Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
File: XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft (raw, json)
Hash identifier: Ed/qDmtA33zpgjTO6juRhDMRfjnmP445CwBUBEDY2VY=
Subject key identifier: 31:B4:91:2D:2E:20:6F:FC:7B:A2:FB:09:E4:41:D8:25:51:CE:F4:71
Authority key identifier: 5F:02:11:C9:1E:9E:0D:35:CB:51:33:45:91:3E:0A:1A:61:BF:D2:49
Certificate issuer: /CN=5f0211c91e9e0d35cb513345913e0a1a61bfd249
Certificate serial: 019EBE7FEAE47A67E621C9D7210AA851070C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
Manifest number: 0458
Signing time: Sat 13 Jun 2026 01:01:54 +0000
Manifest this update: Sat 13 Jun 2026 01:01:54 +0000
Manifest next update: Sun 14 Jun 2026 01:01:54 +0000
Files and hashes: 1: 9t-kj9KSgE_mtJrGu_vF73d0l6Y.roa (hash: 51rv5VaG8OxclhZBSDZarO+xxvZazg5aJ0EVnW1xLb4=)
2: Cp2g6yP8AZxNfoA9Wugu4JCgHtU.roa (hash: dD5+5+i7pHxfaDCaP1GC9Pk/dDoxKx8XSPEPjuWP/AY=)
3: LFwn43xTYGqoLZrK3ArerlmBrjQ.asa (hash: AxTumCJIWLYkfNBVRk61fjyr7ogt1SGEuY0CQ+zm9dQ=)
4: Nc1LVsFzrH3eQcfHMAmDYgj_p64.asa (hash: /m2FPHvyf0O1/JM/QcuY6SFVqTD2GvTjahW6Zjqr3lE=)
5: XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl (hash: nS/qKGRjRJqLWLJ1d2/UWvMHLMd5k80vDCh7d9NHUC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7f:ea:e4:7a:67:e6:21:c9:d7:21:0a:a8:51:07:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0211c91e9e0d35cb513345913e0a1a61bfd249
Validity
Not Before: Jun 13 01:01:54 2026 GMT
Not After : Jun 14 01:01:54 2026 GMT
Subject: CN=31b4912d2e206ffc7ba2fb09e441d82551cef471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:84:03:cc:62:65:39:6c:e0:8c:fa:00:ce:f7:
71:55:99:e1:97:d6:3f:25:cf:a6:22:1f:b4:ba:17:
90:2c:dd:e0:21:40:b6:25:e9:72:58:13:0f:14:86:
cb:ef:0e:80:68:87:40:e2:6b:cf:a8:24:95:b0:cc:
f1:6c:ac:46:c0:1c:c2:2f:a5:9a:84:e1:d8:c6:5e:
80:cd:61:68:97:a2:05:52:d1:0f:79:83:53:b3:c8:
7e:0e:0e:c6:db:bf:68:93:2d:75:c3:28:c2:35:fd:
b3:30:4a:de:da:5f:c0:b9:d2:4a:ed:51:04:02:f5:
79:81:04:38:6d:26:19:34:f8:10:32:5b:33:f0:e0:
db:e3:de:37:bd:aa:22:fa:98:c0:60:57:71:c3:32:
5a:f5:cc:19:ea:e5:0f:aa:49:bf:ac:02:4d:fb:a7:
e8:e8:42:c2:fe:86:25:b3:40:3a:bd:be:5e:47:1a:
5f:1a:71:28:fb:1a:e4:fa:b3:60:73:a1:b9:af:4c:
e3:7f:83:49:3d:13:67:1a:c9:5f:85:00:fe:ca:af:
fe:68:e5:78:51:69:c0:9c:82:5e:95:3d:f9:65:f5:
45:cb:db:b1:d1:0e:83:fe:bd:49:96:f3:5e:c7:37:
cc:28:8b:2c:7c:93:93:d5:37:82:ee:68:c8:c4:91:
e1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B4:91:2D:2E:20:6F:FC:7B:A2:FB:09:E4:41:D8:25:51:CE:F4:71
X509v3 Authority Key Identifier:
keyid:5F:02:11:C9:1E:9E:0D:35:CB:51:33:45:91:3E:0A:1A:61:BF:D2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:3f:3d:d0:a0:fc:37:db:ad:dd:79:1b:0e:4a:28:c3:d5:34:
be:c5:e4:49:e4:97:28:5e:ae:4c:30:26:76:5d:a2:5b:5b:e7:
f9:d6:a5:30:0c:bb:0c:ee:1d:61:a2:8a:e5:94:79:af:76:8f:
69:51:fc:bd:87:df:84:e4:54:03:72:57:02:ec:26:4d:d3:df:
3d:84:54:8a:12:96:18:14:c4:56:49:ea:15:0a:1a:6c:65:11:
25:81:cf:9a:21:06:70:ae:6c:09:2e:da:a4:c7:40:b1:5b:f5:
cd:3d:a3:85:38:e2:84:21:62:87:6c:19:cb:1b:aa:31:91:51:
22:cc:28:42:8d:9d:d2:1b:0f:cc:35:9c:82:de:9f:80:1f:57:
17:3f:fe:7c:c7:f4:d0:f5:c9:c8:5d:8c:aa:80:e9:90:d9:49:
17:28:e6:8d:0e:65:1d:80:8a:02:13:96:e7:39:66:75:e9:e5:
73:20:f0:21:6a:10:16:00:9f:a3:62:66:b6:be:bf:07:05:8d:
45:66:1d:61:d5:76:4c:c5:e8:ed:35:22:fc:18:9c:9a:d3:3e:
86:7d:90:fc:6f:4c:d4:f1:b0:ab:e3:c0:7c:f2:5e:18:81:0c:
3c:5c:11:bc:9d:eb:0b:cb:47:76:aa:f1:f6:8d:e7:e0:52:0a:
4c:76:f4:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+f+rkemfmIcnXIQqoUQcMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMDIxMWM5MWU5ZTBkMzVjYjUxMzM0NTkxM2UwYTFhNjFi
ZmQyNDkwHhcNMjYwNjEzMDEwMTU0WhcNMjYwNjE0MDEwMTU0WjAzMTEwLwYDVQQD
EygzMWI0OTEyZDJlMjA2ZmZjN2JhMmZiMDllNDQxZDgyNTUxY2VmNDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIQDzGJlOWzgjPoAzvdxVZnhl9Y/
Jc+mIh+0uheQLN3gIUC2JelyWBMPFIbL7w6AaIdA4mvPqCSVsMzxbKxGwBzCL6Wa
hOHYxl6AzWFol6IFUtEPeYNTs8h+Dg7G279oky11wyjCNf2zMEre2l/AudJK7VEE
AvV5gQQ4bSYZNPgQMlsz8ODb4943vaoi+pjAYFdxwzJa9cwZ6uUPqkm/rAJN+6fo
6ELC/oYls0A6vb5eRxpfGnEo+xrk+rNgc6G5r0zjf4NJPRNnGslfhQD+yq/+aOV4
UWnAnIJelT35ZfVFy9ux0Q6D/r1JlvNexzfMKIssfJOT1TeC7mjIxJHhKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDG0kS0uIG/8e6L7CeRB2CVRzvRxMB8GA1UdIwQY
MBaAFF8CEckeng01y1EzRZE+Chphv9JJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHdJUnlSNmVEVFhMVVRORmtUNEtHbUdfMGtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny82NmQwNTctNzdlNS00MjQxLTgwYWEt
MjFmZDM1Y2Y0YmI5LzEvWHdJUnlSNmVEVFhMVVRORmtUNEtHbUdfMGtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny82NmQwNTctNzdlNS00MjQxLTgwYWEtMjFmZDM1Y2Y0YmI5
LzEvWHdJUnlSNmVEVFhMVVRORmtUNEtHbUdfMGtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALT890KD8
N9ut3XkbDkoow9U0vsXkSeSXKF6uTDAmdl2iW1vn+dalMAy7DO4dYaKK5ZR5r3aP
aVH8vYffhORUA3JXAuwmTdPfPYRUihKWGBTEVknqFQoabGURJYHPmiEGcK5sCS7a
pMdAsVv1zT2jhTjihCFih2wZyxuqMZFRIswoQo2d0hsPzDWcgt6fgB9XFz/+fMf0
0PXJyF2MqoDpkNlJFyjmjQ5lHYCKAhOW5zlmdenlcyDwIWoQFgCfo2Jmtr6/BwWN
RWYdYdV2TMXo7TUi/BicmtM+hn2Q/G9M1PGwq+PAfPJeGIEMPFwRvJ3rC8tHdqrx
9o3n4FIKTHb0hQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:27:26 2026 by rpki-client