Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
File: XigJUGU6fsWMUzhdALOB77tGWCQ.mft (raw, json)
Hash identifier: pYKm46ZzzmO/LL2JsLlK+OwcrUzlIIeGV5/N/cEhI3c=
Subject key identifier: E6:DF:38:68:58:CE:AC:36:6E:6F:3A:56:56:8B:5A:63:E7:92:F0:5E
Authority key identifier: 5E:28:09:50:65:3A:7E:C5:8C:53:38:5D:00:B3:81:EF:BB:46:58:24
Certificate issuer: /CN=5e280950653a7ec58c53385d00b381efbb465824
Certificate serial: 019DB27DCF2240653C6AE7A0128470F0F117
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
Manifest number: 088F
Signing time: Wed 22 Apr 2026 00:01:22 +0000
Manifest this update: Wed 22 Apr 2026 00:01:22 +0000
Manifest next update: Thu 23 Apr 2026 00:01:22 +0000
Files and hashes: 1: 1-N-Z3cPVFu_Om0GHK2AgOkgXdoM.roa (hash: fr16WHaKP/dmz7kwPH4GVwwXFVV/SyIEEVY49/wQV+U=)
2: 1aw8Nv97xOelgCP3-YnwnaxEm5Y.roa (hash: jy29WIgwdNl8op/0r93ONPzqQSdB42DU8p3Gs7efZY0=)
3: 2PxDuTNSWd2nVBQOyZp7w-a3G48.roa (hash: nuRMk74zjQwmTzVhehj6QjrkhW4+qo+fGCHLFEBJBC0=)
4: XigJUGU6fsWMUzhdALOB77tGWCQ.crl (hash: HO2oRHMfpsXi1Q704dd6HAMK5zRO28FJqLGsB1udotc=)
5: c9R4pyYEgXuth8LibhVlQrijaqw.roa (hash: GjJoF2AKi6roB+eJMggN2owFvnp/FEnfdBtdPLGnDgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 21:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b2:7d:cf:22:40:65:3c:6a:e7:a0:12:84:70:f0:f1:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e280950653a7ec58c53385d00b381efbb465824
Validity
Not Before: Apr 22 00:01:22 2026 GMT
Not After : Apr 23 00:01:22 2026 GMT
Subject: CN=e6df386858ceac366e6f3a56568b5a63e792f05e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:42:9e:b9:38:a8:27:13:b0:c4:1f:da:4a:e6:
73:c3:c2:24:73:d1:a0:ef:f1:ac:37:5c:45:26:b5:
70:fc:54:af:26:64:78:3e:1d:82:f6:3d:0a:69:b0:
ca:35:aa:46:bc:04:27:f0:49:d1:65:3f:f8:6a:03:
0a:72:1d:2b:a4:14:b9:52:c9:51:2e:29:ae:2b:6b:
a4:bf:b1:84:5e:45:c8:42:53:7a:8d:6a:2f:6c:61:
63:e8:1f:1c:cf:7b:47:0d:69:65:81:cb:85:6a:1f:
cb:02:6b:c7:a5:77:f4:ef:26:31:31:85:01:8a:b8:
4b:ae:1f:ec:ab:1d:be:89:8f:79:ee:74:1d:c2:8c:
f0:29:7b:82:45:b7:8f:f1:a4:d7:37:06:78:45:f8:
23:40:e6:9b:5d:90:7f:06:9c:ec:c1:27:3b:3c:fa:
31:66:80:e9:49:db:84:64:14:21:35:69:c4:ad:50:
33:cb:e8:19:e1:60:30:d0:a2:6f:89:c5:26:34:7d:
1e:0f:6d:88:5e:bf:70:53:73:6d:91:c2:86:36:5a:
04:dc:20:48:df:b5:e0:13:ca:24:a6:cb:22:c3:84:
2e:f2:4d:3c:0f:ce:25:af:fd:06:40:8e:06:2e:c9:
f6:e7:63:25:9c:bb:af:71:5d:7a:19:74:ed:e1:82:
b9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:DF:38:68:58:CE:AC:36:6E:6F:3A:56:56:8B:5A:63:E7:92:F0:5E
X509v3 Authority Key Identifier:
keyid:5E:28:09:50:65:3A:7E:C5:8C:53:38:5D:00:B3:81:EF:BB:46:58:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:96:75:96:b3:7c:bc:8e:da:60:08:1a:e0:92:31:41:79:10:
d2:41:52:df:7d:e7:cd:33:46:03:bf:31:4d:49:23:91:b1:36:
12:bc:a6:ca:43:c4:ce:54:de:17:43:8b:36:27:ae:23:01:40:
19:e9:5a:09:4c:d5:04:6e:6a:b0:14:43:db:e1:a8:35:2b:f1:
c5:c5:da:f6:eb:18:52:0d:a4:f9:fd:7c:fd:5b:c0:5b:5e:3f:
8e:12:ef:2e:a8:f8:52:a7:ef:6e:98:46:92:ec:5b:94:62:7b:
83:dd:f0:dc:ff:03:dc:77:c6:4c:b2:79:ea:f6:5a:1f:62:d9:
6d:be:c9:3b:4e:6c:08:63:eb:3e:73:03:88:0e:89:d2:d4:b2:
70:1d:8a:ea:a1:bc:03:c8:ac:ed:b1:61:41:ec:92:ec:3a:c5:
d9:4e:ff:5d:09:04:f2:cd:84:89:00:b9:7a:20:b2:0a:5d:f4:
63:db:98:3d:d2:3f:38:20:18:fd:ae:01:7b:97:d6:b4:c9:83:
da:c6:64:68:61:55:25:2d:ff:9b:d2:2a:15:40:5c:49:f6:59:
93:f8:02:c2:0e:21:e5:4b:89:da:c0:01:e8:83:83:d5:c2:b4:
f3:42:d1:38:81:1b:4c:93:6d:f2:b9:1d:a7:07:d2:74:e8:59:
a9:50:32:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2yfc8iQGU8auegEoRw8PEXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMjgwOTUwNjUzYTdlYzU4YzUzMzg1ZDAwYjM4MWVmYmI0
NjU4MjQwHhcNMjYwNDIyMDAwMTIyWhcNMjYwNDIzMDAwMTIyWjAzMTEwLwYDVQQD
EyhlNmRmMzg2ODU4Y2VhYzM2NmU2ZjNhNTY1NjhiNWE2M2U3OTJmMDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UKeuTioJxOwxB/aSuZzw8Ikc9Gg
7/GsN1xFJrVw/FSvJmR4Ph2C9j0KabDKNapGvAQn8EnRZT/4agMKch0rpBS5UslR
LimuK2ukv7GEXkXIQlN6jWovbGFj6B8cz3tHDWllgcuFah/LAmvHpXf07yYxMYUB
irhLrh/sqx2+iY957nQdwozwKXuCRbeP8aTXNwZ4RfgjQOabXZB/BpzswSc7PPox
ZoDpSduEZBQhNWnErVAzy+gZ4WAw0KJvicUmNH0eD22IXr9wU3NtkcKGNloE3CBI
37XgE8okpssiw4Qu8k08D84lr/0GQI4GLsn252MlnLuvcV16GXTt4YK5VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFObfOGhYzqw2bm86VlaLWmPnkvBeMB8GA1UdIwQY
MBaAFF4oCVBlOn7FjFM4XQCzge+7RlgkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGlnSlVHVTZmc1dNVXpoZEFMT0I3N3RHV0NRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC83MmM1ODctYzVjYi00MGU0LThjZTEt
ZTFiNTM1NTZjMWMzLzEvWGlnSlVHVTZmc1dNVXpoZEFMT0I3N3RHV0NRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC83MmM1ODctYzVjYi00MGU0LThjZTEtZTFiNTM1NTZjMWMz
LzEvWGlnSlVHVTZmc1dNVXpoZEFMT0I3N3RHV0NRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKJZ1lrN8
vI7aYAga4JIxQXkQ0kFS333nzTNGA78xTUkjkbE2ErymykPEzlTeF0OLNieuIwFA
GelaCUzVBG5qsBRD2+GoNSvxxcXa9usYUg2k+f18/VvAW14/jhLvLqj4UqfvbphG
kuxblGJ7g93w3P8D3HfGTLJ56vZaH2LZbb7JO05sCGPrPnMDiA6J0tSycB2K6qG8
A8is7bFhQeyS7DrF2U7/XQkE8s2EiQC5eiCyCl30Y9uYPdI/OCAY/a4Be5fWtMmD
2sZkaGFVJS3/m9IqFUBcSfZZk/gCwg4h5UuJ2sAB6IOD1cK080LROIEbTJNt8rkd
pwfSdOhZqVAyyw==
-----END CERTIFICATE-----
Generated at Wed Apr 22 05:18:52 2026 by rpki-client