Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
File: XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft (raw, json)
Hash identifier: vcU+q6o4GAqj9XFUMflSnqOpCMfoumb7+plMaXXl/WY=
Subject key identifier: 4F:09:30:E2:2A:D2:38:FD:57:18:1C:B1:BA:C0:27:C2:8B:C1:8A:4A
Authority key identifier: 5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
Certificate issuer: /CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Certificate serial: 019E8FEF425373E6FF3936CCEF0ACE13DE92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
Manifest number: 1855
Signing time: Thu 04 Jun 2026 00:01:22 +0000
Manifest this update: Thu 04 Jun 2026 00:01:22 +0000
Manifest next update: Fri 05 Jun 2026 00:01:22 +0000
Files and hashes: 1: 7oVXpAJyEuxYNuHmvd9aRWGoKfo.roa (hash: aOBhiDvMAxK+XYQzQVgLlx3/xd+jEySWQ2727ke/inY=)
2: Ey3m-lZEA987v9BNrn8LK_J0g00.roa (hash: bt6vCGnGpQLk0MF/D7iRAV+4/yJjQaAzG7ZTnezd07w=)
3: XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl (hash: IatZKSQL8HU7rSfHirOvijOirnXb6z3agVPheyeuE44=)
4: YTkSY80BXrrm0yOSSyQ4NcWfFCg.roa (hash: Srwxxn9T4n8eBKaxltWuAJ0FzIn1uI4bI96/Rm2hnBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8f:ef:42:53:73:e6:ff:39:36:cc:ef:0a:ce:13:de:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Validity
Not Before: Jun 4 00:01:22 2026 GMT
Not After : Jun 5 00:01:22 2026 GMT
Subject: CN=4f0930e22ad238fd57181cb1bac027c28bc18a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c8:57:d8:db:52:46:85:1b:92:a0:b0:04:7d:
5d:44:9e:e0:74:00:dd:ca:4a:5b:a9:78:b8:3d:d0:
3c:29:13:f4:5f:e5:e3:d8:e5:d4:67:43:b5:98:c6:
71:d5:c4:7b:25:a9:81:b7:02:77:fa:b1:23:77:33:
8c:fc:a1:18:27:b6:fe:12:68:bc:5b:b2:0c:e6:35:
65:17:93:bc:a3:02:2f:36:43:75:3b:78:85:f8:32:
33:d8:d0:ba:d2:1f:f5:b0:3f:5a:d6:96:ce:10:ad:
84:89:58:f8:a4:83:b2:20:cf:ce:26:45:00:d3:0d:
32:19:f8:82:36:b3:a1:7d:f3:8c:1f:a2:a6:0e:01:
fd:2f:1a:4c:01:55:3b:d1:11:37:9a:98:ee:e1:fa:
06:be:18:d8:6e:f6:52:2c:62:ef:52:0a:01:44:cc:
47:f2:8d:7d:f5:0c:28:d1:03:4b:90:73:f7:69:05:
fe:10:a7:d4:3e:20:b8:b1:a9:30:c5:0e:47:5c:f1:
72:a5:4c:ad:c7:10:d1:3c:2d:de:df:80:b9:4a:fe:
73:00:66:07:bc:be:b4:ce:10:8a:7a:be:5b:e3:bb:
68:25:f2:c3:b4:c3:77:7f:c0:0f:c5:24:8e:54:40:
49:00:ca:f8:52:08:7b:f8:d4:ee:15:76:12:dc:c1:
5d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:09:30:E2:2A:D2:38:FD:57:18:1C:B1:BA:C0:27:C2:8B:C1:8A:4A
X509v3 Authority Key Identifier:
keyid:5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:50:be:9e:f1:7a:04:94:e3:54:00:4a:ac:92:72:0d:d5:d6:
b7:b0:57:23:d1:ba:c5:88:72:77:fd:f9:b1:c8:f7:a3:a0:da:
e7:65:53:69:fc:d5:17:5b:b3:09:cc:ef:c0:3d:55:1b:e6:e4:
e7:b9:f4:57:a1:3a:be:0f:d7:35:5c:6f:5a:4f:76:8b:c6:ed:
36:56:5e:85:8e:21:92:f1:c8:de:6c:b1:48:09:b0:0a:c7:c8:
0d:16:87:b5:b7:61:12:11:ed:f5:0a:bf:c5:da:b9:c6:4b:6b:
ec:28:0e:88:a6:5b:77:be:1d:3f:2b:68:36:84:65:d1:36:4e:
19:18:af:af:3f:10:fd:79:36:17:20:66:18:af:f5:17:5d:31:
6f:e6:3a:c7:a9:3e:6d:22:21:20:34:cc:5f:13:21:3d:a8:25:
33:46:28:9a:19:62:c0:65:e6:77:1d:fb:ae:4c:80:1b:ce:4c:
00:b2:62:ce:4b:77:38:ac:79:8f:08:c9:cc:cc:a7:d3:67:9d:
59:20:89:34:65:cf:80:f8:84:2d:40:71:2e:e0:89:4a:71:19:
58:6a:d7:b5:31:09:47:20:af:9d:30:d6:16:1b:0b:4a:19:ce:
5d:e9:6a:4e:ed:ae:5d:ca:6e:c4:30:73:fd:78:60:d5:6e:8e:
87:e1:f5:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6P70JTc+b/OTbM7wrOE96SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjMzJhOTI1YzU1ZjFkNGU2ZTQwYzEwZjRlOGUwMTliNDgz
YzFkNTAwHhcNMjYwNjA0MDAwMTIyWhcNMjYwNjA1MDAwMTIyWjAzMTEwLwYDVQQD
Eyg0ZjA5MzBlMjJhZDIzOGZkNTcxODFjYjFiYWMwMjdjMjhiYzE4YTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMhX2NtSRoUbkqCwBH1dRJ7gdADd
ykpbqXi4PdA8KRP0X+Xj2OXUZ0O1mMZx1cR7JamBtwJ3+rEjdzOM/KEYJ7b+Emi8
W7IM5jVlF5O8owIvNkN1O3iF+DIz2NC60h/1sD9a1pbOEK2EiVj4pIOyIM/OJkUA
0w0yGfiCNrOhffOMH6KmDgH9LxpMAVU70RE3mpju4foGvhjYbvZSLGLvUgoBRMxH
8o199Qwo0QNLkHP3aQX+EKfUPiC4sakwxQ5HXPFypUytxxDRPC3e34C5Sv5zAGYH
vL60zhCKer5b47toJfLDtMN3f8APxSSOVEBJAMr4Ugh7+NTuFXYS3MFdhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE8JMOIq0jj9VxgcsbrAJ8KLwYpKMB8GA1UdIwQY
MBaAFFwyqSXFXx1ObkDBD06OAZtIPB1QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWERLcEpjVmZIVTV1UU1FUFRvNEJtMGc4SFZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9kM2M4ZjctZmY4ZC00MmI4LWE3NjIt
NDUzNzc0MThmYmIyLzEvWERLcEpjVmZIVTV1UU1FUFRvNEJtMGc4SFZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9kM2M4ZjctZmY4ZC00MmI4LWE3NjItNDUzNzc0MThmYmIy
LzEvWERLcEpjVmZIVTV1UU1FUFRvNEJtMGc4SFZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQFC+nvF6
BJTjVABKrJJyDdXWt7BXI9G6xYhyd/35scj3o6Da52VTafzVF1uzCczvwD1VG+bk
57n0V6E6vg/XNVxvWk92i8btNlZehY4hkvHI3myxSAmwCsfIDRaHtbdhEhHt9Qq/
xdq5xktr7CgOiKZbd74dPytoNoRl0TZOGRivrz8Q/Xk2FyBmGK/1F10xb+Y6x6k+
bSIhIDTMXxMhPaglM0YomhliwGXmdx37rkyAG85MALJizkt3OKx5jwjJzMyn02ed
WSCJNGXPgPiELUBxLuCJSnEZWGrXtTEJRyCvnTDWFhsLShnOXelqTu2uXcpuxDBz
/Xhg1W6Oh+H1Dw==
-----END CERTIFICATE-----
Generated at Thu Jun 4 04:18:38 2026 by rpki-client