Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
File: XxaylLGmR79tZ2g7UWFEl-dR8h8.mft (raw, json)
Hash identifier: vRVt0504/TXkxpsUbxhoP9cmlOBbr2dSpCbDFzBGGwg=
Subject key identifier: 95:1E:09:79:8D:9C:ED:D7:F5:DE:0E:93:37:56:E2:17:F4:46:75:08
Authority key identifier: 5F:16:B2:94:B1:A6:47:BF:6D:67:68:3B:51:61:44:97:E7:51:F2:1F
Certificate issuer: /CN=5f16b294b1a647bf6d67683b51614497e751f21f
Certificate serial: 019FA97572BFAAF04A24DDDEEEA05D271589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 16:01:14 +0000
Manifest this update: Tue 28 Jul 2026 16:01:14 +0000
Manifest next update: Wed 29 Jul 2026 16:01:14 +0000
Files and hashes: 1: NKg93JWQUnBu80RX13MwmqJxvVc.roa (hash: nG4jnHVVr/B/zg5snhsHaHEVH2wq5BQYMoc/wJLZKCM=)
2: XxaylLGmR79tZ2g7UWFEl-dR8h8.crl (hash: Z2m4tyDIQtY7Da0prmJL7ssLDtSIN4DFm2yzw+bWog0=)
3: wGoncIYhxzrOvpFggApuVrKV4Vk.asa (hash: S/6luEA1foPNyWEYWaj/UsXwLkgTP/ejkSFX9YYjOE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:72:bf:aa:f0:4a:24:dd:de:ee:a0:5d:27:15:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f16b294b1a647bf6d67683b51614497e751f21f
Validity
Not Before: Jul 28 16:01:14 2026 GMT
Not After : Jul 29 16:01:14 2026 GMT
Subject: CN=951e09798d9cedd7f5de0e933756e217f4467508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ee:b5:bb:4d:d1:27:1e:3f:80:d6:f4:75:06:
99:7f:c4:01:87:80:13:a7:cd:ea:de:d6:65:a1:1d:
c9:61:57:5a:54:f2:66:6a:82:e7:49:fe:89:ea:3a:
bd:39:31:a4:53:3b:38:90:83:4e:64:30:ce:a5:9f:
73:18:64:a6:c3:89:bb:78:1d:8b:99:46:61:25:e0:
64:51:df:da:d5:c0:af:95:34:fb:10:53:d8:e3:2e:
93:91:e4:bd:37:68:dc:a4:72:65:1c:dc:b1:56:3f:
f8:a4:4b:6a:c6:dc:ca:d8:3d:c0:78:fb:10:dc:1c:
9d:ce:94:ab:80:8f:a9:62:86:25:b2:87:e5:3a:1f:
28:29:a5:00:cd:d0:ff:b1:3b:2a:d6:cd:08:63:86:
4a:73:7a:da:2c:70:62:cb:a4:48:d5:21:e7:7f:ad:
35:0e:16:9c:f9:ae:88:41:aa:de:e0:4c:30:77:63:
ce:e5:02:31:c8:1c:af:5b:9e:62:4a:24:41:e8:37:
ff:eb:c8:90:9b:2b:2d:ca:c5:84:23:11:a3:2e:0e:
6f:74:14:82:83:43:56:12:3c:2f:d6:49:7e:4e:15:
f4:b3:a2:9a:36:58:c1:f7:3b:c9:5c:4c:dd:4d:92:
41:e6:5a:ac:27:e2:b0:95:ea:36:d2:c1:73:9c:85:
d5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:1E:09:79:8D:9C:ED:D7:F5:DE:0E:93:37:56:E2:17:F4:46:75:08
X509v3 Authority Key Identifier:
keyid:5F:16:B2:94:B1:A6:47:BF:6D:67:68:3B:51:61:44:97:E7:51:F2:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:f0:cb:66:e3:5f:df:47:20:ac:f4:1e:03:a8:e4:0f:06:82:
8a:92:78:03:c5:da:8d:f5:75:1e:d7:1b:e3:86:c3:c2:eb:56:
81:2e:53:b7:58:66:d0:af:58:bc:96:c7:91:44:4e:62:dc:65:
95:9e:2e:b2:47:89:7c:34:5d:40:2c:f0:c4:04:72:3e:07:6a:
3c:90:8d:b7:8d:6f:77:05:6d:2e:64:a4:11:17:fc:6c:43:0f:
68:52:50:01:c1:cd:80:b2:0a:fc:a5:f2:1c:27:93:a5:3e:d2:
d8:e3:5b:10:60:3e:90:3d:69:af:45:3d:67:fe:92:c4:90:05:
29:0b:26:a3:d5:38:fe:b9:3b:03:48:ba:2d:5f:f2:56:28:cb:
eb:55:7c:53:d7:e3:64:78:1b:42:24:99:05:74:4e:26:4b:b2:
53:a8:9f:d9:90:3f:da:24:e7:54:ad:48:ef:c9:06:ca:f2:f2:
4d:e1:61:9e:c2:de:81:9d:bb:e5:60:de:b4:eb:bf:f6:81:07:
21:cf:3c:66:da:3e:6c:28:37:85:ba:42:0d:ef:f0:67:7e:ed:
32:46:f0:d7:15:1b:32:65:98:e3:64:9d:36:4b:eb:aa:61:94:
7d:71:9e:8c:c2:6a:eb:33:9a:23:79:59:53:ea:7a:3b:a6:7d:
d7:b3:b9:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pdXK/qvBKJN3e7qBdJxWJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMTZiMjk0YjFhNjQ3YmY2ZDY3NjgzYjUxNjE0NDk3ZTc1
MWYyMWYwHhcNMjYwNzI4MTYwMTE0WhcNMjYwNzI5MTYwMTE0WjAzMTEwLwYDVQQD
Eyg5NTFlMDk3OThkOWNlZGQ3ZjVkZTBlOTMzNzU2ZTIxN2Y0NDY3NTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxO61u03RJx4/gNb0dQaZf8QBh4AT
p83q3tZloR3JYVdaVPJmaoLnSf6J6jq9OTGkUzs4kINOZDDOpZ9zGGSmw4m7eB2L
mUZhJeBkUd/a1cCvlTT7EFPY4y6TkeS9N2jcpHJlHNyxVj/4pEtqxtzK2D3AePsQ
3BydzpSrgI+pYoYlsoflOh8oKaUAzdD/sTsq1s0IY4ZKc3raLHBiy6RI1SHnf601
Dhac+a6IQare4Ewwd2PO5QIxyByvW55iSiRB6Df/68iQmystysWEIxGjLg5vdBSC
g0NWEjwv1kl+ThX0s6KaNljB9zvJXEzdTZJB5lqsJ+Kwleo20sFznIXVMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJUeCXmNnO3X9d4OkzdW4hf0RnUIMB8GA1UdIwQY
MBaAFF8WspSxpke/bWdoO1FhRJfnUfIfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHhheWxMR21SNzl0WjJnN1VXRkVsLWRSOGg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9kZjI3NzctNzdhMS00Yjg0LTkyMWYt
YTg4MjcwZjVkMWE5LzEvWHhheWxMR21SNzl0WjJnN1VXRkVsLWRSOGg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9kZjI3NzctNzdhMS00Yjg0LTkyMWYtYTg4MjcwZjVkMWE5
LzEvWHhheWxMR21SNzl0WjJnN1VXRkVsLWRSOGg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIfDLZuNf
30cgrPQeA6jkDwaCipJ4A8XajfV1Htcb44bDwutWgS5Tt1hm0K9YvJbHkUROYtxl
lZ4uskeJfDRdQCzwxARyPgdqPJCNt41vdwVtLmSkERf8bEMPaFJQAcHNgLIK/KXy
HCeTpT7S2ONbEGA+kD1pr0U9Z/6SxJAFKQsmo9U4/rk7A0i6LV/yVijL61V8U9fj
ZHgbQiSZBXROJkuyU6if2ZA/2iTnVK1I78kGyvLyTeFhnsLegZ275WDetOu/9oEH
Ic88Zto+bCg3hbpCDe/wZ37tMkbw1xUbMmWY42SdNkvrqmGUfXGejMJq6zOaI3lZ
U+p6O6Z917O5QA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:35:33 2026 by rpki-client