Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
File: XeFelYoRQmpVYoXiiuNA8KJdKgM.mft (raw, json)
Hash identifier: epXBF5sNyyWC9SWNKrPojRVRtvHGlw42OdQUPfkddBg=
Subject key identifier: D1:08:6C:99:E9:9C:83:DC:39:AA:BA:A8:5F:D1:A0:D8:8D:1E:57:F6
Authority key identifier: 5D:E1:5E:95:8A:11:42:6A:55:62:85:E2:8A:E3:40:F0:A2:5D:2A:03
Certificate issuer: /CN=5de15e958a11426a556285e28ae340f0a25d2a03
Certificate serial: 019FB0F7D3430DC3DB68FC7E2FDE8EE2BB47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
Manifest number: 05A5
Signing time: Thu 30 Jul 2026 03:00:59 +0000
Manifest this update: Thu 30 Jul 2026 03:00:59 +0000
Manifest next update: Fri 31 Jul 2026 03:00:59 +0000
Files and hashes: 1: RKz3IJpK3tLGmxT3W9hM3i7PGMs.roa (hash: RoVqVK5DIJNCCPA2hRYkxQFyuiyebRh/F8G7DU407FU=)
2: XeFelYoRQmpVYoXiiuNA8KJdKgM.crl (hash: jXOo66l842YcmskoS70PmhEp0cZOhKeZx1KY4gUbl9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b0:f7:d3:43:0d:c3:db:68:fc:7e:2f:de:8e:e2:bb:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5de15e958a11426a556285e28ae340f0a25d2a03
Validity
Not Before: Jul 30 03:00:59 2026 GMT
Not After : Jul 31 03:00:59 2026 GMT
Subject: CN=d1086c99e99c83dc39aabaa85fd1a0d88d1e57f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:86:a7:b6:8c:9f:c3:f1:35:a4:19:58:f1:16:
5d:42:ff:a1:9c:5f:ef:7f:15:a4:73:9d:71:94:6e:
db:81:24:d0:46:91:83:d6:e6:d3:60:48:ca:9d:af:
fe:02:75:3d:5d:a4:47:5b:c8:9e:b1:c2:04:fb:8d:
f5:94:f5:7d:38:bf:4b:82:df:cc:b1:76:ce:5e:c0:
bb:22:77:ab:ae:ae:4b:25:5a:b1:8b:c3:f0:4e:2e:
16:9f:84:96:12:c6:56:6f:35:1b:71:7e:ee:55:19:
73:9f:01:f2:4a:a3:c9:94:d4:75:2b:59:d6:36:40:
cb:49:3a:0a:5c:a0:90:a7:a5:29:6b:6c:27:cb:e1:
4c:5d:74:bd:5b:f6:a7:aa:41:35:0e:51:c0:b3:9a:
1f:25:ed:a5:d2:53:ad:90:14:89:d4:95:ed:48:02:
8f:1e:e7:3a:b2:47:8e:54:94:de:cc:2b:86:5f:8e:
d9:73:c5:d9:a4:ad:e4:dc:7c:78:a9:32:c6:3f:f9:
df:eb:a7:b5:7e:aa:d1:7e:8a:94:0e:ab:5a:91:0e:
e6:42:18:df:82:49:b7:6f:22:a6:b9:43:8e:aa:48:
5e:98:e7:93:ec:85:3b:5b:97:36:7f:77:ac:48:8b:
f1:de:a8:77:e6:86:2a:27:24:53:5b:f6:cc:87:ff:
a0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:08:6C:99:E9:9C:83:DC:39:AA:BA:A8:5F:D1:A0:D8:8D:1E:57:F6
X509v3 Authority Key Identifier:
keyid:5D:E1:5E:95:8A:11:42:6A:55:62:85:E2:8A:E3:40:F0:A2:5D:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:27:4d:8d:46:e9:58:7a:ae:6f:0d:1b:7f:9b:9d:90:12:27:
ef:59:f9:0c:f6:fa:05:65:f3:8c:a3:49:6c:07:b4:29:72:fe:
cf:a8:ab:57:88:34:56:e9:c8:0d:95:75:eb:7d:40:5e:bc:89:
1f:f7:bf:f2:f2:6a:64:78:5c:06:6a:41:e4:9b:ce:ba:3b:ea:
89:82:7e:59:d2:47:16:69:73:f8:96:2e:35:d3:8d:42:73:d6:
bf:2a:4b:71:41:67:12:68:a7:5c:96:99:9d:55:0f:b3:7a:1e:
9a:ec:ff:94:37:07:40:ec:9f:bb:0e:06:a5:e0:3c:b2:39:67:
33:d7:eb:75:32:ce:85:0c:30:62:64:d6:c0:ce:48:8c:39:d0:
c9:bb:15:e1:90:95:22:eb:ea:20:6f:19:75:22:03:9c:d1:5b:
ac:00:62:9a:49:b0:d4:b7:eb:8d:85:96:f9:0a:ca:00:13:2b:
48:b1:a4:60:40:52:57:0e:b6:08:28:4d:a0:e7:a4:8b:4c:26:
d9:67:a9:84:22:29:5c:c0:ae:35:62:39:53:f8:16:87:ad:6d:
9e:82:ff:2c:5f:7a:12:b9:79:a8:2d:1f:5b:d9:c9:31:20:0c:
e0:e8:1d:ff:f6:df:aa:b6:27:60:ad:d2:2b:98:66:c5:e6:1b:
f2:eb:72:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+w99NDDcPbaPx+L96O4rtHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZTE1ZTk1OGExMTQyNmE1NTYyODVlMjhhZTM0MGYwYTI1
ZDJhMDMwHhcNMjYwNzMwMDMwMDU5WhcNMjYwNzMxMDMwMDU5WjAzMTEwLwYDVQQD
EyhkMTA4NmM5OWU5OWM4M2RjMzlhYWJhYTg1ZmQxYTBkODhkMWU1N2Y2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4antoyfw/E1pBlY8RZdQv+hnF/v
fxWkc51xlG7bgSTQRpGD1ubTYEjKna/+AnU9XaRHW8iescIE+431lPV9OL9Lgt/M
sXbOXsC7Inerrq5LJVqxi8PwTi4Wn4SWEsZWbzUbcX7uVRlznwHySqPJlNR1K1nW
NkDLSToKXKCQp6Upa2wny+FMXXS9W/anqkE1DlHAs5ofJe2l0lOtkBSJ1JXtSAKP
Huc6skeOVJTezCuGX47Zc8XZpK3k3Hx4qTLGP/nf66e1fqrRfoqUDqtakQ7mQhjf
gkm3byKmuUOOqkhemOeT7IU7W5c2f3esSIvx3qh35oYqJyRTW/bMh/+g2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNEIbJnpnIPcOaq6qF/RoNiNHlf2MB8GA1UdIwQY
MBaAFF3hXpWKEUJqVWKF4orjQPCiXSoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGVGZWxZb1JRbXBWWW9YaWl1TkE4S0pkS2dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC85ZTQ5NTgtOWYyOC00OGI0LTg1MWEt
ODJlZWJkYzQ1OGZlLzEvWGVGZWxZb1JRbXBWWW9YaWl1TkE4S0pkS2dNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC85ZTQ5NTgtOWYyOC00OGI0LTg1MWEtODJlZWJkYzQ1OGZl
LzEvWGVGZWxZb1JRbXBWWW9YaWl1TkE4S0pkS2dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUidNjUbp
WHqubw0bf5udkBIn71n5DPb6BWXzjKNJbAe0KXL+z6irV4g0VunIDZV1631AXryJ
H/e/8vJqZHhcBmpB5JvOujvqiYJ+WdJHFmlz+JYuNdONQnPWvypLcUFnEminXJaZ
nVUPs3oemuz/lDcHQOyfuw4GpeA8sjlnM9frdTLOhQwwYmTWwM5IjDnQybsV4ZCV
IuvqIG8ZdSIDnNFbrABimkmw1LfrjYWW+QrKABMrSLGkYEBSVw62CChNoOeki0wm
2WephCIpXMCuNWI5U/gWh61tnoL/LF96Erl5qC0fW9nJMSAM4Ogd//bfqrYnYK3S
K5hmxeYb8utyRA==
-----END CERTIFICATE-----
Generated at Thu Jul 30 09:23:05 2026 by rpki-client