Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5ba8a3-6449-45b2-8429-1252bf801f23/1/XfSth7gyLMlJFI4NdmIc6oNYpoU.mft
File: XfSth7gyLMlJFI4NdmIc6oNYpoU.mft (raw, json)
Hash identifier: qaX4AB1Q5oKXSZKMOH6f9P9jHp8g68xk/GlcWsqw8Vw=
Subject key identifier: 1A:0D:99:61:12:46:EE:2B:A0:35:43:B4:B8:B0:B1:1F:ED:74:42:7A
Authority key identifier: 5D:F4:AD:87:B8:32:2C:C9:49:14:8E:0D:76:62:1C:EA:83:58:A6:85
Certificate issuer: /CN=5df4ad87b8322cc949148e0d76621cea8358a685
Certificate serial: 019EC3DC7B8D5AA132BEDCBF395350313C40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfSth7gyLMlJFI4NdmIc6oNYpoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ba8a3-6449-45b2-8429-1252bf801f23/1/XfSth7gyLMlJFI4NdmIc6oNYpoU.mft
Manifest number: 014B
Signing time: Sun 14 Jun 2026 02:01:07 +0000
Manifest this update: Sun 14 Jun 2026 02:01:07 +0000
Manifest next update: Mon 15 Jun 2026 02:01:07 +0000
Files and hashes: 1: XfSth7gyLMlJFI4NdmIc6oNYpoU.crl (hash: KlIatsJ2UxUH1Up3UxyfoBTvRgLC4YU6wT/0cGC+cTU=)
2: hlSTINC_KpLJH_012cszF50XrrM.roa (hash: R9LXujjJX9A3v2Y9QXZNY393BmFuvvM/3QjbC/Pbq0E=)
3: wi4pwq_pbwyf-RifkawT_5o4jbY.roa (hash: QtIyVI0mDcZKu2N+GCjxkT9Lyx1XzVHsblRr7n1YzG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ba8a3-6449-45b2-8429-1252bf801f23/1/XfSth7gyLMlJFI4NdmIc6oNYpoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/5ba8a3-6449-45b2-8429-1252bf801f23/1/XfSth7gyLMlJFI4NdmIc6oNYpoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfSth7gyLMlJFI4NdmIc6oNYpoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:dc:7b:8d:5a:a1:32:be:dc:bf:39:53:50:31:3c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df4ad87b8322cc949148e0d76621cea8358a685
Validity
Not Before: Jun 14 02:01:07 2026 GMT
Not After : Jun 15 02:01:07 2026 GMT
Subject: CN=1a0d99611246ee2ba03543b4b8b0b11fed74427a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:69:4c:06:67:29:98:f4:4b:86:c5:da:b8:af:
77:1b:81:8a:43:41:51:47:f3:25:35:31:87:aa:b9:
0e:f4:df:cf:0f:83:9e:33:27:c5:89:64:22:b6:4b:
ae:f2:7a:10:9e:a3:ed:09:55:5e:32:ff:5e:d6:3f:
72:13:92:29:99:69:d6:4c:25:0c:6f:55:05:74:71:
cb:95:0d:7d:0f:57:f3:f9:19:46:d3:14:10:f4:43:
cc:0d:dd:9d:e2:57:ca:3c:d0:27:e9:18:80:54:52:
c1:80:f0:31:3c:dc:8e:9f:96:d6:06:19:ef:be:a5:
70:37:f5:0c:95:12:76:25:65:82:4f:05:74:bf:4b:
2c:5e:e0:5e:a8:ef:9c:55:20:63:af:f0:e8:89:c4:
6b:91:63:7b:74:a9:4f:a5:56:31:3c:4b:d4:11:0b:
2c:94:94:0d:ce:75:4d:6c:f3:23:4c:71:16:5a:c0:
e6:71:2a:b9:7c:91:81:e6:63:3c:04:65:e8:f3:54:
54:b8:16:3d:5d:2d:6c:4d:69:9f:0a:b3:b9:a1:41:
8c:f9:78:53:b1:6c:8c:df:d0:4e:a4:8f:f0:56:4f:
81:cb:a7:b6:e4:1b:dd:26:a5:53:51:1d:2a:d3:34:
2c:1f:1a:94:70:62:4c:69:85:24:ce:c3:57:9e:59:
aa:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:0D:99:61:12:46:EE:2B:A0:35:43:B4:B8:B0:B1:1F:ED:74:42:7A
X509v3 Authority Key Identifier:
keyid:5D:F4:AD:87:B8:32:2C:C9:49:14:8E:0D:76:62:1C:EA:83:58:A6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfSth7gyLMlJFI4NdmIc6oNYpoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ba8a3-6449-45b2-8429-1252bf801f23/1/XfSth7gyLMlJFI4NdmIc6oNYpoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ba8a3-6449-45b2-8429-1252bf801f23/1/XfSth7gyLMlJFI4NdmIc6oNYpoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:c2:06:7a:4d:44:62:25:9d:8f:40:72:cb:2b:aa:45:1b:9f:
05:c8:07:99:cf:70:ab:26:01:30:1b:f9:fb:a4:bd:25:0b:d4:
ff:f4:96:45:f3:83:40:df:77:84:81:d1:e5:bf:eb:95:69:50:
51:b7:39:ba:45:0d:81:fe:db:4b:11:84:cd:fd:5a:fe:a9:6a:
16:51:1e:e2:99:e8:ad:43:d8:28:d3:51:d9:67:c9:4f:dd:cc:
2a:75:b3:2d:97:9f:de:ca:8c:c2:82:20:29:ee:f3:db:a1:8e:
57:5c:a4:9b:f9:7a:49:47:ab:2b:c9:c2:84:cb:f5:09:c8:b8:
1e:59:e2:e3:f6:b4:92:ea:52:ba:1b:39:8e:42:a8:c7:54:eb:
84:d8:11:89:eb:57:8d:2d:2c:54:e7:1b:3e:76:a4:54:bc:4a:
ef:4e:7d:38:71:81:c9:e8:49:e3:93:4e:a3:6c:37:cf:7a:df:
e0:db:ba:6b:00:c5:74:c1:71:18:be:0b:82:ea:85:4c:c0:d3:
4f:fb:76:b2:67:a4:9d:02:01:41:b0:78:8b:20:60:ba:b7:23:
1c:e7:b0:62:0c:56:f9:c7:9f:bb:37:b3:df:26:b8:99:5d:be:
d3:b1:0d:1b:d2:1f:5a:9b:19:67:f5:6e:78:21:7c:40:c9:5e:
e7:19:ba:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7D3HuNWqEyvty/OVNQMTxAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZjRhZDg3YjgzMjJjYzk0OTE0OGUwZDc2NjIxY2VhODM1
OGE2ODUwHhcNMjYwNjE0MDIwMTA3WhcNMjYwNjE1MDIwMTA3WjAzMTEwLwYDVQQD
EygxYTBkOTk2MTEyNDZlZTJiYTAzNTQzYjRiOGIwYjExZmVkNzQ0MjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimlMBmcpmPRLhsXauK93G4GKQ0FR
R/MlNTGHqrkO9N/PD4OeMyfFiWQitkuu8noQnqPtCVVeMv9e1j9yE5IpmWnWTCUM
b1UFdHHLlQ19D1fz+RlG0xQQ9EPMDd2d4lfKPNAn6RiAVFLBgPAxPNyOn5bWBhnv
vqVwN/UMlRJ2JWWCTwV0v0ssXuBeqO+cVSBjr/DoicRrkWN7dKlPpVYxPEvUEQss
lJQNznVNbPMjTHEWWsDmcSq5fJGB5mM8BGXo81RUuBY9XS1sTWmfCrO5oUGM+XhT
sWyM39BOpI/wVk+By6e25BvdJqVTUR0q0zQsHxqUcGJMaYUkzsNXnlmqLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBoNmWESRu4roDVDtLiwsR/tdEJ6MB8GA1UdIwQY
MBaAFF30rYe4MizJSRSODXZiHOqDWKaFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGZTdGg3Z3lMTWxKRkk0TmRtSWM2b05ZcG9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81YmE4YTMtNjQ0OS00NWIyLTg0Mjkt
MTI1MmJmODAxZjIzLzEvWGZTdGg3Z3lMTWxKRkk0TmRtSWM2b05ZcG9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi81YmE4YTMtNjQ0OS00NWIyLTg0MjktMTI1MmJmODAxZjIz
LzEvWGZTdGg3Z3lMTWxKRkk0TmRtSWM2b05ZcG9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANsIGek1E
YiWdj0ByyyuqRRufBcgHmc9wqyYBMBv5+6S9JQvU//SWRfODQN93hIHR5b/rlWlQ
Ubc5ukUNgf7bSxGEzf1a/qlqFlEe4pnorUPYKNNR2WfJT93MKnWzLZef3sqMwoIg
Ke7z26GOV1ykm/l6SUerK8nChMv1Cci4Hlni4/a0kupSuhs5jkKox1TrhNgRietX
jS0sVOcbPnakVLxK7059OHGByehJ45NOo2w3z3rf4Nu6awDFdMFxGL4LguqFTMDT
T/t2smeknQIBQbB4iyBgurcjHOewYgxW+cefuzez3ya4mV2+07ENG9IfWpsZZ/Vu
eCF8QMle5xm63A==
-----END CERTIFICATE-----
Generated at Sun Jun 14 05:31:02 2026 by rpki-client