Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
File: XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft (raw, json)
Hash identifier: DGk+2Ud4+FuSUDtzhgp88zy6p6Na29rvRqKxwkxTIlk=
Subject key identifier: 56:28:41:6B:45:DA:B4:5F:CC:A6:6D:02:9E:B5:3E:81:76:EC:02:8D
Authority key identifier: 5C:A0:53:DF:E7:71:2E:E6:3D:BF:F6:40:FA:E0:73:08:D6:6C:E7:48
Certificate issuer: /CN=5ca053dfe7712ee63dbff640fae07308d66ce748
Certificate serial: 019FAF7753044677944322245A320DB84B8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
Manifest number: 19D9
Signing time: Wed 29 Jul 2026 20:01:00 +0000
Manifest this update: Wed 29 Jul 2026 20:01:00 +0000
Manifest next update: Thu 30 Jul 2026 20:01:00 +0000
Files and hashes: 1: JtY0Nc5KsnYFhq9gwtFkh9ll4_c.roa (hash: 2ee0ztpkOTTrJZ/rJndPjJzssmpY0MoOu/loesqHer8=)
2: XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl (hash: qVjqU3RR7iEkhH7aaDM2Uky7tF533c8luS76cy+TgUY=)
3: XVPpnUXQ607rP--ePsLN9cz89_c.roa (hash: 0wqwWXvhEcuxDQDNA2phuoRTJPiVO88rNNJcF2GbNvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 20:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:af:77:53:04:46:77:94:43:22:24:5a:32:0d:b8:4b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ca053dfe7712ee63dbff640fae07308d66ce748
Validity
Not Before: Jul 29 20:01:00 2026 GMT
Not After : Jul 30 20:01:00 2026 GMT
Subject: CN=5628416b45dab45fcca66d029eb53e8176ec028d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:74:8f:06:37:25:42:ab:5f:d2:a3:76:5e:47:
34:7a:61:19:4f:11:30:af:9b:59:65:c7:2c:55:3e:
25:62:39:7f:66:81:4d:a6:c7:76:f2:ff:a0:65:9d:
8e:4e:c2:64:96:49:7b:31:71:8c:e5:35:0b:1a:0c:
07:03:c6:fe:2d:04:40:6e:9f:7e:ee:f1:eb:cd:a6:
a9:49:b2:21:36:45:09:fb:6e:00:bb:1a:4b:4e:c6:
97:fb:98:c7:5a:3d:85:52:1f:93:1a:f2:65:50:c3:
90:70:1f:57:ac:59:40:b7:7f:1e:b3:30:70:1e:4c:
70:ba:36:5a:42:90:5a:cd:84:0f:a2:c0:50:5b:98:
9d:c4:f8:4c:22:36:f7:90:68:22:4d:7e:19:a3:16:
d6:94:60:09:e1:ff:d1:97:7f:24:68:ea:79:91:32:
48:0f:59:ca:55:3d:3d:aa:a4:ba:31:00:85:46:67:
2a:3a:c4:3e:de:cf:b2:8a:29:66:81:c2:cf:f0:e0:
ca:b5:f0:9a:15:ef:cc:06:dd:e8:6c:c6:ff:43:d2:
a9:5b:4d:2d:0b:cb:52:4f:71:eb:3a:ef:2c:99:1f:
7d:56:c7:7f:69:60:99:bd:77:9c:ca:e3:8d:b0:ae:
9c:04:bf:9d:18:bd:c1:fe:8d:af:d1:5e:01:a4:19:
fc:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:28:41:6B:45:DA:B4:5F:CC:A6:6D:02:9E:B5:3E:81:76:EC:02:8D
X509v3 Authority Key Identifier:
keyid:5C:A0:53:DF:E7:71:2E:E6:3D:BF:F6:40:FA:E0:73:08:D6:6C:E7:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:44:8d:96:0b:c8:2f:a6:44:78:11:50:57:c7:44:83:86:d7:
97:15:c9:d9:29:c6:e3:b9:3a:e4:c8:8c:01:ae:1b:b5:92:e9:
53:57:66:1b:e5:a0:b1:33:87:cc:ef:c4:f1:06:a6:ec:de:6f:
68:df:b9:38:2d:dd:18:52:30:0f:69:42:d5:00:3a:ac:6d:b1:
c9:e2:4b:ce:ed:90:7d:6c:ed:6c:cb:9e:b2:82:99:61:88:8f:
93:25:1a:eb:a8:24:96:04:1b:56:42:38:92:d6:f9:f9:63:4b:
09:ef:0e:88:37:cf:ff:49:09:25:cc:66:a7:b0:6a:15:c6:ce:
6f:d7:e8:9a:d4:90:0b:7a:83:60:30:95:a9:8e:36:25:d1:d0:
d1:ce:85:4c:0b:b8:36:c3:f5:b7:c0:37:93:6f:0f:b0:da:a8:
eb:11:61:8a:ad:81:15:06:18:c9:5b:df:9c:ab:30:04:c4:78:
b4:ed:ed:0f:ae:60:4e:99:b2:f1:dd:1f:d5:29:8f:ee:99:a0:
49:46:63:5a:7e:7e:f5:b0:86:ca:5a:91:b7:6d:ba:c3:66:26:
01:8f:cd:47:a1:8f:cc:55:66:5a:5c:04:b0:ed:28:4c:1f:b8:
db:c1:3a:9a:06:23:86:c2:36:bb:8c:53:f2:4a:fb:eb:8c:0e:
1e:b1:9c:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+vd1MERneUQyIkWjINuEuLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjYTA1M2RmZTc3MTJlZTYzZGJmZjY0MGZhZTA3MzA4ZDY2
Y2U3NDgwHhcNMjYwNzI5MjAwMTAwWhcNMjYwNzMwMjAwMTAwWjAzMTEwLwYDVQQD
Eyg1NjI4NDE2YjQ1ZGFiNDVmY2NhNjZkMDI5ZWI1M2U4MTc2ZWMwMjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXSPBjclQqtf0qN2Xkc0emEZTxEw
r5tZZccsVT4lYjl/ZoFNpsd28v+gZZ2OTsJklkl7MXGM5TULGgwHA8b+LQRAbp9+
7vHrzaapSbIhNkUJ+24AuxpLTsaX+5jHWj2FUh+TGvJlUMOQcB9XrFlAt38eszBw
HkxwujZaQpBazYQPosBQW5idxPhMIjb3kGgiTX4ZoxbWlGAJ4f/Rl38kaOp5kTJI
D1nKVT09qqS6MQCFRmcqOsQ+3s+yiilmgcLP8ODKtfCaFe/MBt3obMb/Q9KpW00t
C8tST3HrOu8smR99Vsd/aWCZvXecyuONsK6cBL+dGL3B/o2v0V4BpBn8ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFYoQWtF2rRfzKZtAp61PoF27AKNMB8GA1UdIwQY
MBaAFFygU9/ncS7mPb/2QPrgcwjWbOdIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEtCVDMtZHhMdVk5dl9aQS11QnpDTlpzNTBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9lYmJkMmMtYmY1YS00NmRhLTg2ZmIt
ODBjM2VhNGZkMDAwLzEvWEtCVDMtZHhMdVk5dl9aQS11QnpDTlpzNTBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9lYmJkMmMtYmY1YS00NmRhLTg2ZmItODBjM2VhNGZkMDAw
LzEvWEtCVDMtZHhMdVk5dl9aQS11QnpDTlpzNTBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM0SNlgvI
L6ZEeBFQV8dEg4bXlxXJ2SnG47k65MiMAa4btZLpU1dmG+WgsTOHzO/E8Qam7N5v
aN+5OC3dGFIwD2lC1QA6rG2xyeJLzu2QfWztbMuesoKZYYiPkyUa66gklgQbVkI4
ktb5+WNLCe8OiDfP/0kJJcxmp7BqFcbOb9fomtSQC3qDYDCVqY42JdHQ0c6FTAu4
NsP1t8A3k28PsNqo6xFhiq2BFQYYyVvfnKswBMR4tO3tD65gTpmy8d0f1SmP7pmg
SUZjWn5+9bCGylqRt226w2YmAY/NR6GPzFVmWlwEsO0oTB+428E6mgYjhsI2u4xT
8kr764wOHrGcQg==
-----END CERTIFICATE-----
Generated at Thu Jul 30 02:49:28 2026 by rpki-client