Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
File: X0qPBO8v6-VPnbapovhWWUtuLwg.mft (raw, json)
Hash identifier: e9sJG12YgoVrwN49JQD2Irb73Jrqbv4EOFbiOo9oYQk=
Subject key identifier: CB:99:1B:B9:52:18:03:7D:F6:F4:63:7B:52:36:0E:7D:DA:DD:0B:40
Authority key identifier: 5F:4A:8F:04:EF:2F:EB:E5:4F:9D:B6:A9:A2:F8:56:59:4B:6E:2F:08
Certificate issuer: /CN=5f4a8f04ef2febe54f9db6a9a2f856594b6e2f08
Certificate serial: 019FAC08D2DFD09A87E47BB8B1160C1B4CBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
Manifest number: 1574
Signing time: Wed 29 Jul 2026 04:01:26 +0000
Manifest this update: Wed 29 Jul 2026 04:01:26 +0000
Manifest next update: Thu 30 Jul 2026 04:01:26 +0000
Files and hashes: 1: 2Pl1WOLsPcEe3IssGI6GqTdAUd8.roa (hash: xEvziGYE9gFL6LzKGBIz1s8KI0YFj5pJymQRSZymNEM=)
2: X0qPBO8v6-VPnbapovhWWUtuLwg.crl (hash: Sw7/yhRLL22CtSqmMrX01wGTXIfDVGzZrSXyg/lx3oY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 04:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:d2:df:d0:9a:87:e4:7b:b8:b1:16:0c:1b:4c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f4a8f04ef2febe54f9db6a9a2f856594b6e2f08
Validity
Not Before: Jul 29 04:01:26 2026 GMT
Not After : Jul 30 04:01:26 2026 GMT
Subject: CN=cb991bb95218037df6f4637b52360e7ddadd0b40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:88:3a:82:4c:91:50:ec:28:d1:70:fe:f7:79:
a6:20:3d:43:e1:57:c9:29:5a:36:1f:ec:19:60:f9:
7b:34:5c:c0:81:9b:02:46:16:64:49:39:61:ec:b8:
41:c4:fc:f4:c4:2f:83:6a:46:c4:3c:1e:d7:d8:41:
4d:c7:0d:db:ae:93:c4:8c:f6:c3:c5:ab:44:2b:13:
f7:ef:4a:48:06:6f:74:2c:d0:54:6b:b0:b7:0f:62:
7e:0d:b8:71:c4:c5:83:e6:15:a5:6c:69:a0:6a:64:
42:84:0e:fd:a6:29:69:7c:ae:e8:28:a4:e0:aa:fa:
78:bb:71:54:44:25:2b:8d:4e:d4:3a:ce:4d:62:11:
c7:8f:79:a1:6d:63:67:13:41:c1:5e:61:b7:a4:6b:
79:ef:d1:4b:74:38:88:5a:0b:a8:bd:56:dc:0c:1d:
c0:af:d0:68:d4:f9:a3:0e:29:0e:9f:e8:14:d8:3b:
8a:80:02:45:15:47:e0:37:6d:db:8f:46:9b:12:f6:
b8:2c:8b:15:61:ba:b9:a8:70:1f:68:b9:76:1b:41:
e3:19:40:9f:4e:5e:79:6c:9c:51:bb:04:0c:19:25:
8f:5d:99:f0:db:1a:71:c9:57:de:35:62:90:f9:9e:
dd:c5:1d:f7:92:ab:d8:27:46:05:a6:88:6a:22:73:
7f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:99:1B:B9:52:18:03:7D:F6:F4:63:7B:52:36:0E:7D:DA:DD:0B:40
X509v3 Authority Key Identifier:
keyid:5F:4A:8F:04:EF:2F:EB:E5:4F:9D:B6:A9:A2:F8:56:59:4B:6E:2F:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:2e:54:e9:b5:38:78:c2:00:15:52:94:be:d9:cb:5e:ff:de:
8c:d0:8b:23:a5:3c:73:73:b1:ad:d8:f9:0c:07:95:9f:6e:4b:
bc:d1:54:34:4f:62:3a:a1:e5:4a:44:6c:48:5b:fc:ce:54:1d:
3b:9a:34:04:42:4d:93:9e:36:b8:21:c0:f6:62:4c:30:9a:f0:
ef:1f:dd:00:7e:5d:4f:53:17:9b:87:d0:63:b3:37:8a:e9:2e:
6f:c9:22:d3:c3:45:de:5d:6a:62:c1:33:4a:63:3e:ec:1b:d2:
dc:34:5a:83:17:e2:42:f8:a5:79:75:3c:47:d7:a0:0b:8e:77:
e0:72:84:b6:a8:64:58:6b:cf:f8:01:5e:e2:31:08:70:cd:15:
7f:e5:28:cb:2b:e1:8f:ea:8c:64:e0:7b:14:12:dc:7d:e5:b0:
42:55:92:38:38:f6:bc:c4:dd:5c:3e:6d:e8:b1:43:56:8f:2e:
b3:0c:db:3c:e7:37:8b:06:72:56:26:ad:b3:9d:33:f9:6f:05:
2f:29:79:e3:bc:50:76:31:95:9e:b6:a4:b3:74:81:50:ce:b9:
aa:b5:0d:22:9f:3d:c2:02:30:4c:f5:8a:fe:99:2f:66:7a:f9:
e1:f7:9b:9f:04:9a:3e:f2:07:e4:1e:77:38:da:d8:d7:df:55:
fc:a1:fb:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sCNLf0JqH5Hu4sRYMG0y+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmNGE4ZjA0ZWYyZmViZTU0ZjlkYjZhOWEyZjg1NjU5NGI2
ZTJmMDgwHhcNMjYwNzI5MDQwMTI2WhcNMjYwNzMwMDQwMTI2WjAzMTEwLwYDVQQD
EyhjYjk5MWJiOTUyMTgwMzdkZjZmNDYzN2I1MjM2MGU3ZGRhZGQwYjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIg6gkyRUOwo0XD+93mmID1D4VfJ
KVo2H+wZYPl7NFzAgZsCRhZkSTlh7LhBxPz0xC+DakbEPB7X2EFNxw3brpPEjPbD
xatEKxP370pIBm90LNBUa7C3D2J+DbhxxMWD5hWlbGmgamRChA79pilpfK7oKKTg
qvp4u3FURCUrjU7UOs5NYhHHj3mhbWNnE0HBXmG3pGt579FLdDiIWguovVbcDB3A
r9Bo1PmjDikOn+gU2DuKgAJFFUfgN23bj0abEva4LIsVYbq5qHAfaLl2G0HjGUCf
Tl55bJxRuwQMGSWPXZnw2xpxyVfeNWKQ+Z7dxR33kqvYJ0YFpohqInN/fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMuZG7lSGAN99vRje1I2Dn3a3QtAMB8GA1UdIwQY
MBaAFF9KjwTvL+vlT522qaL4VllLbi8IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDBxUEJPOHY2LVZQbmJhcG92aFdXVXR1THdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZjNmZWQtMmM1My00ZWNhLWEzMzIt
NDU3OWEzOGY2ZDA4LzEvWDBxUEJPOHY2LVZQbmJhcG92aFdXVXR1THdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84ZjNmZWQtMmM1My00ZWNhLWEzMzItNDU3OWEzOGY2ZDA4
LzEvWDBxUEJPOHY2LVZQbmJhcG92aFdXVXR1THdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHC5U6bU4
eMIAFVKUvtnLXv/ejNCLI6U8c3Oxrdj5DAeVn25LvNFUNE9iOqHlSkRsSFv8zlQd
O5o0BEJNk542uCHA9mJMMJrw7x/dAH5dT1MXm4fQY7M3iukub8ki08NF3l1qYsEz
SmM+7BvS3DRagxfiQvileXU8R9egC4534HKEtqhkWGvP+AFe4jEIcM0Vf+Uoyyvh
j+qMZOB7FBLcfeWwQlWSODj2vMTdXD5t6LFDVo8uswzbPOc3iwZyViats50z+W8F
Lyl547xQdjGVnraks3SBUM65qrUNIp89wgIwTPWK/pkvZnr54febnwSaPvIH5B53
ONrY199V/KH7eQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 10:33:26 2026 by rpki-client