Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/XcsAiY2alEXGzuY3o1j-Mv3YVyE.mft
File: XcsAiY2alEXGzuY3o1j-Mv3YVyE.mft (raw, json)
Hash identifier: zqSxT+I013VkJk0TqWEuVc4JoGqrNcyPYN5nmF+2fmM=
Subject key identifier: 0E:6E:0C:AB:43:84:F5:0B:A0:65:65:1C:B1:3B:E5:B8:AD:DE:A1:01
Authority key identifier: 5D:CB:00:89:8D:9A:94:45:C6:CE:E6:37:A3:58:FE:32:FD:D8:57:21
Certificate issuer: /CN=5dcb00898d9a9445c6cee637a358fe32fdd85721
Certificate serial: 019FA33CA33CB6701C7BD3CA812F1373636E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcsAiY2alEXGzuY3o1j-Mv3YVyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/XcsAiY2alEXGzuY3o1j-Mv3YVyE.mft
Manifest number: 4A
Signing time: Mon 27 Jul 2026 11:01:27 +0000
Manifest this update: Mon 27 Jul 2026 11:01:27 +0000
Manifest next update: Tue 28 Jul 2026 11:01:27 +0000
Files and hashes: 1: XcsAiY2alEXGzuY3o1j-Mv3YVyE.crl (hash: ll/KusWrYf1PpNfD4Yfq2d7OWSuJLZ8I/2ql3gXt0iU=)
2: dtDYTTev40_KP4gDD8l2B4FoWRU.roa (hash: KG4iIFsSaxHV4OzMuERalzQ2ir8/nTV6jkLr4CLycfo=)
3: lldCsQ1hgTCDcrFWBWU0S5eC1nE.roa (hash: PQn0MUfrufkEibOpWiDwl2hJpMI+Yw+jzN0Z4rlm5DI=)
4: whybmoJ3UH-tZcQj28IxhxnuNWU.roa (hash: XoXTuKuWN/G+ZqFwydqG+jUtoRxuSHXL1j3ltwwohOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/XcsAiY2alEXGzuY3o1j-Mv3YVyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/XcsAiY2alEXGzuY3o1j-Mv3YVyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XcsAiY2alEXGzuY3o1j-Mv3YVyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 11:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:3c:a3:3c:b6:70:1c:7b:d3:ca:81:2f:13:73:63:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dcb00898d9a9445c6cee637a358fe32fdd85721
Validity
Not Before: Jul 27 11:01:27 2026 GMT
Not After : Jul 28 11:01:27 2026 GMT
Subject: CN=0e6e0cab4384f50ba065651cb13be5b8addea101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:aa:3e:89:fa:ea:e3:d8:4c:a8:b7:62:c7:2e:
e4:f0:f2:83:a6:4b:c2:45:41:a8:0a:1c:5f:c6:d6:
9e:9b:11:9a:d3:ba:17:e1:fe:19:15:d5:b2:51:05:
95:67:7a:74:e3:23:26:94:57:dc:4d:ac:92:0f:77:
33:91:fd:26:9d:45:ed:0b:d8:41:d2:00:35:0c:a0:
86:b7:8f:47:8f:07:89:97:76:6f:b8:a6:ec:ae:9d:
39:48:d2:47:ad:ca:a3:80:eb:4a:78:81:0f:55:c8:
da:2f:c7:5f:41:a8:19:85:6f:b8:b2:aa:d8:27:8d:
97:fb:d8:37:4e:64:56:fa:0d:b1:19:de:31:7a:78:
14:ba:18:26:a9:24:12:94:d7:ea:89:0b:bb:10:49:
a5:73:37:87:6c:e0:35:1e:f6:8b:b8:00:63:48:eb:
65:0b:39:f7:0d:81:80:10:01:f0:35:19:77:4b:87:
ba:b7:6a:f7:6a:75:84:f0:49:38:32:04:48:4d:b1:
a2:e5:fe:68:3b:78:14:f7:6e:93:c9:38:e1:30:1c:
54:32:e5:18:b8:cd:62:55:3b:16:a9:da:3a:33:22:
85:f4:8f:91:0e:20:51:ee:2d:51:45:12:c2:52:34:
5a:fd:12:60:d0:c1:d0:b0:f2:85:8a:3c:df:9f:9b:
cf:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:6E:0C:AB:43:84:F5:0B:A0:65:65:1C:B1:3B:E5:B8:AD:DE:A1:01
X509v3 Authority Key Identifier:
keyid:5D:CB:00:89:8D:9A:94:45:C6:CE:E6:37:A3:58:FE:32:FD:D8:57:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcsAiY2alEXGzuY3o1j-Mv3YVyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/XcsAiY2alEXGzuY3o1j-Mv3YVyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/XcsAiY2alEXGzuY3o1j-Mv3YVyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:29:4a:bb:4e:ec:5a:16:4e:31:8c:3b:3e:39:b0:d6:7f:91:
7e:54:31:2b:68:07:ec:7e:f4:00:83:23:1f:a3:58:aa:88:fe:
8f:4e:4c:b3:44:50:37:91:a4:35:72:dd:dd:5d:a6:b1:5b:69:
78:50:12:07:fb:7a:e0:36:b9:3c:9b:c3:b2:fb:2a:6d:9c:70:
05:ee:5b:de:3f:40:d6:58:86:da:34:bf:0a:13:35:40:fb:81:
95:7e:00:6a:35:2b:96:de:36:46:a9:72:65:7c:5e:0c:87:d9:
d6:4a:c7:38:05:53:59:ec:c2:c1:11:d7:78:fc:24:1b:6a:b4:
5e:f9:7d:66:b7:d0:f1:25:e4:56:a4:1d:eb:63:bf:c4:79:d5:
ff:0a:f1:c9:dc:10:5c:f2:0e:5d:ac:24:46:7c:25:64:bb:97:
77:f0:01:72:e9:03:71:02:2e:8c:41:12:02:62:8a:e9:d0:ff:
bc:a9:ac:24:f3:1c:52:8e:47:f1:f2:c5:61:b2:20:a1:0d:19:
e4:14:20:a3:8a:dc:84:65:82:13:6f:3c:45:c8:6b:ee:7d:1d:
ab:9d:72:d4:b2:3b:28:9e:cc:e3:4d:31:c5:60:54:bd:60:42:
ba:75:ec:70:86:aa:f7:60:f0:aa:f6:8f:2d:90:29:b9:ad:7a:
bc:ed:eb:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+jPKM8tnAce9PKgS8Tc2NuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkY2IwMDg5OGQ5YTk0NDVjNmNlZTYzN2EzNThmZTMyZmRk
ODU3MjEwHhcNMjYwNzI3MTEwMTI3WhcNMjYwNzI4MTEwMTI3WjAzMTEwLwYDVQQD
EygwZTZlMGNhYjQzODRmNTBiYTA2NTY1MWNiMTNiZTViOGFkZGVhMTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqo+ifrq49hMqLdixy7k8PKDpkvC
RUGoChxfxtaemxGa07oX4f4ZFdWyUQWVZ3p04yMmlFfcTaySD3czkf0mnUXtC9hB
0gA1DKCGt49HjweJl3ZvuKbsrp05SNJHrcqjgOtKeIEPVcjaL8dfQagZhW+4sqrY
J42X+9g3TmRW+g2xGd4xengUuhgmqSQSlNfqiQu7EEmlczeHbOA1HvaLuABjSOtl
Czn3DYGAEAHwNRl3S4e6t2r3anWE8Ek4MgRITbGi5f5oO3gU926TyTjhMBxUMuUY
uM1iVTsWqdo6MyKF9I+RDiBR7i1RRRLCUjRa/RJg0MHQsPKFijzfn5vPAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA5uDKtDhPULoGVlHLE75bit3qEBMB8GA1UdIwQY
MBaAFF3LAImNmpRFxs7mN6NY/jL92FchMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGNzQWlZMmFsRVhHenVZM28xai1NdjNZVnlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wMjEzOTItMzRmMy00YTYzLTgzYTEt
YTA0OTI1OTc1NzU0LzEvWGNzQWlZMmFsRVhHenVZM28xai1NdjNZVnlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8wMjEzOTItMzRmMy00YTYzLTgzYTEtYTA0OTI1OTc1NzU0
LzEvWGNzQWlZMmFsRVhHenVZM28xai1NdjNZVnlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcilKu07s
WhZOMYw7Pjmw1n+RflQxK2gH7H70AIMjH6NYqoj+j05Ms0RQN5GkNXLd3V2msVtp
eFASB/t64Da5PJvDsvsqbZxwBe5b3j9A1liG2jS/ChM1QPuBlX4AajUrlt42Rqly
ZXxeDIfZ1krHOAVTWezCwRHXePwkG2q0Xvl9ZrfQ8SXkVqQd62O/xHnV/wrxydwQ
XPIOXawkRnwlZLuXd/ABcukDcQIujEESAmKK6dD/vKmsJPMcUo5H8fLFYbIgoQ0Z
5BQgo4rchGWCE288Rchr7n0dq51y1LI7KJ7M400xxWBUvWBCunXscIaq92DwqvaP
LZApua16vO3rCA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 14:53:00 2026 by rpki-client