Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
File: XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft (raw, json)
Hash identifier: EhEAOKFc+Q2Rw+qNp755OtTWpRKRP52N/xXqkFdyePA=
Subject key identifier: 52:8C:2B:75:0F:CE:76:B7:E2:49:77:6B:F8:5F:FD:52:80:0A:00:82
Authority key identifier: 5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03
Certificate issuer: /CN=5c61dcd3eb50c83d68060bcba4af152204193503
Certificate serial: 019F9022AC5F2D7E61215BE3418BAD1A3FF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
Manifest number: 1185
Signing time: Thu 23 Jul 2026 18:00:19 +0000
Manifest this update: Thu 23 Jul 2026 18:00:19 +0000
Manifest next update: Fri 24 Jul 2026 18:00:19 +0000
Files and hashes: 1: 2LxanPXEt-Ah2tA9EYIfUY7a7ZY.roa (hash: Uywc9u8hm/WxjQy7SxAxxYIxsP7UM6R3hTnst6UR3yE=)
2: XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl (hash: W7d4YCr+KajlPCugpmda8uvU/CQcMzMC6+VSONgWL38=)
3: XN_BGWEzxZjhg6iXlmQqSDhpeZU.roa (hash: nt1Dqzzch0xHlTVsHiqUIJZJJ7P5OL+fpAG1RALu8GE=)
4: cDTj5s606sVgmgpZ3n6Z3dU4zwA.roa (hash: Tz/Xa89Xe7rgKjUL5hIFqnaSfDilwgGaKsizO4oAEvI=)
5: fQWCmfLdQl9kgPQ8VBdW1T6y5WQ.roa (hash: c6z+qlka4njKh+KsSdKsKGpsRerVkXlOyNamnYTlXAw=)
6: hVXu442W8sHVh8F2wI339U-u6hw.roa (hash: tfQAfvgbfBIutk9LhU3LMYfREhO9WhUNbbEaKiJKIO4=)
7: pwg2Pcu7xQM-Nr6mzrIBgEt_XFI.roa (hash: lF7Ckm/bTHOWi8Xtom4+V7QF19TxeutNBXq6gqp0Yv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:ac:5f:2d:7e:61:21:5b:e3:41:8b:ad:1a:3f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c61dcd3eb50c83d68060bcba4af152204193503
Validity
Not Before: Jul 23 18:00:19 2026 GMT
Not After : Jul 24 18:00:19 2026 GMT
Subject: CN=528c2b750fce76b7e249776bf85ffd52800a0082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:3e:4d:26:86:d7:02:f1:31:a1:a4:d2:69:d7:
0d:6a:d4:b3:80:7f:94:6a:1a:5b:07:49:07:59:44:
72:27:2a:23:3e:ff:b8:17:e7:eb:b1:b1:92:83:64:
2e:62:9b:17:22:cd:d3:a1:2f:11:f8:66:79:69:d9:
39:04:2d:db:42:60:1e:a8:6b:7e:9e:6f:53:46:59:
3d:ff:3e:2c:9f:85:c5:7a:9c:b7:62:c9:5d:40:7b:
9f:e1:81:64:80:4f:8c:2d:a9:ce:2d:27:bf:79:6f:
28:cb:1f:e8:61:2c:5c:f3:2f:24:1e:e3:81:72:4d:
ad:88:1e:02:96:f8:38:6f:de:28:25:6a:13:1d:ba:
75:34:d5:89:55:20:8b:5b:48:0f:3c:e6:90:cd:03:
aa:dc:8f:70:10:fa:b2:ce:ba:a4:ac:8f:7d:22:b1:
e6:58:c5:fd:b3:04:ea:ee:03:5f:84:9c:3d:76:ef:
c4:be:2d:88:44:1d:5a:95:79:d5:07:1c:e8:c5:1a:
c7:d8:9c:4c:3e:7d:3c:f5:3e:b0:06:93:07:d3:29:
43:b3:14:f8:3a:03:4f:42:56:7b:34:0b:f1:61:2c:
16:72:bf:f2:fe:23:7d:e9:6b:21:53:41:74:4f:6d:
72:cd:61:9a:7e:65:9e:46:d8:6a:c0:64:37:19:18:
2f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:8C:2B:75:0F:CE:76:B7:E2:49:77:6B:F8:5F:FD:52:80:0A:00:82
X509v3 Authority Key Identifier:
keyid:5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:68:58:e0:a0:40:68:e3:d9:83:2a:ea:11:19:74:77:6d:89:
49:d9:1d:d0:db:6a:ea:ed:34:12:5c:50:d9:18:71:d7:1e:43:
38:b3:ab:04:1f:09:c6:ed:2a:58:e6:a4:db:0a:ed:13:a1:32:
3d:fb:89:a3:ba:7a:1e:44:ac:0a:a6:d9:a4:83:38:53:8f:ae:
64:6b:51:ba:e1:71:60:aa:93:f1:16:d9:ab:17:93:71:81:a9:
e0:95:0b:d4:1b:1f:f2:e5:e8:59:77:29:87:14:3e:56:14:bf:
14:56:3b:a0:bb:af:2f:27:e9:a5:3f:5a:85:e4:bf:f7:03:3a:
34:ad:f5:76:d9:9d:66:17:69:d3:4f:f0:00:65:9f:89:df:ea:
19:8c:e8:b6:2f:ed:44:1b:28:57:0b:bc:e6:4f:8b:28:8c:15:
a2:3e:fb:b6:b2:a1:61:df:3e:d9:b6:ed:ea:e8:22:27:bd:6a:
34:f5:26:28:7c:b8:43:12:07:77:84:29:28:13:17:33:06:03:
67:1f:9c:69:cf:f3:32:4d:b5:01:8b:a9:36:3d:dd:2b:7b:d4:
07:25:bb:69:eb:2e:21:95:52:61:74:c5:d2:0a:2d:42:f2:39:
3d:10:8e:e6:27:73:cc:d3:24:f9:ae:48:7b:d9:b2:f5:e9:9d:
a3:9c:93:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:05:21 2026 by rpki-client