Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
File: xalo7bcsFfX5Vn_TQme4dIXvNtE.mft (raw, json)
Hash identifier: Aid+n4LoJCBdPcUGrlJymRCv+WJvcggvUvIv2nHoF0M=
Subject key identifier: AE:29:F3:F5:F2:8C:B5:E4:2B:95:45:37:66:90:D9:1A:26:75:9B:D6
Authority key identifier: C5:A9:68:ED:B7:2C:15:F5:F9:56:7F:D3:42:67:B8:74:85:EF:36:D1
Certificate issuer: /CN=c5a968edb72c15f5f9567fd34267b87485ef36d1
Certificate serial: 019F924849D8964AE0EDF905F889148E2DEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
Manifest number: 1629
Signing time: Fri 24 Jul 2026 04:00:38 +0000
Manifest this update: Fri 24 Jul 2026 04:00:38 +0000
Manifest next update: Sat 25 Jul 2026 04:00:38 +0000
Files and hashes: 1: 9EktXdyZJh18u-aW7yKS4HoPavo.roa (hash: rjDqPIBakWvnRieCU3x6qlMyDbDmiCMZb+0A8kLnWdc=)
2: cPX1K7h-wlaCr7zmE40f44WojxI.roa (hash: Q/KPZCaK+pTYPECUWe3LbMeOLvb3gqHt7TrGMiKZCx4=)
3: xalo7bcsFfX5Vn_TQme4dIXvNtE.crl (hash: Z5zmUKYFqnbxNey4YqTVKj+pubjGr33ELzgK/ouEaIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:49:d8:96:4a:e0:ed:f9:05:f8:89:14:8e:2d:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a968edb72c15f5f9567fd34267b87485ef36d1
Validity
Not Before: Jul 24 04:00:38 2026 GMT
Not After : Jul 25 04:00:38 2026 GMT
Subject: CN=ae29f3f5f28cb5e42b9545376690d91a26759bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6e:93:e7:45:9d:f4:c5:d9:b1:a4:80:91:36:
f7:f6:c9:57:f6:05:39:d0:19:99:cc:f3:dd:e0:99:
6b:5d:80:a1:b6:38:c5:50:95:2c:ce:cd:ac:5f:01:
16:ff:55:2d:7c:25:10:1c:6d:b8:72:d4:f2:1b:ca:
3d:e9:72:6e:cd:e8:7d:f0:a2:ea:52:56:c0:56:8e:
76:99:8c:74:07:7e:8f:58:49:ce:8d:c2:98:d7:fd:
bc:55:d6:4d:0a:20:f1:ce:96:51:12:fb:bc:9e:f7:
42:91:4e:d8:24:d5:16:24:90:72:19:44:98:3c:b6:
11:92:38:e6:e2:5a:48:83:ae:13:41:37:46:ba:3f:
4e:ff:9c:71:32:c7:18:48:ed:07:21:a9:be:89:2c:
ff:e8:48:fe:e3:87:95:f7:ec:45:c8:ac:e4:05:89:
85:5b:6e:6a:44:92:b4:6b:ba:4a:76:d4:ee:7f:fd:
a8:c8:cd:b2:25:70:82:4c:19:a7:9b:53:f5:e4:6b:
af:1c:25:6f:8d:2c:8f:42:0a:91:c4:e0:59:32:71:
6e:54:b3:12:a8:50:94:6e:44:f9:c0:29:47:9d:be:
cb:21:a1:9b:85:64:20:e3:65:2c:1f:56:45:3f:58:
14:ac:fe:6a:e7:3c:c4:e0:1d:dc:be:b9:f5:19:e2:
29:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:29:F3:F5:F2:8C:B5:E4:2B:95:45:37:66:90:D9:1A:26:75:9B:D6
X509v3 Authority Key Identifier:
keyid:C5:A9:68:ED:B7:2C:15:F5:F9:56:7F:D3:42:67:B8:74:85:EF:36:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:12:85:b2:d6:a3:9d:ad:8f:4a:87:e1:20:67:5c:74:c8:57:
7c:bc:50:0c:07:17:49:d5:12:61:5f:6f:86:b9:b0:c9:ee:87:
a5:e0:8b:08:7b:9f:b0:5a:a4:5b:ce:c4:82:dd:aa:9d:d5:a8:
fc:4f:46:93:7d:26:78:7c:8f:1d:89:64:16:93:8a:70:e8:71:
64:d0:0e:e2:bc:15:34:8f:b6:08:e4:e4:6c:4d:0d:76:3d:19:
d5:42:87:48:9c:d5:fa:fa:af:01:ea:39:de:40:53:d5:3f:6d:
ee:6c:a9:22:4f:a5:01:69:c5:10:1a:92:21:37:89:27:3e:76:
1f:57:50:b2:67:54:3e:b0:1a:57:f7:e4:64:3e:37:19:a9:61:
90:d3:0d:51:7c:91:02:f8:8c:59:35:df:dd:4d:3d:01:0f:8f:
e0:1a:90:10:0c:e8:ba:8e:fe:d1:00:62:01:74:83:7b:0a:be:
87:13:29:8f:51:f5:6e:94:a3:d9:a1:1b:c3:84:e1:45:4a:84:
fd:68:d0:5f:c2:9c:e9:da:ed:73:ba:cc:2e:22:79:37:f4:f7:
ab:52:8e:69:ff:d8:bf:6c:98:b4:22:e2:fe:3d:bf:d1:c5:b9:
9c:c9:e2:27:45:7e:89:a5:27:da:8b:9f:68:db:cd:73:45:f3:
12:bc:a9:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SSEnYlkrg7fkF+IkUji3sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1YTk2OGVkYjcyYzE1ZjVmOTU2N2ZkMzQyNjdiODc0ODVl
ZjM2ZDEwHhcNMjYwNzI0MDQwMDM4WhcNMjYwNzI1MDQwMDM4WjAzMTEwLwYDVQQD
EyhhZTI5ZjNmNWYyOGNiNWU0MmI5NTQ1Mzc2NjkwZDkxYTI2NzU5YmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmW6T50Wd9MXZsaSAkTb39slX9gU5
0BmZzPPd4JlrXYChtjjFUJUszs2sXwEW/1UtfCUQHG24ctTyG8o96XJuzeh98KLq
UlbAVo52mYx0B36PWEnOjcKY1/28VdZNCiDxzpZREvu8nvdCkU7YJNUWJJByGUSY
PLYRkjjm4lpIg64TQTdGuj9O/5xxMscYSO0HIam+iSz/6Ej+44eV9+xFyKzkBYmF
W25qRJK0a7pKdtTuf/2oyM2yJXCCTBmnm1P15GuvHCVvjSyPQgqRxOBZMnFuVLMS
qFCUbkT5wClHnb7LIaGbhWQg42UsH1ZFP1gUrP5q5zzE4B3cvrn1GeIpuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK4p8/XyjLXkK5VFN2aQ2RomdZvWMB8GA1UdIwQY
MBaAFMWpaO23LBX1+VZ/00JnuHSF7zbRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGFsbzdiY3NGZlg1Vm5fVFFtZTRkSVh2TnRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8wZGU2ODMtNzMxNi00MGMyLWI4OWMt
YjJjMGRmYThhMGUxLzEveGFsbzdiY3NGZlg1Vm5fVFFtZTRkSVh2TnRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC8wZGU2ODMtNzMxNi00MGMyLWI4OWMtYjJjMGRmYThhMGUx
LzEveGFsbzdiY3NGZlg1Vm5fVFFtZTRkSVh2TnRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADRKFstaj
na2PSofhIGdcdMhXfLxQDAcXSdUSYV9vhrmwye6HpeCLCHufsFqkW87Egt2qndWo
/E9Gk30meHyPHYlkFpOKcOhxZNAO4rwVNI+2COTkbE0Ndj0Z1UKHSJzV+vqvAeo5
3kBT1T9t7mypIk+lAWnFEBqSITeJJz52H1dQsmdUPrAaV/fkZD43GalhkNMNUXyR
AviMWTXf3U09AQ+P4BqQEAzouo7+0QBiAXSDewq+hxMpj1H1bpSj2aEbw4ThRUqE
/WjQX8Kc6drtc7rMLiJ5N/T3q1KOaf/Yv2yYtCLi/j2/0cW5nMniJ0V+iaUn2ouf
aNvNc0XzErypKA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:52:24 2026 by rpki-client