Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
File: xgWHGIm53K_n7DE2rtHd_uLfvH0.mft (raw, json)
Hash identifier: OD5P9+4WxZb9UA3lY+Oo9M7NbsSb4DRfmTvAq2zvvqo=
Subject key identifier: B1:6D:CF:91:8E:13:35:CC:21:63:C2:1F:8F:5D:3C:E0:74:55:15:48
Authority key identifier: C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D
Certificate issuer: /CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d
Certificate serial: 019FAAF567E93CAB54F86661BA0336D3021A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
Manifest number: 19D7
Signing time: Tue 28 Jul 2026 23:00:37 +0000
Manifest this update: Tue 28 Jul 2026 23:00:37 +0000
Manifest next update: Wed 29 Jul 2026 23:00:37 +0000
Files and hashes: 1: LS6g_qbOyr5L3M2tEJSHcqYLaGo.roa (hash: pmKUoQElX3xSvG0E8J7HtZYFqjVisgOfWkSTHkEuCRA=)
2: p_1zOjE7RDNIPM-9ijPLsTD4cC4.roa (hash: XKWGoP/7AKlCb/UQ1yCnmOl4XCSltYQxcpO0+1gE4vE=)
3: xgWHGIm53K_n7DE2rtHd_uLfvH0.crl (hash: z0fJnuo21jVzIZAK8xJmfIhcUFzupLq4D1Cvak1dOio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:67:e9:3c:ab:54:f8:66:61:ba:03:36:d3:02:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d
Validity
Not Before: Jul 28 23:00:37 2026 GMT
Not After : Jul 29 23:00:37 2026 GMT
Subject: CN=b16dcf918e1335cc2163c21f8f5d3ce074551548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0f:37:ea:7c:d0:58:e5:d1:a6:6d:71:75:d9:
01:a5:32:78:d9:00:af:9c:46:95:08:68:96:17:0a:
9f:10:4f:9b:d0:ff:ce:e9:3b:a6:9b:42:22:f4:ff:
c7:d2:fd:62:20:1c:61:4a:9c:84:41:d3:9d:6e:4b:
c6:82:ed:df:e9:02:5d:51:15:3c:a5:dc:bb:47:5a:
18:62:79:b5:6b:96:84:33:e8:ee:88:fe:8f:60:06:
f1:89:3a:c6:d8:f6:24:7a:fe:45:ab:0f:80:5a:7e:
93:f4:60:1b:c4:c4:88:1c:6a:63:ee:c8:6f:16:b2:
34:41:8d:1f:85:9e:b5:48:b2:15:30:c6:b3:d3:11:
e5:52:09:e1:85:37:9a:4d:9d:2a:0d:37:d9:af:66:
8d:27:ee:bb:21:af:f5:f9:4b:19:0a:1c:18:36:58:
2a:8f:17:0c:44:bf:9d:e7:09:ca:d0:34:17:2f:d8:
8c:3d:04:9b:f3:db:da:5b:a6:3f:c6:02:ff:8d:dc:
3a:86:5e:b3:55:d8:a3:66:1a:33:f2:30:14:e3:fc:
97:c8:21:ad:ff:ba:7d:49:87:e6:c6:93:aa:35:bc:
b1:7a:c7:55:6f:29:d0:a4:22:62:6f:65:5c:cc:0f:
22:a0:94:b7:0d:06:70:26:d5:fd:1b:24:c7:91:c9:
3f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:6D:CF:91:8E:13:35:CC:21:63:C2:1F:8F:5D:3C:E0:74:55:15:48
X509v3 Authority Key Identifier:
keyid:C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:ab:5f:b2:48:21:6e:af:a3:f8:81:85:ca:28:34:e7:59:38:
be:80:2e:b2:f1:43:0b:6e:d1:f5:37:23:b8:0f:92:14:ef:08:
c7:c2:fc:55:1d:39:14:3e:13:cc:00:0e:29:cd:c2:bb:f8:cf:
1d:49:d9:d1:02:cf:8e:ca:3a:ab:7a:8a:30:3a:b7:57:6a:a3:
a1:a8:bd:2d:14:f7:6f:ed:4c:5c:06:e0:3b:78:ad:b2:79:90:
a9:0b:bc:18:af:ef:00:c2:3e:f3:c8:93:20:35:53:d6:13:51:
7b:73:31:76:7a:c6:ee:6d:22:b2:94:5f:60:7b:dd:49:c4:eb:
97:1d:bf:66:a8:bd:68:dd:96:ee:b3:1b:8b:29:4d:15:ef:0f:
7a:55:e4:57:3c:ae:cd:4e:4b:7f:4c:02:9a:6a:38:e0:4b:a7:
72:d2:ad:98:9f:d9:46:d4:79:cf:73:e2:74:ba:c7:dd:de:70:
1a:0f:08:1c:04:5c:e5:34:54:a6:cc:db:06:33:5e:9d:80:7d:
8c:0f:e2:f6:94:6b:66:05:bb:c7:4f:28:d6:ea:3a:28:65:30:
b3:9d:fa:de:1d:82:f5:de:76:eb:7a:be:7a:a9:80:27:ea:b7:
05:56:15:52:6b:50:a5:cd:ed:7d:c2:62:42:86:23:07:e7:fd:
5b:5b:10:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+q9WfpPKtU+GZhugM20wIaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MDU4NzE4ODliOWRjYWZlN2VjMzEzNmFlZDFkZGZlZTJk
ZmJjN2QwHhcNMjYwNzI4MjMwMDM3WhcNMjYwNzI5MjMwMDM3WjAzMTEwLwYDVQQD
EyhiMTZkY2Y5MThlMTMzNWNjMjE2M2MyMWY4ZjVkM2NlMDc0NTUxNTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsg836nzQWOXRpm1xddkBpTJ42QCv
nEaVCGiWFwqfEE+b0P/O6Tumm0Ii9P/H0v1iIBxhSpyEQdOdbkvGgu3f6QJdURU8
pdy7R1oYYnm1a5aEM+juiP6PYAbxiTrG2PYkev5Fqw+AWn6T9GAbxMSIHGpj7shv
FrI0QY0fhZ61SLIVMMaz0xHlUgnhhTeaTZ0qDTfZr2aNJ+67Ia/1+UsZChwYNlgq
jxcMRL+d5wnK0DQXL9iMPQSb89vaW6Y/xgL/jdw6hl6zVdijZhoz8jAU4/yXyCGt
/7p9SYfmxpOqNbyxesdVbynQpCJib2VczA8ioJS3DQZwJtX9GyTHkck/VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLFtz5GOEzXMIWPCH49dPOB0VRVIMB8GA1UdIwQY
MBaAFMYFhxiJudyv5+wxNq7R3f7i37x9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGdXSEdJbTUzS19uN0RFMnJ0SGRfdUxmdkgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82MDQ2YTYtZGVjYi00OWEzLWEzYjQt
MzA4N2Y4NmE2M2FiLzEveGdXSEdJbTUzS19uN0RFMnJ0SGRfdUxmdkgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy82MDQ2YTYtZGVjYi00OWEzLWEzYjQtMzA4N2Y4NmE2M2Fi
LzEveGdXSEdJbTUzS19uN0RFMnJ0SGRfdUxmdkgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApatfskgh
bq+j+IGFyig051k4voAusvFDC27R9TcjuA+SFO8Ix8L8VR05FD4TzAAOKc3Cu/jP
HUnZ0QLPjso6q3qKMDq3V2qjoai9LRT3b+1MXAbgO3itsnmQqQu8GK/vAMI+88iT
IDVT1hNRe3MxdnrG7m0ispRfYHvdScTrlx2/Zqi9aN2W7rMbiylNFe8PelXkVzyu
zU5Lf0wCmmo44EunctKtmJ/ZRtR5z3PidLrH3d5wGg8IHARc5TRUpszbBjNenYB9
jA/i9pRrZgW7x08o1uo6KGUws5363h2C9d5263q+eqmAJ+q3BVYVUmtQpc3tfcJi
QoYjB+f9W1sQ3Q==
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:58:26 2026 by rpki-client