Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
File: XCnLotrPDvn6IgkAMrsVmhCRQPA.mft (raw, json)
Hash identifier: nke1Q1wlq7st5d6U9qjyT+EP1IYE5ZUmrl+0rl+m+0A=
Subject key identifier: 19:C6:4F:2D:47:5E:A6:30:26:1D:C8:F6:1D:F6:4A:32:A7:B0:D1:C5
Authority key identifier: 5C:29:CB:A2:DA:CF:0E:F9:FA:22:09:00:32:BB:15:9A:10:91:40:F0
Certificate issuer: /CN=5c29cba2dacf0ef9fa22090032bb159a109140f0
Certificate serial: 019E3229B37338A4F524FA46E5CFF80990BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XCnLotrPDvn6IgkAMrsVmhCRQPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
Manifest number: 190F
Signing time: Sat 16 May 2026 19:00:54 +0000
Manifest this update: Sat 16 May 2026 19:00:54 +0000
Manifest next update: Sun 17 May 2026 19:00:54 +0000
Files and hashes: 1: XCnLotrPDvn6IgkAMrsVmhCRQPA.crl (hash: W56VPMfjS4gQI3v1Gc+fQVqwOHJEet6e1FlPDRwu1+Y=)
2: aeEP89HKT7e7KYklfEV6GwzzRq4.roa (hash: +iLAVwj6kbQSZH9/6AWgoWRz5/OYd1yxCHRY7Br0+CU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XCnLotrPDvn6IgkAMrsVmhCRQPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:29:b3:73:38:a4:f5:24:fa:46:e5:cf:f8:09:90:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c29cba2dacf0ef9fa22090032bb159a109140f0
Validity
Not Before: May 16 19:00:54 2026 GMT
Not After : May 17 19:00:54 2026 GMT
Subject: CN=19c64f2d475ea630261dc8f61df64a32a7b0d1c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:52:72:2c:c6:77:e0:5e:a4:e9:9f:bf:ef:63:
f0:49:f8:d4:af:ad:48:1c:82:ad:e9:a2:79:60:a8:
6f:46:bb:52:27:e3:f7:04:e3:d9:ee:e8:60:ea:12:
92:0c:6e:76:ca:ea:bf:9d:53:b0:6d:33:67:b7:d2:
67:cb:a5:0a:9f:88:e1:b8:d8:d8:a2:0f:c3:88:9d:
0c:e1:6c:f0:71:b0:9e:60:0e:e5:1e:d7:fb:26:96:
f5:98:a1:88:ca:e7:2d:fb:e1:92:da:79:07:b3:10:
04:4d:ed:6b:dc:f7:28:e0:4a:f1:f3:d1:80:d5:ca:
a0:c8:b9:3d:6f:43:0a:84:29:ae:22:3e:3e:3d:08:
44:e4:cc:16:9d:8c:7b:44:f3:ae:3f:2b:18:e2:e3:
4f:24:ec:f6:e4:e9:b8:c3:ac:d8:eb:9d:4a:11:1b:
b5:81:e6:5a:28:b5:08:eb:eb:af:ff:1d:cf:11:fb:
bc:a7:5b:8e:e0:e5:79:d3:c5:84:62:3c:dd:cb:ea:
30:cc:c2:96:e1:14:ae:b1:a7:7a:9e:a1:16:47:63:
27:c9:a0:3a:68:a4:41:3a:bc:d9:38:ac:fb:82:45:
e2:d5:2c:5b:93:56:27:28:69:43:b0:7b:84:8d:4d:
0c:09:97:45:03:3f:2a:1c:fc:30:06:ab:ce:6b:6b:
ea:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C6:4F:2D:47:5E:A6:30:26:1D:C8:F6:1D:F6:4A:32:A7:B0:D1:C5
X509v3 Authority Key Identifier:
keyid:5C:29:CB:A2:DA:CF:0E:F9:FA:22:09:00:32:BB:15:9A:10:91:40:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XCnLotrPDvn6IgkAMrsVmhCRQPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:57:9d:2f:a2:a4:52:02:40:25:77:1b:a3:d0:6c:57:e3:a8:
ff:89:6b:23:5c:a2:6c:76:27:e4:fe:b4:10:b5:a7:79:74:1f:
29:ec:ea:da:c6:01:9a:f8:d8:0f:39:8e:77:25:5d:30:d8:9c:
6b:d5:90:00:0d:ff:87:a6:e8:a4:1f:b3:9a:dc:cd:99:be:e6:
63:3f:bc:31:75:87:b2:b2:d2:ed:17:53:68:9d:4b:78:ee:a9:
e5:9a:05:1b:fe:1d:31:46:41:10:b5:34:04:f6:13:a6:ae:c7:
28:55:bd:07:bf:57:f0:3e:13:a5:6e:63:bf:24:c6:d9:cd:b4:
f3:6e:2e:06:2a:e1:39:a6:13:1b:ec:e7:86:ed:e3:5e:82:1c:
67:d7:cc:00:e7:43:fe:8d:41:4c:5d:cc:42:04:4b:2f:f0:04:
06:b1:c6:85:bf:1e:86:7b:0a:85:fa:3f:05:e4:97:3e:88:84:
f9:ac:ac:7e:f4:76:a9:70:9d:30:43:95:96:36:9a:9b:34:36:
ef:6a:73:2a:74:c1:64:5c:69:0d:4f:61:0f:04:60:b7:27:54:
e8:59:ee:b4:1b:01:85:fe:89:fc:dc:15:cc:78:a2:de:b0:40:
e9:5b:3e:39:fd:23:ed:6a:72:ac:79:02:2a:fd:cc:ef:da:6b:
d3:83:e4:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4yKbNzOKT1JPpG5c/4CZC9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjMjljYmEyZGFjZjBlZjlmYTIyMDkwMDMyYmIxNTlhMTA5
MTQwZjAwHhcNMjYwNTE2MTkwMDU0WhcNMjYwNTE3MTkwMDU0WjAzMTEwLwYDVQQD
EygxOWM2NGYyZDQ3NWVhNjMwMjYxZGM4ZjYxZGY2NGEzMmE3YjBkMWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllJyLMZ34F6k6Z+/72PwSfjUr61I
HIKt6aJ5YKhvRrtSJ+P3BOPZ7uhg6hKSDG52yuq/nVOwbTNnt9Jny6UKn4jhuNjY
og/DiJ0M4WzwcbCeYA7lHtf7Jpb1mKGIyuct++GS2nkHsxAETe1r3Pco4Erx89GA
1cqgyLk9b0MKhCmuIj4+PQhE5MwWnYx7RPOuPysY4uNPJOz25Om4w6zY651KERu1
geZaKLUI6+uv/x3PEfu8p1uO4OV508WEYjzdy+owzMKW4RSusad6nqEWR2MnyaA6
aKRBOrzZOKz7gkXi1Sxbk1YnKGlDsHuEjU0MCZdFAz8qHPwwBqvOa2vquwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBnGTy1HXqYwJh3I9h32SjKnsNHFMB8GA1UdIwQY
MBaAFFwpy6Lazw75+iIJADK7FZoQkUDwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWENuTG90clBEdm42SWdrQU1yc1ZtaENSUVBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC83MjlmZGEtZDg1Mi00YWNhLTlhZmYt
NmQxZmE0MmQwYjgwLzEvWENuTG90clBEdm42SWdrQU1yc1ZtaENSUVBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC83MjlmZGEtZDg1Mi00YWNhLTlhZmYtNmQxZmE0MmQwYjgw
LzEvWENuTG90clBEdm42SWdrQU1yc1ZtaENSUVBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4ledL6Kk
UgJAJXcbo9BsV+Oo/4lrI1yibHYn5P60ELWneXQfKezq2sYBmvjYDzmOdyVdMNic
a9WQAA3/h6bopB+zmtzNmb7mYz+8MXWHsrLS7RdTaJ1LeO6p5ZoFG/4dMUZBELU0
BPYTpq7HKFW9B79X8D4TpW5jvyTG2c20824uBirhOaYTG+znhu3jXoIcZ9fMAOdD
/o1BTF3MQgRLL/AEBrHGhb8ehnsKhfo/BeSXPoiE+aysfvR2qXCdMEOVljaamzQ2
72pzKnTBZFxpDU9hDwRgtydU6FnutBsBhf6J/NwVzHii3rBA6Vs+Of0j7WpyrHkC
Kv3M79pr04Pklw==
-----END CERTIFICATE-----
Generated at Sun May 17 02:06:20 2026 by rpki-client