Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
File: XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft (raw, json)
Hash identifier: ChaDCafSwfQlkpmMtm34JZ6i1AzBTqdW1Axsj3E6H54=
Subject key identifier: 75:5F:5C:85:4F:7A:7E:90:6B:48:A6:89:78:29:B4:68:55:1F:B3:3F
Authority key identifier: 5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03
Certificate issuer: /CN=5c61dcd3eb50c83d68060bcba4af152204193503
Certificate serial: 019F93FF77F0C615F7209B08E8F7EC1D628A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
Manifest number: 1187
Signing time: Fri 24 Jul 2026 12:00:20 +0000
Manifest this update: Fri 24 Jul 2026 12:00:20 +0000
Manifest next update: Sat 25 Jul 2026 12:00:20 +0000
Files and hashes: 1: 2LxanPXEt-Ah2tA9EYIfUY7a7ZY.roa (hash: Uywc9u8hm/WxjQy7SxAxxYIxsP7UM6R3hTnst6UR3yE=)
2: XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl (hash: cg80LwBQgyht1clSIQ8eXCkWELpJVd5KhhxgMPPbmFM=)
3: XN_BGWEzxZjhg6iXlmQqSDhpeZU.roa (hash: nt1Dqzzch0xHlTVsHiqUIJZJJ7P5OL+fpAG1RALu8GE=)
4: cDTj5s606sVgmgpZ3n6Z3dU4zwA.roa (hash: Tz/Xa89Xe7rgKjUL5hIFqnaSfDilwgGaKsizO4oAEvI=)
5: fQWCmfLdQl9kgPQ8VBdW1T6y5WQ.roa (hash: c6z+qlka4njKh+KsSdKsKGpsRerVkXlOyNamnYTlXAw=)
6: hVXu442W8sHVh8F2wI339U-u6hw.roa (hash: tfQAfvgbfBIutk9LhU3LMYfREhO9WhUNbbEaKiJKIO4=)
7: pwg2Pcu7xQM-Nr6mzrIBgEt_XFI.roa (hash: lF7Ckm/bTHOWi8Xtom4+V7QF19TxeutNBXq6gqp0Yv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:77:f0:c6:15:f7:20:9b:08:e8:f7:ec:1d:62:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c61dcd3eb50c83d68060bcba4af152204193503
Validity
Not Before: Jul 24 12:00:20 2026 GMT
Not After : Jul 25 12:00:20 2026 GMT
Subject: CN=755f5c854f7a7e906b48a6897829b468551fb33f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:54:dc:32:29:0e:b5:82:80:d8:7d:29:60:39:
91:95:c3:9c:cc:b6:44:98:f6:e0:47:47:22:fa:1c:
66:f2:f3:b9:8e:9c:2d:1d:08:dc:e9:45:2c:d5:06:
17:23:36:bc:3e:34:00:33:13:47:b9:e2:65:25:af:
f4:9c:09:9e:8c:dd:45:eb:4b:e9:54:59:ca:a7:ca:
7e:b5:24:af:3c:b1:8d:ba:e6:e9:fa:1f:51:95:81:
c5:81:d5:61:0b:4f:dd:84:23:c7:63:03:1e:b4:ca:
0f:77:ec:ad:c6:00:dc:ea:3f:8e:51:5c:69:25:20:
4d:d0:f1:0a:3e:e0:b9:8a:8e:da:a8:92:5c:53:19:
a3:56:13:3a:44:ea:00:72:5f:2f:16:f9:9f:95:14:
3b:31:59:fa:14:57:26:77:32:f0:d9:16:65:e3:ff:
d1:32:19:d8:db:c6:7a:55:30:5a:d7:a5:8d:8e:0c:
d0:3f:21:49:55:51:cc:60:8f:7f:9a:e8:dc:80:a8:
66:41:b7:f1:c9:05:03:3e:fd:b4:e3:f0:bf:b9:54:
e4:0a:08:4e:fc:c5:f8:2e:ee:e1:79:ab:ee:b8:b9:
4a:87:5e:3e:69:21:be:2f:a0:20:00:41:38:ae:65:
e0:ce:f3:fd:96:36:69:16:23:9f:8d:23:11:ef:3f:
20:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:5F:5C:85:4F:7A:7E:90:6B:48:A6:89:78:29:B4:68:55:1F:B3:3F
X509v3 Authority Key Identifier:
keyid:5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:41:1a:16:ca:ab:9a:0e:b7:87:32:c4:39:60:7c:c9:ec:89:
7a:6e:fd:0e:22:e3:42:33:7b:b1:85:69:1c:a0:6f:3b:d5:bb:
fa:00:ad:41:2c:e8:32:7c:13:47:51:a7:55:8c:a2:7e:eb:7e:
72:68:7d:36:25:0b:2c:08:29:48:c3:0b:8d:92:92:3f:91:9d:
c2:18:61:75:1f:0b:c3:14:dc:bf:66:b0:d7:e7:bc:47:b0:3a:
31:ee:6d:97:37:48:97:1b:26:37:b5:b9:ff:d9:5a:5c:96:aa:
e1:09:b1:60:86:fb:59:35:9b:81:f8:f8:8a:eb:c4:4c:5d:b8:
8c:dc:ba:c2:18:5b:33:8c:cf:68:87:d8:22:8e:5b:00:2f:ae:
d5:88:02:bf:59:a3:79:ae:69:75:7b:01:2a:68:34:0f:8e:28:
a4:5b:5e:81:65:8f:17:94:66:f9:8c:da:1f:97:db:05:15:a9:
cf:d5:fa:09:e0:4c:68:13:02:d9:16:14:62:25:e1:f0:a2:37:
52:c2:c4:2c:1b:55:36:ce:a2:34:4c:64:ce:60:44:b0:4f:a3:
6f:b9:33:10:7f:1e:da:47:57:ea:e4:1d:76:ed:d4:00:c5:d2:
04:5a:3f:d2:27:c1:14:0d:2e:6e:26:ef:b7:e4:1c:d6:eb:46:
ad:f3:4a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:36:49 2026 by rpki-client