Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
File: XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft (raw, json)
Hash identifier: wHaE3w7PJTMHFJYFCUoDR6RuLh01TGggeC6CkeTZwLY=
Subject key identifier: EB:ED:F9:D1:28:2F:E8:53:EE:AB:E0:C3:38:61:F9:E2:12:18:73:CF
Authority key identifier: 5D:D3:9E:1D:E1:85:14:BA:C2:F5:A2:39:10:F8:C7:D4:67:2A:0F:D8
Certificate issuer: /CN=5dd39e1de18514bac2f5a23910f8c7d4672a0fd8
Certificate serial: 019F281200C3E5464F81568931CB7B9DCBD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
Manifest number: 1991
Signing time: Fri 03 Jul 2026 13:01:36 +0000
Manifest this update: Fri 03 Jul 2026 13:01:36 +0000
Manifest next update: Sat 04 Jul 2026 13:01:36 +0000
Files and hashes: 1: O0e9J99nDHDBcPP1W09ssXrN96E.roa (hash: aQvYlglowNCiS102CJiAb4sYyaW4lZND2gALby9zlgw=)
2: XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl (hash: 2uISrd0t1Yzb4zwqwqcVyfoLxzL7DOon4cGURfTbpMI=)
3: x58D33wXY03IBALkfNVEewlOjxI.roa (hash: l4BRaOtR+rQZWBsP3tk/LVs3kvHtYkV6QExE7KMTpnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:28:12:00:c3:e5:46:4f:81:56:89:31:cb:7b:9d:cb:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd39e1de18514bac2f5a23910f8c7d4672a0fd8
Validity
Not Before: Jul 3 13:01:36 2026 GMT
Not After : Jul 4 13:01:36 2026 GMT
Subject: CN=ebedf9d1282fe853eeabe0c33861f9e2121873cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:0b:8c:6c:f6:c6:9b:0e:ef:fd:cc:c2:4d:4e:
75:58:94:fd:75:54:0a:a2:c1:a3:ca:b6:59:7f:31:
33:7c:8c:cb:e4:46:4f:de:78:ee:d0:11:89:37:d6:
6e:43:cf:04:b9:08:8f:21:44:80:d0:b6:f4:65:47:
dc:5f:1e:c1:72:35:cd:05:42:f5:ff:a3:0d:19:8a:
cc:87:5c:09:93:88:e0:2f:cf:3c:46:b1:80:04:5d:
c0:f5:db:4c:2f:9c:f9:6f:06:77:cc:bf:1a:8b:12:
67:70:a9:b1:cb:2c:2b:1e:7e:35:b4:9c:1f:58:be:
fa:3e:98:e9:f3:66:84:88:3e:2a:28:09:4e:f0:bf:
bb:ac:9a:ef:15:4e:31:f5:53:c8:72:e8:ae:78:f2:
2c:76:18:e6:66:c1:51:bc:6a:57:4c:aa:3f:2a:c7:
a9:d4:6a:6a:ee:ac:03:35:32:c3:78:64:67:66:a2:
a0:fa:3b:b6:8a:fe:cc:e8:cd:58:ff:fb:5d:0a:7d:
bb:80:20:2b:88:23:52:84:b6:b6:43:15:7f:f9:64:
be:ba:9b:9c:c9:bc:a8:b6:f4:ce:99:41:e0:c6:97:
7c:8a:f8:ef:28:a1:44:34:3b:43:61:12:d9:60:7f:
c6:b3:ad:0d:d1:7c:d9:03:44:de:19:8b:40:6d:cd:
2b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:ED:F9:D1:28:2F:E8:53:EE:AB:E0:C3:38:61:F9:E2:12:18:73:CF
X509v3 Authority Key Identifier:
keyid:5D:D3:9E:1D:E1:85:14:BA:C2:F5:A2:39:10:F8:C7:D4:67:2A:0F:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:5e:d1:23:af:bc:82:64:22:d9:67:53:62:de:cf:94:11:9f:
09:5a:f1:b9:a4:f6:e5:a8:bb:35:87:f4:0d:06:d6:db:36:33:
24:47:8e:9a:be:28:12:28:ff:f6:4d:26:f7:ac:68:d7:f0:34:
a8:3a:9a:52:f5:73:64:92:e3:b9:ea:6b:cf:e1:8d:44:50:8a:
6e:1b:04:c5:51:b9:e4:10:d5:20:18:05:ba:10:61:0f:82:dc:
3b:c9:c5:22:29:fe:2b:e1:60:b8:3b:83:68:f2:a5:43:39:89:
86:83:e3:7e:06:92:67:44:e8:82:9d:6b:bd:0f:fb:d6:34:e8:
44:09:d8:1c:90:47:8d:fc:18:5c:13:17:a9:c1:74:eb:d9:17:
be:35:e8:a5:2c:db:09:d6:47:81:db:71:74:cc:23:bd:49:5c:
5f:02:a3:2a:11:07:ea:3e:4d:ac:0d:47:d0:25:58:23:44:04:
da:55:00:83:e3:ba:44:4a:50:7f:98:57:38:9b:5c:8b:69:f4:
23:4c:4e:a3:f0:21:25:9d:fd:68:1c:da:2c:48:54:7f:7a:2d:
03:b0:ae:9a:0f:c2:c9:01:9a:06:b6:e8:8a:21:2c:cb:96:cb:
37:f2:f8:75:3c:c1:91:00:06:40:e1:5d:93:c6:a0:ba:67:b0:
92:7b:ba:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8oEgDD5UZPgVaJMct7ncvXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZDM5ZTFkZTE4NTE0YmFjMmY1YTIzOTEwZjhjN2Q0Njcy
YTBmZDgwHhcNMjYwNzAzMTMwMTM2WhcNMjYwNzA0MTMwMTM2WjAzMTEwLwYDVQQD
EyhlYmVkZjlkMTI4MmZlODUzZWVhYmUwYzMzODYxZjllMjEyMTg3M2NmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7guMbPbGmw7v/czCTU51WJT9dVQK
osGjyrZZfzEzfIzL5EZP3nju0BGJN9ZuQ88EuQiPIUSA0Lb0ZUfcXx7BcjXNBUL1
/6MNGYrMh1wJk4jgL888RrGABF3A9dtML5z5bwZ3zL8aixJncKmxyywrHn41tJwf
WL76Ppjp82aEiD4qKAlO8L+7rJrvFU4x9VPIcuiuePIsdhjmZsFRvGpXTKo/Ksep
1Gpq7qwDNTLDeGRnZqKg+ju2iv7M6M1Y//tdCn27gCAriCNShLa2QxV/+WS+upuc
ybyotvTOmUHgxpd8ivjvKKFENDtDYRLZYH/Gs60N0XzZA0TeGYtAbc0rXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOvt+dEoL+hT7qvgwzhh+eISGHPPMB8GA1UdIwQY
MBaAFF3Tnh3hhRS6wvWiORD4x9RnKg/YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGRPZUhlR0ZGTHJDOWFJNUVQakgxR2NxRDlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS85Njg2NWUtYzE3Ny00ODQ0LThkYzMt
OWMyNmIwN2I3MThiLzEvWGRPZUhlR0ZGTHJDOWFJNUVQakgxR2NxRDlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS85Njg2NWUtYzE3Ny00ODQ0LThkYzMtOWMyNmIwN2I3MThi
LzEvWGRPZUhlR0ZGTHJDOWFJNUVQakgxR2NxRDlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI17RI6+8
gmQi2WdTYt7PlBGfCVrxuaT25ai7NYf0DQbW2zYzJEeOmr4oEij/9k0m96xo1/A0
qDqaUvVzZJLjueprz+GNRFCKbhsExVG55BDVIBgFuhBhD4LcO8nFIin+K+FguDuD
aPKlQzmJhoPjfgaSZ0Togp1rvQ/71jToRAnYHJBHjfwYXBMXqcF069kXvjXopSzb
CdZHgdtxdMwjvUlcXwKjKhEH6j5NrA1H0CVYI0QE2lUAg+O6REpQf5hXOJtci2n0
I0xOo/AhJZ39aBzaLEhUf3otA7Cumg/CyQGaBrboiiEsy5bLN/L4dTzBkQAGQOFd
k8agumewknu6bg==
-----END CERTIFICATE-----
Generated at Fri Jul 3 18:27:41 2026 by rpki-client