Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
File: XPVjIet-o-5Fze0ChmhCDjf6L6w.mft (raw, json)
Hash identifier: LzjXqPbluBWywWzXDXpAMHoySGrSjEzDMyd1s6Ie2gs=
Subject key identifier: CD:90:A1:50:22:31:1F:20:58:DC:77:72:AD:32:F6:BC:1D:0C:8D:F6
Authority key identifier: 5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC
Certificate issuer: /CN=5cf56321eb7ea3ee45cded028668420e37fa2fac
Certificate serial: 019F9090EDEA8F38C7A6576151734F8B7DEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
Manifest number: 16D7
Signing time: Thu 23 Jul 2026 20:00:44 +0000
Manifest this update: Thu 23 Jul 2026 20:00:44 +0000
Manifest next update: Fri 24 Jul 2026 20:00:44 +0000
Files and hashes: 1: F7EvqKPuCJrRbauscLqXiKU0tSU.roa (hash: Rn1QP+hzXdWW26eL4q5uEtv+FD1RDx8ao69irkAES9U=)
2: XPVjIet-o-5Fze0ChmhCDjf6L6w.crl (hash: Y/BRVfJ5H4FuTZmnIcIrw5RnJHwVgSK8KIOrMvvlzt4=)
3: a7oKAtXpujbjcSp7xIWIBbpbuwo.roa (hash: uOToHNzKGxHUJP96PSZDBVfJ0h4D91Ag2KcuZFpXViQ=)
4: bklYzzrT2LyqE_eolbd4uJqpn88.roa (hash: hL8JImvIqT8exdBOwwwQRZtRNMgq3QcD8ZDf3TXxPgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:ed:ea:8f:38:c7:a6:57:61:51:73:4f:8b:7d:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf56321eb7ea3ee45cded028668420e37fa2fac
Validity
Not Before: Jul 23 20:00:44 2026 GMT
Not After : Jul 24 20:00:44 2026 GMT
Subject: CN=cd90a15022311f2058dc7772ad32f6bc1d0c8df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:08:df:40:11:5d:cd:99:1d:29:eb:3f:7b:c2:
b1:1f:ea:16:79:b6:dc:c5:bd:7e:d3:79:9e:f8:4c:
d2:ec:ae:d4:2c:a7:af:46:74:5f:04:8f:4b:ee:ea:
bb:77:56:9e:0a:f3:dd:b3:6b:dc:db:63:3c:60:d0:
43:5b:bc:ca:87:0d:06:37:c7:3d:c4:ff:10:32:55:
59:46:9c:df:9c:6a:91:d4:fc:b9:70:0e:49:00:2e:
9d:df:c1:c5:f7:87:a6:c3:88:51:91:9d:7d:df:8b:
b6:b9:55:0c:04:be:95:86:49:fb:d7:8d:19:28:a6:
3d:ee:92:22:55:2c:0c:fa:84:95:e8:88:7d:77:bf:
b7:12:b7:25:55:4d:ca:88:c1:b2:ff:b5:6e:3c:0c:
a1:fe:23:f4:c7:fc:ce:68:ca:31:b4:f2:46:a5:1b:
e4:fc:8c:de:13:79:e3:16:25:9a:d8:d9:fe:7a:ce:
00:e5:71:17:5c:81:31:06:9a:55:c5:5c:17:e8:48:
02:c0:ea:de:17:32:d2:35:d3:fa:f6:fd:d2:8d:d6:
14:8c:09:30:e3:ed:34:f0:20:e1:27:cb:9e:aa:e7:
f0:1d:d0:d5:6a:ad:6e:9d:39:4f:63:a4:63:aa:71:
79:b7:3f:4c:a9:80:36:41:8f:de:78:7f:50:ea:f7:
0c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:90:A1:50:22:31:1F:20:58:DC:77:72:AD:32:F6:BC:1D:0C:8D:F6
X509v3 Authority Key Identifier:
keyid:5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:81:71:67:b8:a0:cf:ae:da:bd:45:1d:79:83:17:e8:cb:98:
91:ff:d0:7a:b0:6c:db:95:50:89:c9:79:22:50:ed:de:3a:5a:
81:0f:53:43:1f:c9:b3:b0:cb:b4:38:71:4a:b1:1d:4a:46:59:
39:86:66:de:62:a2:78:38:ce:63:9f:2b:59:df:22:10:49:66:
16:93:d3:a1:8b:d5:db:e9:fe:6f:72:94:e5:74:32:f6:e0:d4:
6d:1d:00:ee:58:95:12:14:f1:82:3c:39:30:c3:a8:21:07:5b:
19:6d:b4:0f:7c:93:a5:03:6e:d7:6c:78:5c:fa:49:74:7e:1e:
d9:8c:78:dc:e4:0d:b8:db:5e:d6:ad:d9:38:a0:10:9a:69:a4:
de:d9:1e:60:15:f0:53:7b:d5:e0:d7:be:cc:0d:86:8e:00:7a:
9c:7b:c4:90:62:bd:a4:19:94:e6:47:96:48:2a:a4:85:71:5f:
05:52:44:5e:9e:0a:64:67:40:be:c0:32:43:30:23:ef:84:9e:
43:3b:46:05:a4:09:b8:41:70:a0:b2:10:68:d4:dd:6a:a1:a9:
eb:46:4f:32:b4:72:3c:f2:80:44:d2:86:be:de:08:93:af:ca:
16:f1:30:e0:dd:0e:ea:d2:93:84:48:7d:bd:0e:bf:50:29:4a:
3e:c4:e1:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QkO3qjzjHpldhUXNPi33vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZjU2MzIxZWI3ZWEzZWU0NWNkZWQwMjg2Njg0MjBlMzdm
YTJmYWMwHhcNMjYwNzIzMjAwMDQ0WhcNMjYwNzI0MjAwMDQ0WjAzMTEwLwYDVQQD
EyhjZDkwYTE1MDIyMzExZjIwNThkYzc3NzJhZDMyZjZiYzFkMGM4ZGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAjfQBFdzZkdKes/e8KxH+oWebbc
xb1+03me+EzS7K7ULKevRnRfBI9L7uq7d1aeCvPds2vc22M8YNBDW7zKhw0GN8c9
xP8QMlVZRpzfnGqR1Py5cA5JAC6d38HF94emw4hRkZ1934u2uVUMBL6Vhkn7140Z
KKY97pIiVSwM+oSV6Ih9d7+3ErclVU3KiMGy/7VuPAyh/iP0x/zOaMoxtPJGpRvk
/IzeE3njFiWa2Nn+es4A5XEXXIExBppVxVwX6EgCwOreFzLSNdP69v3SjdYUjAkw
4+008CDhJ8uequfwHdDVaq1unTlPY6RjqnF5tz9MqYA2QY/eeH9Q6vcMFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM2QoVAiMR8gWNx3cq0y9rwdDI32MB8GA1UdIwQY
MBaAFFz1YyHrfqPuRc3tAoZoQg43+i+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFBWaklldC1vLTVGemUwQ2htaENEamY2TDZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9kZmE0YTgtMzhiMC00NjFiLWEwODIt
ODQzZTI2MmRkOGRjLzEvWFBWaklldC1vLTVGemUwQ2htaENEamY2TDZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9kZmE0YTgtMzhiMC00NjFiLWEwODItODQzZTI2MmRkOGRj
LzEvWFBWaklldC1vLTVGemUwQ2htaENEamY2TDZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt4FxZ7ig
z67avUUdeYMX6MuYkf/QerBs25VQicl5IlDt3jpagQ9TQx/Js7DLtDhxSrEdSkZZ
OYZm3mKieDjOY58rWd8iEElmFpPToYvV2+n+b3KU5XQy9uDUbR0A7liVEhTxgjw5
MMOoIQdbGW20D3yTpQNu12x4XPpJdH4e2Yx43OQNuNte1q3ZOKAQmmmk3tkeYBXw
U3vV4Ne+zA2GjgB6nHvEkGK9pBmU5keWSCqkhXFfBVJEXp4KZGdAvsAyQzAj74Se
QztGBaQJuEFwoLIQaNTdaqGp60ZPMrRyPPKARNKGvt4Ik6/KFvEw4N0O6tKThEh9
vQ6/UClKPsThRA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:34:56 2026 by rpki-client