Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/Xquekv3YH0FBR5edBTHibe3SYqw.mft
File: Xquekv3YH0FBR5edBTHibe3SYqw.mft (raw, json)
Hash identifier: 8HQi+b9Yktcwlb2bh2+uZo6DqiiKkFk+NHhuT46tKSE=
Subject key identifier: CD:50:48:FA:67:C7:39:16:EC:70:FB:91:07:08:04:05:8D:BD:9F:22
Authority key identifier: 5E:AB:9E:92:FD:D8:1F:41:41:47:97:9D:05:31:E2:6D:ED:D2:62:AC
Certificate issuer: /CN=5eab9e92fdd81f414147979d0531e26dedd262ac
Certificate serial: 019FAA88C7E638AF71560A60DFB9B15CDF8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xquekv3YH0FBR5edBTHibe3SYqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/Xquekv3YH0FBR5edBTHibe3SYqw.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:01:58 +0000
Manifest this update: Tue 28 Jul 2026 21:01:58 +0000
Manifest next update: Wed 29 Jul 2026 21:01:58 +0000
Files and hashes: 1: Xquekv3YH0FBR5edBTHibe3SYqw.crl (hash: iSNFPgTyvNRl0RTHTi6ekeuDBIxmdFS1zsG+9RWo8Mc=)
2: yWSxVMHaA7K49CJJasfPgxf0K9U.roa (hash: Bq8kCXwpBRnHBgJBCumGdqGaVlW+LIt6xmOmyuq+Mck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/Xquekv3YH0FBR5edBTHibe3SYqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/Xquekv3YH0FBR5edBTHibe3SYqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xquekv3YH0FBR5edBTHibe3SYqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:c7:e6:38:af:71:56:0a:60:df:b9:b1:5c:df:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eab9e92fdd81f414147979d0531e26dedd262ac
Validity
Not Before: Jul 28 21:01:58 2026 GMT
Not After : Jul 29 21:01:58 2026 GMT
Subject: CN=cd5048fa67c73916ec70fb91070804058dbd9f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:1c:88:2e:e7:ff:76:7c:27:b0:ed:41:20:f4:
a8:81:6c:2b:3d:af:c6:92:f8:f9:4b:46:07:41:5b:
d0:a8:de:ff:a6:50:31:d5:b9:70:10:48:95:2d:1d:
fa:e8:10:88:ba:14:2f:d2:df:db:8f:78:d9:39:4a:
af:7c:5d:0d:fa:3a:5b:f0:2e:2f:fd:31:f7:56:04:
40:87:11:ef:1e:9d:d3:e2:2b:d2:30:26:ae:a8:67:
78:a0:0e:9c:1a:53:8f:ac:eb:c9:eb:3c:08:48:8e:
02:c0:73:f5:15:b7:91:17:9d:52:12:aa:c9:4a:d8:
69:68:16:79:84:1c:0a:5b:e7:7d:72:bf:59:69:6b:
e1:16:90:0c:4f:a0:1c:af:ea:2f:ec:93:fe:bb:03:
9b:37:a3:6a:be:99:2e:91:1b:cb:e7:89:37:ec:80:
ea:b4:7c:d1:4c:fe:26:67:e1:8b:5c:58:a4:34:7b:
c7:37:aa:af:dc:bd:4d:82:c0:54:a6:43:de:6a:65:
e0:96:39:41:7e:99:c2:8d:b2:a1:23:ad:14:a3:7b:
e1:eb:de:10:ba:53:a3:98:e5:63:76:7d:28:80:b5:
22:a9:bc:ca:b4:38:4d:6a:31:2d:95:54:a0:e8:72:
1f:6c:5c:ca:a9:41:f1:f3:37:78:65:30:e2:22:e4:
8a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:50:48:FA:67:C7:39:16:EC:70:FB:91:07:08:04:05:8D:BD:9F:22
X509v3 Authority Key Identifier:
keyid:5E:AB:9E:92:FD:D8:1F:41:41:47:97:9D:05:31:E2:6D:ED:D2:62:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xquekv3YH0FBR5edBTHibe3SYqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/Xquekv3YH0FBR5edBTHibe3SYqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/Xquekv3YH0FBR5edBTHibe3SYqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:f6:8a:61:c7:c4:45:e7:c3:af:0a:e6:9b:d1:52:10:97:f0:
6a:21:56:10:6b:52:ea:12:d5:bf:97:6e:53:7a:ff:56:90:cc:
ce:03:fb:09:1b:b1:bf:57:36:e9:a5:a2:45:3d:7c:27:80:45:
09:cf:fc:6c:56:fb:45:47:e5:ac:3c:98:c6:42:b8:d9:b4:e5:
b8:8d:28:97:66:bb:4c:6f:12:bd:2d:cc:1b:71:47:a7:93:c1:
8f:1d:f0:8f:ab:90:97:3a:97:bd:eb:87:0f:28:f3:89:5b:21:
ff:78:95:61:09:18:fc:2b:a9:eb:7b:6c:16:9c:28:c5:99:b0:
fa:c2:06:52:7c:2d:83:f9:2f:02:54:a0:89:54:fa:9e:61:28:
89:a0:c6:16:78:a9:7e:d9:02:50:61:23:2f:63:b8:be:3c:bc:
d0:52:57:73:4b:c0:33:05:37:ee:d0:87:09:9a:f3:b6:79:ab:
8a:44:b5:ff:15:81:19:c0:9f:89:aa:5a:32:2f:37:83:1e:aa:
59:32:16:70:4c:1c:80:44:b1:0f:ac:b2:7a:5f:05:bb:8b:58:
a8:c2:41:f2:3f:c4:cf:1c:4e:cf:f5:0a:55:b6:d0:c2:6f:93:
5c:6a:83:d9:fb:e1:50:da:1b:27:d1:52:0f:21:73:54:76:0d:
6b:25:68:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qiMfmOK9xVgpg37mxXN+NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlYWI5ZTkyZmRkODFmNDE0MTQ3OTc5ZDA1MzFlMjZkZWRk
MjYyYWMwHhcNMjYwNzI4MjEwMTU4WhcNMjYwNzI5MjEwMTU4WjAzMTEwLwYDVQQD
EyhjZDUwNDhmYTY3YzczOTE2ZWM3MGZiOTEwNzA4MDQwNThkYmQ5ZjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6RyILuf/dnwnsO1BIPSogWwrPa/G
kvj5S0YHQVvQqN7/plAx1blwEEiVLR366BCIuhQv0t/bj3jZOUqvfF0N+jpb8C4v
/TH3VgRAhxHvHp3T4ivSMCauqGd4oA6cGlOPrOvJ6zwISI4CwHP1FbeRF51SEqrJ
SthpaBZ5hBwKW+d9cr9ZaWvhFpAMT6Acr+ov7JP+uwObN6NqvpkukRvL54k37IDq
tHzRTP4mZ+GLXFikNHvHN6qv3L1NgsBUpkPeamXgljlBfpnCjbKhI60Uo3vh694Q
ulOjmOVjdn0ogLUiqbzKtDhNajEtlVSg6HIfbFzKqUHx8zd4ZTDiIuSKXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM1QSPpnxzkW7HD7kQcIBAWNvZ8iMB8GA1UdIwQY
MBaAFF6rnpL92B9BQUeXnQUx4m3t0mKsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHF1ZWt2M1lIMEZCUjVlZEJUSGliZTNTWXF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9hZDM1ODYtYTAyOC00NzQ2LWIzZGEt
ODE0ODU2ZTFiMWY0LzEvWHF1ZWt2M1lIMEZCUjVlZEJUSGliZTNTWXF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9hZDM1ODYtYTAyOC00NzQ2LWIzZGEtODE0ODU2ZTFiMWY0
LzEvWHF1ZWt2M1lIMEZCUjVlZEJUSGliZTNTWXF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQvaKYcfE
RefDrwrmm9FSEJfwaiFWEGtS6hLVv5duU3r/VpDMzgP7CRuxv1c26aWiRT18J4BF
Cc/8bFb7RUflrDyYxkK42bTluI0ol2a7TG8SvS3MG3FHp5PBjx3wj6uQlzqXveuH
DyjziVsh/3iVYQkY/Cup63tsFpwoxZmw+sIGUnwtg/kvAlSgiVT6nmEoiaDGFnip
ftkCUGEjL2O4vjy80FJXc0vAMwU37tCHCZrztnmrikS1/xWBGcCfiapaMi83gx6q
WTIWcEwcgESxD6yyel8Fu4tYqMJB8j/EzxxOz/UKVbbQwm+TXGqD2fvhUNobJ9FS
DyFzVHYNayVoHg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:34:29 2026 by rpki-client