Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft
File: XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft (raw, json)
Hash identifier: 5V8eUkjYq02loBjAwxF0nDZxAbZ4Zmh3ZGYLhZgCDIo=
Subject key identifier: 5C:BB:FB:C6:F5:AA:A3:7E:21:02:6E:0F:38:C7:80:97:BF:A0:F1:75
Authority key identifier: 5D:41:D3:30:DC:8C:72:93:E7:29:45:1D:B2:64:63:83:83:8E:3F:8C
Certificate issuer: /CN=5d41d330dc8c7293e729451db2646383838e3f8c
Certificate serial: 019F8F7E590C6B132B3711363A2E1C903343
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XUHTMNyMcpPnKUUdsmRjg4OOP4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft
Manifest number: 01B8
Signing time: Thu 23 Jul 2026 15:00:49 +0000
Manifest this update: Thu 23 Jul 2026 15:00:49 +0000
Manifest next update: Fri 24 Jul 2026 15:00:49 +0000
Files and hashes: 1: XUHTMNyMcpPnKUUdsmRjg4OOP4w.crl (hash: TEJCh6SwwR8x4BOUrCC6qyeNuGZQ5ccsjHXbUH3f/WI=)
2: hFrzrATwthoWhcz0MUU5me2hxsI.asa (hash: qasjw1PBGin1L+tvp/txSHK72tERURo1h0R6cieBtNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/XUHTMNyMcpPnKUUdsmRjg4OOP4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:59:0c:6b:13:2b:37:11:36:3a:2e:1c:90:33:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d41d330dc8c7293e729451db2646383838e3f8c
Validity
Not Before: Jul 23 15:00:49 2026 GMT
Not After : Jul 24 15:00:49 2026 GMT
Subject: CN=5cbbfbc6f5aaa37e21026e0f38c78097bfa0f175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:40:65:09:67:7e:b2:00:87:3e:f2:d6:0a:e2:
b1:b0:36:0d:eb:62:6c:8b:67:36:0b:1e:8a:44:75:
5b:2b:84:6f:33:71:58:92:9b:ab:a8:18:5d:0a:85:
5f:4f:81:76:75:8f:fc:8b:0e:a9:04:3e:7f:e3:d3:
a3:75:f6:09:f9:78:23:72:88:97:e6:4e:4b:da:8e:
01:f7:93:ba:f2:69:26:d8:ec:4d:db:e9:c7:9c:4e:
26:22:36:78:39:1a:72:9c:59:c3:56:0f:86:e4:fe:
5e:3c:2b:3d:5d:bd:8f:88:88:a5:22:14:67:23:69:
c8:96:3a:69:55:f3:45:92:e6:47:ef:a3:ba:1b:e6:
5a:11:03:09:3d:45:f8:bd:34:c7:74:ab:f7:b3:c0:
0e:b8:4f:40:63:c2:a9:bb:52:f1:bd:c9:20:c9:4e:
5a:20:67:c8:a3:4e:fe:38:d7:bb:4b:ae:9c:15:fd:
27:7d:e9:f8:9a:c0:4d:25:24:86:c6:c4:a9:08:b8:
1c:03:82:07:5b:37:83:58:10:70:20:c2:33:ca:e0:
1f:a2:02:22:34:4e:6a:40:be:10:1a:9e:a1:0c:db:
93:64:f2:2e:e2:49:39:37:97:67:c9:7d:3b:ca:66:
07:ae:65:31:8e:e8:b5:e7:47:c8:64:6c:0e:64:83:
fb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:BB:FB:C6:F5:AA:A3:7E:21:02:6E:0F:38:C7:80:97:BF:A0:F1:75
X509v3 Authority Key Identifier:
keyid:5D:41:D3:30:DC:8C:72:93:E7:29:45:1D:B2:64:63:83:83:8E:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XUHTMNyMcpPnKUUdsmRjg4OOP4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:75:cf:a1:a9:a2:f5:e0:b0:94:bd:ae:56:30:84:f8:db:75:
24:08:95:47:ee:e2:4b:59:27:2e:d7:c7:56:29:03:08:e9:cb:
02:bb:4c:cb:3d:b0:b4:d6:4e:4e:75:74:ce:7d:86:66:c7:16:
84:f4:09:81:6e:14:7b:45:5b:89:7e:0e:bb:d8:08:ee:06:84:
3c:ae:72:4d:60:f5:4d:af:ea:af:d4:d9:a5:ed:25:97:51:1e:
09:0b:d6:0f:ed:eb:5b:65:f1:37:80:c7:fe:a5:27:97:21:94:
c2:91:47:92:6d:81:6e:d9:61:7c:c7:6e:1e:28:6f:5d:bf:d6:
ed:44:73:bb:8d:78:3c:71:31:43:46:6c:cd:5b:31:bc:98:85:
8c:a5:38:17:fe:37:d1:2a:da:fe:9a:63:6b:96:17:ba:3e:2f:
e9:f1:f2:e3:0d:8b:79:4e:27:67:e1:a9:86:79:34:65:6e:e9:
3e:47:2d:66:e7:ff:6f:30:5e:09:41:e4:69:f3:b5:ce:5d:6a:
a9:1d:f3:6e:7e:70:eb:79:11:ae:55:a7:c2:04:27:c9:eb:20:
fb:41:77:80:01:8c:88:b9:04:cb:1a:e0:fb:93:a3:ff:0d:11:
9a:c7:24:8a:1b:3e:01:8c:d6:ee:de:46:03:ae:83:34:3a:b2:
5b:29:bd:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PflkMaxMrNxE2Oi4ckDNDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkNDFkMzMwZGM4YzcyOTNlNzI5NDUxZGIyNjQ2MzgzODM4
ZTNmOGMwHhcNMjYwNzIzMTUwMDQ5WhcNMjYwNzI0MTUwMDQ5WjAzMTEwLwYDVQQD
Eyg1Y2JiZmJjNmY1YWFhMzdlMjEwMjZlMGYzOGM3ODA5N2JmYTBmMTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEBlCWd+sgCHPvLWCuKxsDYN62Js
i2c2Cx6KRHVbK4RvM3FYkpurqBhdCoVfT4F2dY/8iw6pBD5/49OjdfYJ+XgjcoiX
5k5L2o4B95O68mkm2OxN2+nHnE4mIjZ4ORpynFnDVg+G5P5ePCs9Xb2PiIilIhRn
I2nIljppVfNFkuZH76O6G+ZaEQMJPUX4vTTHdKv3s8AOuE9AY8Kpu1LxvckgyU5a
IGfIo07+ONe7S66cFf0nfen4msBNJSSGxsSpCLgcA4IHWzeDWBBwIMIzyuAfogIi
NE5qQL4QGp6hDNuTZPIu4kk5N5dnyX07ymYHrmUxjui150fIZGwOZIP7JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFy7+8b1qqN+IQJuDzjHgJe/oPF1MB8GA1UdIwQY
MBaAFF1B0zDcjHKT5ylFHbJkY4ODjj+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFVIVE1OeU1jcFBuS1VVZHNtUmpnNE9PUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS82OTVjZjItMmJmYS00NjI4LTk0M2It
NWM3YThmZDViMmRmLzEvWFVIVE1OeU1jcFBuS1VVZHNtUmpnNE9PUDR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS82OTVjZjItMmJmYS00NjI4LTk0M2ItNWM3YThmZDViMmRm
LzEvWFVIVE1OeU1jcFBuS1VVZHNtUmpnNE9PUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdnXPoami
9eCwlL2uVjCE+Nt1JAiVR+7iS1knLtfHVikDCOnLArtMyz2wtNZOTnV0zn2GZscW
hPQJgW4Ue0VbiX4Ou9gI7gaEPK5yTWD1Ta/qr9TZpe0ll1EeCQvWD+3rW2XxN4DH
/qUnlyGUwpFHkm2BbtlhfMduHihvXb/W7URzu414PHExQ0ZszVsxvJiFjKU4F/43
0Sra/ppja5YXuj4v6fHy4w2LeU4nZ+Gphnk0ZW7pPkctZuf/bzBeCUHkafO1zl1q
qR3zbn5w63kRrlWnwgQnyesg+0F3gAGMiLkEyxrg+5Oj/w0Rmsckihs+AYzW7t5G
A66DNDqyWym9dg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:06:35 2026 by rpki-client