Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
File: XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft (raw, json)
Hash identifier: 3Ip8N+q7YACfATnTqbO9SthIiE4ACSAcY7UA1G4YnJ0=
Subject key identifier: D1:F1:BB:1C:F3:ED:56:4C:C3:65:06:0B:81:53:FC:CB:29:4F:A4:8F
Authority key identifier: 5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03
Certificate issuer: /CN=5c61dcd3eb50c83d68060bcba4af152204193503
Certificate serial: 019FAB2C8F0C7E86E61296CE4E737C0F5747
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
Manifest number: 1193
Signing time: Wed 29 Jul 2026 00:00:51 +0000
Manifest this update: Wed 29 Jul 2026 00:00:51 +0000
Manifest next update: Thu 30 Jul 2026 00:00:51 +0000
Files and hashes: 1: 2LxanPXEt-Ah2tA9EYIfUY7a7ZY.roa (hash: Uywc9u8hm/WxjQy7SxAxxYIxsP7UM6R3hTnst6UR3yE=)
2: XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl (hash: TvQtxl4DsyeE2QdBSB62KMoOR6wUL6+QmTpph37R4Qo=)
3: XN_BGWEzxZjhg6iXlmQqSDhpeZU.roa (hash: nt1Dqzzch0xHlTVsHiqUIJZJJ7P5OL+fpAG1RALu8GE=)
4: cDTj5s606sVgmgpZ3n6Z3dU4zwA.roa (hash: Tz/Xa89Xe7rgKjUL5hIFqnaSfDilwgGaKsizO4oAEvI=)
5: fQWCmfLdQl9kgPQ8VBdW1T6y5WQ.roa (hash: c6z+qlka4njKh+KsSdKsKGpsRerVkXlOyNamnYTlXAw=)
6: hVXu442W8sHVh8F2wI339U-u6hw.roa (hash: tfQAfvgbfBIutk9LhU3LMYfREhO9WhUNbbEaKiJKIO4=)
7: pwg2Pcu7xQM-Nr6mzrIBgEt_XFI.roa (hash: lF7Ckm/bTHOWi8Xtom4+V7QF19TxeutNBXq6gqp0Yv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:8f:0c:7e:86:e6:12:96:ce:4e:73:7c:0f:57:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c61dcd3eb50c83d68060bcba4af152204193503
Validity
Not Before: Jul 29 00:00:51 2026 GMT
Not After : Jul 30 00:00:51 2026 GMT
Subject: CN=d1f1bb1cf3ed564cc365060b8153fccb294fa48f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e1:22:cb:7b:54:e1:0d:41:a4:77:05:48:c8:
20:20:95:aa:ad:5f:34:bf:39:ff:13:e7:e8:f3:ed:
20:16:b0:03:be:2d:24:5e:95:d4:6c:d4:43:68:1e:
c0:5e:8b:88:b9:b7:c7:d4:ef:29:fa:61:df:64:66:
3b:da:f6:f6:62:b3:4c:4e:af:53:b0:eb:2e:f1:b2:
55:2c:54:fe:db:5c:8d:dc:f0:62:1b:88:53:80:91:
97:f5:f2:f4:1a:88:c7:89:8e:42:e2:9f:80:c5:8f:
87:36:90:3b:e4:c0:94:bc:ae:7a:39:00:bf:48:0b:
52:11:e8:51:44:4a:cd:f4:0e:35:15:9e:97:1f:9e:
b4:e5:c4:d9:a3:fd:9d:42:9a:88:dc:ea:42:9e:50:
e2:70:60:c0:60:e8:ad:66:40:a7:fe:63:7b:90:08:
b8:6c:9f:32:37:0a:4e:45:b7:4b:8f:fa:34:47:99:
44:4b:05:38:ed:d5:d2:ff:0a:af:9e:da:5e:fb:c5:
9d:9a:5b:77:79:d0:4c:9c:e5:a3:01:ba:ea:21:0d:
c2:de:da:37:6a:90:13:40:a8:0c:03:fd:b7:55:22:
e7:71:ea:c6:b6:6f:03:d7:d3:29:5b:7d:c9:97:b4:
1a:02:12:45:a5:73:d5:0e:2e:eb:41:23:1c:79:1c:
41:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F1:BB:1C:F3:ED:56:4C:C3:65:06:0B:81:53:FC:CB:29:4F:A4:8F
X509v3 Authority Key Identifier:
keyid:5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:ac:68:6f:37:88:92:77:e4:fd:9d:bc:68:80:50:61:2d:cf:
76:e9:31:2a:25:dd:b3:92:9e:ed:e9:92:cd:5d:76:b4:fe:eb:
7f:a3:04:4c:b6:66:4d:52:3b:0f:66:31:60:c7:78:b9:82:43:
1e:ee:ef:f1:4b:ea:64:1f:a6:a7:47:f5:a5:65:14:66:49:a9:
df:1b:de:52:af:94:c3:00:d5:37:e7:f6:9c:7b:c3:c1:5c:f2:
3d:dd:61:d7:7d:c3:76:bc:df:45:01:d8:d2:fe:8e:47:4b:fa:
99:f9:98:0d:04:bc:7b:5a:b7:35:c4:59:5b:2f:0b:f0:52:1f:
c1:a1:1a:43:34:88:e6:0e:5f:b8:31:fe:21:1f:b3:0d:43:d8:
1e:a9:be:6c:b9:30:fd:01:31:8f:45:75:c4:19:4b:d0:0b:ca:
0c:f4:c3:d5:11:14:96:e9:30:d5:1f:36:80:63:61:22:ee:c6:
82:42:75:94:50:a4:f5:f2:85:ac:9d:dc:6a:66:f8:92:81:f1:
ce:d4:86:6a:78:f5:86:1d:c1:ad:a5:d6:d6:e1:69:05:6d:7e:
3d:e2:a1:fe:0f:43:7f:71:a5:5e:7c:d4:2f:4e:14:1e:67:32:
dc:d1:1b:ef:35:2d:71:3c:c4:fd:63:58:c2:60:df:0c:88:08:
61:e2:4b:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rLI8MfobmEpbOTnN8D1dHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNjFkY2QzZWI1MGM4M2Q2ODA2MGJjYmE0YWYxNTIyMDQx
OTM1MDMwHhcNMjYwNzI5MDAwMDUxWhcNMjYwNzMwMDAwMDUxWjAzMTEwLwYDVQQD
EyhkMWYxYmIxY2YzZWQ1NjRjYzM2NTA2MGI4MTUzZmNjYjI5NGZhNDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+Eiy3tU4Q1BpHcFSMggIJWqrV80
vzn/E+fo8+0gFrADvi0kXpXUbNRDaB7AXouIubfH1O8p+mHfZGY72vb2YrNMTq9T
sOsu8bJVLFT+21yN3PBiG4hTgJGX9fL0GojHiY5C4p+AxY+HNpA75MCUvK56OQC/
SAtSEehRRErN9A41FZ6XH5605cTZo/2dQpqI3OpCnlDicGDAYOitZkCn/mN7kAi4
bJ8yNwpORbdLj/o0R5lESwU47dXS/wqvntpe+8Wdmlt3edBMnOWjAbrqIQ3C3to3
apATQKgMA/23VSLncerGtm8D19MpW33Jl7QaAhJFpXPVDi7rQSMceRxBiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNHxuxzz7VZMw2UGC4FT/MspT6SPMB8GA1UdIwQY
MBaAFFxh3NPrUMg9aAYLy6SvFSIEGTUDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEdIYzAtdFF5RDFvQmd2THBLOFZJZ1FaTlFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80NGExNTUtNGQwMi00MDAyLThmM2Qt
YzM2ZDFjNDYwZTJmLzEvWEdIYzAtdFF5RDFvQmd2THBLOFZJZ1FaTlFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS80NGExNTUtNGQwMi00MDAyLThmM2QtYzM2ZDFjNDYwZTJm
LzEvWEdIYzAtdFF5RDFvQmd2THBLOFZJZ1FaTlFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABqxobzeI
knfk/Z28aIBQYS3PdukxKiXds5Ke7emSzV12tP7rf6METLZmTVI7D2YxYMd4uYJD
Hu7v8UvqZB+mp0f1pWUUZkmp3xveUq+UwwDVN+f2nHvDwVzyPd1h133DdrzfRQHY
0v6OR0v6mfmYDQS8e1q3NcRZWy8L8FIfwaEaQzSI5g5fuDH+IR+zDUPYHqm+bLkw
/QExj0V1xBlL0AvKDPTD1REUlukw1R82gGNhIu7GgkJ1lFCk9fKFrJ3camb4koHx
ztSGanj1hh3BraXW1uFpBW1+PeKh/g9Df3GlXnzUL04UHmcy3NEb7zUtcTzE/WNY
wmDfDIgIYeJLqA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:40:47 2026 by rpki-client