJfwD9RY6HuNHbCZihXFoQfBMtaRLWYJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFvC7yeUshFgjfCOK9mB92B8v938MB8GA1UdIwQY
MBaAFF4Fy2cgm70Zg/QydxZSPrF3f9T6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGdYTFp5Q2J2Um1EOURKM0ZsSS1zWGRfMVBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS85Y2EwZGYtZDQ3NC00MGNkLTg2ODgt
MTcxNTkxOTU2N2M5LzEvWGdYTFp5Q2J2Um1EOURKM0ZsSS1zWGRfMVBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS85Y2EwZGYtZDQ3NC00MGNkLTg2ODgtMTcxNTkxOTU2N2M5
LzEvWGdYTFp5Q2J2Um1EOURKM0ZsSS1zWGRfMVBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQE/yI13b
616FJcAe7ZVucWOzaMvYdc2urD0TeJw67BbEsewkAEEmZy69w47ZG64G4qMGljmk
QP+joOwjKkUFq+10rKv9HjcWUrUg3Y+Kw2uOFk7f9ZF83RzW6DCG40r7/VyW8Sjr
mLN0C//0jmdLX55U2NNwStMDHK6WFsfivXq0RPCHeJE5U1Mkfn/ly33EzC1SGfwt
GwxVSpWG7ONYYg1Fas+jmiCO1Q7H5qF6udLvpNN5YUpzI5dKTyGdss3gUvFbkBLq
IDyjAbb7TVBEUdISPauHPYX6bkH/wIUxMXHSrOGmjCt3RzIC1QqtVGe7nI5KRW8V
aJmdPa69U57wWg==
-----END CERTIFICATE-----
Generated at Thu Jun 25 01:57:04 2026 by rpki-client