Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
File: XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft (raw, json)
Hash identifier: DWqcfa4PYcxv7N0xT0omKLBPk/rYC7/jhBVAdusLjws=
Subject key identifier: BA:C5:61:8A:C6:2F:80:41:AD:4D:FF:E1:D1:F0:76:3A:95:05:AC:0F
Authority key identifier: 5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96
Certificate issuer: /CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96
Certificate serial: 01A002EF53F5FB87EAB75C6AE01F6DCF2093
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
Manifest number: 1539
Signing time: Sat 15 Aug 2026 01:00:34 +0000
Manifest this update: Sat 15 Aug 2026 01:00:34 +0000
Manifest next update: Sun 16 Aug 2026 01:00:34 +0000
Files and hashes: 1: 1-rh3SVK_l4oC_Y7ih51PfkV69KE.roa (hash: NJ7OHlFB+x8OrDZE2G7eqZGbDxSKcSz5o8ZkkHAui3k=)
2: DmAsoEh_ftaKPOhVRscVORbXGKo.roa (hash: K5t41X9Sj7F3OsASCaPLgv9lGQLlL9EDWZMrPiqu4D4=)
3: Jj9JAsNkaCzVh3y4XWm1P_rXYU0.roa (hash: //DJwmMWuAhUHyp7ncUG1CBCwhEdbc8wN+6fYn+HdDk=)
4: XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl (hash: ilDqgY0YcyNuFrPoXu9pCbSTOZzqLwU9GdgyZhkQXqI=)
5: qIrPTvkJoKHOpyB7wnhzahJKcVM.roa (hash: P67wuJBItbnZh+zC9ZR4+mPtRz9kxlpY/Ao75oEVWZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:ef:53:f5:fb:87:ea:b7:5c:6a:e0:1f:6d:cf:20:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96
Validity
Not Before: Aug 15 01:00:34 2026 GMT
Not After : Aug 16 01:00:34 2026 GMT
Subject: CN=bac5618ac62f8041ad4dffe1d1f0763a9505ac0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4b:5e:48:59:e1:2a:01:6c:4c:4a:c1:59:d3:
59:99:31:c0:13:8d:6d:24:d6:61:53:56:7b:2f:e1:
9c:03:9e:33:69:28:7d:7c:e9:08:0f:f4:ed:39:9a:
d0:06:be:64:8e:48:ca:a2:52:bf:45:84:02:1a:bd:
70:23:63:8f:39:d4:c3:f3:4e:79:a5:e9:a3:64:d3:
35:e2:12:28:f7:94:76:4e:52:c3:77:32:ec:a1:d3:
38:5c:44:91:51:29:54:67:bc:ca:4f:17:96:cc:c3:
02:b9:74:b9:93:fb:b9:21:53:94:a6:b6:f0:7a:8b:
0e:1f:60:cc:9a:35:65:0c:18:2b:28:56:62:db:e6:
e7:43:c3:81:ee:f8:3e:cb:37:ff:20:48:2b:fd:0d:
68:2e:ca:48:f1:ab:dd:55:cb:76:84:76:f4:89:86:
f7:48:72:0a:3e:49:83:73:5e:5e:25:9b:f3:40:2e:
71:fd:46:2d:cd:ac:7b:3c:bc:26:5a:13:b0:68:6f:
4f:0f:ce:51:0e:1d:62:f8:b7:79:9a:10:75:af:88:
3f:c5:06:cb:fc:50:ba:91:61:d4:09:ed:98:c3:77:
64:f5:a1:2a:08:87:4c:5f:28:d5:5a:2e:3a:67:60:
25:03:54:17:e2:5c:55:7e:97:a0:f4:79:d1:19:08:
53:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C5:61:8A:C6:2F:80:41:AD:4D:FF:E1:D1:F0:76:3A:95:05:AC:0F
X509v3 Authority Key Identifier:
keyid:5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:5c:eb:d2:f1:72:c2:71:d4:f5:52:60:83:c6:d0:54:59:ac:
6c:6a:29:26:a0:3a:0e:98:76:99:19:67:b5:cd:d8:16:66:76:
96:64:7c:a4:94:4d:e3:f2:57:b3:1a:57:6d:b5:51:e5:da:e2:
97:49:82:74:bc:ac:e0:a4:ca:14:43:06:b3:5e:31:72:ff:63:
bb:c1:b7:12:5e:7a:d7:3b:8b:9f:b8:1b:c3:7b:c2:7e:da:08:
52:b3:69:d5:11:5b:55:4d:46:de:19:73:cd:12:ca:e6:5f:e7:
f3:b7:3c:d2:1f:44:43:d6:a4:e9:b1:cf:ab:e4:ee:c3:71:6b:
b6:40:ed:eb:db:87:66:fd:f5:8e:d4:0c:e9:fa:31:6d:9c:5e:
68:fd:ba:a1:99:e1:1e:d1:0f:5d:a1:a5:cf:6c:4e:eb:d7:d5:
77:cc:37:09:7d:a9:32:8d:72:84:c6:b4:06:ee:8c:c9:a5:6b:
fc:c7:34:98:a8:b6:41:d2:46:24:7a:26:85:90:9a:56:f4:c4:
cb:9c:0f:6d:59:3a:44:8f:bb:93:77:f0:19:87:34:44:d1:93:
f9:17:49:14:08:d6:67:4b:8f:e8:6c:3b:9d:f6:76:de:c4:47:
f0:3c:c5:81:11:64:2e:5b:fb:44:53:03:b9:ad:09:43:46:12:
c7:34:32:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAC71P1+4fqt1xq4B9tzyCTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkM2JiODQ4OTE2NTFmMjAzOWNkODFiMGI2MDkxMmY3YzBl
NWNmOTYwHhcNMjYwODE1MDEwMDM0WhcNMjYwODE2MDEwMDM0WjAzMTEwLwYDVQQD
EyhiYWM1NjE4YWM2MmY4MDQxYWQ0ZGZmZTFkMWYwNzYzYTk1MDVhYzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUteSFnhKgFsTErBWdNZmTHAE41t
JNZhU1Z7L+GcA54zaSh9fOkID/TtOZrQBr5kjkjKolK/RYQCGr1wI2OPOdTD8055
pemjZNM14hIo95R2TlLDdzLsodM4XESRUSlUZ7zKTxeWzMMCuXS5k/u5IVOUprbw
eosOH2DMmjVlDBgrKFZi2+bnQ8OB7vg+yzf/IEgr/Q1oLspI8avdVct2hHb0iYb3
SHIKPkmDc15eJZvzQC5x/UYtzax7PLwmWhOwaG9PD85RDh1i+Ld5mhB1r4g/xQbL
/FC6kWHUCe2Yw3dk9aEqCIdMXyjVWi46Z2AlA1QX4lxVfpeg9HnRGQhTswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLrFYYrGL4BBrU3/4dHwdjqVBawPMB8GA1UdIwQY
MBaAFF07uEiRZR8gOc2BsLYJEvfA5c+WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFR1NFNKRmxIeUE1ellHd3Rna1M5OERsejVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS81ODdmN2UtNjBjYy00MWEwLTg4Njkt
NGY4YzYzOGE3MmUxLzEvWFR1NFNKRmxIeUE1ellHd3Rna1M5OERsejVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS81ODdmN2UtNjBjYy00MWEwLTg4NjktNGY4YzYzOGE3MmUx
LzEvWFR1NFNKRmxIeUE1ellHd3Rna1M5OERsejVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM1zr0vFy
wnHU9VJgg8bQVFmsbGopJqA6Dph2mRlntc3YFmZ2lmR8pJRN4/JXsxpXbbVR5dri
l0mCdLys4KTKFEMGs14xcv9ju8G3El561zuLn7gbw3vCftoIUrNp1RFbVU1G3hlz
zRLK5l/n87c80h9EQ9ak6bHPq+Tuw3FrtkDt69uHZv31jtQM6foxbZxeaP26oZnh
HtEPXaGlz2xO69fVd8w3CX2pMo1yhMa0Bu6MyaVr/Mc0mKi2QdJGJHomhZCaVvTE
y5wPbVk6RI+7k3fwGYc0RNGT+RdJFAjWZ0uP6Gw7nfZ23sRH8DzFgRFkLlv7RFMD
ua0JQ0YSxzQyQQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 02:29:59 2026 by rpki-client