Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
File: XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft (raw, json)
Hash identifier: UNogEkYBb1xTA7wQ8PweZcw/IjjcKpjEX57wuQE2Jus=
Subject key identifier: 63:80:C2:D9:85:D5:A2:88:1C:DD:48:C0:26:DD:DA:2C:73:AD:47:54
Authority key identifier: 5E:06:6D:E9:82:9B:76:1E:DC:E1:71:E8:EA:3C:59:35:E4:4F:4E:9A
Certificate issuer: /CN=5e066de9829b761edce171e8ea3c5935e44f4e9a
Certificate serial: 019FA899FA7C2CA36D118AF58E6CB2FAFCCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
Manifest number: 0908
Signing time: Tue 28 Jul 2026 12:01:31 +0000
Manifest this update: Tue 28 Jul 2026 12:01:31 +0000
Manifest next update: Wed 29 Jul 2026 12:01:31 +0000
Files and hashes: 1: O9do_tpuJS2IYg238tFeLgPwuLo.roa (hash: inPkQd2M/OOC4cE+kZAGV36qocuoxkiJ2VIdZgql1s8=)
2: OQMR_FkQfBmNWWsOByMgzVQchtc.roa (hash: E+VXuwQXys0IVzb1O36G+Zcgxr0/sBSG/vjRsxKVhO0=)
3: XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl (hash: q1iFpoIjI0skWa4696oPkKcdI6ln4O7a9P/BV1v4oRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:fa:7c:2c:a3:6d:11:8a:f5:8e:6c:b2:fa:fc:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e066de9829b761edce171e8ea3c5935e44f4e9a
Validity
Not Before: Jul 28 12:01:31 2026 GMT
Not After : Jul 29 12:01:31 2026 GMT
Subject: CN=6380c2d985d5a2881cdd48c026ddda2c73ad4754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5c:af:b4:cd:ff:99:f6:b4:b8:04:f2:da:00:
a8:21:81:d5:f2:ef:38:44:05:ee:db:ef:1f:8d:63:
4d:d4:e1:d2:98:3c:f1:7c:55:b0:7a:f5:6c:de:fb:
5c:9f:a7:ec:8b:56:68:ca:26:dc:66:40:0c:3a:26:
61:33:83:24:9b:a6:ea:4c:84:81:59:50:d8:5c:68:
b3:d0:39:7e:18:56:fb:b3:66:28:4b:77:2f:96:d0:
33:64:31:f8:b4:f6:29:a4:d3:74:71:6b:46:be:ca:
7c:3b:4e:e0:c6:bf:0d:35:12:b6:ba:52:08:b9:80:
46:05:7e:18:ad:48:3d:9f:e4:48:05:df:6c:24:09:
5c:5f:9a:a3:bc:43:d0:cc:0c:42:18:f6:1e:eb:93:
1c:4c:ca:39:35:b3:39:eb:85:95:59:1f:16:bd:a6:
67:41:d1:8d:36:9d:02:f9:e4:1d:20:02:95:75:8a:
0a:a7:cb:a4:66:1f:e6:d1:c8:4e:f3:a1:42:3e:9f:
22:1d:f8:de:86:f8:15:2a:50:46:80:73:ea:bf:a8:
40:e7:e7:cf:5a:a5:a0:de:09:2f:ca:32:6e:f0:70:
13:29:37:50:2c:3b:55:6e:ad:ed:55:28:51:9a:ad:
29:ad:af:8d:47:ab:a6:91:3f:f0:d1:17:05:80:30:
24:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:80:C2:D9:85:D5:A2:88:1C:DD:48:C0:26:DD:DA:2C:73:AD:47:54
X509v3 Authority Key Identifier:
keyid:5E:06:6D:E9:82:9B:76:1E:DC:E1:71:E8:EA:3C:59:35:E4:4F:4E:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a9:03:50:df:8e:70:10:5d:09:f2:c3:37:c7:fc:1d:97:c1:
f9:54:25:cc:b4:ce:d8:f0:3e:8d:97:72:b9:1b:70:50:f3:af:
e1:f1:59:f2:1a:86:65:82:2f:58:09:8b:5e:2c:65:fe:9a:88:
67:8e:f1:2a:be:35:1c:21:70:56:b0:43:79:65:3d:ec:16:2d:
f0:cb:e0:a2:9b:aa:6a:a9:6a:6c:b9:01:11:e6:1a:0f:9c:89:
72:b6:d7:16:22:b4:3a:5b:c3:84:0f:c4:a2:ea:fa:86:85:5e:
27:e5:c9:53:90:38:e6:d2:83:bd:fc:5c:2b:f0:00:d8:65:6f:
00:ca:75:53:41:99:56:96:7b:97:45:d8:db:b4:fb:63:b0:5b:
2f:24:84:08:48:0e:fd:97:8d:b1:56:2e:99:cf:d8:4a:9a:a9:
8d:2b:3c:38:dc:bc:ea:ae:41:0c:d3:1a:20:1c:bd:ed:40:db:
6c:9e:79:71:6a:de:86:1d:5a:3a:60:15:f5:94:cb:b6:8d:d2:
23:8b:44:a1:81:27:2a:0a:c1:13:48:66:52:0b:a3:71:b1:3d:
ad:0b:5b:c9:c8:b9:19:59:db:87:75:dc:c7:3b:2b:0d:1c:35:
78:9a:22:fb:56:a3:b1:9b:06:75:fe:b8:25:86:2a:d0:f6:26:
57:25:9c:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omfp8LKNtEYr1jmyy+vzKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMDY2ZGU5ODI5Yjc2MWVkY2UxNzFlOGVhM2M1OTM1ZTQ0
ZjRlOWEwHhcNMjYwNzI4MTIwMTMxWhcNMjYwNzI5MTIwMTMxWjAzMTEwLwYDVQQD
Eyg2MzgwYzJkOTg1ZDVhMjg4MWNkZDQ4YzAyNmRkZGEyYzczYWQ0NzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1yvtM3/mfa0uATy2gCoIYHV8u84
RAXu2+8fjWNN1OHSmDzxfFWwevVs3vtcn6fsi1ZoyibcZkAMOiZhM4Mkm6bqTISB
WVDYXGiz0Dl+GFb7s2YoS3cvltAzZDH4tPYppNN0cWtGvsp8O07gxr8NNRK2ulII
uYBGBX4YrUg9n+RIBd9sJAlcX5qjvEPQzAxCGPYe65McTMo5NbM564WVWR8WvaZn
QdGNNp0C+eQdIAKVdYoKp8ukZh/m0chO86FCPp8iHfjehvgVKlBGgHPqv6hA5+fP
WqWg3gkvyjJu8HATKTdQLDtVbq3tVShRmq0pra+NR6umkT/w0RcFgDAkZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGOAwtmF1aKIHN1IwCbd2ixzrUdUMB8GA1UdIwQY
MBaAFF4GbemCm3Ye3OFx6Oo8WTXkT06aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGdadDZZS2JkaDdjNFhIbzZqeFpOZVJQVHBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jYWM5YzQtZjliYi00NmQ0LWJiNjIt
NDc1YWRmM2FhN2IxLzEvWGdadDZZS2JkaDdjNFhIbzZqeFpOZVJQVHBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9jYWM5YzQtZjliYi00NmQ0LWJiNjItNDc1YWRmM2FhN2Ix
LzEvWGdadDZZS2JkaDdjNFhIbzZqeFpOZVJQVHBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT6kDUN+O
cBBdCfLDN8f8HZfB+VQlzLTO2PA+jZdyuRtwUPOv4fFZ8hqGZYIvWAmLXixl/pqI
Z47xKr41HCFwVrBDeWU97BYt8MvgopuqaqlqbLkBEeYaD5yJcrbXFiK0OlvDhA/E
our6hoVeJ+XJU5A45tKDvfxcK/AA2GVvAMp1U0GZVpZ7l0XY27T7Y7BbLySECEgO
/ZeNsVYumc/YSpqpjSs8ONy86q5BDNMaIBy97UDbbJ55cWrehh1aOmAV9ZTLto3S
I4tEoYEnKgrBE0hmUgujcbE9rQtbyci5GVnbh3XcxzsrDRw1eJoi+1ajsZsGdf64
JYYq0PYmVyWcBg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:43:50 2026 by rpki-client