Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
File: XBEKKwrrN_DJMqlr279-82whGXw.mft (raw, json)
Hash identifier: FvoAjO9zFk5M9/s9qXG81tz/9rggBJ0Ht57LGqwM7Q4=
Subject key identifier: 8D:65:3D:8C:D3:ED:81:D4:E3:E6:9F:D4:A6:6A:E9:B6:85:70:0D:85
Authority key identifier: 5C:11:0A:2B:0A:EB:37:F0:C9:32:A9:6B:DB:BF:7E:F3:6C:21:19:7C
Certificate issuer: /CN=5c110a2b0aeb37f0c932a96bdbbf7ef36c21197c
Certificate serial: 019FAAF51864830F1B4814C61EC5A1EB4B24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XBEKKwrrN_DJMqlr279-82whGXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
Manifest number: 1540
Signing time: Tue 28 Jul 2026 23:00:16 +0000
Manifest this update: Tue 28 Jul 2026 23:00:16 +0000
Manifest next update: Wed 29 Jul 2026 23:00:16 +0000
Files and hashes: 1: NrZRCuerFzj4EhFGKoh_NKbZNxM.roa (hash: 5QAUpIfqv2CVCHxJDOL189fybpsclOVK/PxPIJsB8Xs=)
2: XBEKKwrrN_DJMqlr279-82whGXw.crl (hash: pcuMJZkhfdJ2y22bKNgG3y22RwctiK1DFvMnz7ijq/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XBEKKwrrN_DJMqlr279-82whGXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:18:64:83:0f:1b:48:14:c6:1e:c5:a1:eb:4b:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c110a2b0aeb37f0c932a96bdbbf7ef36c21197c
Validity
Not Before: Jul 28 23:00:16 2026 GMT
Not After : Jul 29 23:00:16 2026 GMT
Subject: CN=8d653d8cd3ed81d4e3e69fd4a66ae9b685700d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c5:ee:87:6d:0f:25:07:03:2d:d0:56:c2:04:
eb:14:8a:0b:56:38:31:17:88:4d:42:f4:86:2c:11:
f0:70:58:15:fe:c5:d5:e3:d4:cd:12:89:6a:cc:e5:
cb:d1:23:38:16:4d:41:b2:7d:c1:c5:b9:74:bf:ea:
1e:48:72:9a:cc:ca:56:d6:fa:fc:1d:dc:87:13:dc:
c6:e2:20:d0:e5:67:7d:86:ac:16:34:78:c9:05:3f:
a7:31:3b:4a:00:69:5c:1e:4e:a2:a5:88:1d:0e:6a:
98:0b:c5:85:70:9f:0a:ee:6a:ce:0d:fe:2d:f3:ba:
ab:04:c4:d2:88:1a:59:90:63:9c:1d:33:06:9d:c7:
1c:f8:ba:c1:97:83:e0:0a:ed:9f:da:fe:7b:80:28:
a7:8c:1d:8d:f7:10:21:3f:2d:b4:63:e1:6e:eb:3a:
9e:08:65:c4:25:28:18:2f:29:12:41:b7:4a:a1:53:
2c:d3:14:4e:b6:89:3b:08:58:15:4f:9d:b9:1f:22:
6c:75:39:07:b6:4a:da:4b:85:e1:e2:19:5c:4c:57:
48:5f:d0:b5:e9:8b:9b:52:66:aa:6c:7f:cb:62:75:
c7:32:35:d7:bc:99:0c:6f:3b:9b:b5:f4:42:aa:7f:
c8:6f:3a:05:6d:a8:5e:9d:6b:ef:1d:99:f1:8e:c6:
ff:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:65:3D:8C:D3:ED:81:D4:E3:E6:9F:D4:A6:6A:E9:B6:85:70:0D:85
X509v3 Authority Key Identifier:
keyid:5C:11:0A:2B:0A:EB:37:F0:C9:32:A9:6B:DB:BF:7E:F3:6C:21:19:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XBEKKwrrN_DJMqlr279-82whGXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:2b:d0:84:14:33:6d:d5:0b:5a:24:4b:96:b2:1b:a3:42:f7:
60:32:1f:e0:64:07:3c:1c:c8:b0:b3:a5:3e:d2:dd:72:ba:13:
24:ce:98:fa:bc:21:b1:54:c8:83:8a:be:96:df:ed:4d:cb:54:
c8:ab:2a:a0:3a:03:17:ae:98:37:b7:95:da:78:03:26:2c:e9:
f6:f5:86:a0:4e:fb:a6:37:f0:f8:dc:29:75:81:3e:0f:c7:25:
17:ad:1d:8b:36:ed:c5:5f:41:88:58:d5:ff:09:dd:1d:3d:b2:
3f:cb:10:33:33:41:b5:6e:36:31:9a:3f:fe:cf:6c:2f:fb:35:
6f:b7:94:b7:fd:3c:ab:48:3e:43:1e:91:67:ac:32:53:db:cc:
2e:68:13:86:e9:40:f2:3a:39:c0:e0:9e:a5:41:f5:7a:a0:c2:
33:db:37:c4:e9:5e:29:0e:b5:44:c2:e4:71:1b:86:05:db:12:
54:c1:40:ce:4e:42:ee:92:0b:3d:e8:21:e3:0f:8b:9f:2b:10:
0d:09:52:b6:75:04:0a:46:8c:00:c2:7b:f5:b0:ad:43:f1:b6:
47:aa:87:75:2f:3a:82:b3:a2:bd:f3:84:cc:64:ad:35:8f:da:
eb:5f:33:fd:e9:69:10:73:73:9b:65:bd:00:9d:42:cd:19:16:
87:9d:c0:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+q9Rhkgw8bSBTGHsWh60skMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjMTEwYTJiMGFlYjM3ZjBjOTMyYTk2YmRiYmY3ZWYzNmMy
MTE5N2MwHhcNMjYwNzI4MjMwMDE2WhcNMjYwNzI5MjMwMDE2WjAzMTEwLwYDVQQD
Eyg4ZDY1M2Q4Y2QzZWQ4MWQ0ZTNlNjlmZDRhNjZhZTliNjg1NzAwZDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8Xuh20PJQcDLdBWwgTrFIoLVjgx
F4hNQvSGLBHwcFgV/sXV49TNEolqzOXL0SM4Fk1Bsn3Bxbl0v+oeSHKazMpW1vr8
HdyHE9zG4iDQ5Wd9hqwWNHjJBT+nMTtKAGlcHk6ipYgdDmqYC8WFcJ8K7mrODf4t
87qrBMTSiBpZkGOcHTMGnccc+LrBl4PgCu2f2v57gCinjB2N9xAhPy20Y+Fu6zqe
CGXEJSgYLykSQbdKoVMs0xROtok7CFgVT525HyJsdTkHtkraS4Xh4hlcTFdIX9C1
6YubUmaqbH/LYnXHMjXXvJkMbzubtfRCqn/IbzoFbahenWvvHZnxjsb/AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI1lPYzT7YHU4+af1KZq6baFcA2FMB8GA1UdIwQY
MBaAFFwRCisK6zfwyTKpa9u/fvNsIRl8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEJFS0t3cnJOX0RKTXFscjI3OS04MndoR1h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9lNGM0MzUtZTZjZC00ZGEwLTllMzIt
YTQ0MjI0ZmFjM2ZmLzEvWEJFS0t3cnJOX0RKTXFscjI3OS04MndoR1h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9lNGM0MzUtZTZjZC00ZGEwLTllMzItYTQ0MjI0ZmFjM2Zm
LzEvWEJFS0t3cnJOX0RKTXFscjI3OS04MndoR1h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXyvQhBQz
bdULWiRLlrIbo0L3YDIf4GQHPBzIsLOlPtLdcroTJM6Y+rwhsVTIg4q+lt/tTctU
yKsqoDoDF66YN7eV2ngDJizp9vWGoE77pjfw+NwpdYE+D8clF60dizbtxV9BiFjV
/wndHT2yP8sQMzNBtW42MZo//s9sL/s1b7eUt/08q0g+Qx6RZ6wyU9vMLmgThulA
8jo5wOCepUH1eqDCM9s3xOleKQ61RMLkcRuGBdsSVMFAzk5C7pILPegh4w+LnysQ
DQlStnUECkaMAMJ79bCtQ/G2R6qHdS86grOivfOEzGStNY/a618z/elpEHNzm2W9
AJ1CzRkWh53AhQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:48:27 2026 by rpki-client