Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/XWsFtN3mw5OZctoT9iIH8ibeeSo.mft
File: XWsFtN3mw5OZctoT9iIH8ibeeSo.mft (raw, json)
Hash identifier: P7N2mi6kV641itwWuR29gLcs0jssfMCaTUbHD7cIuVY=
Subject key identifier: 52:54:EE:F0:82:A1:C4:72:BA:DF:FA:39:E2:C5:A0:E1:57:D7:C5:BE
Authority key identifier: 5D:6B:05:B4:DD:E6:C3:93:99:72:DA:13:F6:22:07:F2:26:DE:79:2A
Certificate issuer: /CN=5d6b05b4dde6c3939972da13f62207f226de792a
Certificate serial: 019FA0E0AC16AFB13E2F430ECDE922F6F1DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWsFtN3mw5OZctoT9iIH8ibeeSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/XWsFtN3mw5OZctoT9iIH8ibeeSo.mft
Manifest number: 48
Signing time: Mon 27 Jul 2026 00:01:46 +0000
Manifest this update: Mon 27 Jul 2026 00:01:46 +0000
Manifest next update: Tue 28 Jul 2026 00:01:46 +0000
Files and hashes: 1: O9IV0RKhFtt8K6HCeqLoJ_BtvRs.roa (hash: Ws/iiURmVab3uVGnOVSnKwKNuJfPQAcJDFZkcNjz5Ks=)
2: XWsFtN3mw5OZctoT9iIH8ibeeSo.crl (hash: IKggWNZ/7Ws7i9K8RLct3L6sqBaJGlpOtwBPh3w6NuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/XWsFtN3mw5OZctoT9iIH8ibeeSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/XWsFtN3mw5OZctoT9iIH8ibeeSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWsFtN3mw5OZctoT9iIH8ibeeSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:ac:16:af:b1:3e:2f:43:0e:cd:e9:22:f6:f1:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6b05b4dde6c3939972da13f62207f226de792a
Validity
Not Before: Jul 27 00:01:46 2026 GMT
Not After : Jul 28 00:01:46 2026 GMT
Subject: CN=5254eef082a1c472badffa39e2c5a0e157d7c5be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:36:61:0e:24:6c:f6:51:ef:85:e2:89:87:5f:
86:c3:15:c4:7d:b6:d2:9c:99:7e:a3:4b:a1:41:28:
07:fb:c7:b0:47:2b:73:64:8d:9a:a9:ad:e4:39:fe:
74:4e:29:20:20:8b:fc:9f:c7:72:d5:d6:ff:9d:fa:
b2:24:9b:cb:dc:35:fa:ef:f6:55:0d:a9:50:27:09:
81:94:c3:b9:11:44:c9:27:6a:ca:3b:6e:67:67:d6:
70:01:79:b8:a8:a1:85:3f:8f:f8:39:ee:3e:fc:24:
23:36:fc:11:df:a7:7d:85:43:a4:3b:d2:d3:8e:14:
a1:94:ef:4f:31:e5:b2:4a:5d:09:ea:1a:1a:c5:68:
ad:06:97:eb:f6:7f:0c:5c:28:fe:26:d3:fb:15:22:
31:9e:93:ba:2b:20:79:b3:15:6d:04:52:c7:b4:3d:
1e:46:25:7d:6f:62:bf:1d:3e:f8:80:d4:81:a9:1d:
a6:6b:37:01:ad:b2:ac:b4:ed:79:a2:59:5f:61:84:
71:ff:ef:44:b2:a2:e5:cf:f2:00:7f:86:8f:d0:30:
ff:69:b9:18:04:3f:df:c3:e8:57:c2:e1:68:68:cf:
f0:10:a2:09:1c:65:a8:e7:b3:e7:28:5c:dd:04:35:
cb:4e:c8:5a:94:43:84:3a:78:b0:ca:dd:f7:5f:ff:
68:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:54:EE:F0:82:A1:C4:72:BA:DF:FA:39:E2:C5:A0:E1:57:D7:C5:BE
X509v3 Authority Key Identifier:
keyid:5D:6B:05:B4:DD:E6:C3:93:99:72:DA:13:F6:22:07:F2:26:DE:79:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWsFtN3mw5OZctoT9iIH8ibeeSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/XWsFtN3mw5OZctoT9iIH8ibeeSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/XWsFtN3mw5OZctoT9iIH8ibeeSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:57:90:1b:06:e6:0f:d7:9d:5d:07:8d:c1:21:3b:f2:df:72:
09:bd:9d:e9:a2:1d:be:68:c4:57:60:7e:06:8a:f2:d8:11:cb:
f0:1f:37:73:e8:17:c0:45:2a:f4:19:bb:c8:45:e4:1c:6a:1b:
6a:67:86:b3:0f:65:44:84:eb:38:12:59:6e:27:9f:b5:bc:e2:
3a:b3:3b:0c:db:57:a3:0f:96:2b:e6:eb:63:2b:ab:21:47:3c:
aa:48:47:5a:c0:c1:c8:fb:10:aa:a1:05:11:da:f0:b3:05:25:
0a:68:34:d8:08:0d:4c:d7:c5:e5:65:11:f3:8f:59:03:ec:5e:
83:2a:8e:fe:13:ec:f0:da:d7:01:22:66:1c:4d:83:2d:92:07:
76:f7:3e:a1:50:e1:4c:90:c1:26:f7:21:22:81:64:94:b0:5a:
aa:e9:0b:b9:f7:66:da:6f:08:2b:14:23:6f:d2:7e:2b:34:9a:
4b:ce:df:cd:b7:14:5b:ff:05:17:d7:58:23:cc:7a:a7:72:62:
21:95:39:d7:9c:76:67:a7:e0:71:31:26:40:04:d0:06:5e:1d:
29:39:df:89:b8:64:66:54:43:c0:9d:41:d2:41:f9:9e:c0:11:
21:a6:8b:0c:fe:85:0c:fe:c4:d2:74:89:d5:cf:60:12:54:ba:
ea:ee:8a:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+g4KwWr7E+L0MOzeki9vHfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkNmIwNWI0ZGRlNmMzOTM5OTcyZGExM2Y2MjIwN2YyMjZk
ZTc5MmEwHhcNMjYwNzI3MDAwMTQ2WhcNMjYwNzI4MDAwMTQ2WjAzMTEwLwYDVQQD
Eyg1MjU0ZWVmMDgyYTFjNDcyYmFkZmZhMzllMmM1YTBlMTU3ZDdjNWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDZhDiRs9lHvheKJh1+GwxXEfbbS
nJl+o0uhQSgH+8ewRytzZI2aqa3kOf50TikgIIv8n8dy1db/nfqyJJvL3DX67/ZV
DalQJwmBlMO5EUTJJ2rKO25nZ9ZwAXm4qKGFP4/4Oe4+/CQjNvwR36d9hUOkO9LT
jhShlO9PMeWySl0J6hoaxWitBpfr9n8MXCj+JtP7FSIxnpO6KyB5sxVtBFLHtD0e
RiV9b2K/HT74gNSBqR2mazcBrbKstO15ollfYYRx/+9EsqLlz/IAf4aP0DD/abkY
BD/fw+hXwuFoaM/wEKIJHGWo57PnKFzdBDXLTshalEOEOniwyt33X/9o0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFJU7vCCocRyut/6OeLFoOFX18W+MB8GA1UdIwQY
MBaAFF1rBbTd5sOTmXLaE/YiB/Im3nkqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFdzRnROM213NU9aY3RvVDlpSUg4aWJlZVNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85NTQ0NjUtZWRjZC00NjM2LTg1NWYt
YjlkY2NhYjZkZjJlLzEvWFdzRnROM213NU9aY3RvVDlpSUg4aWJlZVNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85NTQ0NjUtZWRjZC00NjM2LTg1NWYtYjlkY2NhYjZkZjJl
LzEvWFdzRnROM213NU9aY3RvVDlpSUg4aWJlZVNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmVeQGwbm
D9edXQeNwSE78t9yCb2d6aIdvmjEV2B+Bory2BHL8B83c+gXwEUq9Bm7yEXkHGob
ameGsw9lRITrOBJZbieftbziOrM7DNtXow+WK+brYyurIUc8qkhHWsDByPsQqqEF
EdrwswUlCmg02AgNTNfF5WUR849ZA+xegyqO/hPs8NrXASJmHE2DLZIHdvc+oVDh
TJDBJvchIoFklLBaqukLufdm2m8IKxQjb9J+KzSaS87fzbcUW/8FF9dYI8x6p3Ji
IZU515x2Z6fgcTEmQATQBl4dKTnfibhkZlRDwJ1B0kH5nsARIaaLDP6FDP7E0nSJ
1c9gElS66u6Kbg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 07:45:30 2026 by rpki-client