
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
File: XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft (raw, json)
Hash identifier: oQ2838NaPWEBTmiYov/lxxmPh2a27S7lSNxk0DIVyAk=
Subject key identifier: 66:3A:6B:24:1B:E5:34:1B:C8:02:CA:C8:5D:4F:9D:1C:F8:3A:02:EE
Authority key identifier: 5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96
Certificate issuer: /CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96
Certificate serial: 019E2211CF4B9CC93FC3526CFCC87EDE190C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
Manifest number: 1440
Signing time: Wed 13 May 2026 16:00:52 +0000
Manifest this update: Wed 13 May 2026 16:00:52 +0000
Manifest next update: Thu 14 May 2026 16:00:52 +0000
Files and hashes: 1: 1-rh3SVK_l4oC_Y7ih51PfkV69KE.roa (hash: NJ7OHlFB+x8OrDZE2G7eqZGbDxSKcSz5o8ZkkHAui3k=)
2: DmAsoEh_ftaKPOhVRscVORbXGKo.roa (hash: K5t41X9Sj7F3OsASCaPLgv9lGQLlL9EDWZMrPiqu4D4=)
3: Jj9JAsNkaCzVh3y4XWm1P_rXYU0.roa (hash: //DJwmMWuAhUHyp7ncUG1CBCwhEdbc8wN+6fYn+HdDk=)
4: XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl (hash: DYQfD8s1btroCWvjRMcp39iKaeRcxJpH6xbZUVoVNFE=)
5: qIrPTvkJoKHOpyB7wnhzahJKcVM.roa (hash: P67wuJBItbnZh+zC9ZR4+mPtRz9kxlpY/Ao75oEVWZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 14:48:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:22:11:cf:4b:9c:c9:3f:c3:52:6c:fc:c8:7e:de:19:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96
Validity
Not Before: May 13 16:00:52 2026 GMT
Not After : May 14 16:00:52 2026 GMT
Subject: CN=663a6b241be5341bc802cac85d4f9d1cf83a02ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:40:62:46:56:d4:10:94:08:2f:24:76:ff:d1:
78:96:3f:22:48:f8:ce:8e:66:b3:a5:c4:22:3a:8f:
ef:5c:11:b3:12:81:d7:c7:81:a3:ee:b9:52:f3:fd:
ff:66:38:60:85:f5:aa:5d:ff:5d:b7:7f:70:c8:c2:
9e:ae:dc:5d:4b:6b:fb:62:1a:43:68:ef:db:2f:77:
57:dd:c2:1d:fa:82:78:20:76:fa:20:c8:ce:01:cf:
2e:af:6d:c6:27:79:a3:10:20:00:cb:b1:3b:25:eb:
f9:0f:81:10:ac:b4:17:35:94:c0:6e:f1:fc:58:b1:
43:14:bc:4a:cf:e5:e2:3e:a3:c5:f5:6a:fa:52:bc:
e8:a7:8b:9f:e9:4a:39:3d:91:77:40:09:d4:bd:82:
96:1e:52:31:d3:94:49:dd:91:87:e8:e9:de:0f:87:
08:f4:b8:19:ef:7a:6e:26:35:b5:89:97:c1:78:15:
7b:fc:fb:ee:5c:48:a2:b7:36:99:c4:40:27:07:32:
db:00:1e:53:b9:c1:7f:14:d4:70:a1:90:21:9a:f0:
f0:d3:a0:87:41:78:4a:2b:0f:94:36:b0:e0:8d:3c:
83:89:6d:41:6a:25:2a:d4:ae:f7:ab:7e:c7:17:a1:
1d:73:15:10:71:31:96:8b:ee:59:85:95:5c:bc:99:
2f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:3A:6B:24:1B:E5:34:1B:C8:02:CA:C8:5D:4F:9D:1C:F8:3A:02:EE
X509v3 Authority Key Identifier:
keyid:5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:84:c0:5d:7f:6a:59:2c:13:88:ad:2b:48:57:e6:ac:ee:fd:
d2:1f:84:52:9b:ed:9c:74:3a:eb:2c:18:90:46:ce:67:fa:14:
d7:28:58:3f:e5:ef:a4:dc:5e:75:b8:5c:28:c7:55:7a:c8:4d:
e4:24:fd:0a:d3:fc:c5:7b:71:51:41:bb:62:86:db:bf:67:16:
b4:a6:de:91:3b:bf:3b:c1:fd:de:57:e5:72:d9:4d:d4:7e:8b:
1d:73:71:44:fa:97:02:69:77:e0:10:a7:91:3c:be:f6:a2:10:
50:50:54:e8:b1:e4:3d:c5:bb:65:ca:c8:c2:4d:49:a5:a7:cf:
8d:7a:e6:0e:68:d9:4d:4e:b9:f5:8b:72:d9:de:34:65:78:6b:
7a:8c:0c:7e:f8:be:aa:de:f2:9a:2e:c6:57:04:2b:e9:57:e1:
90:e5:de:c5:bc:31:f5:a8:ca:41:18:47:96:87:71:1a:12:e9:
b3:d6:b8:9b:43:bd:a1:66:9d:db:0e:2f:8e:03:d2:e6:92:52:
7e:dc:3f:aa:57:3a:a0:ae:7f:e5:d1:0c:18:62:07:92:ef:f5:
5c:e9:27:16:29:05:4b:ac:3c:c3:b2:04:b9:1e:e1:f3:f8:9a:
bb:d7:32:43:74:f7:dd:dc:bb:d6:4e:39:21:08:42:56:fa:d5:
7f:21:2f:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4iEc9LnMk/w1Js/Mh+3hkMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkM2JiODQ4OTE2NTFmMjAzOWNkODFiMGI2MDkxMmY3YzBl
NWNmOTYwHhcNMjYwNTEzMTYwMDUyWhcNMjYwNTE0MTYwMDUyWjAzMTEwLwYDVQQD
Eyg2NjNhNmIyNDFiZTUzNDFiYzgwMmNhYzg1ZDRmOWQxY2Y4M2EwMmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEBiRlbUEJQILyR2/9F4lj8iSPjO
jmazpcQiOo/vXBGzEoHXx4Gj7rlS8/3/ZjhghfWqXf9dt39wyMKertxdS2v7YhpD
aO/bL3dX3cId+oJ4IHb6IMjOAc8ur23GJ3mjECAAy7E7Jev5D4EQrLQXNZTAbvH8
WLFDFLxKz+XiPqPF9Wr6Urzop4uf6Uo5PZF3QAnUvYKWHlIx05RJ3ZGH6OneD4cI
9LgZ73puJjW1iZfBeBV7/PvuXEiitzaZxEAnBzLbAB5TucF/FNRwoZAhmvDw06CH
QXhKKw+UNrDgjTyDiW1BaiUq1K73q37HF6EdcxUQcTGWi+5ZhZVcvJkv1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGY6ayQb5TQbyALKyF1PnRz4OgLuMB8GA1UdIwQY
MBaAFF07uEiRZR8gOc2BsLYJEvfA5c+WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFR1NFNKRmxIeUE1ellHd3Rna1M5OERsejVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS81ODdmN2UtNjBjYy00MWEwLTg4Njkt
NGY4YzYzOGE3MmUxLzEvWFR1NFNKRmxIeUE1ellHd3Rna1M5OERsejVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS81ODdmN2UtNjBjYy00MWEwLTg4NjktNGY4YzYzOGE3MmUx
LzEvWFR1NFNKRmxIeUE1ellHd3Rna1M5OERsejVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiYTAXX9q
WSwTiK0rSFfmrO790h+EUpvtnHQ66ywYkEbOZ/oU1yhYP+XvpNxedbhcKMdVeshN
5CT9CtP8xXtxUUG7Yobbv2cWtKbekTu/O8H93lflctlN1H6LHXNxRPqXAml34BCn
kTy+9qIQUFBU6LHkPcW7ZcrIwk1JpafPjXrmDmjZTU659Yty2d40ZXhreowMfvi+
qt7ymi7GVwQr6VfhkOXexbwx9ajKQRhHlodxGhLps9a4m0O9oWad2w4vjgPS5pJS
ftw/qlc6oK5/5dEMGGIHku/1XOknFikFS6w8w7IEuR7h8/iau9cyQ3T33dy71k45
IQhCVvrVfyEv+Q==
-----END CERTIFICATE-----
Generated at Wed May 13 19:07:02 2026 by rpki-client