Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
File: XDodlz-bM5HorayqZk0bI9d48Ag.mft (raw, json)
Hash identifier: GI9aAeeL7dPE1P+D0AeDZIfgwn7Yxswwbb/0Bj7AyAY=
Subject key identifier: F0:CA:FA:41:0D:6D:94:A5:C0:D7:E9:3C:E5:41:3B:37:A7:A7:90:8B
Authority key identifier: 5C:3A:1D:97:3F:9B:33:91:E8:AD:AC:AA:66:4D:1B:23:D7:78:F0:08
Certificate issuer: /CN=5c3a1d973f9b3391e8adacaa664d1b23d778f008
Certificate serial: 019E1E6C84AEE9B8599BC6EA5344709179AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDodlz-bM5HorayqZk0bI9d48Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
Manifest number: 190A
Signing time: Tue 12 May 2026 23:01:28 +0000
Manifest this update: Tue 12 May 2026 23:01:28 +0000
Manifest next update: Wed 13 May 2026 23:01:28 +0000
Files and hashes: 1: XDodlz-bM5HorayqZk0bI9d48Ag.crl (hash: quaijbOA410+XjbOhwvy45LW17MNFZmjJMCf9f8FhkQ=)
2: nESdHSYfa1deK4cuMEoqKlkUBhA.roa (hash: Ne5xi2gxYVVWXxqP7e6edUaF5lMzo3AlLl0nnSwGj20=)
3: rZYX5fKPq_iTsTklZo3tUzGErD8.roa (hash: Bkadagr0tzraTAYCN3j7TcAW/fLW29DF6wAopom2qpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDodlz-bM5HorayqZk0bI9d48Ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:84:ae:e9:b8:59:9b:c6:ea:53:44:70:91:79:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c3a1d973f9b3391e8adacaa664d1b23d778f008
Validity
Not Before: May 12 23:01:28 2026 GMT
Not After : May 13 23:01:28 2026 GMT
Subject: CN=f0cafa410d6d94a5c0d7e93ce5413b37a7a7908b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:53:75:74:6b:a1:96:2a:5b:eb:a2:e9:91:e5:
65:6f:81:6e:cb:4a:96:d6:a3:77:cf:24:85:97:7c:
d1:70:55:a2:a0:0f:3b:58:e9:05:61:1d:85:62:48:
e7:33:75:48:54:83:e7:09:ae:66:f4:74:2c:57:25:
cd:59:69:dc:c2:12:af:c1:a7:82:08:11:b9:f5:55:
0c:af:d9:e3:2c:92:50:b0:7f:13:84:43:17:2a:a7:
b7:68:6c:50:d9:98:a7:2b:00:0f:45:a9:95:51:3c:
03:1e:4d:2e:3d:26:24:01:ac:00:1e:c4:46:9b:f9:
40:44:8a:94:84:40:68:d5:8e:45:99:da:41:5a:32:
5a:ae:cc:61:ac:d5:1b:c8:61:55:95:53:32:4e:9a:
e2:ea:17:db:97:3b:2f:8b:f9:a4:28:7d:aa:be:76:
19:b3:d4:5e:96:91:5d:d1:84:06:f3:8c:c1:08:4f:
0f:81:05:2b:7b:0c:f4:3f:6d:81:53:08:5a:66:47:
1f:aa:41:55:3f:6c:84:bc:c3:64:fc:96:68:81:79:
e7:40:e2:f4:1b:fa:88:22:1b:f2:cc:a4:2a:6b:42:
bf:32:17:c2:9e:57:ec:03:dd:d3:bd:ca:b2:3b:b4:
b7:46:27:58:1d:91:55:b4:0c:5a:8a:2c:8b:ec:20:
89:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:CA:FA:41:0D:6D:94:A5:C0:D7:E9:3C:E5:41:3B:37:A7:A7:90:8B
X509v3 Authority Key Identifier:
keyid:5C:3A:1D:97:3F:9B:33:91:E8:AD:AC:AA:66:4D:1B:23:D7:78:F0:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDodlz-bM5HorayqZk0bI9d48Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:de:06:4b:76:8a:b6:35:57:28:78:01:b6:42:23:05:70:5f:
44:53:d1:94:7f:ac:df:95:93:ef:9d:f1:a3:03:54:62:22:08:
28:98:b5:95:89:fe:8c:ed:37:7e:56:73:98:2d:48:ab:c5:5d:
e6:f2:be:67:48:e9:d9:ba:1d:d1:1b:50:d4:99:0e:60:d2:7d:
39:30:92:1a:94:a6:7d:49:72:13:75:3d:05:8d:e4:ce:b1:e6:
48:5e:4c:9b:7a:a9:76:66:5a:3d:24:01:0e:07:3c:fc:aa:49:
36:22:51:e4:cd:03:9e:22:5a:b6:ef:79:e3:ce:ce:9b:ec:d0:
84:1f:2d:bd:e6:3f:54:c4:c3:9c:34:13:b7:5d:b9:8d:d7:0b:
b7:c5:ff:b5:9a:a1:c8:2e:de:a1:8f:f9:d6:fe:a8:c5:68:86:
73:c7:7f:08:06:da:7a:32:e5:59:4f:25:51:d9:50:10:e5:f5:
36:49:2d:40:cd:1d:16:3c:f8:23:e4:3e:0e:e0:72:26:a2:06:
a4:e4:fa:65:bd:dc:fd:9b:98:74:67:eb:e2:d2:a0:01:b3:54:
c2:99:b1:f0:38:a5:93:a5:77:89:64:b0:99:43:a1:43:64:f5:
c0:86:d9:c5:05:12:5d:bd:fb:be:96:be:10:a8:84:50:21:44:
3d:48:a8:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ebISu6bhZm8bqU0RwkXmsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjM2ExZDk3M2Y5YjMzOTFlOGFkYWNhYTY2NGQxYjIzZDc3
OGYwMDgwHhcNMjYwNTEyMjMwMTI4WhcNMjYwNTEzMjMwMTI4WjAzMTEwLwYDVQQD
EyhmMGNhZmE0MTBkNmQ5NGE1YzBkN2U5M2NlNTQxM2IzN2E3YTc5MDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlN1dGuhlipb66LpkeVlb4Fuy0qW
1qN3zySFl3zRcFWioA87WOkFYR2FYkjnM3VIVIPnCa5m9HQsVyXNWWncwhKvwaeC
CBG59VUMr9njLJJQsH8ThEMXKqe3aGxQ2ZinKwAPRamVUTwDHk0uPSYkAawAHsRG
m/lARIqUhEBo1Y5FmdpBWjJarsxhrNUbyGFVlVMyTpri6hfblzsvi/mkKH2qvnYZ
s9RelpFd0YQG84zBCE8PgQUrewz0P22BUwhaZkcfqkFVP2yEvMNk/JZogXnnQOL0
G/qIIhvyzKQqa0K/MhfCnlfsA93TvcqyO7S3RidYHZFVtAxaiiyL7CCJswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPDK+kENbZSlwNfpPOVBOzenp5CLMB8GA1UdIwQY
MBaAFFw6HZc/mzOR6K2sqmZNGyPXePAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWERvZGx6LWJNNUhvcmF5cVprMGJJOWQ0OEFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9hNWZjZjUtNzg2My00M2MxLWExYzEt
MTk0Y2M5OTAyYWJmLzEvWERvZGx6LWJNNUhvcmF5cVprMGJJOWQ0OEFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9hNWZjZjUtNzg2My00M2MxLWExYzEtMTk0Y2M5OTAyYWJm
LzEvWERvZGx6LWJNNUhvcmF5cVprMGJJOWQ0OEFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYd4GS3aK
tjVXKHgBtkIjBXBfRFPRlH+s35WT753xowNUYiIIKJi1lYn+jO03flZzmC1Iq8Vd
5vK+Z0jp2bod0RtQ1JkOYNJ9OTCSGpSmfUlyE3U9BY3kzrHmSF5Mm3qpdmZaPSQB
Dgc8/KpJNiJR5M0DniJatu95487Om+zQhB8tveY/VMTDnDQTt125jdcLt8X/tZqh
yC7eoY/51v6oxWiGc8d/CAbaejLlWU8lUdlQEOX1NkktQM0dFjz4I+Q+DuByJqIG
pOT6Zb3c/ZuYdGfr4tKgAbNUwpmx8Dilk6V3iWSwmUOhQ2T1wIbZxQUSXb37vpa+
EKiEUCFEPUioeg==
-----END CERTIFICATE-----
Generated at Wed May 13 07:18:22 2026 by rpki-client