Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
File: XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft (raw, json)
Hash identifier: NqqfTS8CBSJEFi0GpNiqA98h/dXkIjCC4TjG3pWSWRs=
Subject key identifier: 33:DA:A6:19:FA:34:70:BB:4E:5D:26:D1:EA:5B:82:DA:2C:79:69:DB
Authority key identifier: 5F:09:9F:49:97:8B:96:0F:A3:1F:81:AC:F5:46:71:27:3D:C7:FF:61
Certificate issuer: /CN=5f099f49978b960fa31f81acf54671273dc7ff61
Certificate serial: 019F93FF8A86F885AA01AB58CC36B75BBBFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
Manifest number: 19C6
Signing time: Fri 24 Jul 2026 12:00:25 +0000
Manifest this update: Fri 24 Jul 2026 12:00:25 +0000
Manifest next update: Sat 25 Jul 2026 12:00:25 +0000
Files and hashes: 1: 0ZEt5hO5jk8I5B1ric3lV5QOPjY.roa (hash: 2SzUB4ARPZ7+BuiAiToaYolTUFVyZHL4/odctgbUciE=)
2: PX4jRvV2Is0w59EuWq6-Cko1_qM.roa (hash: o5zSrmvOazS6EGtXXnfbpDTf59xV6PS54zdbjnXbBvw=)
3: XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl (hash: lgsxgrF97Kpgb5I97Snn8R922SnIahXvts1xfJtrUdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:8a:86:f8:85:aa:01:ab:58:cc:36:b7:5b:bb:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f099f49978b960fa31f81acf54671273dc7ff61
Validity
Not Before: Jul 24 12:00:25 2026 GMT
Not After : Jul 25 12:00:25 2026 GMT
Subject: CN=33daa619fa3470bb4e5d26d1ea5b82da2c7969db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e0:7c:2c:6e:53:a8:da:89:eb:44:a9:a0:43:
04:90:12:16:1b:16:3e:1b:dd:61:69:12:e2:f9:0d:
53:b0:ee:05:a7:d1:f7:aa:4f:53:70:74:74:99:4c:
e7:07:cd:a5:2d:7a:c6:d8:15:90:22:2c:bc:bd:81:
fb:ea:64:3a:5d:7b:f1:48:a2:d3:33:db:65:9d:58:
66:d7:db:d7:c6:89:f8:e6:d4:37:31:04:b0:92:c6:
44:c9:a2:1d:e9:5a:45:59:38:9d:3a:f0:92:30:e8:
f1:a0:6d:24:dd:1c:eb:e2:0e:9c:f4:06:00:51:54:
a5:90:20:a4:67:c9:9e:dd:a6:67:da:df:bb:ae:6c:
16:e4:b1:f4:db:10:d6:72:5e:d7:38:39:cc:45:98:
07:39:9d:44:97:35:1b:60:21:a2:c7:21:59:65:89:
b4:39:86:4e:f4:62:8d:c3:07:76:ae:7f:5e:00:06:
cd:61:d1:53:b3:af:eb:6d:a3:7f:19:c5:a5:ec:9f:
4b:8a:be:fd:44:47:46:f7:ea:8b:96:44:53:a3:e2:
9d:d8:27:2a:0c:5f:95:54:a3:ba:05:57:47:2d:da:
f2:84:2d:ae:2c:9f:62:00:ee:9e:c2:48:db:e5:c7:
ea:ac:7b:68:37:02:37:4f:1c:b4:05:d1:75:65:fe:
d2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:DA:A6:19:FA:34:70:BB:4E:5D:26:D1:EA:5B:82:DA:2C:79:69:DB
X509v3 Authority Key Identifier:
keyid:5F:09:9F:49:97:8B:96:0F:A3:1F:81:AC:F5:46:71:27:3D:C7:FF:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:d9:d5:e0:da:a3:69:40:ee:22:97:98:34:d4:0b:ed:ec:5e:
61:de:5a:05:aa:53:31:02:96:2c:6e:da:b9:20:a0:c0:3a:61:
e8:39:76:08:60:c2:cd:02:b3:3a:9f:20:5b:9c:da:dc:8a:6d:
fc:c9:92:ca:e4:2c:14:67:04:90:3d:c5:04:a7:d3:06:99:2e:
a6:09:8e:e8:81:85:6b:44:e1:28:47:c3:99:ae:eb:2f:0b:80:
fd:ad:91:dd:04:8e:39:a2:c0:58:df:12:69:f2:04:4b:ff:bc:
1b:7b:96:fd:b3:fd:e2:04:3e:0d:4c:a7:45:67:52:1f:b9:6b:
9a:f1:3f:87:fb:5d:6d:06:1c:20:c8:9e:db:56:ca:b0:87:af:
22:fb:4c:c1:67:1b:ce:14:38:d3:6a:d2:22:df:ab:94:f0:91:
7d:c4:5b:a6:34:e5:a8:ce:fc:9b:d2:0d:1f:ed:4d:4c:08:ec:
5f:9f:e5:55:a9:90:dc:7b:55:c5:b6:ad:2b:05:6d:47:4c:e4:
b9:54:2f:a8:d4:db:67:62:f4:13:8a:d0:9d:6b:d7:c8:6f:d3:
eb:c1:2c:d9:64:ee:74:7b:b2:e3:19:1f:4c:38:d0:c0:ed:e0:
cd:dd:e8:98:d7:09:b1:fa:f8:ae:78:e6:a2:ba:5a:5c:25:db:
6d:8c:91:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+T/4qG+IWqAatYzDa3W7v9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMDk5ZjQ5OTc4Yjk2MGZhMzFmODFhY2Y1NDY3MTI3M2Rj
N2ZmNjEwHhcNMjYwNzI0MTIwMDI1WhcNMjYwNzI1MTIwMDI1WjAzMTEwLwYDVQQD
EygzM2RhYTYxOWZhMzQ3MGJiNGU1ZDI2ZDFlYTViODJkYTJjNzk2OWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseB8LG5TqNqJ60SpoEMEkBIWGxY+
G91haRLi+Q1TsO4Fp9H3qk9TcHR0mUznB82lLXrG2BWQIiy8vYH76mQ6XXvxSKLT
M9tlnVhm19vXxon45tQ3MQSwksZEyaId6VpFWTidOvCSMOjxoG0k3Rzr4g6c9AYA
UVSlkCCkZ8me3aZn2t+7rmwW5LH02xDWcl7XODnMRZgHOZ1ElzUbYCGixyFZZYm0
OYZO9GKNwwd2rn9eAAbNYdFTs6/rbaN/GcWl7J9Lir79REdG9+qLlkRTo+Kd2Ccq
DF+VVKO6BVdHLdryhC2uLJ9iAO6ewkjb5cfqrHtoNwI3Txy0BdF1Zf7STQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDPaphn6NHC7Tl0m0epbgtoseWnbMB8GA1UdIwQY
MBaAFF8Jn0mXi5YPox+BrPVGcSc9x/9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHdtZlNaZUxsZy1qSDRHczlVWnhKejNIXzJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9hZDViZmQtODVjNy00N2I3LTk5N2Mt
ZjVkMmNiNzk0NTZkLzEvWHdtZlNaZUxsZy1qSDRHczlVWnhKejNIXzJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9hZDViZmQtODVjNy00N2I3LTk5N2MtZjVkMmNiNzk0NTZk
LzEvWHdtZlNaZUxsZy1qSDRHczlVWnhKejNIXzJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYNnV4Nqj
aUDuIpeYNNQL7exeYd5aBapTMQKWLG7auSCgwDph6Dl2CGDCzQKzOp8gW5za3Ipt
/MmSyuQsFGcEkD3FBKfTBpkupgmO6IGFa0ThKEfDma7rLwuA/a2R3QSOOaLAWN8S
afIES/+8G3uW/bP94gQ+DUynRWdSH7lrmvE/h/tdbQYcIMie21bKsIevIvtMwWcb
zhQ402rSIt+rlPCRfcRbpjTlqM78m9INH+1NTAjsX5/lVamQ3HtVxbatKwVtR0zk
uVQvqNTbZ2L0E4rQnWvXyG/T68Es2WTudHuy4xkfTDjQwO3gzd3omNcJsfr4rnjm
orpaXCXbbYyRdw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:46:25 2026 by rpki-client