Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/XkCY8gaFBIi3LN3oOHwxgcY_jN8.mft
File: XkCY8gaFBIi3LN3oOHwxgcY_jN8.mft (raw, json)
Hash identifier: AzBEnbGqGuwc95uEj28BLzljB3s4g/85da3NTi4L4Qk=
Subject key identifier: 99:54:79:A1:50:B0:DD:5D:CB:F8:9B:15:39:E9:34:43:26:12:01:73
Authority key identifier: 5E:40:98:F2:06:85:04:88:B7:2C:DD:E8:38:7C:31:81:C6:3F:8C:DF
Certificate issuer: /CN=5e4098f206850488b72cdde8387c3181c63f8cdf
Certificate serial: 019EB8458E876467849644E41DA751EFD50B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkCY8gaFBIi3LN3oOHwxgcY_jN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/XkCY8gaFBIi3LN3oOHwxgcY_jN8.mft
Manifest number: 0707
Signing time: Thu 11 Jun 2026 20:00:26 +0000
Manifest this update: Thu 11 Jun 2026 20:00:26 +0000
Manifest next update: Fri 12 Jun 2026 20:00:26 +0000
Files and hashes: 1: XkCY8gaFBIi3LN3oOHwxgcY_jN8.crl (hash: vCpDQAv5ph13B/eu+i54XpJsheUCorwNw0M5DYwLo8Y=)
2: bXHKxfZ-clKo3uVvBiES8ymUWb4.roa (hash: 5y+v12wnsW0x7UyzTae1pV9Cje40Zw2A3YIrbQGELhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/XkCY8gaFBIi3LN3oOHwxgcY_jN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/XkCY8gaFBIi3LN3oOHwxgcY_jN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XkCY8gaFBIi3LN3oOHwxgcY_jN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:45:8e:87:64:67:84:96:44:e4:1d:a7:51:ef:d5:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e4098f206850488b72cdde8387c3181c63f8cdf
Validity
Not Before: Jun 11 20:00:26 2026 GMT
Not After : Jun 12 20:00:26 2026 GMT
Subject: CN=995479a150b0dd5dcbf89b1539e9344326120173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cd:9d:dd:39:b5:6e:41:6b:4b:a9:24:05:5d:
a8:22:ee:2a:6b:0e:16:73:07:80:51:a9:0b:83:24:
83:6c:45:32:e3:95:f1:ca:23:ca:3f:74:f3:c0:8a:
df:f6:2b:65:61:42:7d:fd:b4:42:32:8e:76:1c:f0:
42:1f:4e:c6:b9:23:63:60:36:ad:db:31:5d:52:e4:
e4:49:20:80:cb:4a:af:71:0b:6c:ec:27:b6:98:52:
de:72:5f:93:01:19:d8:38:6f:9d:93:18:4d:dc:f6:
91:18:2f:1d:f5:e1:54:a5:34:ac:48:b3:ff:6b:f8:
92:23:a7:35:5d:70:c7:76:5b:63:fd:53:c6:c7:e0:
e0:a2:4e:ac:18:ce:b7:39:9d:eb:a9:02:e7:ee:1c:
d3:11:bd:c6:94:f8:88:cf:2d:1b:fe:01:c1:c5:a1:
fe:e8:4d:a6:fe:81:77:67:4f:13:04:17:41:1d:49:
ec:60:2c:4a:16:c0:4a:06:b8:bb:ce:b2:97:10:f4:
0c:72:28:4d:99:ad:4b:5e:e5:77:27:2d:c5:d3:bc:
62:4b:16:62:3e:95:91:18:f9:99:64:db:65:67:da:
73:03:95:2c:81:69:17:71:96:e1:9f:ad:40:91:54:
75:ba:d2:a3:70:92:32:81:bf:d4:27:eb:94:e2:e4:
96:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:54:79:A1:50:B0:DD:5D:CB:F8:9B:15:39:E9:34:43:26:12:01:73
X509v3 Authority Key Identifier:
keyid:5E:40:98:F2:06:85:04:88:B7:2C:DD:E8:38:7C:31:81:C6:3F:8C:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkCY8gaFBIi3LN3oOHwxgcY_jN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/XkCY8gaFBIi3LN3oOHwxgcY_jN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/XkCY8gaFBIi3LN3oOHwxgcY_jN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:55:d9:2e:be:65:2d:7c:8e:49:23:f5:cc:76:10:17:92:9b:
70:33:b9:38:ab:34:87:d8:2b:63:06:4d:e6:29:86:57:72:b8:
9d:f7:8d:0e:79:b0:c5:ed:12:67:98:70:72:19:97:fc:0b:2d:
c5:8a:0f:a3:58:44:54:ea:31:8b:96:db:a4:27:c0:ea:1c:cc:
dd:01:0b:06:ec:21:ac:73:e7:6b:09:fd:29:66:ab:cb:ba:73:
8a:1a:dc:18:4a:5e:2d:dd:f1:e6:61:14:45:5f:f6:3a:05:15:
80:3b:a4:ab:d7:3d:5b:a1:e3:ee:4d:c9:4e:f4:4b:24:fa:46:
ae:3a:43:be:6a:b4:cc:c4:65:54:c4:be:ce:1c:ea:d2:3a:32:
4b:c4:58:a4:7b:36:39:8a:80:52:43:44:8f:ab:bf:90:e9:d6:
3e:65:8f:c1:89:a3:0f:50:e2:0d:05:a6:64:ac:4d:30:6a:0e:
81:92:b9:fd:1f:dc:71:ec:ba:eb:3c:d9:ab:20:5a:a0:97:fc:
98:e8:7b:e6:19:ba:6c:44:25:89:7f:ec:b1:c9:c9:82:09:28:
b9:d3:fb:02:72:e5:8c:fb:f9:ee:41:46:41:52:6f:e4:d1:fb:
21:c9:18:79:b6:5c:c5:90:d8:43:4a:71:66:7b:01:f3:45:f8:
7e:39:0d:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ64RY6HZGeElkTkHadR79ULMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNDA5OGYyMDY4NTA0ODhiNzJjZGRlODM4N2MzMTgxYzYz
ZjhjZGYwHhcNMjYwNjExMjAwMDI2WhcNMjYwNjEyMjAwMDI2WjAzMTEwLwYDVQQD
Eyg5OTU0NzlhMTUwYjBkZDVkY2JmODliMTUzOWU5MzQ0MzI2MTIwMTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr82d3Tm1bkFrS6kkBV2oIu4qaw4W
cweAUakLgySDbEUy45XxyiPKP3TzwIrf9itlYUJ9/bRCMo52HPBCH07GuSNjYDat
2zFdUuTkSSCAy0qvcQts7Ce2mFLecl+TARnYOG+dkxhN3PaRGC8d9eFUpTSsSLP/
a/iSI6c1XXDHdltj/VPGx+Dgok6sGM63OZ3rqQLn7hzTEb3GlPiIzy0b/gHBxaH+
6E2m/oF3Z08TBBdBHUnsYCxKFsBKBri7zrKXEPQMcihNma1LXuV3Jy3F07xiSxZi
PpWRGPmZZNtlZ9pzA5UsgWkXcZbhn61AkVR1utKjcJIygb/UJ+uU4uSWVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJlUeaFQsN1dy/ibFTnpNEMmEgFzMB8GA1UdIwQY
MBaAFF5AmPIGhQSItyzd6Dh8MYHGP4zfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGtDWThnYUZCSWkzTE4zb09Id3hnY1lfak44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9jMGIxMDYtNmJmMS00NjYwLThhZmYt
OWNmODdmZjFjZTViLzEvWGtDWThnYUZCSWkzTE4zb09Id3hnY1lfak44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9jMGIxMDYtNmJmMS00NjYwLThhZmYtOWNmODdmZjFjZTVi
LzEvWGtDWThnYUZCSWkzTE4zb09Id3hnY1lfak44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmFXZLr5l
LXyOSSP1zHYQF5KbcDO5OKs0h9grYwZN5imGV3K4nfeNDnmwxe0SZ5hwchmX/Ast
xYoPo1hEVOoxi5bbpCfA6hzM3QELBuwhrHPnawn9KWary7pzihrcGEpeLd3x5mEU
RV/2OgUVgDukq9c9W6Hj7k3JTvRLJPpGrjpDvmq0zMRlVMS+zhzq0joyS8RYpHs2
OYqAUkNEj6u/kOnWPmWPwYmjD1DiDQWmZKxNMGoOgZK5/R/ccey66zzZqyBaoJf8
mOh75hm6bEQliX/sscnJggkoudP7AnLljPv57kFGQVJv5NH7IckYebZcxZDYQ0px
ZnsB80X4fjkNeg==
-----END CERTIFICATE-----
Generated at Thu Jun 11 23:00:04 2026 by rpki-client