Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
File: XZxbcz-6cemMB-E7A6fFWrhMyO0.mft (raw, json)
Hash identifier: MulV5m+YifY8mfMsm9LNJRYUBxvnkGE2yvG0LFC1Kbg=
Subject key identifier: 37:F3:1F:98:F7:12:75:9B:6F:0B:EA:69:F5:39:88:AE:0D:FA:D2:59
Authority key identifier: 5D:9C:5B:73:3F:BA:71:E9:8C:07:E1:3B:03:A7:C5:5A:B8:4C:C8:ED
Certificate issuer: /CN=5d9c5b733fba71e98c07e13b03a7c55ab84cc8ed
Certificate serial: 019FAC3F1F95B9AEA1BFFBCC05358AB43665
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
Manifest number: 19D7
Signing time: Wed 29 Jul 2026 05:00:45 +0000
Manifest this update: Wed 29 Jul 2026 05:00:45 +0000
Manifest next update: Thu 30 Jul 2026 05:00:45 +0000
Files and hashes: 1: D7RyDh7lTL4H2jBeI3MtODxeB2w.roa (hash: j4FPb00AEU8sTGz7vN2WFChjUdkqXvKYmGt4w0kqQbw=)
2: XZxbcz-6cemMB-E7A6fFWrhMyO0.crl (hash: GJK6a6ja4qGoiDlSVBk98B6F+b9lGFiQPHBciQ2Ghqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 05:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3f:1f:95:b9:ae:a1:bf:fb:cc:05:35:8a:b4:36:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c5b733fba71e98c07e13b03a7c55ab84cc8ed
Validity
Not Before: Jul 29 05:00:45 2026 GMT
Not After : Jul 30 05:00:45 2026 GMT
Subject: CN=37f31f98f712759b6f0bea69f53988ae0dfad259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:37:66:3d:8e:8c:83:c6:f5:86:06:40:d4:fc:
6f:cb:c2:db:82:01:bd:9b:be:38:e6:ef:6e:c7:37:
d0:d4:04:8d:0c:65:4a:09:03:85:22:f9:a7:e7:c3:
33:7e:f5:1b:75:3a:51:1b:e2:8d:0d:0a:2b:d0:ce:
e4:d9:e7:34:f0:51:0d:fd:c8:26:01:1c:c0:77:19:
86:de:bf:d5:e0:68:64:71:46:26:f0:08:c3:49:bb:
bd:f9:e8:62:f3:51:df:ee:ab:cc:10:82:22:6f:f3:
73:15:91:fa:d6:c3:94:7f:1d:73:02:21:4a:44:81:
00:68:82:73:f0:7b:7f:a7:4a:88:2f:99:c8:f5:cd:
e1:35:32:1c:fb:bc:7b:a2:83:94:35:eb:87:77:e8:
eb:3c:34:c5:4a:95:db:e4:bc:e0:b6:2f:23:0e:60:
10:7d:82:df:4e:e1:8f:4c:22:58:28:15:59:98:04:
48:f4:79:38:c3:42:d2:bd:b4:e7:b9:bf:e7:88:dd:
48:39:b0:a6:2d:8e:9b:1b:a7:d0:f2:de:98:20:26:
80:c8:0f:be:f8:53:65:fc:cc:75:64:53:94:33:53:
27:ec:56:4f:c8:9d:1c:6d:78:41:20:50:d4:fb:47:
e3:2a:16:fe:a5:93:f2:81:19:83:7c:2e:66:79:6c:
13:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F3:1F:98:F7:12:75:9B:6F:0B:EA:69:F5:39:88:AE:0D:FA:D2:59
X509v3 Authority Key Identifier:
keyid:5D:9C:5B:73:3F:BA:71:E9:8C:07:E1:3B:03:A7:C5:5A:B8:4C:C8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:50:cd:11:be:ec:98:0a:a2:98:20:02:1f:06:e9:c9:98:a6:
d1:51:9c:a1:b9:7d:30:42:32:92:6f:84:1b:92:de:41:93:ac:
4a:c8:71:91:99:3a:7f:e5:67:dd:5b:d2:6a:53:a4:69:92:27:
f0:b0:3b:1e:35:ca:57:6b:85:ee:eb:81:ae:78:04:b3:c7:c0:
82:85:00:9c:6b:92:59:bb:0e:a7:db:31:b9:d5:ed:e7:5a:71:
86:07:50:54:57:62:d1:18:db:d0:0e:ab:71:3b:51:c5:be:77:
72:46:61:9a:9f:24:2b:00:5a:c9:aa:aa:8a:14:e9:3d:b0:11:
ab:9b:5e:0f:5a:4c:ca:a9:50:68:a4:70:b8:59:56:52:3c:e2:
ea:b9:7b:fa:40:96:64:40:6b:09:59:7e:d2:d3:06:dc:da:c8:
ac:2e:15:bc:8c:73:7c:69:d9:49:dd:e3:95:09:6f:5f:92:25:
12:89:f2:1f:04:6e:e1:bb:6a:30:1d:ba:0a:e5:cb:58:de:7a:
3c:a8:a0:0c:02:08:9e:1a:72:00:ac:7d:9a:6e:12:7d:9f:39:
3f:42:5c:2a:a3:aa:43:e5:14:ef:f6:1b:8f:0b:c7:1a:8f:58:
da:71:3f:20:a6:a9:59:89:ed:10:cc:86:2c:80:a9:aa:be:f6:
ff:27:18:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sPx+Vua6hv/vMBTWKtDZlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkOWM1YjczM2ZiYTcxZTk4YzA3ZTEzYjAzYTdjNTVhYjg0
Y2M4ZWQwHhcNMjYwNzI5MDUwMDQ1WhcNMjYwNzMwMDUwMDQ1WjAzMTEwLwYDVQQD
EygzN2YzMWY5OGY3MTI3NTliNmYwYmVhNjlmNTM5ODhhZTBkZmFkMjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzdmPY6Mg8b1hgZA1Pxvy8LbggG9
m7445u9uxzfQ1ASNDGVKCQOFIvmn58MzfvUbdTpRG+KNDQor0M7k2ec08FEN/cgm
ARzAdxmG3r/V4GhkcUYm8AjDSbu9+ehi81Hf7qvMEIIib/NzFZH61sOUfx1zAiFK
RIEAaIJz8Ht/p0qIL5nI9c3hNTIc+7x7ooOUNeuHd+jrPDTFSpXb5Lzgti8jDmAQ
fYLfTuGPTCJYKBVZmARI9Hk4w0LSvbTnub/niN1IObCmLY6bG6fQ8t6YICaAyA++
+FNl/Mx1ZFOUM1Mn7FZPyJ0cbXhBIFDU+0fjKhb+pZPygRmDfC5meWwTkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDfzH5j3EnWbbwvqafU5iK4N+tJZMB8GA1UdIwQY
MBaAFF2cW3M/unHpjAfhOwOnxVq4TMjtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFp4YmN6LTZjZW1NQi1FN0E2ZkZXcmhNeU8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9hMmQ0Y2ItOTIzYS00ZTA0LThkODUt
YWQ5ZDVkYjBmMDk5LzEvWFp4YmN6LTZjZW1NQi1FN0E2ZkZXcmhNeU8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9hMmQ0Y2ItOTIzYS00ZTA0LThkODUtYWQ5ZDVkYjBmMDk5
LzEvWFp4YmN6LTZjZW1NQi1FN0E2ZkZXcmhNeU8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl1DNEb7s
mAqimCACHwbpyZim0VGcobl9MEIykm+EG5LeQZOsSshxkZk6f+Vn3VvSalOkaZIn
8LA7HjXKV2uF7uuBrngEs8fAgoUAnGuSWbsOp9sxudXt51pxhgdQVFdi0Rjb0A6r
cTtRxb53ckZhmp8kKwBayaqqihTpPbARq5teD1pMyqlQaKRwuFlWUjzi6rl7+kCW
ZEBrCVl+0tMG3NrIrC4VvIxzfGnZSd3jlQlvX5IlEonyHwRu4btqMB26CuXLWN56
PKigDAIInhpyAKx9mm4SfZ85P0JcKqOqQ+UU7/YbjwvHGo9Y2nE/IKapWYntEMyG
LICpqr72/ycY+A==
-----END CERTIFICATE-----
Generated at Wed Jul 29 11:11:52 2026 by rpki-client