Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.mft
File: XQu-t4M73JvnJQYRV8A58qEPGoA.mft (raw, json)
Hash identifier: AAw8SbZ0/Vbqmd9FShDdbpz5PZrV5evOpKhO7acJnOg=
Subject key identifier: DB:C5:82:18:C6:AB:D5:E6:CA:67:90:F9:7E:74:C5:45:85:DF:9F:D4
Authority key identifier: 5D:0B:BE:B7:83:3B:DC:9B:E7:25:06:11:57:C0:39:F2:A1:0F:1A:80
Certificate issuer: /CN=5d0bbeb7833bdc9be725061157c039f2a10f1a80
Certificate serial: 019EB84571EEA90A310D3A808A9006828366
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XQu-t4M73JvnJQYRV8A58qEPGoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.mft
Manifest number: 1957
Signing time: Thu 11 Jun 2026 20:00:19 +0000
Manifest this update: Thu 11 Jun 2026 20:00:19 +0000
Manifest next update: Fri 12 Jun 2026 20:00:19 +0000
Files and hashes: 1: XQu-t4M73JvnJQYRV8A58qEPGoA.crl (hash: zWcPeyJ1o1tRD6zY9KpwncD5HOZokzzRu6rZgO3Xenk=)
2: tLZ0vd3hZne2YN5KbPWPpWn9_8g.roa (hash: HKLOzks2rDfm/VvNHgcbNaGddSHwrQ2C+smhCCvmgLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XQu-t4M73JvnJQYRV8A58qEPGoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:45:71:ee:a9:0a:31:0d:3a:80:8a:90:06:82:83:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d0bbeb7833bdc9be725061157c039f2a10f1a80
Validity
Not Before: Jun 11 20:00:19 2026 GMT
Not After : Jun 12 20:00:19 2026 GMT
Subject: CN=dbc58218c6abd5e6ca6790f97e74c54585df9fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9a:fd:97:40:dd:c4:69:d8:4b:90:f1:af:45:
f6:84:c3:d0:6c:01:74:1b:98:54:5e:a1:3a:ee:12:
65:1c:ad:67:9d:32:c1:ab:dc:34:68:c0:e0:22:42:
b1:d3:ca:34:42:96:86:e8:32:45:61:24:e3:68:c0:
9f:24:26:2f:0e:0e:e0:54:cf:f5:d1:3a:f6:13:11:
6a:46:2a:ff:f7:38:2a:bd:c1:d6:dc:93:d7:7f:26:
27:d8:69:37:9d:28:26:04:b0:1e:3d:06:74:17:df:
8a:bd:66:f8:eb:64:62:56:a4:70:67:7d:78:97:60:
a0:93:e4:56:a7:03:cb:8c:e6:e9:0d:05:8c:f6:58:
29:a5:2c:34:ba:c5:77:1f:ab:ef:87:53:3e:22:e4:
bd:d4:67:1c:ba:97:3e:11:3a:48:73:65:2a:6b:b9:
82:61:8f:d7:fa:81:fe:c4:f0:ea:1c:64:0f:61:e6:
0e:17:c2:a6:f1:6e:12:36:82:c9:d0:54:90:2d:ad:
d5:79:dd:1c:eb:f5:3e:50:80:95:ba:fe:f2:2e:02:
95:6b:17:5e:ec:37:9a:81:9e:7d:d3:74:23:f1:09:
a3:04:50:02:62:12:c2:8c:9e:02:cb:56:be:68:92:
2b:b7:76:68:af:35:cc:49:fd:69:f5:60:f4:48:ed:
f1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C5:82:18:C6:AB:D5:E6:CA:67:90:F9:7E:74:C5:45:85:DF:9F:D4
X509v3 Authority Key Identifier:
keyid:5D:0B:BE:B7:83:3B:DC:9B:E7:25:06:11:57:C0:39:F2:A1:0F:1A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XQu-t4M73JvnJQYRV8A58qEPGoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:80:36:f4:55:d9:ab:a1:a5:e4:e9:f3:70:59:b2:e7:dd:9a:
c7:75:84:ff:9f:49:1b:d0:69:9a:7a:7f:e0:26:c0:75:3e:57:
20:7c:70:ec:64:38:af:9a:6b:47:fd:ef:90:a3:11:16:94:08:
58:9a:6b:50:8e:e7:88:78:c3:41:d4:44:c2:35:79:00:4d:c9:
be:00:e1:c6:50:12:e3:ba:87:b9:e8:8d:13:b9:b5:6f:09:c9:
ce:e4:cc:bc:df:16:75:43:77:06:5b:8d:67:3a:17:8c:b4:ea:
0c:7f:01:36:a4:2d:5f:5d:bb:24:53:8e:a6:78:fa:3f:23:cb:
a2:ce:e7:b7:cf:2e:a4:ed:d6:16:34:fc:aa:1f:7d:0f:46:1e:
07:99:06:53:13:e4:cc:b5:21:1a:68:71:2c:c9:8f:5e:6f:af:
01:f6:bc:c7:e7:90:a6:0a:21:cf:8e:b0:5c:a0:75:7f:29:44:
94:30:e8:c0:ed:0a:5b:e8:e0:8c:49:e1:8f:1e:48:7a:c6:7d:
39:fb:85:56:ce:32:b7:36:f7:2a:14:ff:47:1e:20:4c:96:01:
ad:a5:15:8d:76:88:84:b6:bb:21:85:97:e0:72:d0:cf:f7:25:
be:aa:bf:80:09:e6:da:18:08:ce:1d:06:1e:76:2d:30:27:09:
75:e4:fe:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ64RXHuqQoxDTqAipAGgoNmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkMGJiZWI3ODMzYmRjOWJlNzI1MDYxMTU3YzAzOWYyYTEw
ZjFhODAwHhcNMjYwNjExMjAwMDE5WhcNMjYwNjEyMjAwMDE5WjAzMTEwLwYDVQQD
EyhkYmM1ODIxOGM2YWJkNWU2Y2E2NzkwZjk3ZTc0YzU0NTg1ZGY5ZmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspr9l0DdxGnYS5Dxr0X2hMPQbAF0
G5hUXqE67hJlHK1nnTLBq9w0aMDgIkKx08o0QpaG6DJFYSTjaMCfJCYvDg7gVM/1
0Tr2ExFqRir/9zgqvcHW3JPXfyYn2Gk3nSgmBLAePQZ0F9+KvWb462RiVqRwZ314
l2Cgk+RWpwPLjObpDQWM9lgppSw0usV3H6vvh1M+IuS91Gccupc+ETpIc2Uqa7mC
YY/X+oH+xPDqHGQPYeYOF8Km8W4SNoLJ0FSQLa3Ved0c6/U+UICVuv7yLgKVaxde
7DeagZ5903Qj8QmjBFACYhLCjJ4Cy1a+aJIrt3ZorzXMSf1p9WD0SO3xVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNvFghjGq9XmymeQ+X50xUWF35/UMB8GA1UdIwQY
MBaAFF0LvreDO9yb5yUGEVfAOfKhDxqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFF1LXQ0TTczSnZuSlFZUlY4QTU4cUVQR29BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9kMmMwOGYtNWZmMy00OTgyLWI1N2It
NjMxYzZkMDllODQ1LzEvWFF1LXQ0TTczSnZuSlFZUlY4QTU4cUVQR29BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9kMmMwOGYtNWZmMy00OTgyLWI1N2ItNjMxYzZkMDllODQ1
LzEvWFF1LXQ0TTczSnZuSlFZUlY4QTU4cUVQR29BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnIA29FXZ
q6Gl5OnzcFmy592ax3WE/59JG9Bpmnp/4CbAdT5XIHxw7GQ4r5prR/3vkKMRFpQI
WJprUI7niHjDQdREwjV5AE3JvgDhxlAS47qHueiNE7m1bwnJzuTMvN8WdUN3BluN
ZzoXjLTqDH8BNqQtX127JFOOpnj6PyPLos7nt88upO3WFjT8qh99D0YeB5kGUxPk
zLUhGmhxLMmPXm+vAfa8x+eQpgohz46wXKB1fylElDDowO0KW+jgjEnhjx5IesZ9
OfuFVs4ytzb3KhT/Rx4gTJYBraUVjXaIhLa7IYWX4HLQz/clvqq/gAnm2hgIzh0G
HnYtMCcJdeT+hw==
-----END CERTIFICATE-----
Generated at Fri Jun 12 00:54:03 2026 by rpki-client