Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
File: XPVjIet-o-5Fze0ChmhCDjf6L6w.mft (raw, json)
Hash identifier: hFg/D1LGd6+qEPOFwiy3PWGpDrhkZJKtsTP7t3Fkrmw=
Subject key identifier: EB:CD:8F:AE:D7:4E:96:56:FD:58:02:AA:97:32:F3:FE:32:F8:75:79
Authority key identifier: 5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC
Certificate issuer: /CN=5cf56321eb7ea3ee45cded028668420e37fa2fac
Certificate serial: 019E3117BC5549E80A325F1A31899C06D6DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
Manifest number: 1621
Signing time: Sat 16 May 2026 14:01:39 +0000
Manifest this update: Sat 16 May 2026 14:01:39 +0000
Manifest next update: Sun 17 May 2026 14:01:39 +0000
Files and hashes: 1: F7EvqKPuCJrRbauscLqXiKU0tSU.roa (hash: Rn1QP+hzXdWW26eL4q5uEtv+FD1RDx8ao69irkAES9U=)
2: XPVjIet-o-5Fze0ChmhCDjf6L6w.crl (hash: 9TpMLB8U1Abr0N26HhWcaEePGWlj0iCX98yMvneVDN0=)
3: a7oKAtXpujbjcSp7xIWIBbpbuwo.roa (hash: uOToHNzKGxHUJP96PSZDBVfJ0h4D91Ag2KcuZFpXViQ=)
4: bklYzzrT2LyqE_eolbd4uJqpn88.roa (hash: hL8JImvIqT8exdBOwwwQRZtRNMgq3QcD8ZDf3TXxPgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:bc:55:49:e8:0a:32:5f:1a:31:89:9c:06:d6:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf56321eb7ea3ee45cded028668420e37fa2fac
Validity
Not Before: May 16 14:01:39 2026 GMT
Not After : May 17 14:01:39 2026 GMT
Subject: CN=ebcd8faed74e9656fd5802aa9732f3fe32f87579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:72:2d:41:86:88:ff:2c:ad:d6:b1:be:73:25:
16:01:d8:4b:b3:c1:c3:10:dd:e1:68:74:52:99:37:
f1:09:49:ea:17:e1:22:68:99:29:55:94:4c:b1:1f:
25:7c:f7:b0:3a:2b:35:e8:9a:d0:21:f9:eb:97:51:
1b:05:f2:ae:43:43:d1:90:a8:76:9b:34:0e:53:a2:
9e:45:27:e0:eb:ce:c9:02:15:d5:03:20:66:f8:58:
1b:36:ee:10:56:34:46:b1:43:79:29:71:1f:2b:f6:
0e:08:7b:03:79:46:9b:5f:07:c4:7a:13:38:ef:e2:
74:71:41:48:89:30:0c:71:0d:f7:86:2f:71:b5:ac:
b3:00:ae:18:78:c4:e9:db:44:f7:f0:99:98:97:13:
bb:f9:80:72:1b:2c:bd:c7:2b:49:5f:37:76:3f:21:
df:a6:90:c2:7f:35:7e:5c:26:15:09:c7:d7:8e:24:
a4:58:22:2e:df:9b:1e:eb:a7:b3:72:6b:e5:3a:57:
5e:e6:b4:17:2b:fe:71:b7:e6:e4:9a:22:72:ec:5b:
4d:0e:ed:91:e0:39:ff:57:c9:ac:a2:29:30:fc:f2:
23:60:40:d7:95:a4:05:6c:82:fe:97:4e:81:74:16:
15:05:c4:d4:39:3e:9c:27:17:d3:10:99:46:c6:11:
a1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:CD:8F:AE:D7:4E:96:56:FD:58:02:AA:97:32:F3:FE:32:F8:75:79
X509v3 Authority Key Identifier:
keyid:5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:3c:6e:e1:5a:d6:3e:a4:05:1f:d8:8d:99:58:2b:cd:6c:09:
1a:e4:80:78:9d:ae:c4:b2:92:74:aa:47:29:49:0b:bd:a4:e6:
1a:fb:51:a8:80:9b:d0:b1:31:32:a0:98:8c:d0:1b:0a:c7:09:
14:70:e7:9c:b4:c8:60:af:85:d6:ca:f3:65:01:cc:e7:01:c0:
d7:a0:64:71:53:f6:3d:41:e7:2e:ad:5b:35:51:8d:c7:4f:45:
bd:1f:d9:0b:00:5e:b7:15:e1:55:77:a6:e0:9a:db:e7:01:fc:
21:91:38:2e:c9:cb:26:69:0f:4a:ab:88:6f:88:9b:80:ad:ed:
14:b4:cc:21:0f:3c:9e:ae:3c:b2:9e:b3:3c:b6:c9:6b:2b:7b:
54:ea:f1:45:71:cb:55:74:37:89:e9:cc:78:a3:8c:9f:6e:8f:
33:dd:e5:8e:b6:aa:ec:77:30:eb:c1:a9:de:d3:e9:33:2c:f3:
02:b4:4b:7a:48:ed:e4:0e:9f:2c:ff:6a:82:87:22:c4:3c:88:
e4:a5:ae:a4:ec:aa:60:89:e6:87:12:08:7d:d0:bb:7c:12:59:
a3:1c:65:b3:4a:c7:ff:6a:15:98:1c:64:a1:46:25:14:e5:0d:
10:21:b2:e4:f1:6c:46:b3:b8:0c:47:ec:15:19:6c:ba:13:a1:
f5:ed:27:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xF7xVSegKMl8aMYmcBtbbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZjU2MzIxZWI3ZWEzZWU0NWNkZWQwMjg2Njg0MjBlMzdm
YTJmYWMwHhcNMjYwNTE2MTQwMTM5WhcNMjYwNTE3MTQwMTM5WjAzMTEwLwYDVQQD
EyhlYmNkOGZhZWQ3NGU5NjU2ZmQ1ODAyYWE5NzMyZjNmZTMyZjg3NTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3ItQYaI/yyt1rG+cyUWAdhLs8HD
EN3haHRSmTfxCUnqF+EiaJkpVZRMsR8lfPewOis16JrQIfnrl1EbBfKuQ0PRkKh2
mzQOU6KeRSfg687JAhXVAyBm+FgbNu4QVjRGsUN5KXEfK/YOCHsDeUabXwfEehM4
7+J0cUFIiTAMcQ33hi9xtayzAK4YeMTp20T38JmYlxO7+YByGyy9xytJXzd2PyHf
ppDCfzV+XCYVCcfXjiSkWCIu35se66ezcmvlOlde5rQXK/5xt+bkmiJy7FtNDu2R
4Dn/V8msoikw/PIjYEDXlaQFbIL+l06BdBYVBcTUOT6cJxfTEJlGxhGhbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOvNj67XTpZW/VgCqpcy8/4y+HV5MB8GA1UdIwQY
MBaAFFz1YyHrfqPuRc3tAoZoQg43+i+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFBWaklldC1vLTVGemUwQ2htaENEamY2TDZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9kZmE0YTgtMzhiMC00NjFiLWEwODIt
ODQzZTI2MmRkOGRjLzEvWFBWaklldC1vLTVGemUwQ2htaENEamY2TDZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9kZmE0YTgtMzhiMC00NjFiLWEwODItODQzZTI2MmRkOGRj
LzEvWFBWaklldC1vLTVGemUwQ2htaENEamY2TDZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgDxu4VrW
PqQFH9iNmVgrzWwJGuSAeJ2uxLKSdKpHKUkLvaTmGvtRqICb0LExMqCYjNAbCscJ
FHDnnLTIYK+F1srzZQHM5wHA16BkcVP2PUHnLq1bNVGNx09FvR/ZCwBetxXhVXem
4Jrb5wH8IZE4LsnLJmkPSquIb4ibgK3tFLTMIQ88nq48sp6zPLbJayt7VOrxRXHL
VXQ3ienMeKOMn26PM93ljraq7Hcw68Gp3tPpMyzzArRLekjt5A6fLP9qgocixDyI
5KWupOyqYInmhxIIfdC7fBJZoxxls0rH/2oVmBxkoUYlFOUNECGy5PFsRrO4DEfs
FRlsuhOh9e0nRQ==
-----END CERTIFICATE-----
Generated at Sat May 16 18:43:43 2026 by rpki-client