Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
File: Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft (raw, json)
Hash identifier: WA1IKzjJKay2GA3KA+indmHAszLe4JlAkfs0YKwGfvs=
Subject key identifier: 77:8A:14:FD:9C:56:6A:4D:5D:8E:8A:5F:EB:75:37:6C:67:95:DB:69
Authority key identifier: 5E:9B:9B:ED:8F:8D:3D:57:9B:B0:55:2E:4F:C4:B8:19:86:86:1E:64
Certificate issuer: /CN=5e9b9bed8f8d3d579bb0552e4fc4b81986861e64
Certificate serial: 019EFCB92E089C41AB2D420D4E023248E5A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
Manifest number: 1438
Signing time: Thu 25 Jun 2026 03:00:54 +0000
Manifest this update: Thu 25 Jun 2026 03:00:54 +0000
Manifest next update: Fri 26 Jun 2026 03:00:54 +0000
Files and hashes: 1: 2fgSJGjOHvJgOvr9cAl5B_g8y2U.asa (hash: 058tG8fWDOMDG95p5S64hIDispDFLeErLh8vu62vjbg=)
2: Q2eq3vQ27LdqIhXEwPYKtKFxrj8.roa (hash: w/CxsU35XsDW4qiiMK3VW7xr1QGFT3WBU9iNjApYbmk=)
3: Xpub7Y-NPVebsFUuT8S4GYaGHmQ.crl (hash: 2ffFYjoZBvTgn7HVSPkgF3783uP3EbUw8aKAf27oGdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fc:b9:2e:08:9c:41:ab:2d:42:0d:4e:02:32:48:e5:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9b9bed8f8d3d579bb0552e4fc4b81986861e64
Validity
Not Before: Jun 25 03:00:54 2026 GMT
Not After : Jun 26 03:00:54 2026 GMT
Subject: CN=778a14fd9c566a4d5d8e8a5feb75376c6795db69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:62:74:85:4a:fc:7e:ee:6e:35:b7:d6:f2:f2:
fb:b4:c3:44:fa:be:95:58:ab:29:08:55:09:cf:e8:
83:07:e4:35:87:e3:9e:32:5c:fd:f1:71:85:6f:46:
07:89:14:6e:09:7a:dd:70:7d:97:9a:cd:23:9c:f9:
b8:83:47:29:1d:b1:ba:75:28:3e:87:4e:c6:be:1d:
32:94:17:24:b0:2c:36:48:1c:d9:cf:1a:d1:94:54:
4d:41:cb:0b:3b:6e:ac:2e:7b:53:db:49:99:49:2f:
d8:54:fa:d1:77:b2:a1:80:0f:86:47:ad:02:b6:23:
07:be:4c:49:4f:3a:b2:2d:2f:0f:08:f3:eb:28:6a:
f4:bd:1e:f9:4e:7b:f8:e8:f9:23:e4:bf:a9:12:e9:
a2:a5:39:74:e3:9e:59:77:a5:29:66:c7:7c:16:b3:
97:c8:55:6e:4d:f9:f5:8b:dd:d0:d8:ef:ff:61:fa:
98:49:73:d0:52:08:f3:a2:cf:a8:34:b1:32:5e:01:
48:81:12:08:35:1c:cc:e6:57:ad:f7:e6:ed:9c:b7:
80:b8:e5:c1:3d:45:64:cb:17:c8:18:f0:e0:6d:26:
b5:8f:1c:75:bd:f6:56:2f:88:b5:ef:3b:fd:8e:0f:
a4:0a:03:a6:c2:53:15:09:e9:f4:92:4d:1a:50:3f:
d8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:8A:14:FD:9C:56:6A:4D:5D:8E:8A:5F:EB:75:37:6C:67:95:DB:69
X509v3 Authority Key Identifier:
keyid:5E:9B:9B:ED:8F:8D:3D:57:9B:B0:55:2E:4F:C4:B8:19:86:86:1E:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:3c:b7:37:5b:9b:aa:0d:3b:b9:d0:2f:ae:bd:7f:72:3c:9a:
44:67:3a:97:f2:39:70:70:8a:fe:22:be:8f:ba:58:79:9a:43:
f0:c7:d9:e0:7e:32:22:de:65:fb:a2:ec:49:82:e2:0e:36:9f:
e3:0d:ab:b7:6f:9c:2b:d1:af:8b:c9:14:52:c8:3f:2d:70:16:
12:22:2f:25:31:0e:5a:08:32:12:2f:58:43:46:20:9c:80:5e:
28:a5:d8:69:7f:f5:de:67:79:84:f2:1d:7d:a8:d3:20:16:5c:
c7:5d:c4:a1:48:45:90:67:3d:11:28:88:48:50:9c:52:9e:48:
c4:00:5c:aa:02:ca:9c:d4:95:38:23:32:90:2b:5d:9b:b8:ba:
93:ac:e7:15:f5:e5:3f:03:92:59:03:18:b4:ce:08:c5:65:98:
22:12:31:ff:5e:69:6d:44:da:ec:f6:29:4c:bd:6b:98:93:aa:
79:af:5c:d6:6f:36:60:7a:28:a6:e5:be:a6:59:11:04:58:4d:
48:d8:b5:26:00:65:6f:60:8c:53:51:55:66:41:f2:ec:41:be:
4b:ed:eb:a9:d4:43:76:48:c8:fa:4f:9d:4c:5c:fb:23:de:c8:
e0:12:52:ab:a5:ac:f6:9c:8e:61:32:ac:24:92:8e:12:c8:01:
38:08:5f:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ78uS4InEGrLUINTgIySOWpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlOWI5YmVkOGY4ZDNkNTc5YmIwNTUyZTRmYzRiODE5ODY4
NjFlNjQwHhcNMjYwNjI1MDMwMDU0WhcNMjYwNjI2MDMwMDU0WjAzMTEwLwYDVQQD
Eyg3NzhhMTRmZDljNTY2YTRkNWQ4ZThhNWZlYjc1Mzc2YzY3OTVkYjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGJ0hUr8fu5uNbfW8vL7tMNE+r6V
WKspCFUJz+iDB+Q1h+OeMlz98XGFb0YHiRRuCXrdcH2Xms0jnPm4g0cpHbG6dSg+
h07Gvh0ylBcksCw2SBzZzxrRlFRNQcsLO26sLntT20mZSS/YVPrRd7KhgA+GR60C
tiMHvkxJTzqyLS8PCPPrKGr0vR75Tnv46Pkj5L+pEumipTl0455Zd6UpZsd8FrOX
yFVuTfn1i93Q2O//YfqYSXPQUgjzos+oNLEyXgFIgRIINRzM5let9+btnLeAuOXB
PUVkyxfIGPDgbSa1jxx1vfZWL4i17zv9jg+kCgOmwlMVCen0kk0aUD/YDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHeKFP2cVmpNXY6KX+t1N2xnldtpMB8GA1UdIwQY
MBaAFF6bm+2PjT1Xm7BVLk/EuBmGhh5kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHB1YjdZLU5QVmVic0ZVdVQ4UzRHWWFHSG1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC80NDhjODUtYTk2Ni00ZGYyLTk4ZTQt
YTVhNWFkMDZlYjQzLzEvWHB1YjdZLU5QVmVic0ZVdVQ4UzRHWWFHSG1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC80NDhjODUtYTk2Ni00ZGYyLTk4ZTQtYTVhNWFkMDZlYjQz
LzEvWHB1YjdZLU5QVmVic0ZVdVQ4UzRHWWFHSG1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxDy3N1ub
qg07udAvrr1/cjyaRGc6l/I5cHCK/iK+j7pYeZpD8MfZ4H4yIt5l+6LsSYLiDjaf
4w2rt2+cK9Gvi8kUUsg/LXAWEiIvJTEOWggyEi9YQ0YgnIBeKKXYaX/13md5hPId
fajTIBZcx13EoUhFkGc9ESiISFCcUp5IxABcqgLKnNSVOCMykCtdm7i6k6znFfXl
PwOSWQMYtM4IxWWYIhIx/15pbUTa7PYpTL1rmJOqea9c1m82YHoopuW+plkRBFhN
SNi1JgBlb2CMU1FVZkHy7EG+S+3rqdRDdkjI+k+dTFz7I97I4BJSq6Ws9pyOYTKs
JJKOEsgBOAhf8Q==
-----END CERTIFICATE-----
Generated at Thu Jun 25 08:27:55 2026 by rpki-client