Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
File: XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft (raw, json)
Hash identifier: hcgZYpV7DsUdOIrTdbBOvmkbaTpeeroqZvNsQlWCpcs=
Subject key identifier: 80:13:57:38:EA:A5:2B:F4:87:FE:54:0C:BD:1C:04:9E:28:A7:E2:45
Authority key identifier: 5E:06:6D:E9:82:9B:76:1E:DC:E1:71:E8:EA:3C:59:35:E4:4F:4E:9A
Certificate issuer: /CN=5e066de9829b761edce171e8ea3c5935e44f4e9a
Certificate serial: 019F83E79ED0C606E614A145BBBE79C5F062
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
Manifest number: 08F5
Signing time: Tue 21 Jul 2026 09:00:22 +0000
Manifest this update: Tue 21 Jul 2026 09:00:22 +0000
Manifest next update: Wed 22 Jul 2026 09:00:22 +0000
Files and hashes: 1: O9do_tpuJS2IYg238tFeLgPwuLo.roa (hash: inPkQd2M/OOC4cE+kZAGV36qocuoxkiJ2VIdZgql1s8=)
2: OQMR_FkQfBmNWWsOByMgzVQchtc.roa (hash: E+VXuwQXys0IVzb1O36G+Zcgxr0/sBSG/vjRsxKVhO0=)
3: XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl (hash: +SdExXblveNIYhOxHhbRyH0F2JkiGjBo75kJgwmhq00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 09:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:e7:9e:d0:c6:06:e6:14:a1:45:bb:be:79:c5:f0:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e066de9829b761edce171e8ea3c5935e44f4e9a
Validity
Not Before: Jul 21 09:00:22 2026 GMT
Not After : Jul 22 09:00:22 2026 GMT
Subject: CN=80135738eaa52bf487fe540cbd1c049e28a7e245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b7:bf:a6:1a:e3:44:7a:2d:6f:33:ba:f4:5d:
74:0d:55:39:23:74:e7:9c:92:fc:03:e1:54:c6:66:
fc:43:cc:d4:0c:a8:87:d7:10:7d:f7:7e:82:4b:4d:
4b:43:55:61:8c:08:7d:0e:30:ea:10:e6:34:e4:6f:
02:45:fa:55:d4:14:4c:fd:9e:aa:5f:86:3e:c1:de:
89:7f:52:2a:67:b0:9f:1b:3b:b1:df:02:1b:63:ba:
74:2b:e4:69:64:83:17:0e:64:38:76:b0:8f:84:c5:
b9:b3:c2:81:8c:73:8b:71:d6:f2:aa:f4:75:94:cf:
74:60:50:5f:0e:97:eb:90:d3:9d:9a:0c:c5:ee:4e:
e5:ce:68:30:e3:0c:dd:6c:60:10:fb:55:07:4a:af:
62:7a:71:66:57:c3:25:ca:ae:68:bc:e5:c9:54:17:
79:1d:77:03:87:c9:3c:c7:0d:00:93:9e:12:ed:50:
df:3a:63:f0:b7:e5:e0:83:b4:52:a4:10:ba:5d:78:
4e:00:33:c4:6c:3d:fb:69:a6:5c:81:bd:75:9e:4f:
2a:47:75:a6:2c:11:a1:26:7f:cc:35:0b:84:42:ca:
a3:af:06:c2:c4:be:0c:d2:16:17:87:db:9f:00:c4:
ff:5d:0b:54:17:df:33:c9:85:cd:ee:f3:27:4c:2a:
e1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:13:57:38:EA:A5:2B:F4:87:FE:54:0C:BD:1C:04:9E:28:A7:E2:45
X509v3 Authority Key Identifier:
keyid:5E:06:6D:E9:82:9B:76:1E:DC:E1:71:E8:EA:3C:59:35:E4:4F:4E:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:35:4e:5e:6b:c5:04:a1:99:18:78:34:a3:91:11:4e:1d:23:
a4:ee:d8:c9:1e:3b:93:ea:13:f5:6c:1d:85:e4:c5:5f:ab:42:
a5:06:2f:79:de:e2:27:73:01:ea:3c:e0:fd:bc:c9:fb:59:c0:
4c:a0:f2:0a:88:50:37:e4:0f:ef:88:d2:7d:02:d7:b1:bd:63:
a3:0f:1b:be:0e:57:7b:50:93:12:54:0d:ac:54:4b:20:70:b7:
d6:53:05:42:c3:c1:dc:91:4e:c7:b7:0c:99:63:f4:41:5b:78:
a1:6c:36:3f:96:66:35:0b:ee:41:b0:d0:9c:52:54:0d:33:49:
04:e3:0e:8b:37:25:bd:f0:24:65:be:08:67:e8:3a:05:86:83:
f1:5b:fc:4f:f4:16:be:ac:17:55:74:23:b0:79:a9:a4:57:2b:
60:9f:44:b2:7c:40:73:e9:d3:10:22:f1:b7:46:bb:3c:15:5e:
37:62:81:27:28:26:ec:59:6b:4f:69:ae:e6:b2:2e:0f:ee:b6:
ec:5b:6d:89:d8:30:9a:c3:ee:b9:22:b3:c7:51:9a:c1:cd:36:
21:68:17:6c:2a:7a:58:ec:6f:f9:39:16:0d:36:34:b7:8e:e4:
f8:e4:af:63:0e:b6:64:0f:67:0d:9a:2d:1e:ba:c0:f6:00:f6:
42:f5:b4:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+D557QxgbmFKFFu755xfBiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMDY2ZGU5ODI5Yjc2MWVkY2UxNzFlOGVhM2M1OTM1ZTQ0
ZjRlOWEwHhcNMjYwNzIxMDkwMDIyWhcNMjYwNzIyMDkwMDIyWjAzMTEwLwYDVQQD
Eyg4MDEzNTczOGVhYTUyYmY0ODdmZTU0MGNiZDFjMDQ5ZTI4YTdlMjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLe/phrjRHotbzO69F10DVU5I3Tn
nJL8A+FUxmb8Q8zUDKiH1xB9936CS01LQ1VhjAh9DjDqEOY05G8CRfpV1BRM/Z6q
X4Y+wd6Jf1IqZ7CfGzux3wIbY7p0K+RpZIMXDmQ4drCPhMW5s8KBjHOLcdbyqvR1
lM90YFBfDpfrkNOdmgzF7k7lzmgw4wzdbGAQ+1UHSq9ienFmV8Mlyq5ovOXJVBd5
HXcDh8k8xw0Ak54S7VDfOmPwt+Xgg7RSpBC6XXhOADPEbD37aaZcgb11nk8qR3Wm
LBGhJn/MNQuEQsqjrwbCxL4M0hYXh9ufAMT/XQtUF98zyYXN7vMnTCrhZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIATVzjqpSv0h/5UDL0cBJ4op+JFMB8GA1UdIwQY
MBaAFF4GbemCm3Ye3OFx6Oo8WTXkT06aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGdadDZZS2JkaDdjNFhIbzZqeFpOZVJQVHBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jYWM5YzQtZjliYi00NmQ0LWJiNjIt
NDc1YWRmM2FhN2IxLzEvWGdadDZZS2JkaDdjNFhIbzZqeFpOZVJQVHBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9jYWM5YzQtZjliYi00NmQ0LWJiNjItNDc1YWRmM2FhN2Ix
LzEvWGdadDZZS2JkaDdjNFhIbzZqeFpOZVJQVHBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmzVOXmvF
BKGZGHg0o5ERTh0jpO7YyR47k+oT9WwdheTFX6tCpQYved7iJ3MB6jzg/bzJ+1nA
TKDyCohQN+QP74jSfQLXsb1jow8bvg5Xe1CTElQNrFRLIHC31lMFQsPB3JFOx7cM
mWP0QVt4oWw2P5ZmNQvuQbDQnFJUDTNJBOMOizclvfAkZb4IZ+g6BYaD8Vv8T/QW
vqwXVXQjsHmppFcrYJ9EsnxAc+nTECLxt0a7PBVeN2KBJygm7FlrT2mu5rIuD+62
7FttidgwmsPuuSKzx1Gawc02IWgXbCp6WOxv+TkWDTY0t47k+OSvYw62ZA9nDZot
HrrA9gD2QvW02A==
-----END CERTIFICATE-----
Generated at Tue Jul 21 17:37:31 2026 by rpki-client