Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/XYHR_0WxVHwAqEtG75nsot-9Rbw.mft
File: XYHR_0WxVHwAqEtG75nsot-9Rbw.mft (raw, json)
Hash identifier: equzKP6fDWwpAWX/9qNguyUhEYbrP28tSzwu/wpFsU8=
Subject key identifier: 66:56:F6:D9:7E:63:D0:A8:7C:73:E4:C8:0F:53:79:33:30:02:13:18
Authority key identifier: 5D:81:D1:FF:45:B1:54:7C:00:A8:4B:46:EF:99:EC:A2:DF:BD:45:BC
Certificate issuer: /CN=5d81d1ff45b1547c00a84b46ef99eca2dfbd45bc
Certificate serial: 019F902301FCE31DBC73E5CC1EB3358DCA5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYHR_0WxVHwAqEtG75nsot-9Rbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/XYHR_0WxVHwAqEtG75nsot-9Rbw.mft
Manifest number: 19CC
Signing time: Thu 23 Jul 2026 18:00:41 +0000
Manifest this update: Thu 23 Jul 2026 18:00:41 +0000
Manifest next update: Fri 24 Jul 2026 18:00:41 +0000
Files and hashes: 1: In_xgreKFfWQTYFlnjjmLhiHwyI.roa (hash: gsiqXm6RUxLr8tboWvbsB1DhI1DS1FN/O6oO/pFKm00=)
2: OCZr5kjA-CfYpumVERqkCUluKf4.roa (hash: fP+6DEGSKabb9AgXcHTeX7zIerrqedNJGpjW4I4cF8I=)
3: XYHR_0WxVHwAqEtG75nsot-9Rbw.crl (hash: /mCswWG1DAN+i+0LA+aNfIYyniq2dRh/youXsYTN70s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/XYHR_0WxVHwAqEtG75nsot-9Rbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/XYHR_0WxVHwAqEtG75nsot-9Rbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYHR_0WxVHwAqEtG75nsot-9Rbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:01:fc:e3:1d:bc:73:e5:cc:1e:b3:35:8d:ca:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d81d1ff45b1547c00a84b46ef99eca2dfbd45bc
Validity
Not Before: Jul 23 18:00:41 2026 GMT
Not After : Jul 24 18:00:41 2026 GMT
Subject: CN=6656f6d97e63d0a87c73e4c80f53793330021318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:46:7a:a8:4c:b8:75:10:71:d3:e8:db:e9:ee:
ec:96:0c:c3:36:5b:46:2d:b5:3e:e7:2f:87:e1:3b:
ba:42:48:8b:64:aa:c7:69:a3:1a:3b:90:a8:49:c4:
f0:34:84:06:6d:df:74:c7:37:ab:29:44:f4:78:a3:
4d:ce:ca:1e:28:e1:5e:7f:ee:17:a6:ac:da:d2:8b:
87:dc:d7:7e:71:30:69:9a:4e:0b:9d:6b:2b:fb:8d:
b4:65:25:89:ad:87:85:c4:5f:c6:ff:2e:00:58:5c:
c9:3f:1c:27:54:30:c5:c2:07:b4:d4:cc:f6:c4:1c:
c7:8e:01:59:51:30:1f:b2:48:0d:9b:c8:4b:b7:a9:
c0:cb:dc:18:35:bf:81:70:d8:03:b2:ee:87:75:72:
e1:d1:15:49:43:82:95:e3:cb:47:ce:f3:2a:24:b6:
66:ca:10:16:66:f6:0c:a8:82:68:7b:f6:5e:33:6b:
6f:c0:ed:b6:63:25:2c:49:6a:ad:1c:26:df:81:ed:
98:9b:43:cf:df:fb:d7:c4:50:69:e6:42:9b:d0:54:
05:40:86:ea:61:00:08:94:2c:a3:de:15:2d:18:28:
6e:75:5e:f3:62:df:bb:3e:eb:47:e9:13:19:7f:4e:
6c:de:99:90:50:ed:aa:fc:e8:99:27:fc:ff:d3:c7:
ed:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:56:F6:D9:7E:63:D0:A8:7C:73:E4:C8:0F:53:79:33:30:02:13:18
X509v3 Authority Key Identifier:
keyid:5D:81:D1:FF:45:B1:54:7C:00:A8:4B:46:EF:99:EC:A2:DF:BD:45:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYHR_0WxVHwAqEtG75nsot-9Rbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/XYHR_0WxVHwAqEtG75nsot-9Rbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/XYHR_0WxVHwAqEtG75nsot-9Rbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:a1:e1:61:f4:3f:ec:f4:5d:4d:9d:2d:05:a4:43:70:99:63:
00:0b:c7:19:30:63:ca:d0:76:61:96:fc:d4:2a:20:82:56:62:
59:37:85:ae:ec:6e:26:fb:82:65:8a:c7:57:29:a0:f8:65:48:
c6:06:72:de:2c:9c:f5:01:c9:3d:4e:97:ea:07:13:72:7a:96:
94:b8:ac:79:8f:0b:f2:02:19:28:4f:68:1f:bb:29:84:71:6b:
35:31:9e:3f:27:40:18:70:20:34:29:0e:d9:9d:3d:03:e1:c6:
d2:5a:05:97:8c:ab:78:0d:6a:db:34:3f:5f:a6:dc:4a:0d:87:
6a:5d:8b:c2:a1:35:c4:48:b9:b0:82:eb:3d:d7:63:07:5c:e2:
10:20:bd:d2:e5:66:ef:62:a5:c6:0d:27:45:d5:74:96:ac:a9:
94:71:84:f1:e4:c2:c9:82:79:df:7b:9c:43:b0:5b:bc:5b:e6:
db:83:59:7a:e0:d3:65:dd:71:10:7d:3e:35:21:db:98:98:b3:
fe:5a:75:23:d8:94:12:18:21:f1:00:15:74:be:21:7d:6f:40:
93:59:08:5a:18:a0:3b:c8:61:c5:f7:f9:7c:1b:f9:7d:ca:57:
c4:b0:03:d1:0f:cd:29:b1:73:ce:54:a2:9f:9d:99:de:b5:8b:
b7:57:0c:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QIwH84x28c+XMHrM1jcpeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkODFkMWZmNDViMTU0N2MwMGE4NGI0NmVmOTllY2EyZGZi
ZDQ1YmMwHhcNMjYwNzIzMTgwMDQxWhcNMjYwNzI0MTgwMDQxWjAzMTEwLwYDVQQD
Eyg2NjU2ZjZkOTdlNjNkMGE4N2M3M2U0YzgwZjUzNzkzMzMwMDIxMzE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0Z6qEy4dRBx0+jb6e7slgzDNltG
LbU+5y+H4Tu6QkiLZKrHaaMaO5CoScTwNIQGbd90xzerKUT0eKNNzsoeKOFef+4X
pqza0ouH3Nd+cTBpmk4LnWsr+420ZSWJrYeFxF/G/y4AWFzJPxwnVDDFwge01Mz2
xBzHjgFZUTAfskgNm8hLt6nAy9wYNb+BcNgDsu6HdXLh0RVJQ4KV48tHzvMqJLZm
yhAWZvYMqIJoe/ZeM2tvwO22YyUsSWqtHCbfge2Ym0PP3/vXxFBp5kKb0FQFQIbq
YQAIlCyj3hUtGChudV7zYt+7PutH6RMZf05s3pmQUO2q/OiZJ/z/08fttwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGZW9tl+Y9CofHPkyA9TeTMwAhMYMB8GA1UdIwQY
MBaAFF2B0f9FsVR8AKhLRu+Z7KLfvUW8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFlIUl8wV3hWSHdBcUV0Rzc1bnNvdC05UmJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9hY2Q3ZTMtOWM3Ni00ZmY2LWI1YWUt
ZWU4MGEyZDI5NTJkLzEvWFlIUl8wV3hWSHdBcUV0Rzc1bnNvdC05UmJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9hY2Q3ZTMtOWM3Ni00ZmY2LWI1YWUtZWU4MGEyZDI5NTJk
LzEvWFlIUl8wV3hWSHdBcUV0Rzc1bnNvdC05UmJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZKHhYfQ/
7PRdTZ0tBaRDcJljAAvHGTBjytB2YZb81CogglZiWTeFruxuJvuCZYrHVymg+GVI
xgZy3iyc9QHJPU6X6gcTcnqWlLiseY8L8gIZKE9oH7sphHFrNTGePydAGHAgNCkO
2Z09A+HG0loFl4yreA1q2zQ/X6bcSg2Hal2LwqE1xEi5sILrPddjB1ziECC90uVm
72Klxg0nRdV0lqyplHGE8eTCyYJ533ucQ7BbvFvm24NZeuDTZd1xEH0+NSHbmJiz
/lp1I9iUEhgh8QAVdL4hfW9Ak1kIWhigO8hhxff5fBv5fcpXxLAD0Q/NKbFzzlSi
n52Z3rWLt1cMrw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:02:24 2026 by rpki-client