Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
File: xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft (raw, json)
Hash identifier: beG5nh0PPTsqojGLUqY2lGo1+F6M3mWW09VaHAlWbuA=
Subject key identifier: 08:EC:5B:18:F2:98:54:D4:66:90:40:B9:F0:D6:6C:B1:45:E5:9E:57
Authority key identifier: C6:58:3F:58:C7:11:0A:D4:CC:60:9F:4F:FB:7C:AB:2F:80:C8:35:81
Certificate issuer: /CN=c6583f58c7110ad4cc609f4ffb7cab2f80c83581
Certificate serial: 019E1DFE68A7FCDA92A58F9A470F3D088470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
Manifest number: 1915
Signing time: Tue 12 May 2026 21:01:12 +0000
Manifest this update: Tue 12 May 2026 21:01:12 +0000
Manifest next update: Wed 13 May 2026 21:01:12 +0000
Files and hashes: 1: JU90aQ8JffWPKUNs4WRBmjC5fmg.roa (hash: RTDjP0CmxRz9mg1HQcbaHVAmbmYErR/CAHIxD2kjR7M=)
2: xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl (hash: HKR32k4CauDcujmzEd1buH3L9bWj/ZQI6TVOm/PSdoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:68:a7:fc:da:92:a5:8f:9a:47:0f:3d:08:84:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6583f58c7110ad4cc609f4ffb7cab2f80c83581
Validity
Not Before: May 12 21:01:12 2026 GMT
Not After : May 13 21:01:12 2026 GMT
Subject: CN=08ec5b18f29854d4669040b9f0d66cb145e59e57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:68:23:73:f6:c0:58:12:23:40:44:b9:0a:ef:
ad:3e:82:80:5f:e2:a3:88:f2:be:ea:aa:28:55:e6:
28:0d:d6:11:a1:e1:76:ca:a8:3e:0b:f9:4b:d4:50:
61:1d:4e:35:ba:dd:a9:0a:0c:43:7a:68:1e:27:8f:
ab:d0:51:62:30:33:69:9c:aa:57:bc:d4:6c:0b:1c:
a4:db:ae:22:76:bd:7e:19:a3:cc:ce:ff:bc:d1:92:
e1:9c:da:d4:64:f0:ce:0a:6c:1f:8d:a5:82:4d:a3:
6f:a9:cb:7d:ed:37:69:9b:ab:1c:b9:81:e3:99:d0:
55:00:55:74:98:f4:fb:77:64:66:a5:c9:d5:11:e8:
f2:95:35:de:8c:06:8d:84:76:2c:a1:38:6a:9a:81:
6a:dd:a2:62:6c:59:5e:d7:93:fe:24:3e:39:73:76:
b8:db:49:bf:42:91:83:fe:c3:54:5a:95:37:13:bc:
40:02:10:8a:2f:81:fa:35:1d:35:eb:66:f1:9c:77:
28:47:6f:fd:7e:07:7d:76:98:2a:3c:79:c4:47:46:
49:bb:1e:e5:47:df:10:ee:28:23:7e:ac:3e:07:2a:
f7:79:24:db:63:4e:4d:5e:fc:e4:8a:61:c4:78:09:
36:99:24:28:bf:67:a9:25:b4:9a:cd:48:e5:0e:b6:
84:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:EC:5B:18:F2:98:54:D4:66:90:40:B9:F0:D6:6C:B1:45:E5:9E:57
X509v3 Authority Key Identifier:
keyid:C6:58:3F:58:C7:11:0A:D4:CC:60:9F:4F:FB:7C:AB:2F:80:C8:35:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:38:a4:26:71:64:fb:d8:80:18:a0:37:a5:d2:f4:18:63:f5:
7e:f0:df:fc:58:60:65:d2:ea:ea:68:a8:72:db:b7:8b:56:1e:
8b:54:a0:88:d0:3c:c5:a3:47:46:c9:3a:1c:f1:ce:2d:25:e5:
1a:c5:fd:59:2b:15:a1:a9:fb:77:a7:0f:50:fa:af:24:f2:ae:
49:0f:76:1d:b5:2b:9d:fc:fa:f8:0f:f0:30:ad:0d:c4:a4:c3:
7a:1a:2c:a8:99:ee:d0:61:ec:35:e8:8e:47:b1:e6:c7:bf:97:
62:67:1c:23:16:10:4c:e0:dc:8c:fc:c2:a3:de:4e:37:08:bf:
11:5f:ac:2c:f6:e1:70:39:04:cb:b5:9c:83:60:06:c2:70:68:
46:e2:ec:7a:ab:89:d2:10:40:da:3b:d7:8a:b1:8f:7c:93:ac:
99:7f:fd:69:cc:05:72:eb:a8:64:91:9e:22:72:7f:67:85:4e:
9b:d1:74:b8:64:15:12:5e:23:b0:da:de:9b:5a:49:29:81:d8:
bf:c8:38:a6:7e:f1:39:ca:df:da:c2:52:36:85:f6:78:d8:df:
ca:8d:c6:f7:8f:70:d4:7c:99:94:2f:4d:bb:44:23:7d:90:1c:
5c:9f:9a:1c:37:76:4b:6f:e7:2a:7b:59:4f:19:9d:fb:57:bb:
bf:ee:a7:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/min/NqSpY+aRw89CIRwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NTgzZjU4YzcxMTBhZDRjYzYwOWY0ZmZiN2NhYjJmODBj
ODM1ODEwHhcNMjYwNTEyMjEwMTEyWhcNMjYwNTEzMjEwMTEyWjAzMTEwLwYDVQQD
EygwOGVjNWIxOGYyOTg1NGQ0NjY5MDQwYjlmMGQ2NmNiMTQ1ZTU5ZTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmgjc/bAWBIjQES5Cu+tPoKAX+Kj
iPK+6qooVeYoDdYRoeF2yqg+C/lL1FBhHU41ut2pCgxDemgeJ4+r0FFiMDNpnKpX
vNRsCxyk264idr1+GaPMzv+80ZLhnNrUZPDOCmwfjaWCTaNvqct97Tdpm6scuYHj
mdBVAFV0mPT7d2RmpcnVEejylTXejAaNhHYsoThqmoFq3aJibFle15P+JD45c3a4
20m/QpGD/sNUWpU3E7xAAhCKL4H6NR0162bxnHcoR2/9fgd9dpgqPHnER0ZJux7l
R98Q7igjfqw+Byr3eSTbY05NXvzkimHEeAk2mSQov2epJbSazUjlDraEJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAjsWxjymFTUZpBAufDWbLFF5Z5XMB8GA1UdIwQY
MBaAFMZYP1jHEQrUzGCfT/t8qy+AyDWBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGxnX1dNY1JDdFRNWUo5UC0zeXJMNERJTllFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS84ZDBjYWUtZWMxMy00NWZiLTlhZmMt
M2Q1OTNlYmU1MjIwLzEveGxnX1dNY1JDdFRNWUo5UC0zeXJMNERJTllFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS84ZDBjYWUtZWMxMy00NWZiLTlhZmMtM2Q1OTNlYmU1MjIw
LzEveGxnX1dNY1JDdFRNWUo5UC0zeXJMNERJTllFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkTikJnFk
+9iAGKA3pdL0GGP1fvDf/FhgZdLq6mioctu3i1Yei1SgiNA8xaNHRsk6HPHOLSXl
GsX9WSsVoan7d6cPUPqvJPKuSQ92HbUrnfz6+A/wMK0NxKTDehosqJnu0GHsNeiO
R7Hmx7+XYmccIxYQTODcjPzCo95ONwi/EV+sLPbhcDkEy7Wcg2AGwnBoRuLsequJ
0hBA2jvXirGPfJOsmX/9acwFcuuoZJGeInJ/Z4VOm9F0uGQVEl4jsNrem1pJKYHY
v8g4pn7xOcrf2sJSNoX2eNjfyo3G949w1HyZlC9Nu0QjfZAcXJ+aHDd2S2/nKntZ
Txmd+1e7v+6neQ==
-----END CERTIFICATE-----
Generated at Wed May 13 06:32:59 2026 by rpki-client