Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft
File: XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft (raw, json)
Hash identifier: RP7Xs3ieBnF3oHhb+RkDy+MekCsUBxMJhNhDPIItQNc=
Subject key identifier: 59:5C:2F:89:A2:C1:98:A4:23:52:34:76:2F:B8:3C:2A:D3:52:29:4C
Authority key identifier: 5E:86:8B:02:E5:19:DD:7E:69:4C:7A:F1:E7:08:BD:D6:63:69:BD:DF
Certificate issuer: /CN=5e868b02e519dd7e694c7af1e708bdd66369bddf
Certificate serial: 019D9998D1B12151278130B5FC20A6997CD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XoaLAuUZ3X5pTHrx5wi91mNpvd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft
Manifest number: 0E36
Signing time: Fri 17 Apr 2026 04:00:22 +0000
Manifest this update: Fri 17 Apr 2026 04:00:22 +0000
Manifest next update: Sat 18 Apr 2026 04:00:22 +0000
Files and hashes: 1: XoaLAuUZ3X5pTHrx5wi91mNpvd8.crl (hash: m95SP73e2m8NfqoEPZgQADAk6l+6AIVkAGa0ep4kT+w=)
2: xhCelkdkFdTsIHpEDmjN2bruQr8.roa (hash: +AqQAgHYDXWjRd+5q4R8GrL4JFr5uaVtEUtnJ3XI5Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XoaLAuUZ3X5pTHrx5wi91mNpvd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:d1:b1:21:51:27:81:30:b5:fc:20:a6:99:7c:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e868b02e519dd7e694c7af1e708bdd66369bddf
Validity
Not Before: Apr 17 04:00:22 2026 GMT
Not After : Apr 18 04:00:22 2026 GMT
Subject: CN=595c2f89a2c198a4235234762fb83c2ad352294c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:33:f7:52:1e:df:bd:cb:5f:96:09:c4:47:ee:
34:91:a0:45:a0:4e:b1:0c:a6:92:85:b6:b0:aa:e9:
7e:5a:85:00:e2:23:8f:e5:5c:bf:8a:6e:9a:48:d6:
80:5b:34:54:81:92:cd:2e:36:22:1e:b1:e4:c2:05:
4b:35:4a:7e:6f:fb:da:cc:6e:2a:71:c0:0a:b8:e4:
70:b1:83:ac:f0:fe:83:34:b1:b3:e5:c3:72:d2:eb:
6f:18:a9:0f:ba:23:19:01:f7:1e:a9:a8:d9:30:74:
bd:2d:36:21:8e:ee:88:20:c5:a6:0c:7a:3b:de:21:
22:e1:2d:1e:16:e0:26:f7:93:fc:2b:3b:da:bd:fa:
35:76:14:01:10:7c:92:3d:b6:d7:30:a5:a2:d5:f8:
5e:4e:02:85:bd:6a:44:66:89:e1:d7:2e:a3:b5:45:
72:58:a1:39:cd:e6:f2:f3:84:64:78:46:85:57:5c:
e0:e5:c2:0c:78:15:e0:0d:4c:43:3a:cd:ee:94:9b:
1e:86:44:e7:82:cd:91:93:e8:02:a8:0e:44:25:c0:
78:a6:44:b3:7b:25:4f:1b:9d:56:40:e5:1d:61:c7:
c8:c7:8a:85:72:48:c1:82:22:99:da:d3:b1:8a:a2:
0f:6b:c0:0c:16:73:c6:61:64:81:cb:68:0d:df:5b:
83:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:5C:2F:89:A2:C1:98:A4:23:52:34:76:2F:B8:3C:2A:D3:52:29:4C
X509v3 Authority Key Identifier:
keyid:5E:86:8B:02:E5:19:DD:7E:69:4C:7A:F1:E7:08:BD:D6:63:69:BD:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XoaLAuUZ3X5pTHrx5wi91mNpvd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:6e:66:b3:b1:0e:7b:f7:80:89:4f:ce:55:34:28:80:0c:4a:
0e:6d:c3:46:ae:1f:64:f8:92:4b:6d:ba:b8:4e:3a:84:9c:96:
a5:2d:9d:52:b7:98:a2:2f:0d:72:c7:0c:7d:06:7c:32:0d:ec:
a1:50:1e:0c:60:59:6f:a6:47:bc:3e:4d:fc:47:72:ad:9c:9d:
90:00:b9:66:1c:f2:b9:1a:49:a9:ed:06:a2:23:9b:0a:66:63:
9d:58:cc:08:15:b6:7b:a0:24:17:4d:d8:21:b9:76:ed:95:24:
84:12:63:2d:77:88:17:9f:9b:98:9e:07:ed:84:70:62:14:ce:
1c:65:90:90:c2:83:1d:5e:ab:f6:c3:03:dd:c1:80:52:56:0f:
53:2a:46:04:7d:ab:53:e3:dd:a2:64:de:54:3e:10:77:1c:29:
a5:4c:8c:cf:9a:24:b3:93:73:d6:88:00:66:41:4e:14:76:a6:
5f:79:60:2e:7b:d3:6c:7b:e6:b4:63:07:39:28:90:ea:8b:c8:
b0:86:fe:b5:2c:f4:0b:6f:00:0f:99:95:40:55:cd:84:9c:79:
b4:59:a7:11:d7:c3:0a:96:e9:b5:61:a6:cd:03:be:62:8f:28:
f6:ea:ad:87:f6:2a:1f:52:28:0b:01:ed:23:d7:93:ee:2b:95:
4d:ba:ca:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmNGxIVEngTC1/CCmmXzSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlODY4YjAyZTUxOWRkN2U2OTRjN2FmMWU3MDhiZGQ2NjM2
OWJkZGYwHhcNMjYwNDE3MDQwMDIyWhcNMjYwNDE4MDQwMDIyWjAzMTEwLwYDVQQD
Eyg1OTVjMmY4OWEyYzE5OGE0MjM1MjM0NzYyZmI4M2MyYWQzNTIyOTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDP3Uh7fvctflgnER+40kaBFoE6x
DKaShbawqul+WoUA4iOP5Vy/im6aSNaAWzRUgZLNLjYiHrHkwgVLNUp+b/vazG4q
ccAKuORwsYOs8P6DNLGz5cNy0utvGKkPuiMZAfceqajZMHS9LTYhju6IIMWmDHo7
3iEi4S0eFuAm95P8Kzvavfo1dhQBEHySPbbXMKWi1fheTgKFvWpEZonh1y6jtUVy
WKE5zeby84RkeEaFV1zg5cIMeBXgDUxDOs3ulJsehkTngs2Rk+gCqA5EJcB4pkSz
eyVPG51WQOUdYcfIx4qFckjBgiKZ2tOxiqIPa8AMFnPGYWSBy2gN31uD5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFlcL4miwZikI1I0di+4PCrTUilMMB8GA1UdIwQY
MBaAFF6GiwLlGd1+aUx68ecIvdZjab3fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG9hTEF1VVozWDVwVEhyeDV3aTkxbU5wdmQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS84MDJlMDUtMGQ1Yi00NTg5LTkxNmIt
OTBjMTdlYjc1MWY0LzEvWG9hTEF1VVozWDVwVEhyeDV3aTkxbU5wdmQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS84MDJlMDUtMGQ1Yi00NTg5LTkxNmItOTBjMTdlYjc1MWY0
LzEvWG9hTEF1VVozWDVwVEhyeDV3aTkxbU5wdmQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh25ms7EO
e/eAiU/OVTQogAxKDm3DRq4fZPiSS226uE46hJyWpS2dUreYoi8NcscMfQZ8Mg3s
oVAeDGBZb6ZHvD5N/EdyrZydkAC5ZhzyuRpJqe0GoiObCmZjnVjMCBW2e6AkF03Y
Ibl27ZUkhBJjLXeIF5+bmJ4H7YRwYhTOHGWQkMKDHV6r9sMD3cGAUlYPUypGBH2r
U+PdomTeVD4QdxwppUyMz5oks5Nz1ogAZkFOFHamX3lgLnvTbHvmtGMHOSiQ6ovI
sIb+tSz0C28AD5mVQFXNhJx5tFmnEdfDCpbptWGmzQO+Yo8o9uqth/YqH1IoCwHt
I9eT7iuVTbrKuw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:34:41 2026 by rpki-client