Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.mft
File: XGGrSm35u5XP3orwdmaKWVs0HeE.mft (raw, json)
Hash identifier: vup1A1dClzJnhDrW9BSQ7AZkC8r0+8+/+SQo1n5UXp8=
Subject key identifier: 3F:70:23:09:DD:1A:3F:5C:CC:4D:B6:96:48:5F:51:E0:24:C9:E1:6C
Authority key identifier: 5C:61:AB:4A:6D:F9:BB:95:CF:DE:8A:F0:76:66:8A:59:5B:34:1D:E1
Certificate issuer: /CN=5c61ab4a6df9bb95cfde8af076668a595b341de1
Certificate serial: 019FA304BD087206FD13D73BA227F7CEFC55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGGrSm35u5XP3orwdmaKWVs0HeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.mft
Manifest number: 06B7
Signing time: Mon 27 Jul 2026 10:00:24 +0000
Manifest this update: Mon 27 Jul 2026 10:00:24 +0000
Manifest next update: Tue 28 Jul 2026 10:00:24 +0000
Files and hashes: 1: XGGrSm35u5XP3orwdmaKWVs0HeE.crl (hash: KjDlK8QJsW3nC3z7CVbJj8ZLYfJyXvQzoqh6mNtT0S4=)
2: d9ad6eSfGOCAtJCyfx5T80LXc84.roa (hash: l8TnxH7nYsbi9OkxC5kgX4fiX1lQ108inFjyeEj/BH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGGrSm35u5XP3orwdmaKWVs0HeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 10:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:04:bd:08:72:06:fd:13:d7:3b:a2:27:f7:ce:fc:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c61ab4a6df9bb95cfde8af076668a595b341de1
Validity
Not Before: Jul 27 10:00:24 2026 GMT
Not After : Jul 28 10:00:24 2026 GMT
Subject: CN=3f702309dd1a3f5ccc4db696485f51e024c9e16c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f6:35:1a:93:78:b6:54:2e:46:1c:06:cd:2c:
75:45:bf:ef:35:27:87:d2:d7:c3:8b:05:58:3f:c4:
8d:03:52:74:dd:a1:1c:97:01:73:1f:e6:8e:ef:a5:
3f:f7:4e:ce:98:df:8e:bf:4e:7c:16:9d:88:72:78:
6c:04:d4:4d:db:ce:a8:e7:4a:a0:1e:94:9d:df:dd:
52:95:ac:db:4a:71:58:1c:5e:62:0a:ab:c5:4d:58:
bb:ec:68:22:6b:83:7b:50:54:61:e1:3a:e6:2e:11:
3f:75:3f:29:72:34:b7:88:73:d4:ed:23:0c:10:78:
1f:66:1d:d7:42:c5:a5:ae:ed:7f:e4:2f:50:8e:d8:
8d:d2:5c:ba:7e:32:f0:c8:f5:0d:06:69:e1:2a:77:
d4:b0:b0:ea:d2:90:f9:31:d2:4c:03:99:9a:d8:6b:
5a:bf:bc:4e:ee:80:8d:de:06:b7:da:f1:b3:fa:30:
5f:b9:90:2f:af:80:e4:b2:47:27:8c:82:3c:cc:c4:
d1:5a:d8:73:91:4b:49:9d:a8:35:d7:71:d6:7b:b7:
35:8a:19:3a:ab:bd:9a:8a:9e:15:82:77:e1:dc:5b:
0b:78:c2:15:94:d7:b6:a3:bb:f1:cf:39:a7:e1:f6:
56:d6:03:78:66:e8:0e:63:2e:72:65:25:3f:ab:e7:
17:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:70:23:09:DD:1A:3F:5C:CC:4D:B6:96:48:5F:51:E0:24:C9:E1:6C
X509v3 Authority Key Identifier:
keyid:5C:61:AB:4A:6D:F9:BB:95:CF:DE:8A:F0:76:66:8A:59:5B:34:1D:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGGrSm35u5XP3orwdmaKWVs0HeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:e5:a0:af:f2:1d:15:45:25:8f:4b:3b:3f:a6:26:45:d6:1f:
7b:61:15:dc:5e:2b:c4:b9:36:92:9f:db:e3:13:ff:6c:63:4f:
41:21:68:b0:d6:04:fe:49:65:7a:df:c9:e6:1e:50:21:14:20:
9a:50:19:2b:5b:3e:05:6b:9a:20:20:98:1f:41:84:41:06:a3:
95:54:31:c5:9b:22:0d:ab:67:01:cb:e2:8a:b1:8c:16:00:c0:
3e:7b:15:35:8e:6c:eb:c3:71:f0:75:23:ab:96:7b:b8:7b:98:
61:49:72:3e:b8:a3:8a:4b:c6:b0:8a:37:0e:59:1b:ff:f7:14:
ec:55:21:be:b7:27:70:b5:b5:ba:f7:25:ea:bc:d2:59:70:b9:
ae:d2:45:63:ce:79:6a:9a:21:21:ce:09:93:c3:dc:d2:ab:a4:
80:c3:2c:1e:83:1b:0a:cc:6c:b6:52:34:b6:ac:a9:12:22:e4:
9c:dc:f1:0d:0e:d5:2f:f1:29:f4:78:23:cb:f2:46:1c:41:c6:
9d:96:59:c5:f3:b6:85:ae:52:8e:b0:14:27:da:a5:85:84:f6:
0a:c3:8c:ab:50:36:6a:c7:62:29:62:b0:dd:6f:23:67:8d:48:
0e:ca:98:83:db:f7:de:76:f6:7e:bc:44:a0:b7:c2:f1:83:7f:
83:63:d1:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+jBL0Icgb9E9c7oif3zvxVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNjFhYjRhNmRmOWJiOTVjZmRlOGFmMDc2NjY4YTU5NWIz
NDFkZTEwHhcNMjYwNzI3MTAwMDI0WhcNMjYwNzI4MTAwMDI0WjAzMTEwLwYDVQQD
EygzZjcwMjMwOWRkMWEzZjVjY2M0ZGI2OTY0ODVmNTFlMDI0YzllMTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfY1GpN4tlQuRhwGzSx1Rb/vNSeH
0tfDiwVYP8SNA1J03aEclwFzH+aO76U/907OmN+Ov058Fp2IcnhsBNRN286o50qg
HpSd391SlazbSnFYHF5iCqvFTVi77Ggia4N7UFRh4TrmLhE/dT8pcjS3iHPU7SMM
EHgfZh3XQsWlru1/5C9QjtiN0ly6fjLwyPUNBmnhKnfUsLDq0pD5MdJMA5ma2Gta
v7xO7oCN3ga32vGz+jBfuZAvr4DkskcnjII8zMTRWthzkUtJnag113HWe7c1ihk6
q72aip4Vgnfh3FsLeMIVlNe2o7vxzzmn4fZW1gN4ZugOYy5yZSU/q+cXCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD9wIwndGj9czE22lkhfUeAkyeFsMB8GA1UdIwQY
MBaAFFxhq0pt+buVz96K8HZmillbNB3hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEdHclNtMzV1NVhQM29yd2RtYUtXVnMwSGVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9mZDVhOTgtMjcyZi00MDc4LTk0OGQt
NmZhODY4OTIxZGZiLzEvWEdHclNtMzV1NVhQM29yd2RtYUtXVnMwSGVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9mZDVhOTgtMjcyZi00MDc4LTk0OGQtNmZhODY4OTIxZGZi
LzEvWEdHclNtMzV1NVhQM29yd2RtYUtXVnMwSGVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVuWgr/Id
FUUlj0s7P6YmRdYfe2EV3F4rxLk2kp/b4xP/bGNPQSFosNYE/kllet/J5h5QIRQg
mlAZK1s+BWuaICCYH0GEQQajlVQxxZsiDatnAcviirGMFgDAPnsVNY5s68Nx8HUj
q5Z7uHuYYUlyPrijikvGsIo3Dlkb//cU7FUhvrcncLW1uvcl6rzSWXC5rtJFY855
apohIc4Jk8Pc0qukgMMsHoMbCsxstlI0tqypEiLknNzxDQ7VL/Ep9Hgjy/JGHEHG
nZZZxfO2ha5SjrAUJ9qlhYT2CsOMq1A2asdiKWKw3W8jZ41IDsqYg9v33nb2frxE
oLfC8YN/g2PR+g==
-----END CERTIFICATE-----
Generated at Mon Jul 27 15:07:39 2026 by rpki-client