Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/xP-TUFfDvbrb30nzQ1YsXjABYEQ.mft
File: xP-TUFfDvbrb30nzQ1YsXjABYEQ.mft (raw, json)
Hash identifier: LVTEVqQoto7Or07TdPzwP0m+A23+yn0vkHOJx3ChPu8=
Subject key identifier: 76:35:84:C2:0E:20:83:FC:74:C6:19:58:AC:62:A4:17:AE:85:8F:DC
Authority key identifier: C4:FF:93:50:57:C3:BD:BA:DB:DF:49:F3:43:56:2C:5E:30:01:60:44
Certificate issuer: /CN=c4ff935057c3bdbadbdf49f343562c5e30016044
Certificate serial: 019F94375EEEA5B31C5FF5FDECE6F0562F43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xP-TUFfDvbrb30nzQ1YsXjABYEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/xP-TUFfDvbrb30nzQ1YsXjABYEQ.mft
Manifest number: 19CD
Signing time: Fri 24 Jul 2026 13:01:24 +0000
Manifest this update: Fri 24 Jul 2026 13:01:24 +0000
Manifest next update: Sat 25 Jul 2026 13:01:24 +0000
Files and hashes: 1: XhfQtg6lg2sPtQqujy0Tvt47GJA.roa (hash: 4PIBlMBLgLaYJg4fGmEmHbbe8E3tiv3yMYNtFBiiWa4=)
2: xP-TUFfDvbrb30nzQ1YsXjABYEQ.crl (hash: WTvPWEqeGLwIZBaUBfcD3xJ+/fXnGTvr6A5QGDSxXyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/xP-TUFfDvbrb30nzQ1YsXjABYEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/xP-TUFfDvbrb30nzQ1YsXjABYEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xP-TUFfDvbrb30nzQ1YsXjABYEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 13:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:37:5e:ee:a5:b3:1c:5f:f5:fd:ec:e6:f0:56:2f:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ff935057c3bdbadbdf49f343562c5e30016044
Validity
Not Before: Jul 24 13:01:24 2026 GMT
Not After : Jul 25 13:01:24 2026 GMT
Subject: CN=763584c20e2083fc74c61958ac62a417ae858fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5d:42:d8:d0:56:c6:bf:62:68:99:59:fc:cb:
04:12:14:00:71:17:95:70:c4:b3:28:9c:cf:ae:b7:
0f:67:a6:b2:8d:6e:b9:7c:6f:43:c2:4a:59:71:cd:
c5:f1:49:c6:a8:6c:4d:f3:22:40:4f:c3:dc:d5:0a:
e1:dc:4e:9f:2e:fb:9f:13:b4:4e:c0:87:cb:c4:17:
ed:28:bc:ba:1a:e4:7f:e9:1e:cf:eb:e2:f2:e6:61:
88:f5:58:b0:64:ea:cf:cc:ca:04:35:39:9b:c1:4b:
d4:a6:1f:94:be:e1:1f:86:74:2b:d2:15:8d:3c:f1:
4a:86:db:bb:13:3f:d9:00:0d:49:84:59:3c:2d:a4:
d5:66:91:ec:fe:d3:5c:9c:ac:d5:a6:73:e0:e8:2e:
8b:e3:bf:d2:59:9d:cd:b3:ff:92:56:00:a7:22:ee:
ae:0e:7d:ae:49:76:c1:38:a8:50:45:e6:e2:19:5a:
9e:23:b6:34:70:db:c8:63:31:ee:c0:c5:a1:66:00:
c0:f8:08:39:e8:c7:f5:67:c9:a8:50:d6:c1:a7:54:
89:14:80:fe:c5:3e:7f:1a:47:84:62:bc:13:85:88:
27:ba:0c:f1:9c:41:67:10:13:b8:3b:3f:fe:a4:52:
62:5a:59:88:89:5e:25:c6:b3:bb:7d:1d:c1:2f:00:
4a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:35:84:C2:0E:20:83:FC:74:C6:19:58:AC:62:A4:17:AE:85:8F:DC
X509v3 Authority Key Identifier:
keyid:C4:FF:93:50:57:C3:BD:BA:DB:DF:49:F3:43:56:2C:5E:30:01:60:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xP-TUFfDvbrb30nzQ1YsXjABYEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/xP-TUFfDvbrb30nzQ1YsXjABYEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/xP-TUFfDvbrb30nzQ1YsXjABYEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:70:ce:72:80:6f:63:6e:ee:db:c7:23:d3:5d:68:e3:ba:c5:
6a:26:f2:d9:a8:f5:6d:e3:58:59:df:12:cf:0f:6b:29:40:a3:
df:c8:32:4f:a5:52:fd:6a:c0:79:32:d6:72:4b:be:98:e3:0e:
78:b0:8a:0f:8a:f8:b3:c6:09:e6:e5:f4:37:01:fc:5c:8a:58:
d1:3a:bc:2f:3d:63:97:a7:23:d1:00:14:9b:d9:60:3d:35:5f:
ef:cf:0f:a6:e3:6e:96:b2:20:f9:02:30:d1:c0:43:2a:64:9f:
e8:e1:f9:7c:e8:1a:53:03:e2:cd:4a:3b:1b:52:53:d9:27:dd:
6c:cc:8e:5b:87:e8:61:ef:99:0b:71:3e:1e:1f:a6:51:39:df:
e5:50:22:89:89:e2:83:8b:52:d5:fc:b6:6a:88:7e:e4:23:e2:
43:c9:3a:8c:a7:80:d8:71:49:fb:c4:ec:a0:4b:f2:74:4d:e9:
be:f2:f9:90:ab:bd:96:5c:7a:2c:28:d6:74:fb:28:71:3b:8f:
33:69:03:67:6f:9b:d1:90:70:45:10:ec:82:f0:11:63:26:68:
06:a3:86:a5:b3:49:cc:03:83:9b:75:f3:de:fa:b4:b3:ae:4e:
bf:ef:8a:77:6e:66:52:30:07:32:8e:be:c1:e9:08:6f:04:fc:
0b:83:f2:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UN17upbMcX/X97ObwVi9DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZmY5MzUwNTdjM2JkYmFkYmRmNDlmMzQzNTYyYzVlMzAw
MTYwNDQwHhcNMjYwNzI0MTMwMTI0WhcNMjYwNzI1MTMwMTI0WjAzMTEwLwYDVQQD
Eyg3NjM1ODRjMjBlMjA4M2ZjNzRjNjE5NThhYzYyYTQxN2FlODU4ZmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxF1C2NBWxr9iaJlZ/MsEEhQAcReV
cMSzKJzPrrcPZ6ayjW65fG9DwkpZcc3F8UnGqGxN8yJAT8Pc1Qrh3E6fLvufE7RO
wIfLxBftKLy6GuR/6R7P6+Ly5mGI9ViwZOrPzMoENTmbwUvUph+UvuEfhnQr0hWN
PPFKhtu7Ez/ZAA1JhFk8LaTVZpHs/tNcnKzVpnPg6C6L47/SWZ3Ns/+SVgCnIu6u
Dn2uSXbBOKhQRebiGVqeI7Y0cNvIYzHuwMWhZgDA+Ag56Mf1Z8moUNbBp1SJFID+
xT5/GkeEYrwThYgnugzxnEFnEBO4Oz/+pFJiWlmIiV4lxrO7fR3BLwBKKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHY1hMIOIIP8dMYZWKxipBeuhY/cMB8GA1UdIwQY
MBaAFMT/k1BXw726299J80NWLF4wAWBEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFAtVFVGZkR2YnJiMzBuelExWXNYakFCWUVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8yYjA1OWEtMzI1ZC00Mzg1LTgxMWYt
MTdlMWEyNTY5NTY4LzEveFAtVFVGZkR2YnJiMzBuelExWXNYakFCWUVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8yYjA1OWEtMzI1ZC00Mzg1LTgxMWYtMTdlMWEyNTY5NTY4
LzEveFAtVFVGZkR2YnJiMzBuelExWXNYakFCWUVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe3DOcoBv
Y27u28cj011o47rFaiby2aj1beNYWd8Szw9rKUCj38gyT6VS/WrAeTLWcku+mOMO
eLCKD4r4s8YJ5uX0NwH8XIpY0Tq8Lz1jl6cj0QAUm9lgPTVf788PpuNulrIg+QIw
0cBDKmSf6OH5fOgaUwPizUo7G1JT2SfdbMyOW4foYe+ZC3E+Hh+mUTnf5VAiiYni
g4tS1fy2aoh+5CPiQ8k6jKeA2HFJ+8TsoEvydE3pvvL5kKu9llx6LCjWdPsocTuP
M2kDZ2+b0ZBwRRDsgvARYyZoBqOGpbNJzAODm3Xz3vq0s65Ov++Kd25mUjAHMo6+
wekIbwT8C4PyuA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:18:37 2026 by rpki-client