Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
File: XU1jEWbo7t54curYq5qBrch31NE.mft (raw, json)
Hash identifier: MbJrUUFbbhuy04mRkbLCp1ccJ7NbEaoiJV/feQqDfd4=
Subject key identifier: FF:D6:E8:27:4F:32:84:6F:51:54:14:C9:01:85:CB:F0:A2:AE:37:45
Authority key identifier: 5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1
Certificate issuer: /CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1
Certificate serial: 019E3072E85424498286CBF7BE29766D9044
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
Manifest number: 0C32
Signing time: Sat 16 May 2026 11:01:37 +0000
Manifest this update: Sat 16 May 2026 11:01:37 +0000
Manifest next update: Sun 17 May 2026 11:01:37 +0000
Files and hashes: 1: 6KBg76wO49ZTNeUZLEQvdfuAEnc.roa (hash: C78F4tRrcjaUZ0tkRMKZ6DDDl8hmlq6D1hHs1hdNls0=)
2: XU1jEWbo7t54curYq5qBrch31NE.crl (hash: NAbwjLl8vG1MqiaGP9Rhju3lN0Ls2KMknBlnWfhEjLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:e8:54:24:49:82:86:cb:f7:be:29:76:6d:90:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1
Validity
Not Before: May 16 11:01:37 2026 GMT
Not After : May 17 11:01:37 2026 GMT
Subject: CN=ffd6e8274f32846f515414c90185cbf0a2ae3745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e0:37:69:61:9b:a1:4b:e9:70:78:2c:32:c1:
31:a1:ba:b8:e8:53:9c:bd:a7:86:66:f5:15:93:c2:
2a:c1:33:0f:ce:a9:27:da:22:12:23:f0:59:f2:c8:
58:13:ff:5d:45:f9:99:65:6b:28:e6:67:ed:42:f1:
2b:b4:f0:63:20:32:68:8b:07:35:b9:83:ba:81:39:
d9:90:15:57:b7:bc:ac:7c:bc:3b:58:8c:54:11:01:
f4:45:a4:3f:4b:13:68:f0:7f:ec:68:1e:8a:69:60:
13:c9:52:c3:18:cb:4b:92:92:12:84:17:5c:64:ae:
6b:c8:45:7e:3b:aa:61:5d:5d:4c:15:0d:9b:0f:45:
0e:21:a1:1b:25:36:75:2b:44:fe:50:42:73:cc:67:
9d:98:2e:b1:b2:90:25:29:ad:89:11:e0:a7:e8:7c:
18:2e:d9:6f:d8:d9:7e:2e:06:77:77:a6:38:76:1b:
f5:34:7d:e8:6a:12:cf:25:e3:ef:a6:ca:f5:8a:8a:
78:c0:ca:b7:25:74:ba:5d:0b:a6:30:29:18:0d:15:
84:98:7c:16:44:25:8d:b6:2d:2a:42:ae:ab:a9:9b:
fc:48:36:39:34:66:72:3e:28:44:2b:f6:97:d4:b1:
80:1b:e1:d8:06:59:4d:68:66:ac:ea:d2:62:ff:cb:
9c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D6:E8:27:4F:32:84:6F:51:54:14:C9:01:85:CB:F0:A2:AE:37:45
X509v3 Authority Key Identifier:
keyid:5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:e8:da:b6:74:81:43:e3:03:26:d3:1c:a7:8a:f8:21:04:23:
ba:55:5d:4d:71:bb:f4:93:05:a7:4e:64:6e:49:92:1a:64:11:
92:5b:b5:f7:a6:02:9d:4d:8b:d7:46:00:81:b3:ea:a8:12:d3:
6e:dd:96:79:e8:35:eb:d0:93:a1:03:4e:46:71:1f:6c:43:aa:
1d:0e:63:c6:48:33:ca:dc:ac:28:e5:fb:f7:20:45:d7:87:7f:
a7:bb:f4:11:09:34:b3:63:aa:22:09:a2:56:73:0b:d3:64:2a:
3f:80:87:38:3c:16:0f:e6:bc:74:95:ee:b4:93:33:15:1e:2f:
7c:f6:9b:af:e7:9c:80:ed:33:ee:18:7a:f6:dd:a9:98:c2:f8:
18:2d:4d:36:f9:aa:42:4c:04:fd:13:11:1e:de:7a:3a:af:68:
6c:d8:d0:3b:14:8c:c9:32:08:0d:6f:3b:25:f6:d7:ef:67:24:
ae:37:73:cf:67:ac:0c:8d:1c:be:5c:32:41:fa:85:d0:f5:cf:
ff:0d:f1:6f:6b:15:f3:53:33:fd:3a:c1:a4:6d:4a:aa:54:20:
46:ae:ef:34:b3:49:ed:35:0a:07:0c:b2:a5:af:8d:6b:f9:ba:
68:a1:b0:a9:a1:17:03:5e:88:9f:f1:58:fd:23:46:91:50:57:
99:36:26:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wcuhUJEmChsv3vil2bZBEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkNGQ2MzExNjZlOGVlZGU3ODcyZWFkOGFiOWE4MWFkYzg3
N2Q0ZDEwHhcNMjYwNTE2MTEwMTM3WhcNMjYwNTE3MTEwMTM3WjAzMTEwLwYDVQQD
EyhmZmQ2ZTgyNzRmMzI4NDZmNTE1NDE0YzkwMTg1Y2JmMGEyYWUzNzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+A3aWGboUvpcHgsMsExobq46FOc
vaeGZvUVk8IqwTMPzqkn2iISI/BZ8shYE/9dRfmZZWso5mftQvErtPBjIDJoiwc1
uYO6gTnZkBVXt7ysfLw7WIxUEQH0RaQ/SxNo8H/saB6KaWATyVLDGMtLkpIShBdc
ZK5ryEV+O6phXV1MFQ2bD0UOIaEbJTZ1K0T+UEJzzGedmC6xspAlKa2JEeCn6HwY
Ltlv2Nl+LgZ3d6Y4dhv1NH3oahLPJePvpsr1iop4wMq3JXS6XQumMCkYDRWEmHwW
RCWNti0qQq6rqZv8SDY5NGZyPihEK/aX1LGAG+HYBllNaGas6tJi/8ucUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP/W6CdPMoRvUVQUyQGFy/CirjdFMB8GA1UdIwQY
MBaAFF1NYxFm6O7eeHLq2Kuaga3Id9TRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFUxakVXYm83dDU0Y3VyWXE1cUJyY2gzMU5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS80M2I3OGMtNDUzOS00MTEyLWI3NTct
ZmEzNmZjM2I3Mzc2LzEvWFUxakVXYm83dDU0Y3VyWXE1cUJyY2gzMU5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS80M2I3OGMtNDUzOS00MTEyLWI3NTctZmEzNmZjM2I3Mzc2
LzEvWFUxakVXYm83dDU0Y3VyWXE1cUJyY2gzMU5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbejatnSB
Q+MDJtMcp4r4IQQjulVdTXG79JMFp05kbkmSGmQRklu196YCnU2L10YAgbPqqBLT
bt2Weeg169CToQNORnEfbEOqHQ5jxkgzytysKOX79yBF14d/p7v0EQk0s2OqIgmi
VnML02QqP4CHODwWD+a8dJXutJMzFR4vfPabr+ecgO0z7hh69t2pmML4GC1NNvmq
QkwE/RMRHt56Oq9obNjQOxSMyTIIDW87JfbX72ckrjdzz2esDI0cvlwyQfqF0PXP
/w3xb2sV81Mz/TrBpG1KqlQgRq7vNLNJ7TUKBwyypa+Na/m6aKGwqaEXA16In/FY
/SNGkVBXmTYmLw==
-----END CERTIFICATE-----
Generated at Sat May 16 21:14:56 2026 by rpki-client