Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/d2cd06-dc04-4e65-88c1-dcab1e52accb/1/XhP-KBZzV0iLUE_qxGll0U23upw.mft
File: XhP-KBZzV0iLUE_qxGll0U23upw.mft (raw, json)
Hash identifier: BPZbiMBE3iL7mvberOSKXbBwi/1FpkylhTcKNmRN2ys=
Subject key identifier: 60:79:65:FE:28:A1:97:E3:F1:28:4C:44:F7:B8:57:2C:94:6C:F6:E1
Authority key identifier: 5E:13:FE:28:16:73:57:48:8B:50:4F:EA:C4:69:65:D1:4D:B7:BA:9C
Certificate issuer: /CN=5e13fe28167357488b504feac46965d14db7ba9c
Certificate serial: 019F8F7F5C63000524EBC44C260C34BB730E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XhP-KBZzV0iLUE_qxGll0U23upw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/d2cd06-dc04-4e65-88c1-dcab1e52accb/1/XhP-KBZzV0iLUE_qxGll0U23upw.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:56 +0000
Manifest this update: Thu 23 Jul 2026 15:01:56 +0000
Manifest next update: Fri 24 Jul 2026 15:01:56 +0000
Files and hashes: 1: OsWqV5kxvLO3zxITMBJcQ1-SzWo.roa (hash: JSe4ZxDgFulyfZ8DBgoN9opn6yDV2vfR5CfVXcGr6vA=)
2: XhP-KBZzV0iLUE_qxGll0U23upw.crl (hash: sb1PsEkNW4zy9bmTxRwakFhpyyn67yvU9b/pLWLDU5E=)
3: eZbZTXWIEfvwIX9vrH3W1UJ6wb4.roa (hash: UarGyxZlxuTDN6MQKGhHWE7FjSFEv7rUD+yerIHdN7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/d2cd06-dc04-4e65-88c1-dcab1e52accb/1/XhP-KBZzV0iLUE_qxGll0U23upw.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/d2cd06-dc04-4e65-88c1-dcab1e52accb/1/XhP-KBZzV0iLUE_qxGll0U23upw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XhP-KBZzV0iLUE_qxGll0U23upw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:5c:63:00:05:24:eb:c4:4c:26:0c:34:bb:73:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e13fe28167357488b504feac46965d14db7ba9c
Validity
Not Before: Jul 23 15:01:56 2026 GMT
Not After : Jul 24 15:01:56 2026 GMT
Subject: CN=607965fe28a197e3f1284c44f7b8572c946cf6e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c4:3c:68:b0:8d:20:eb:16:a6:e9:d0:c7:18:
f2:eb:10:4e:02:e5:38:5f:83:ab:32:69:e2:6b:33:
1e:9d:87:d7:3b:38:82:a7:f2:ee:4a:c9:a9:61:ad:
fa:3a:ea:97:ba:67:f6:2c:f2:3c:bc:d4:ac:2f:52:
fa:43:f7:e1:84:96:cd:19:29:6e:6e:48:22:ea:6a:
b2:63:b8:22:73:5c:38:6b:87:0e:8d:41:27:78:4a:
78:5c:a9:c0:7b:07:86:14:c8:2b:69:4e:84:32:16:
1d:d4:06:bf:df:b6:9b:64:2e:50:60:36:d8:52:19:
5b:1c:a2:e4:98:aa:55:22:c1:80:f3:e3:7e:cc:4e:
9a:54:f3:7d:1c:0b:d2:6f:95:4c:ca:e8:8f:a3:b9:
41:c9:1f:b7:98:d3:f1:08:45:16:bd:bc:84:f4:b6:
41:51:f2:e7:41:c5:3c:40:24:68:11:a7:c7:f8:67:
a4:3f:07:45:67:ac:99:d8:72:27:9e:9b:36:e3:07:
d1:d1:f4:6f:d6:a9:61:1f:a1:71:ca:ee:50:53:80:
dc:3c:19:a8:1e:e3:61:3f:c6:a4:46:c8:a8:53:1e:
e3:3f:cd:2c:25:4e:ed:06:70:16:ff:a0:ed:ad:70:
31:d9:b7:38:09:b3:5e:40:19:12:70:5a:b4:ab:cb:
8e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:79:65:FE:28:A1:97:E3:F1:28:4C:44:F7:B8:57:2C:94:6C:F6:E1
X509v3 Authority Key Identifier:
keyid:5E:13:FE:28:16:73:57:48:8B:50:4F:EA:C4:69:65:D1:4D:B7:BA:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XhP-KBZzV0iLUE_qxGll0U23upw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d2cd06-dc04-4e65-88c1-dcab1e52accb/1/XhP-KBZzV0iLUE_qxGll0U23upw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d2cd06-dc04-4e65-88c1-dcab1e52accb/1/XhP-KBZzV0iLUE_qxGll0U23upw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:21:f3:57:f4:9e:e2:93:58:12:42:39:73:d6:ae:3d:af:bf:
62:da:1f:94:4b:79:26:2b:0d:53:15:6b:47:ff:f0:6b:40:bf:
f8:99:4c:bd:90:c5:08:14:48:5d:33:23:a7:22:88:d8:c0:2d:
14:85:bf:ee:e4:cc:65:21:a1:9c:62:50:07:0d:33:50:1c:40:
f4:7c:c7:75:69:83:90:97:cd:c1:ad:84:91:ca:bf:4e:d5:e2:
fb:6d:52:c1:f1:17:39:7e:ad:6b:bf:bc:82:40:59:26:4a:e8:
22:39:5c:14:7c:be:4f:c9:72:39:bb:a4:d7:88:19:ea:15:51:
bb:cb:85:ab:6a:00:ef:63:5d:ec:78:9d:b6:66:e3:52:0e:7d:
ed:f4:5d:ad:fd:ac:e1:0c:81:85:1e:52:40:c4:9c:7e:9b:16:
e4:6e:f2:36:b8:58:ea:5c:c5:ea:e2:53:f9:59:2f:a4:88:80:
64:02:88:85:69:97:22:61:9b:b7:ca:38:80:ae:5b:5a:b6:5e:
bb:1c:77:f0:41:b0:dd:fc:91:dc:ae:f1:ad:55:e9:7f:2b:73:
28:ab:59:43:ca:82:ab:29:c4:cf:9b:b9:03:93:c0:54:23:4e:
9a:05:2a:ef:c5:db:58:4c:89:cc:7c:82:5c:01:56:97:96:0d:
2a:96:04:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Pf1xjAAUk68RMJgw0u3MOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMTNmZTI4MTY3MzU3NDg4YjUwNGZlYWM0Njk2NWQxNGRi
N2JhOWMwHhcNMjYwNzIzMTUwMTU2WhcNMjYwNzI0MTUwMTU2WjAzMTEwLwYDVQQD
Eyg2MDc5NjVmZTI4YTE5N2UzZjEyODRjNDRmN2I4NTcyYzk0NmNmNmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8Q8aLCNIOsWpunQxxjy6xBOAuU4
X4OrMmniazMenYfXOziCp/LuSsmpYa36OuqXumf2LPI8vNSsL1L6Q/fhhJbNGSlu
bkgi6mqyY7gic1w4a4cOjUEneEp4XKnAeweGFMgraU6EMhYd1Aa/37abZC5QYDbY
UhlbHKLkmKpVIsGA8+N+zE6aVPN9HAvSb5VMyuiPo7lByR+3mNPxCEUWvbyE9LZB
UfLnQcU8QCRoEafH+GekPwdFZ6yZ2HInnps24wfR0fRv1qlhH6Fxyu5QU4DcPBmo
HuNhP8akRsioUx7jP80sJU7tBnAW/6DtrXAx2bc4CbNeQBkScFq0q8uOQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGB5Zf4ooZfj8ShMRPe4VyyUbPbhMB8GA1UdIwQY
MBaAFF4T/igWc1dIi1BP6sRpZdFNt7qcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGhQLUtCWnpWMGlMVUVfcXhHbGwwVTIzdXB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9kMmNkMDYtZGMwNC00ZTY1LTg4YzEt
ZGNhYjFlNTJhY2NiLzEvWGhQLUtCWnpWMGlMVUVfcXhHbGwwVTIzdXB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9kMmNkMDYtZGMwNC00ZTY1LTg4YzEtZGNhYjFlNTJhY2Ni
LzEvWGhQLUtCWnpWMGlMVUVfcXhHbGwwVTIzdXB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVyHzV/Se
4pNYEkI5c9auPa+/YtoflEt5JisNUxVrR//wa0C/+JlMvZDFCBRIXTMjpyKI2MAt
FIW/7uTMZSGhnGJQBw0zUBxA9HzHdWmDkJfNwa2Ekcq/TtXi+21SwfEXOX6ta7+8
gkBZJkroIjlcFHy+T8lyObuk14gZ6hVRu8uFq2oA72Nd7HidtmbjUg597fRdrf2s
4QyBhR5SQMScfpsW5G7yNrhY6lzF6uJT+VkvpIiAZAKIhWmXImGbt8o4gK5bWrZe
uxx38EGw3fyR3K7xrVXpfytzKKtZQ8qCqynEz5u5A5PAVCNOmgUq78XbWEyJzHyC
XAFWl5YNKpYEdA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:46:21 2026 by rpki-client