Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
File: XxaylLGmR79tZ2g7UWFEl-dR8h8.mft (raw, json)
Hash identifier: jJHL1ArDjlvAZrTv+Yvow7R8QeG95byb57FNqhNWW+M=
Subject key identifier: 6B:DE:0D:54:F4:E8:03:93:54:27:93:DA:A9:9B:C6:D5:E6:B5:5F:B0
Authority key identifier: 5F:16:B2:94:B1:A6:47:BF:6D:67:68:3B:51:61:44:97:E7:51:F2:1F
Certificate issuer: /CN=5f16b294b1a647bf6d67683b51614497e751f21f
Certificate serial: 019E2927677BD37B604312E7D78A1092CD98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
Manifest number: 190C
Signing time: Fri 15 May 2026 01:01:48 +0000
Manifest this update: Fri 15 May 2026 01:01:48 +0000
Manifest next update: Sat 16 May 2026 01:01:48 +0000
Files and hashes: 1: NKg93JWQUnBu80RX13MwmqJxvVc.roa (hash: nG4jnHVVr/B/zg5snhsHaHEVH2wq5BQYMoc/wJLZKCM=)
2: XxaylLGmR79tZ2g7UWFEl-dR8h8.crl (hash: 6ZfprOwLrmC14ofdmsd64zmv0UBD2ACROdKFprUMAhs=)
3: wGoncIYhxzrOvpFggApuVrKV4Vk.asa (hash: S/6luEA1foPNyWEYWaj/UsXwLkgTP/ejkSFX9YYjOE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 01:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:27:67:7b:d3:7b:60:43:12:e7:d7:8a:10:92:cd:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f16b294b1a647bf6d67683b51614497e751f21f
Validity
Not Before: May 15 01:01:48 2026 GMT
Not After : May 16 01:01:48 2026 GMT
Subject: CN=6bde0d54f4e80393542793daa99bc6d5e6b55fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:68:67:c6:1e:a4:97:b3:ee:9e:07:8a:59:10:
53:b7:20:b1:31:4e:a0:d0:7d:77:b2:ce:6e:03:ee:
f2:e2:4b:37:c4:5f:e9:a2:eb:91:36:2f:2c:ca:8c:
80:87:b4:4e:f4:c0:86:2b:f6:3e:0f:e1:ce:11:6b:
54:36:26:22:a6:bc:1c:4a:8a:02:21:84:57:b1:72:
87:e7:3d:11:2a:a9:4a:ee:8f:8b:49:e2:bf:6b:58:
1d:39:e8:88:2e:38:8a:dc:58:48:74:80:41:07:da:
68:9a:99:72:a3:88:69:36:f3:a3:70:31:a1:80:76:
e8:57:f2:fa:9c:83:ff:ed:0e:45:24:56:a3:2a:9c:
aa:a7:c6:f9:70:33:3d:9e:95:1a:dd:29:f5:39:14:
65:17:3f:24:d6:12:5f:28:af:f7:de:9d:a3:64:1c:
7b:19:90:03:f7:d2:b9:bb:9f:dc:ff:86:37:80:4b:
46:91:5e:35:a3:7f:c0:46:53:71:1f:5b:97:48:3d:
54:fe:b4:1c:fa:65:a5:70:57:e7:75:b2:ea:89:de:
93:2f:63:02:05:2c:2a:64:41:30:68:7c:7c:31:bc:
c4:44:0c:b3:76:c7:a6:1a:71:8a:4c:34:e6:cd:4e:
2e:bc:f3:70:eb:2c:b9:04:4d:6c:0a:57:10:44:5a:
e4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:DE:0D:54:F4:E8:03:93:54:27:93:DA:A9:9B:C6:D5:E6:B5:5F:B0
X509v3 Authority Key Identifier:
keyid:5F:16:B2:94:B1:A6:47:BF:6D:67:68:3B:51:61:44:97:E7:51:F2:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:c0:bf:ab:ed:65:17:32:c2:90:5b:2e:e6:67:5b:d9:2c:fa:
41:90:db:c3:21:3f:fb:bd:f4:8b:b1:2f:a4:dc:f0:c0:1c:f6:
b5:aa:de:16:1d:f4:7f:15:c0:4d:d4:67:8b:b9:e1:4d:12:5f:
23:58:d4:74:77:5e:50:86:e9:00:e2:35:37:ac:33:21:6b:53:
d7:25:5d:a1:c5:2c:bb:fa:43:91:35:c4:df:94:8a:02:f8:b5:
95:df:3e:2d:a5:7e:41:16:31:01:ff:f7:6c:b4:f4:8b:a4:9e:
80:b8:8b:57:61:2b:c0:2c:5a:ea:eb:57:b4:51:3e:2b:c6:1d:
38:d6:89:8e:bd:1d:30:43:fc:17:72:a5:f0:cd:57:35:47:ce:
e9:a1:49:b9:71:65:e6:e6:7f:89:dc:77:66:2c:36:76:dc:98:
bd:31:7f:f9:f9:a4:b8:c4:ab:af:d3:f7:2c:a4:4e:3d:b3:02:
de:99:95:75:f1:2e:f8:a9:34:b2:4c:5c:2f:ca:53:66:90:82:
9a:7c:f8:03:0f:40:96:cc:cf:72:a3:8a:05:10:cc:15:05:43:
54:d8:7e:b1:30:ea:de:35:3c:8d:c3:ca:54:ab:a8:eb:61:55:
e7:55:cd:3f:80:8a:15:53:c6:da:9f:11:62:dc:09:dc:75:18:
15:23:03:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4pJ2d703tgQxLn14oQks2YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMTZiMjk0YjFhNjQ3YmY2ZDY3NjgzYjUxNjE0NDk3ZTc1
MWYyMWYwHhcNMjYwNTE1MDEwMTQ4WhcNMjYwNTE2MDEwMTQ4WjAzMTEwLwYDVQQD
Eyg2YmRlMGQ1NGY0ZTgwMzkzNTQyNzkzZGFhOTliYzZkNWU2YjU1ZmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGhnxh6kl7PungeKWRBTtyCxMU6g
0H13ss5uA+7y4ks3xF/pouuRNi8syoyAh7RO9MCGK/Y+D+HOEWtUNiYiprwcSooC
IYRXsXKH5z0RKqlK7o+LSeK/a1gdOeiILjiK3FhIdIBBB9pomplyo4hpNvOjcDGh
gHboV/L6nIP/7Q5FJFajKpyqp8b5cDM9npUa3Sn1ORRlFz8k1hJfKK/33p2jZBx7
GZAD99K5u5/c/4Y3gEtGkV41o3/ARlNxH1uXSD1U/rQc+mWlcFfndbLqid6TL2MC
BSwqZEEwaHx8MbzERAyzdsemGnGKTDTmzU4uvPNw6yy5BE1sClcQRFrkQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGveDVT06AOTVCeT2qmbxtXmtV+wMB8GA1UdIwQY
MBaAFF8WspSxpke/bWdoO1FhRJfnUfIfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHhheWxMR21SNzl0WjJnN1VXRkVsLWRSOGg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9kZjI3NzctNzdhMS00Yjg0LTkyMWYt
YTg4MjcwZjVkMWE5LzEvWHhheWxMR21SNzl0WjJnN1VXRkVsLWRSOGg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9kZjI3NzctNzdhMS00Yjg0LTkyMWYtYTg4MjcwZjVkMWE5
LzEvWHhheWxMR21SNzl0WjJnN1VXRkVsLWRSOGg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXMC/q+1l
FzLCkFsu5mdb2Sz6QZDbwyE/+730i7EvpNzwwBz2tareFh30fxXATdRni7nhTRJf
I1jUdHdeUIbpAOI1N6wzIWtT1yVdocUsu/pDkTXE35SKAvi1ld8+LaV+QRYxAf/3
bLT0i6SegLiLV2ErwCxa6utXtFE+K8YdONaJjr0dMEP8F3Kl8M1XNUfO6aFJuXFl
5uZ/idx3Ziw2dtyYvTF/+fmkuMSrr9P3LKROPbMC3pmVdfEu+Kk0skxcL8pTZpCC
mnz4Aw9AlszPcqOKBRDMFQVDVNh+sTDq3jU8jcPKVKuo62FV51XNP4CKFVPG2p8R
YtwJ3HUYFSMDIw==
-----END CERTIFICATE-----
Generated at Fri May 15 07:38:14 2026 by rpki-client