Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.mft
File: XiZI8SkNRHG821C4K-TtkyADCU0.mft (raw, json)
Hash identifier: thAUQR7b36qpECDUDwaBdx1O+THWnMggmc0SjeBB7OI=
Subject key identifier: 3A:98:9D:1B:CF:CC:2E:2A:B2:08:5D:74:B1:8E:77:D6:B6:64:6F:25
Authority key identifier: 5E:26:48:F1:29:0D:44:71:BC:DB:50:B8:2B:E4:ED:93:20:03:09:4D
Certificate issuer: /CN=5e2648f1290d4471bcdb50b82be4ed932003094d
Certificate serial: 019F94A4A4B087A4DED4A2F5D4000259AF94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XiZI8SkNRHG821C4K-TtkyADCU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.mft
Manifest number: 195A
Signing time: Fri 24 Jul 2026 15:00:45 +0000
Manifest this update: Fri 24 Jul 2026 15:00:45 +0000
Manifest next update: Sat 25 Jul 2026 15:00:45 +0000
Files and hashes: 1: XiZI8SkNRHG821C4K-TtkyADCU0.crl (hash: k2GZOu3VwReCThaZjUCrWGX4rH0xBLG96qv+MiJhBcs=)
2: sq8rzyi0UVog1iS5Ju1CZc-6dl0.roa (hash: hTNSZci/jvQbgI5g6zcbraZud5VHWLa8WEC2pVISMYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XiZI8SkNRHG821C4K-TtkyADCU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:a4:b0:87:a4:de:d4:a2:f5:d4:00:02:59:af:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e2648f1290d4471bcdb50b82be4ed932003094d
Validity
Not Before: Jul 24 15:00:45 2026 GMT
Not After : Jul 25 15:00:45 2026 GMT
Subject: CN=3a989d1bcfcc2e2ab2085d74b18e77d6b6646f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a1:6c:88:07:d6:6e:ee:66:4f:2a:22:1b:c7:
db:e6:d4:ec:95:54:4b:f1:b3:67:de:97:55:21:7f:
99:bb:c7:0d:4c:09:3f:c4:1f:96:1b:e2:a5:e6:63:
0b:87:1e:c3:ee:77:54:1d:13:18:ea:64:9c:38:c0:
72:23:37:2a:66:f2:38:86:f1:82:14:5e:6f:78:7f:
bb:dd:f6:e0:1a:80:92:24:88:8a:35:55:14:05:56:
6c:c5:ae:d4:31:a2:e1:9d:89:02:67:64:da:77:6a:
fa:c4:25:28:67:04:e1:05:6a:56:bd:bb:36:89:c9:
94:e5:62:c9:c1:1c:16:4a:0b:5a:de:40:30:b7:f8:
f6:1b:8c:e3:b0:2c:1c:62:b4:9c:70:ff:8d:e1:5e:
7f:f9:b8:41:27:9e:75:ac:24:c2:9b:50:4a:cb:3d:
a9:55:e7:61:3a:25:7d:95:d0:e2:17:5b:7c:68:7f:
ac:c6:cf:16:72:69:b7:18:56:86:24:01:fc:6e:c3:
b6:48:a3:c3:34:d0:a6:91:33:77:ac:55:19:30:cb:
e5:2c:89:a0:00:50:62:74:10:bf:87:af:c0:b5:f8:
ea:94:53:51:c1:dd:4d:cb:35:b3:79:bd:ab:12:98:
bf:9c:f7:fa:5e:85:ee:74:ab:ed:80:1d:86:d6:9c:
f3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:98:9D:1B:CF:CC:2E:2A:B2:08:5D:74:B1:8E:77:D6:B6:64:6F:25
X509v3 Authority Key Identifier:
keyid:5E:26:48:F1:29:0D:44:71:BC:DB:50:B8:2B:E4:ED:93:20:03:09:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiZI8SkNRHG821C4K-TtkyADCU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:17:ae:37:c1:ca:45:33:84:03:bf:88:3a:55:30:4a:93:91:
48:8e:bf:07:93:32:03:d6:3d:e9:01:a7:0a:2d:a2:9a:28:1c:
4b:9e:68:c7:c2:66:85:05:c5:42:7a:4d:8a:94:9a:45:b3:e7:
ef:1f:0e:3e:11:21:fc:45:b7:c7:68:9c:4a:f9:8c:94:09:22:
dc:76:e8:6b:5a:a0:b2:56:23:bd:f5:e2:5c:b0:f1:19:f3:e3:
89:c5:1e:50:1a:32:92:44:12:cc:38:81:98:a4:8d:dd:aa:15:
5e:0e:e2:97:0e:12:ea:c9:f8:a8:ca:42:08:83:94:d3:cf:e9:
1f:fe:d8:31:ce:d8:09:02:86:aa:0f:60:b8:9d:07:92:bd:8b:
55:f6:c8:94:f9:65:72:94:55:cf:3a:61:62:28:7c:72:28:58:
be:ea:2c:5f:87:e9:4f:c4:73:c1:d1:05:41:15:35:7c:b8:7e:
9d:46:de:8d:da:be:06:cd:38:17:5a:74:6c:b4:ad:f6:0b:6d:
98:dc:09:a4:66:ec:fd:8c:63:01:b0:7f:a0:b2:50:79:e4:fb:
b0:6f:b3:b1:f8:75:46:91:b4:44:03:9c:8d:00:5d:4c:27:1e:
ae:fa:88:d7:bb:35:92:c6:31:76:7d:9c:1d:d6:17:f6:f0:e1:
fe:89:0f:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UpKSwh6Te1KL11AACWa+UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMjY0OGYxMjkwZDQ0NzFiY2RiNTBiODJiZTRlZDkzMjAw
MzA5NGQwHhcNMjYwNzI0MTUwMDQ1WhcNMjYwNzI1MTUwMDQ1WjAzMTEwLwYDVQQD
EygzYTk4OWQxYmNmY2MyZTJhYjIwODVkNzRiMThlNzdkNmI2NjQ2ZjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaFsiAfWbu5mTyoiG8fb5tTslVRL
8bNn3pdVIX+Zu8cNTAk/xB+WG+Kl5mMLhx7D7ndUHRMY6mScOMByIzcqZvI4hvGC
FF5veH+73fbgGoCSJIiKNVUUBVZsxa7UMaLhnYkCZ2Tad2r6xCUoZwThBWpWvbs2
icmU5WLJwRwWSgta3kAwt/j2G4zjsCwcYrSccP+N4V5/+bhBJ551rCTCm1BKyz2p
VedhOiV9ldDiF1t8aH+sxs8Wcmm3GFaGJAH8bsO2SKPDNNCmkTN3rFUZMMvlLImg
AFBidBC/h6/AtfjqlFNRwd1NyzWzeb2rEpi/nPf6XoXudKvtgB2G1pzztQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDqYnRvPzC4qsghddLGOd9a2ZG8lMB8GA1UdIwQY
MBaAFF4mSPEpDURxvNtQuCvk7ZMgAwlNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGlaSThTa05SSEc4MjFDNEstVHRreUFEQ1UwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9iYzRjNTMtMGRiNS00ZjExLTg0ZjYt
ZjU1ZmNkZjk3ODQ2LzEvWGlaSThTa05SSEc4MjFDNEstVHRreUFEQ1UwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9iYzRjNTMtMGRiNS00ZjExLTg0ZjYtZjU1ZmNkZjk3ODQ2
LzEvWGlaSThTa05SSEc4MjFDNEstVHRreUFEQ1UwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiBeuN8HK
RTOEA7+IOlUwSpORSI6/B5MyA9Y96QGnCi2imigcS55ox8JmhQXFQnpNipSaRbPn
7x8OPhEh/EW3x2icSvmMlAki3Hboa1qgslYjvfXiXLDxGfPjicUeUBoykkQSzDiB
mKSN3aoVXg7ilw4S6sn4qMpCCIOU08/pH/7YMc7YCQKGqg9guJ0Hkr2LVfbIlPll
cpRVzzphYih8cihYvuosX4fpT8RzwdEFQRU1fLh+nUbejdq+Bs04F1p0bLSt9gtt
mNwJpGbs/YxjAbB/oLJQeeT7sG+zsfh1RpG0RAOcjQBdTCcervqI17s1ksYxdn2c
HdYX9vDh/okPpQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:11:27 2026 by rpki-client