Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
File: XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft (raw, json)
Hash identifier: 4WAEbWqDojzTfGKUt7FfGSqr15YzjMJbASFRJ94j4V4=
Subject key identifier: 63:BC:39:0A:F2:74:D0:E3:63:D2:6A:0E:02:52:F3:0E:1C:9A:3B:42
Authority key identifier: 5E:67:66:0A:F7:52:3C:61:B7:F9:5D:08:48:8D:58:3E:9D:51:4F:6B
Certificate issuer: /CN=5e67660af7523c61b7f95d08488d583e9d514f6b
Certificate serial: 019E1EA356F0FC3CAECC987F0B5EEB4D0058
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
Manifest number: 0923
Signing time: Wed 13 May 2026 00:01:21 +0000
Manifest this update: Wed 13 May 2026 00:01:21 +0000
Manifest next update: Thu 14 May 2026 00:01:21 +0000
Files and hashes: 1: XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl (hash: ymYlREx2NuTjNYwNwSEyqBRPEFxGGT6IMJtPr14NMgY=)
2: i5WP_AihTIXhPy_BVXYv71HxOto.roa (hash: VJGbYlBp9HGyGJZxGUnm0bEpFbqRPbJagnJqTdbqGUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:56:f0:fc:3c:ae:cc:98:7f:0b:5e:eb:4d:00:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e67660af7523c61b7f95d08488d583e9d514f6b
Validity
Not Before: May 13 00:01:21 2026 GMT
Not After : May 14 00:01:21 2026 GMT
Subject: CN=63bc390af274d0e363d26a0e0252f30e1c9a3b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1c:33:23:a9:63:94:3e:3a:7e:59:27:8d:85:
d0:98:32:d4:f4:81:41:18:97:30:11:d1:29:e4:74:
77:e9:69:ed:a3:64:3a:a0:c0:fb:33:a3:83:7e:1f:
24:de:de:7c:15:52:38:25:23:cf:3d:d0:a6:89:e1:
e5:66:aa:ab:ce:8a:cf:29:ef:f6:b0:a2:2b:12:a3:
51:5a:51:1f:f2:bf:8f:44:42:df:74:85:d8:f3:c4:
aa:da:35:fa:49:3b:e8:c3:6b:b3:d6:a3:d3:b5:93:
3c:d7:70:40:4b:4b:c2:b8:53:a5:f5:a0:23:59:6b:
41:21:5e:28:21:e9:8f:96:4b:2b:6c:e1:e1:f2:7a:
22:ea:e9:e4:f2:29:83:95:ae:06:7d:cd:6c:29:37:
dc:3a:ba:93:df:d4:27:39:ca:5e:05:63:6b:1d:4a:
b9:b3:52:1d:a0:51:a0:c1:14:65:b2:7f:c2:f0:5c:
5b:ab:65:31:b7:b7:f4:26:b7:1d:e8:5c:1c:79:83:
9e:a0:d8:84:cf:d0:88:0a:5e:e7:fe:73:65:f9:ef:
d1:54:e1:d7:a5:5e:4b:1e:87:81:92:f6:da:de:87:
26:35:09:93:28:c8:3f:12:d4:1b:37:24:69:f5:65:
f6:ce:82:45:1d:41:5e:44:50:33:7a:ec:9a:d4:f8:
52:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:BC:39:0A:F2:74:D0:E3:63:D2:6A:0E:02:52:F3:0E:1C:9A:3B:42
X509v3 Authority Key Identifier:
keyid:5E:67:66:0A:F7:52:3C:61:B7:F9:5D:08:48:8D:58:3E:9D:51:4F:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:4e:31:b7:b6:64:7a:0d:a1:84:87:1c:7e:70:7e:63:2e:96:
23:4f:3b:69:e4:c3:90:ca:d5:a6:be:18:51:b9:77:b5:6b:f7:
93:09:4b:2c:13:c8:42:46:06:39:f8:6e:96:3e:5d:57:ad:8e:
16:3e:a1:8d:bb:40:80:d0:07:f5:4c:a3:5f:02:c6:fc:f7:a7:
50:67:9f:6c:ff:6c:cf:4a:ee:8e:52:9e:a6:2a:c2:af:05:86:
c7:21:eb:cf:7d:9b:7c:db:82:dc:54:86:5e:58:ee:b7:25:a5:
17:7b:d3:6e:af:e4:62:49:ce:bc:83:11:54:f0:1f:4b:11:5a:
44:7f:dc:d5:c2:a5:1a:8d:6d:d2:96:6d:aa:e0:cd:7c:9f:c9:
a2:d5:1a:56:0a:b4:ce:89:35:f6:7c:74:d1:97:30:20:bc:94:
d1:56:28:02:65:88:cc:2c:aa:6a:02:8a:c3:04:69:cd:44:62:
07:63:b8:f0:31:f2:46:f9:b7:fb:a1:9b:04:3e:a5:e1:c4:b2:
c5:1e:9d:87:82:35:4f:b6:58:18:3e:f2:61:69:69:4c:6e:11:
d8:bb:24:21:fa:26:40:4d:65:06:e2:12:d7:92:34:6d:e5:cc:
04:c9:0c:5f:8b:e9:92:0c:46:0c:9b:fb:a1:f0:41:e8:4d:03:
93:fe:5a:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eo1bw/DyuzJh/C17rTQBYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNjc2NjBhZjc1MjNjNjFiN2Y5NWQwODQ4OGQ1ODNlOWQ1
MTRmNmIwHhcNMjYwNTEzMDAwMTIxWhcNMjYwNTE0MDAwMTIxWjAzMTEwLwYDVQQD
Eyg2M2JjMzkwYWYyNzRkMGUzNjNkMjZhMGUwMjUyZjMwZTFjOWEzYjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BwzI6ljlD46flknjYXQmDLU9IFB
GJcwEdEp5HR36Wnto2Q6oMD7M6ODfh8k3t58FVI4JSPPPdCmieHlZqqrzorPKe/2
sKIrEqNRWlEf8r+PRELfdIXY88Sq2jX6STvow2uz1qPTtZM813BAS0vCuFOl9aAj
WWtBIV4oIemPlksrbOHh8noi6unk8imDla4Gfc1sKTfcOrqT39QnOcpeBWNrHUq5
s1IdoFGgwRRlsn/C8Fxbq2Uxt7f0Jrcd6FwceYOeoNiEz9CICl7n/nNl+e/RVOHX
pV5LHoeBkvba3ocmNQmTKMg/EtQbNyRp9WX2zoJFHUFeRFAzeuya1PhSEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGO8OQrydNDjY9JqDgJS8w4cmjtCMB8GA1UdIwQY
MBaAFF5nZgr3Ujxht/ldCEiNWD6dUU9rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG1kbUN2ZFNQR0czLVYwSVNJMVlQcDFSVDJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85Nzg2ZGEtMWY0Yy00MDhjLWIyMDIt
MDBkMmZhYzVmMDEwLzEvWG1kbUN2ZFNQR0czLVYwSVNJMVlQcDFSVDJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85Nzg2ZGEtMWY0Yy00MDhjLWIyMDItMDBkMmZhYzVmMDEw
LzEvWG1kbUN2ZFNQR0czLVYwSVNJMVlQcDFSVDJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW04xt7Zk
eg2hhIccfnB+Yy6WI087aeTDkMrVpr4YUbl3tWv3kwlLLBPIQkYGOfhulj5dV62O
Fj6hjbtAgNAH9UyjXwLG/PenUGefbP9sz0rujlKepirCrwWGxyHrz32bfNuC3FSG
XljutyWlF3vTbq/kYknOvIMRVPAfSxFaRH/c1cKlGo1t0pZtquDNfJ/JotUaVgq0
zok19nx00ZcwILyU0VYoAmWIzCyqagKKwwRpzURiB2O48DHyRvm3+6GbBD6l4cSy
xR6dh4I1T7ZYGD7yYWlpTG4R2LskIfomQE1lBuIS15I0beXMBMkMX4vpkgxGDJv7
ofBB6E0Dk/5aZA==
-----END CERTIFICATE-----
Generated at Wed May 13 05:03:20 2026 by rpki-client