Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
File: XXg76LX3rdAI1xK0N72fmXwIT98.mft (raw, json)
Hash identifier: onFEmETGmeE0fEVgxtubKecOXQIE8xAYF/aIEaqp+EM=
Subject key identifier: 92:D6:78:A0:02:8C:86:D8:E5:BE:2B:7A:C6:D6:66:50:4A:31:23:68
Authority key identifier: 5D:78:3B:E8:B5:F7:AD:D0:08:D7:12:B4:37:BD:9F:99:7C:08:4F:DF
Certificate issuer: /CN=5d783be8b5f7add008d712b437bd9f997c084fdf
Certificate serial: 019EC4EEC9BFD7A3A7419062A41FC1320E90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
Manifest number: 1960
Signing time: Sun 14 Jun 2026 07:00:43 +0000
Manifest this update: Sun 14 Jun 2026 07:00:43 +0000
Manifest next update: Mon 15 Jun 2026 07:00:43 +0000
Files and hashes: 1: 80ddEu08r1uFh6uix50N7d9F0o8.roa (hash: DtyowyLw2dVPCBg0r3cdDO/1HWaqkm/fNKE6IcB/i2Y=)
2: XXg76LX3rdAI1xK0N72fmXwIT98.crl (hash: AU5dy5AYntILV7VNCYUdhFGmKCtcqhNWAlTWnpJocnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c4:ee:c9:bf:d7:a3:a7:41:90:62:a4:1f:c1:32:0e:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d783be8b5f7add008d712b437bd9f997c084fdf
Validity
Not Before: Jun 14 07:00:43 2026 GMT
Not After : Jun 15 07:00:43 2026 GMT
Subject: CN=92d678a0028c86d8e5be2b7ac6d666504a312368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:17:20:4d:0c:29:65:6e:f6:35:aa:d4:dd:e5:
31:a9:6e:d2:a6:04:a7:75:a9:02:81:09:b6:93:46:
0d:6f:e2:13:7b:8a:a9:ea:a4:f2:6f:48:ce:0b:0d:
98:84:6d:55:33:49:27:00:ce:9e:95:f4:46:37:b9:
17:80:be:43:95:df:ce:14:06:c3:c3:f3:c8:f1:a3:
95:ac:32:77:00:a9:8b:8d:9f:e8:71:72:b5:96:61:
16:71:b9:5b:c1:2b:17:05:01:0f:9a:e0:c0:9c:f5:
d3:ce:43:83:c6:7a:cf:25:b1:33:55:b8:0c:64:b0:
77:2e:19:74:4b:a1:73:75:31:bd:b6:79:b8:9d:6b:
4a:88:b9:e6:cc:92:7b:48:8d:9d:46:c6:ce:01:c9:
f9:c9:5f:49:3d:be:5d:9b:d4:02:e3:0f:4a:01:75:
81:a4:15:c0:38:a1:40:f3:28:f2:be:39:93:4f:35:
1a:64:f8:84:f7:12:ec:98:94:81:a8:4e:7b:86:31:
c6:ac:ad:df:dd:e8:e8:bd:ab:64:d0:6b:c6:47:83:
6d:f9:df:bc:11:46:c1:06:5e:cb:e4:2d:59:d4:b6:
6c:58:a6:a3:9c:95:e8:36:be:7b:82:ad:2f:5f:f1:
09:e7:56:8c:95:76:19:df:59:c5:3c:16:87:73:55:
97:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D6:78:A0:02:8C:86:D8:E5:BE:2B:7A:C6:D6:66:50:4A:31:23:68
X509v3 Authority Key Identifier:
keyid:5D:78:3B:E8:B5:F7:AD:D0:08:D7:12:B4:37:BD:9F:99:7C:08:4F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:01:13:3a:89:50:51:28:12:8d:33:97:53:e4:06:c5:2b:d7:
db:71:b7:96:ea:7f:6a:ca:eb:78:62:6d:52:8e:38:84:ea:10:
f6:cb:f1:e4:a8:1f:f3:5b:cf:86:1b:84:97:4b:ff:b9:0b:34:
f0:94:df:2e:1a:b6:6a:77:55:7f:82:b0:a2:72:69:6a:b0:a9:
a0:cb:df:a8:bd:ee:73:18:c2:59:6b:ca:75:90:ff:38:0b:3a:
e1:70:65:19:11:8b:a0:c3:31:82:ec:5f:cb:81:aa:a2:b3:a0:
51:d9:6a:2c:e5:97:30:71:74:d5:22:61:3c:18:be:6b:b5:fe:
8d:cf:f0:7f:07:59:fe:4f:87:a6:13:b7:cc:b8:33:5c:0d:8e:
16:69:6d:4b:47:8f:68:03:7b:04:5e:02:fe:ea:19:77:5f:e5:
36:7c:73:b5:cc:af:38:32:76:ca:9c:fb:71:94:4c:86:d2:a4:
32:db:f3:f2:ed:2f:a7:37:1c:28:70:90:a8:8c:da:bc:d8:90:
c7:75:89:da:be:8f:45:cd:97:56:1b:47:2d:91:1b:e8:b2:ca:
0f:de:1a:a1:d3:5b:04:f7:0e:c8:34:4f:34:bf:a6:07:c9:d0:
05:f2:db:cf:c4:45:40:8c:71:1f:39:cf:a3:57:2e:a6:ca:54:
4f:3e:58:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7E7sm/16OnQZBipB/BMg6QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkNzgzYmU4YjVmN2FkZDAwOGQ3MTJiNDM3YmQ5Zjk5N2Mw
ODRmZGYwHhcNMjYwNjE0MDcwMDQzWhcNMjYwNjE1MDcwMDQzWjAzMTEwLwYDVQQD
Eyg5MmQ2NzhhMDAyOGM4NmQ4ZTViZTJiN2FjNmQ2NjY1MDRhMzEyMzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxcgTQwpZW72NarU3eUxqW7SpgSn
dakCgQm2k0YNb+ITe4qp6qTyb0jOCw2YhG1VM0knAM6elfRGN7kXgL5Dld/OFAbD
w/PI8aOVrDJ3AKmLjZ/ocXK1lmEWcblbwSsXBQEPmuDAnPXTzkODxnrPJbEzVbgM
ZLB3Lhl0S6FzdTG9tnm4nWtKiLnmzJJ7SI2dRsbOAcn5yV9JPb5dm9QC4w9KAXWB
pBXAOKFA8yjyvjmTTzUaZPiE9xLsmJSBqE57hjHGrK3f3ejovatk0GvGR4Nt+d+8
EUbBBl7L5C1Z1LZsWKajnJXoNr57gq0vX/EJ51aMlXYZ31nFPBaHc1WXMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJLWeKACjIbY5b4resbWZlBKMSNoMB8GA1UdIwQY
MBaAFF14O+i1963QCNcStDe9n5l8CE/fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFhnNzZMWDNyZEFJMXhLME43MmZtWHdJVDk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82MDY1ZGItOTNiMi00MWVjLWIxOWEt
Njg4Y2UwMTM2NzFlLzEvWFhnNzZMWDNyZEFJMXhLME43MmZtWHdJVDk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi82MDY1ZGItOTNiMi00MWVjLWIxOWEtNjg4Y2UwMTM2NzFl
LzEvWFhnNzZMWDNyZEFJMXhLME43MmZtWHdJVDk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPwETOolQ
USgSjTOXU+QGxSvX23G3lup/asrreGJtUo44hOoQ9svx5Kgf81vPhhuEl0v/uQs0
8JTfLhq2andVf4KwonJparCpoMvfqL3ucxjCWWvKdZD/OAs64XBlGRGLoMMxguxf
y4GqorOgUdlqLOWXMHF01SJhPBi+a7X+jc/wfwdZ/k+HphO3zLgzXA2OFmltS0eP
aAN7BF4C/uoZd1/lNnxztcyvODJ2ypz7cZRMhtKkMtvz8u0vpzccKHCQqIzavNiQ
x3WJ2r6PRc2XVhtHLZEb6LLKD94aodNbBPcOyDRPNL+mB8nQBfLbz8RFQIxxHznP
o1cupspUTz5Y1g==
-----END CERTIFICATE-----
Generated at Sun Jun 14 17:30:21 2026 by rpki-client