
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
File: XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft (raw, json)
Hash identifier: 8YnYexc9Ml3WZoJ8tQIiTjxLOyRA4ekolhVVRbrfZXg=
Subject key identifier: 09:B9:48:17:42:D0:86:8D:84:1F:1B:FA:FB:D0:77:46:71:D2:36:9F
Authority key identifier: 5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96
Certificate issuer: /CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96
Certificate serial: 019F92EDC72BA4DBD59CC42F1A9D808B77DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
Manifest number: 14FF
Signing time: Fri 24 Jul 2026 07:01:24 +0000
Manifest this update: Fri 24 Jul 2026 07:01:24 +0000
Manifest next update: Sat 25 Jul 2026 07:01:24 +0000
Files and hashes: 1: 1-rh3SVK_l4oC_Y7ih51PfkV69KE.roa (hash: NJ7OHlFB+x8OrDZE2G7eqZGbDxSKcSz5o8ZkkHAui3k=)
2: DmAsoEh_ftaKPOhVRscVORbXGKo.roa (hash: K5t41X9Sj7F3OsASCaPLgv9lGQLlL9EDWZMrPiqu4D4=)
3: Jj9JAsNkaCzVh3y4XWm1P_rXYU0.roa (hash: //DJwmMWuAhUHyp7ncUG1CBCwhEdbc8wN+6fYn+HdDk=)
4: XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl (hash: DRb9iK4a5gU2xSL3VvcV3OkJ0Yrt4zmDJVToOKIxhpY=)
5: qIrPTvkJoKHOpyB7wnhzahJKcVM.roa (hash: P67wuJBItbnZh+zC9ZR4+mPtRz9kxlpY/Ao75oEVWZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:c7:2b:a4:db:d5:9c:c4:2f:1a:9d:80:8b:77:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96
Validity
Not Before: Jul 24 07:01:24 2026 GMT
Not After : Jul 25 07:01:24 2026 GMT
Subject: CN=09b9481742d0868d841f1bfafbd0774671d2369f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3c:9f:53:51:73:ba:36:5a:78:de:5d:01:8a:
b0:96:e4:0f:55:2b:93:c3:74:40:06:92:7b:a0:5e:
e3:98:c9:f4:a3:11:df:a6:78:9d:91:c5:f9:b7:c1:
20:45:0a:a2:0a:c7:8a:0e:2b:0c:c4:8c:e9:74:d7:
83:53:f1:c8:46:40:8d:0e:a0:e9:9e:ea:21:a9:6c:
74:4b:55:64:10:3b:f0:7e:dd:8f:f9:29:3c:0e:82:
eb:3c:b7:ec:de:bc:e6:ee:85:b4:1b:3d:14:22:57:
58:42:81:a0:9e:56:39:4f:76:06:57:bd:ed:d5:40:
c2:63:5e:9f:29:e3:bf:2e:cb:81:85:6c:04:c9:bd:
6c:5f:fb:49:3e:15:c8:95:23:65:e2:b5:df:ab:12:
b2:ed:61:8c:6e:50:ac:aa:f4:32:33:3c:a0:ed:d3:
0b:bd:bb:cf:ba:37:05:80:d2:67:f3:5d:98:ee:12:
2f:05:92:70:bf:8d:5a:0a:5b:0a:7f:f5:4b:5e:be:
d6:6c:36:52:71:c2:2f:75:62:2a:96:64:7e:c9:e1:
6c:90:dd:35:8b:94:fb:6e:51:53:ba:fc:d5:43:06:
c5:a1:1f:e7:df:1f:bd:e3:d1:c4:64:26:2a:7e:ac:
85:d4:5a:08:8d:c0:93:01:42:6a:8a:68:5b:45:96:
24:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B9:48:17:42:D0:86:8D:84:1F:1B:FA:FB:D0:77:46:71:D2:36:9F
X509v3 Authority Key Identifier:
keyid:5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:e0:9b:69:9f:36:60:3f:01:e3:8d:f3:f5:0c:eb:2d:2c:23:
3b:44:cb:9c:7d:2f:00:65:9a:2f:dd:1f:9a:6f:20:72:25:47:
be:d5:43:50:74:2b:9d:f5:ef:d2:73:73:5a:85:8f:53:1f:29:
7f:3d:cf:15:78:09:91:1d:64:d0:bf:16:ce:6d:a8:fe:0a:cc:
e8:e6:ed:b2:4c:b2:d9:ef:05:7f:4f:91:e6:7b:0e:33:73:12:
63:c3:c7:d2:2c:94:9f:1a:26:c4:0a:6c:f5:59:d7:19:af:37:
ab:17:42:cc:0d:ca:74:0d:69:d1:9a:aa:72:8b:71:f0:3f:5f:
b4:d5:cb:3c:5f:da:85:f7:1d:23:71:6d:43:3e:37:44:b6:fb:
d5:ba:09:f1:db:0e:d3:16:5f:a2:b7:ae:fd:23:d2:93:29:63:
fe:e4:13:63:58:6e:f9:ac:f2:64:54:0b:f4:ae:ba:23:42:50:
69:f0:26:3a:bf:81:a7:7a:8f:c6:71:e8:c7:29:80:b8:1c:90:
44:3c:bb:86:ab:3d:b1:e9:97:f4:15:55:3d:1f:ad:fd:19:dd:
48:89:6b:31:1c:85:1e:00:09:c0:ad:b6:71:13:9c:84:6c:64:
c8:3b:d5:fe:08:01:44:22:f5:68:fd:ca:09:14:4a:3b:71:bf:
a9:b6:fb:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:57:56 2026 by rpki-client