Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
File: XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft (raw, json)
Hash identifier: pzuWWayJdy94HwuoxM+KtoU6vt8ZOJd65havlplRLC0=
Subject key identifier: 32:1F:3F:E8:DE:FE:D1:7F:8A:96:D9:ED:CE:88:86:4F:51:E3:A8:DF
Authority key identifier: 5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
Certificate issuer: /CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
Certificate serial: 019F596C344108706F7062017D2CDA14A2A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
Manifest number: 0C74
Signing time: Mon 13 Jul 2026 03:01:31 +0000
Manifest this update: Mon 13 Jul 2026 03:01:31 +0000
Manifest next update: Tue 14 Jul 2026 03:01:31 +0000
Files and hashes: 1: MXmi4elQgkZloOXKc5KxZJXFILw.roa (hash: 4eGKiA6fp/86boDwfJeXXyGqjfCWRwxGmH0ShZjDAuQ=)
2: XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl (hash: LyiyzGPn7jUUvLdYN2mrQI2suCPXkHw+d+NjnGbTmBE=)
3: taZbUsGibT55ZZu6Th_Go_ILjiU.roa (hash: d/WlzB5v4feaToE5n6krRnONbSIkTydQjlb9UBErHJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:59:6c:34:41:08:70:6f:70:62:01:7d:2c:da:14:a2:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
Validity
Not Before: Jul 13 03:01:31 2026 GMT
Not After : Jul 14 03:01:31 2026 GMT
Subject: CN=321f3fe8defed17f8a96d9edce88864f51e3a8df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:b5:93:a6:a6:5d:f6:b2:17:71:d9:d5:2e:8e:
e5:c2:c5:01:f1:c8:c7:c5:2f:14:5b:fe:44:16:3d:
d4:1d:38:9d:7e:ad:9d:f0:51:1c:01:98:6e:25:8c:
6f:4c:4f:51:a1:fa:11:2d:61:60:8d:38:99:47:15:
d7:c4:90:14:ff:ed:54:ab:30:1f:41:5f:a9:73:6c:
bb:ed:ce:12:eb:67:0c:69:2c:5f:a5:87:ee:42:76:
83:ff:16:c3:c8:f0:d8:c2:bc:b8:2b:8e:a6:80:65:
35:d2:7f:06:75:0e:b1:64:80:c5:6d:b8:78:8d:14:
e5:bd:40:95:42:57:3d:56:21:9a:39:91:a0:60:1a:
45:3c:08:03:68:e0:14:cd:9e:67:66:09:21:4a:33:
7e:14:75:f6:7f:24:7f:28:15:9f:73:1d:24:f4:c4:
b8:ab:9e:97:ee:ac:41:79:27:ee:03:8d:e5:fd:71:
61:21:ef:ab:37:56:e3:66:34:0a:f7:77:36:a4:ec:
cd:d7:58:6d:c0:6d:25:a2:ba:aa:e9:e2:1b:fd:72:
42:3a:cd:30:1d:26:3e:e1:7a:25:b7:77:d0:eb:cd:
58:63:cb:e9:55:61:b5:e5:49:18:5a:b5:f1:ef:24:
d9:8f:2b:df:32:99:33:7e:2f:c0:83:e4:d9:33:d6:
22:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:1F:3F:E8:DE:FE:D1:7F:8A:96:D9:ED:CE:88:86:4F:51:E3:A8:DF
X509v3 Authority Key Identifier:
keyid:5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:7d:03:26:c3:12:21:15:02:15:de:1f:17:a9:65:70:07:d1:
01:d8:d2:5e:88:c0:03:3e:b2:5d:72:f5:1b:b2:cc:c2:c0:1d:
45:10:1c:aa:e5:3d:99:23:cb:36:d9:f6:47:45:88:b9:6e:55:
01:6d:dc:a4:f4:12:6a:f0:36:25:6b:17:a8:46:b0:11:40:01:
13:02:58:cb:cb:3a:38:8f:7e:5c:bc:f8:dd:a4:8b:21:6c:ca:
4d:37:58:ce:6b:24:7b:62:86:0f:22:2b:4e:2c:46:95:b4:41:
f5:37:58:f7:1c:55:b0:c6:7e:2f:44:f7:71:fb:79:fa:67:6c:
64:85:ff:6e:3f:1e:eb:a8:db:0b:16:6b:06:ad:b9:ec:d0:72:
70:b4:73:65:5c:4c:b8:17:76:20:2c:4d:fa:e9:45:ef:49:54:
88:c1:ec:95:d7:c1:ff:e8:2a:be:27:e2:7c:24:0a:70:2a:f5:
dd:79:e9:6f:1f:05:56:ae:d5:85:f1:e5:0a:cd:33:89:44:79:
ba:5c:26:4c:bb:0d:ef:d1:10:d7:72:53:b8:20:4f:e2:11:ab:
f6:73:28:f5:f2:48:70:ee:e5:1e:77:9c:6a:c0:d2:14:70:bf:
f7:ba:50:a8:34:18:c1:2b:dd:ea:18:80:a5:bc:21:8d:69:11:
de:c0:d4:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ9ZbDRBCHBvcGIBfSzaFKKkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjMzIzMTE5NTI1NjZkMWNlMThmMDg4ZThiYjZjZWFiZTdl
NzkzNWEwHhcNMjYwNzEzMDMwMTMxWhcNMjYwNzE0MDMwMTMxWjAzMTEwLwYDVQQD
EygzMjFmM2ZlOGRlZmVkMTdmOGE5NmQ5ZWRjZTg4ODY0ZjUxZTNhOGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9rWTpqZd9rIXcdnVLo7lwsUB8cjH
xS8UW/5EFj3UHTidfq2d8FEcAZhuJYxvTE9RofoRLWFgjTiZRxXXxJAU/+1UqzAf
QV+pc2y77c4S62cMaSxfpYfuQnaD/xbDyPDYwry4K46mgGU10n8GdQ6xZIDFbbh4
jRTlvUCVQlc9ViGaOZGgYBpFPAgDaOAUzZ5nZgkhSjN+FHX2fyR/KBWfcx0k9MS4
q56X7qxBeSfuA43l/XFhIe+rN1bjZjQK93c2pOzN11htwG0lorqq6eIb/XJCOs0w
HSY+4Xolt3fQ681YY8vpVWG15UkYWrXx7yTZjyvfMpkzfi/Ag+TZM9YiKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDIfP+je/tF/ipbZ7c6Ihk9R46jfMB8GA1UdIwQY
MBaAFFwyMRlSVm0c4Y8Ijou2zqvn55NaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWERJeEdWSldiUnpoandpT2k3Yk9xLWZuazFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC81ZGZkODktNGQ3OS00YmI2LThiZjMt
MGQzOGRkZGIwNzgwLzEvWERJeEdWSldiUnpoandpT2k3Yk9xLWZuazFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC81ZGZkODktNGQ3OS00YmI2LThiZjMtMGQzOGRkZGIwNzgw
LzEvWERJeEdWSldiUnpoandpT2k3Yk9xLWZuazFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd30DJsMS
IRUCFd4fF6llcAfRAdjSXojAAz6yXXL1G7LMwsAdRRAcquU9mSPLNtn2R0WIuW5V
AW3cpPQSavA2JWsXqEawEUABEwJYy8s6OI9+XLz43aSLIWzKTTdYzmske2KGDyIr
TixGlbRB9TdY9xxVsMZ+L0T3cft5+mdsZIX/bj8e66jbCxZrBq257NBycLRzZVxM
uBd2ICxN+ulF70lUiMHsldfB/+gqvififCQKcCr13Xnpbx8FVq7VhfHlCs0ziUR5
ulwmTLsN79EQ13JTuCBP4hGr9nMo9fJIcO7lHnecasDSFHC/97pQqDQYwSvd6hiA
pbwhjWkR3sDUrw==
-----END CERTIFICATE-----
Generated at Mon Jul 13 05:47:49 2026 by rpki-client