Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
File: XigJUGU6fsWMUzhdALOB77tGWCQ.mft (raw, json)
Hash identifier: QW8L8Rk/FbrH9uYvTbyt189y/dLb+cyiJLuWyEQROSg=
Subject key identifier: AC:F0:6F:A5:2B:5E:3B:95:DA:7B:D8:07:2B:88:23:D1:F6:CA:9A:44
Authority key identifier: 5E:28:09:50:65:3A:7E:C5:8C:53:38:5D:00:B3:81:EF:BB:46:58:24
Certificate issuer: /CN=5e280950653a7ec58c53385d00b381efbb465824
Certificate serial: 01A0C28E27E135EC42B6743E123079498925
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
Manifest number: 0A25
Signing time: Mon 21 Sep 2026 06:01:31 +0000
Manifest this update: Mon 21 Sep 2026 06:01:31 +0000
Manifest next update: Tue 22 Sep 2026 06:01:31 +0000
Files and hashes: 1: 1-N-Z3cPVFu_Om0GHK2AgOkgXdoM.roa (hash: fr16WHaKP/dmz7kwPH4GVwwXFVV/SyIEEVY49/wQV+U=)
2: 1aw8Nv97xOelgCP3-YnwnaxEm5Y.roa (hash: jy29WIgwdNl8op/0r93ONPzqQSdB42DU8p3Gs7efZY0=)
3: 2PxDuTNSWd2nVBQOyZp7w-a3G48.roa (hash: nuRMk74zjQwmTzVhehj6QjrkhW4+qo+fGCHLFEBJBC0=)
4: XigJUGU6fsWMUzhdALOB77tGWCQ.crl (hash: umpPgkpBvnGvY9TO19mHPazmX9k5dv7PRSiP8hkr2WA=)
5: c9R4pyYEgXuth8LibhVlQrijaqw.roa (hash: GjJoF2AKi6roB+eJMggN2owFvnp/FEnfdBtdPLGnDgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8e:27:e1:35:ec:42:b6:74:3e:12:30:79:49:89:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e280950653a7ec58c53385d00b381efbb465824
Validity
Not Before: Sep 21 06:01:31 2026 GMT
Not After : Sep 22 06:01:31 2026 GMT
Subject: CN=acf06fa52b5e3b95da7bd8072b8823d1f6ca9a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e5:31:49:54:9f:72:56:db:17:1e:ff:6d:00:
9c:5b:f9:e4:4d:3e:3e:23:77:b0:31:bd:90:37:47:
b8:6f:45:00:3f:89:f6:8f:06:18:15:53:f5:33:79:
8f:a1:fa:f2:97:cc:2a:cf:a9:ec:f9:ce:42:36:a3:
8e:c4:b4:f5:68:fe:77:d5:cc:ad:9d:7e:e7:6c:09:
6d:86:4d:c1:77:fb:0c:0a:cf:37:53:b3:63:1c:66:
cf:9b:6b:a5:82:73:2e:81:a5:5b:51:06:ab:fa:cd:
60:83:d1:ad:f3:b3:ff:77:3b:73:ba:45:7a:29:9c:
a7:3f:a7:e8:ea:b1:ab:34:2a:a7:97:0e:2e:7c:dc:
e5:7d:df:5d:5e:66:a1:fc:dd:06:30:d7:30:a8:87:
24:87:df:b1:6d:46:bd:a3:71:2c:16:ce:60:09:06:
12:02:bc:b3:07:71:66:c5:bc:3b:c6:b3:3b:96:3e:
b9:e8:4e:5a:88:ce:77:8c:ed:c6:31:9f:6d:cb:d8:
59:b0:0e:a9:6b:7c:21:41:c0:5d:b8:6f:c1:b9:81:
ac:cd:68:45:c2:06:a4:aa:43:1f:f7:41:06:0f:f8:
ae:4b:f8:22:59:24:64:e7:60:e9:c0:b6:5f:e9:12:
31:d5:b0:2c:62:35:f4:a5:b9:c5:21:77:cd:cb:24:
fd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F0:6F:A5:2B:5E:3B:95:DA:7B:D8:07:2B:88:23:D1:F6:CA:9A:44
X509v3 Authority Key Identifier:
keyid:5E:28:09:50:65:3A:7E:C5:8C:53:38:5D:00:B3:81:EF:BB:46:58:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:95:a0:93:bf:8b:a4:4e:72:73:a3:1d:3b:3a:62:d7:ce:f3:
2b:2f:b0:39:0f:99:01:8a:ae:d0:29:1b:07:d3:94:4b:7b:e3:
c9:f9:2f:d8:20:c0:c8:37:94:93:15:77:95:38:e4:80:fc:68:
1a:ed:a7:d7:91:04:ed:95:03:76:74:9e:37:1a:c2:84:16:26:
28:47:5d:85:62:a8:0f:76:15:39:e0:75:ad:63:01:46:1a:8e:
33:3b:00:07:1d:5c:cc:76:b0:c6:81:6f:9a:c9:8b:d6:5e:aa:
90:ad:5b:c7:f4:ba:d1:c9:09:6c:6d:c0:cd:10:03:7e:d2:54:
d0:ab:7c:3a:93:36:c2:f0:a6:c1:94:f4:c6:24:2d:5e:82:72:
42:bf:01:b6:c0:21:2a:2e:bd:bd:95:55:f8:a2:cb:be:7d:e9:
1a:e3:2e:17:a7:c7:02:e0:5d:0c:7a:bc:7c:19:56:82:3e:bc:
13:08:b1:05:9c:7a:af:97:92:9c:d8:c0:1e:fd:ca:5b:51:00:
00:3b:e0:45:ec:20:b1:79:cb:87:b9:f1:45:9d:9f:80:a5:08:
50:3b:e5:4b:7d:c3:c6:6b:4f:d7:63:63:fe:5d:7f:59:b1:8e:
97:9d:de:d3:62:66:e6:f9:6f:56:71:65:23:0a:64:45:c1:67:
dd:15:65:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDCjifhNexCtnQ+EjB5SYklMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMjgwOTUwNjUzYTdlYzU4YzUzMzg1ZDAwYjM4MWVmYmI0
NjU4MjQwHhcNMjYwOTIxMDYwMTMxWhcNMjYwOTIyMDYwMTMxWjAzMTEwLwYDVQQD
EyhhY2YwNmZhNTJiNWUzYjk1ZGE3YmQ4MDcyYjg4MjNkMWY2Y2E5YTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteUxSVSfclbbFx7/bQCcW/nkTT4+
I3ewMb2QN0e4b0UAP4n2jwYYFVP1M3mPofryl8wqz6ns+c5CNqOOxLT1aP531cyt
nX7nbAlthk3Bd/sMCs83U7NjHGbPm2ulgnMugaVbUQar+s1gg9Gt87P/dztzukV6
KZynP6fo6rGrNCqnlw4ufNzlfd9dXmah/N0GMNcwqIckh9+xbUa9o3EsFs5gCQYS
AryzB3Fmxbw7xrM7lj656E5aiM53jO3GMZ9ty9hZsA6pa3whQcBduG/BuYGszWhF
wgakqkMf90EGD/iuS/giWSRk52DpwLZf6RIx1bAsYjX0pbnFIXfNyyT9dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKzwb6UrXjuV2nvYByuII9H2yppEMB8GA1UdIwQY
MBaAFF4oCVBlOn7FjFM4XQCzge+7RlgkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGlnSlVHVTZmc1dNVXpoZEFMT0I3N3RHV0NRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC83MmM1ODctYzVjYi00MGU0LThjZTEt
ZTFiNTM1NTZjMWMzLzEvWGlnSlVHVTZmc1dNVXpoZEFMT0I3N3RHV0NRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC83MmM1ODctYzVjYi00MGU0LThjZTEtZTFiNTM1NTZjMWMz
LzEvWGlnSlVHVTZmc1dNVXpoZEFMT0I3N3RHV0NRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHJWgk7+L
pE5yc6MdOzpi187zKy+wOQ+ZAYqu0CkbB9OUS3vjyfkv2CDAyDeUkxV3lTjkgPxo
Gu2n15EE7ZUDdnSeNxrChBYmKEddhWKoD3YVOeB1rWMBRhqOMzsABx1czHawxoFv
msmL1l6qkK1bx/S60ckJbG3AzRADftJU0Kt8OpM2wvCmwZT0xiQtXoJyQr8BtsAh
Ki69vZVV+KLLvn3pGuMuF6fHAuBdDHq8fBlWgj68EwixBZx6r5eSnNjAHv3KW1EA
ADvgRewgsXnLh7nxRZ2fgKUIUDvlS33DxmtP12Nj/l1/WbGOl53e02Jm5vlvVnFl
IwpkRcFn3RVlYw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 14:45:30 2026 by rpki-client