Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.mft
File: XlFUwaEL4eJaptT4rvpGrTH5uW4.mft (raw, json)
Hash identifier: f+45SRGaVrNE+Df0nZUvCPykWmf6tuYVwg20E49zQaQ=
Subject key identifier: 38:96:07:D9:73:9E:E9:06:AC:D0:EF:65:F4:38:41:1D:5D:25:A7:DA
Authority key identifier: 5E:51:54:C1:A1:0B:E1:E2:5A:A6:D4:F8:AE:FA:46:AD:31:F9:B9:6E
Certificate issuer: /CN=5e5154c1a10be1e25aa6d4f8aefa46ad31f9b96e
Certificate serial: 019E5DF08248A30B608C3F78B5EFBB9EE7CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlFUwaEL4eJaptT4rvpGrTH5uW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.mft
Manifest number: F8
Signing time: Mon 25 May 2026 07:01:43 +0000
Manifest this update: Mon 25 May 2026 07:01:43 +0000
Manifest next update: Tue 26 May 2026 07:01:43 +0000
Files and hashes: 1: XlFUwaEL4eJaptT4rvpGrTH5uW4.crl (hash: 7l3SMMIhrw/Pl1jhcH9VOssXXdI0+anuNwFm4auJCiI=)
2: y9CLGthskm4bnZl6iRpadOOvcw0.asa (hash: 4oKFMMI1txxJcbOTwatF9YPUQxB0wLl2gg3DiiRkr5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlFUwaEL4eJaptT4rvpGrTH5uW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 May 2026 07:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:5d:f0:82:48:a3:0b:60:8c:3f:78:b5:ef:bb:9e:e7:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e5154c1a10be1e25aa6d4f8aefa46ad31f9b96e
Validity
Not Before: May 25 07:01:43 2026 GMT
Not After : May 26 07:01:43 2026 GMT
Subject: CN=389607d9739ee906acd0ef65f438411d5d25a7da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a8:20:7d:00:1a:10:5c:19:c9:cf:89:6a:b6:
20:35:46:7d:8b:e4:45:5b:25:e5:a3:7f:fa:cc:b2:
ca:1b:af:c9:04:ff:6b:96:06:ce:87:00:fd:ee:06:
92:0b:3d:11:44:d7:16:a9:66:0e:f0:3e:64:96:19:
35:ae:5a:28:a9:ac:fd:21:36:13:1c:56:ea:08:08:
67:7b:1a:a2:bc:5f:63:e0:c1:44:c1:21:a6:16:d3:
6b:f4:f0:94:27:19:f4:5d:52:9e:09:49:4c:75:c7:
62:97:d2:8a:69:aa:02:32:8b:e9:8c:aa:ce:3b:97:
4b:e0:86:78:b3:76:2b:9f:dc:62:7d:46:aa:3d:ea:
a9:35:7b:de:bd:fb:32:6c:34:aa:09:89:f0:18:bc:
1f:02:47:42:20:5e:b2:65:01:59:84:24:f5:65:9a:
e6:7b:ac:5f:e1:0b:54:53:3a:d1:bf:47:79:a5:c0:
ef:18:85:e3:e2:bd:0e:3b:bd:d9:62:f1:73:83:10:
42:38:5c:b4:47:6d:5b:a1:5b:99:11:37:c3:77:cc:
c2:2e:4d:dd:ca:f5:43:a6:85:b8:2e:ab:ec:23:fa:
f6:63:a7:e3:4b:bb:82:51:e2:fa:a6:4e:4f:a9:a6:
43:62:f7:5f:f2:cb:21:27:72:ca:05:36:e2:b2:66:
5f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:96:07:D9:73:9E:E9:06:AC:D0:EF:65:F4:38:41:1D:5D:25:A7:DA
X509v3 Authority Key Identifier:
keyid:5E:51:54:C1:A1:0B:E1:E2:5A:A6:D4:F8:AE:FA:46:AD:31:F9:B9:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlFUwaEL4eJaptT4rvpGrTH5uW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:90:30:32:12:0d:31:f4:16:db:6c:13:e9:7f:e8:cf:2e:68:
b6:21:a1:7a:7e:72:11:b1:40:aa:f9:38:3c:38:18:2c:8a:3e:
9b:9b:64:d7:c8:88:27:c1:4c:5b:d4:af:e1:79:26:7f:76:fa:
87:6a:9a:6f:58:ea:c6:2a:52:84:38:1a:8f:9d:25:46:32:8e:
31:28:ae:30:62:7a:99:04:63:6d:f7:88:1c:f7:73:cd:88:f8:
c6:02:04:73:11:7f:7e:4f:a9:c9:37:6f:d4:86:99:bd:17:13:
73:2f:17:8b:5e:72:e5:16:94:eb:70:53:66:01:dd:16:34:89:
4a:e8:38:0d:e1:6f:fa:52:3e:0f:54:b3:b9:fe:3f:7b:cc:af:
84:e0:01:e6:bc:ae:c2:c4:f3:14:55:43:99:95:08:87:4a:31:
4d:ba:b9:48:65:74:61:b6:30:97:ef:9f:1c:8e:03:61:ac:6c:
0f:d8:f4:3d:5c:28:8c:83:fd:7c:25:86:0d:b0:f0:9d:37:e2:
38:ca:ad:61:60:35:e4:f3:ff:9e:b5:76:8e:5c:32:c9:6b:29:
93:8c:d3:f6:59:69:bf:c8:76:0d:42:d3:0b:1f:03:41:8e:b4:
65:d3:9c:f2:fc:b1:8d:f8:77:13:94:fc:d5:d6:29:3c:a3:dc:
a3:95:4f:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ5d8IJIowtgjD94te+7nufLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNTE1NGMxYTEwYmUxZTI1YWE2ZDRmOGFlZmE0NmFkMzFm
OWI5NmUwHhcNMjYwNTI1MDcwMTQzWhcNMjYwNTI2MDcwMTQzWjAzMTEwLwYDVQQD
EygzODk2MDdkOTczOWVlOTA2YWNkMGVmNjVmNDM4NDExZDVkMjVhN2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaggfQAaEFwZyc+JarYgNUZ9i+RF
WyXlo3/6zLLKG6/JBP9rlgbOhwD97gaSCz0RRNcWqWYO8D5klhk1rlooqaz9ITYT
HFbqCAhnexqivF9j4MFEwSGmFtNr9PCUJxn0XVKeCUlMdcdil9KKaaoCMovpjKrO
O5dL4IZ4s3Yrn9xifUaqPeqpNXvevfsybDSqCYnwGLwfAkdCIF6yZQFZhCT1ZZrm
e6xf4QtUUzrRv0d5pcDvGIXj4r0OO73ZYvFzgxBCOFy0R21boVuZETfDd8zCLk3d
yvVDpoW4LqvsI/r2Y6fjS7uCUeL6pk5PqaZDYvdf8sshJ3LKBTbismZfEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDiWB9lznukGrNDvZfQ4QR1dJafaMB8GA1UdIwQY
MBaAFF5RVMGhC+HiWqbU+K76Rq0x+bluMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGxGVXdhRUw0ZUphcHRUNHJ2cEdyVEg1dVc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8zYTdlZjgtNTc3MC00NDhhLWExMmMt
ZGM4ZTkwZjYyOTJjLzEvWGxGVXdhRUw0ZUphcHRUNHJ2cEdyVEg1dVc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8zYTdlZjgtNTc3MC00NDhhLWExMmMtZGM4ZTkwZjYyOTJj
LzEvWGxGVXdhRUw0ZUphcHRUNHJ2cEdyVEg1dVc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD5AwMhIN
MfQW22wT6X/ozy5otiGhen5yEbFAqvk4PDgYLIo+m5tk18iIJ8FMW9Sv4Xkmf3b6
h2qab1jqxipShDgaj50lRjKOMSiuMGJ6mQRjbfeIHPdzzYj4xgIEcxF/fk+pyTdv
1IaZvRcTcy8Xi15y5RaU63BTZgHdFjSJSug4DeFv+lI+D1Szuf4/e8yvhOAB5ryu
wsTzFFVDmZUIh0oxTbq5SGV0YbYwl++fHI4DYaxsD9j0PVwojIP9fCWGDbDwnTfi
OMqtYWA15PP/nrV2jlwyyWspk4zT9llpv8h2DULTCx8DQY60ZdOc8vyxjfh3E5T8
1dYpPKPco5VPoQ==
-----END CERTIFICATE-----
Generated at Mon May 25 17:09:01 2026 by rpki-client