Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.mft
File: XGGrSm35u5XP3orwdmaKWVs0HeE.mft (raw, json)
Hash identifier: Z88XQQKHuvmwdK57ShKm4iYvj1d2b895kjYUzxpyGYI=
Subject key identifier: 2F:7D:48:09:D2:73:C1:30:16:09:C2:2E:E7:DF:0E:C5:D3:C7:67:50
Authority key identifier: 5C:61:AB:4A:6D:F9:BB:95:CF:DE:8A:F0:76:66:8A:59:5B:34:1D:E1
Certificate issuer: /CN=5c61ab4a6df9bb95cfde8af076668a595b341de1
Certificate serial: 019ED46274E4022A3EA8C914044D8B09B615
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGGrSm35u5XP3orwdmaKWVs0HeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.mft
Manifest number: 064C
Signing time: Wed 17 Jun 2026 07:01:22 +0000
Manifest this update: Wed 17 Jun 2026 07:01:22 +0000
Manifest next update: Thu 18 Jun 2026 07:01:22 +0000
Files and hashes: 1: XGGrSm35u5XP3orwdmaKWVs0HeE.crl (hash: F3Zb6E4Aq/JRWbKZG7+ZTVcB2rtAlYAapG+py+0QD1E=)
2: d9ad6eSfGOCAtJCyfx5T80LXc84.roa (hash: l8TnxH7nYsbi9OkxC5kgX4fiX1lQ108inFjyeEj/BH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGGrSm35u5XP3orwdmaKWVs0HeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 07:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:62:74:e4:02:2a:3e:a8:c9:14:04:4d:8b:09:b6:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c61ab4a6df9bb95cfde8af076668a595b341de1
Validity
Not Before: Jun 17 07:01:22 2026 GMT
Not After : Jun 18 07:01:22 2026 GMT
Subject: CN=2f7d4809d273c1301609c22ee7df0ec5d3c76750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ed:cb:a0:9c:51:0c:dd:1b:34:bd:da:ac:34:
c2:14:18:72:6c:59:4c:38:04:71:58:df:2d:d8:9c:
ad:ee:83:d2:82:04:39:03:6b:57:c3:fe:0c:3d:d5:
03:72:40:53:e6:6a:52:e0:42:d4:89:8f:ed:1a:17:
8e:46:e1:a9:fa:ca:8e:2a:52:c1:93:b5:f6:bc:e9:
5b:d9:e3:d5:c0:96:49:04:2c:af:86:ff:7b:87:f3:
ad:e0:cf:95:e6:c1:e9:3f:ef:75:f1:eb:49:f2:dd:
e5:df:ec:5f:a8:a3:bb:6a:59:4d:3e:f8:61:39:d3:
7c:ed:14:d7:6b:6c:bf:96:af:54:1a:0f:b3:46:1b:
45:41:d7:78:47:82:38:87:77:9c:fd:b7:2e:50:bd:
e9:d1:a8:a4:f5:0d:7b:d6:ed:3f:78:3d:e0:90:cc:
cf:bd:17:27:b6:ee:e4:31:b4:a1:ff:22:6b:24:03:
42:12:ca:0f:9a:aa:93:9b:df:89:43:b0:da:24:92:
d7:2c:ce:21:b9:cd:ab:d4:54:bc:6a:f1:f7:5f:b3:
8a:de:dd:66:42:9f:e0:89:37:ee:ea:9c:fe:9d:3f:
8f:db:b7:c4:94:a4:2b:ca:91:98:31:54:99:0a:d4:
ca:f3:c9:e0:22:9b:59:f8:5d:8a:24:5d:f3:c6:59:
d4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:7D:48:09:D2:73:C1:30:16:09:C2:2E:E7:DF:0E:C5:D3:C7:67:50
X509v3 Authority Key Identifier:
keyid:5C:61:AB:4A:6D:F9:BB:95:CF:DE:8A:F0:76:66:8A:59:5B:34:1D:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGGrSm35u5XP3orwdmaKWVs0HeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:41:b8:d7:89:18:2d:25:7c:6b:04:10:d0:94:06:39:0c:91:
60:d7:a0:7d:a0:71:3e:91:84:c7:6a:54:98:95:30:30:cf:ec:
52:c0:43:18:a9:df:1e:d7:7e:38:b0:3f:26:e2:2c:54:b4:ef:
5a:d2:1f:33:89:3b:14:72:e3:d8:cf:c5:2a:8e:f9:3e:37:b2:
cb:d8:11:ad:64:4b:89:25:c9:21:59:2a:11:ef:05:fb:be:5e:
6d:a2:fb:ad:bb:f8:cf:ac:e3:f2:b1:37:b7:e3:1e:4f:4f:95:
14:66:1c:33:1e:a7:c6:df:cb:87:06:4f:db:60:e6:e8:4a:ff:
5a:ab:79:b1:f6:85:a5:c7:63:f1:53:dd:da:f8:08:b9:c9:4f:
72:44:fd:93:1d:e6:cf:94:74:cb:84:72:f2:3f:74:b8:97:e5:
bc:95:ad:0a:12:24:bc:02:62:ba:db:44:d5:52:ec:f5:47:17:
17:00:f5:79:1b:a7:06:89:9f:3c:5f:e1:c6:6f:fa:10:d0:49:
13:ce:16:f5:71:73:32:57:90:1e:c8:a2:7c:21:c0:06:5d:87:
47:25:f0:66:e2:10:f2:32:7c:b9:bb:71:6d:08:d6:9c:8b:52:
bb:db:a0:79:61:8e:89:f2:81:58:d7:23:93:2f:2f:39:92:2c:
d3:e4:77:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7UYnTkAio+qMkUBE2LCbYVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNjFhYjRhNmRmOWJiOTVjZmRlOGFmMDc2NjY4YTU5NWIz
NDFkZTEwHhcNMjYwNjE3MDcwMTIyWhcNMjYwNjE4MDcwMTIyWjAzMTEwLwYDVQQD
EygyZjdkNDgwOWQyNzNjMTMwMTYwOWMyMmVlN2RmMGVjNWQzYzc2NzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnu3LoJxRDN0bNL3arDTCFBhybFlM
OARxWN8t2Jyt7oPSggQ5A2tXw/4MPdUDckBT5mpS4ELUiY/tGheORuGp+sqOKlLB
k7X2vOlb2ePVwJZJBCyvhv97h/Ot4M+V5sHpP+918etJ8t3l3+xfqKO7allNPvhh
OdN87RTXa2y/lq9UGg+zRhtFQdd4R4I4h3ec/bcuUL3p0aik9Q171u0/eD3gkMzP
vRcntu7kMbSh/yJrJANCEsoPmqqTm9+JQ7DaJJLXLM4huc2r1FS8avH3X7OK3t1m
Qp/giTfu6pz+nT+P27fElKQrypGYMVSZCtTK88ngIptZ+F2KJF3zxlnU3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC99SAnSc8EwFgnCLuffDsXTx2dQMB8GA1UdIwQY
MBaAFFxhq0pt+buVz96K8HZmillbNB3hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEdHclNtMzV1NVhQM29yd2RtYUtXVnMwSGVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9mZDVhOTgtMjcyZi00MDc4LTk0OGQt
NmZhODY4OTIxZGZiLzEvWEdHclNtMzV1NVhQM29yd2RtYUtXVnMwSGVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9mZDVhOTgtMjcyZi00MDc4LTk0OGQtNmZhODY4OTIxZGZi
LzEvWEdHclNtMzV1NVhQM29yd2RtYUtXVnMwSGVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi0G414kY
LSV8awQQ0JQGOQyRYNegfaBxPpGEx2pUmJUwMM/sUsBDGKnfHtd+OLA/JuIsVLTv
WtIfM4k7FHLj2M/FKo75Pjeyy9gRrWRLiSXJIVkqEe8F+75ebaL7rbv4z6zj8rE3
t+MeT0+VFGYcMx6nxt/LhwZP22Dm6Er/Wqt5sfaFpcdj8VPd2vgIuclPckT9kx3m
z5R0y4Ry8j90uJflvJWtChIkvAJiuttE1VLs9UcXFwD1eRunBomfPF/hxm/6ENBJ
E84W9XFzMleQHsiifCHABl2HRyXwZuIQ8jJ8ubtxbQjWnItSu9ugeWGOifKBWNcj
ky8vOZIs0+R32w==
-----END CERTIFICATE-----
Generated at Wed Jun 17 12:27:29 2026 by rpki-client