Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/4bdf30-f2a8-44ff-8737-a472fb2d4c90/1/XeNpl3lT5b198zgXiKQlpXvBwlQ.mft
File: XeNpl3lT5b198zgXiKQlpXvBwlQ.mft (raw, json)
Hash identifier: JEQ7qYEgqim+nQGPF4kejGoWAIyBTup2+XYCGdg67+E=
Subject key identifier: 3D:72:40:85:89:FB:7C:7A:32:24:BC:D6:D8:F5:E3:48:AD:27:C7:14
Authority key identifier: 5D:E3:69:97:79:53:E5:BD:7D:F3:38:17:88:A4:25:A5:7B:C1:C2:54
Certificate issuer: /CN=5de369977953e5bd7df3381788a425a57bc1c254
Certificate serial: 019F916D18C2CDD4EA458FBB67F7E2BE2D57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XeNpl3lT5b198zgXiKQlpXvBwlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/4bdf30-f2a8-44ff-8737-a472fb2d4c90/1/XeNpl3lT5b198zgXiKQlpXvBwlQ.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:01:13 +0000
Manifest this update: Fri 24 Jul 2026 00:01:13 +0000
Manifest next update: Sat 25 Jul 2026 00:01:13 +0000
Files and hashes: 1: XeNpl3lT5b198zgXiKQlpXvBwlQ.crl (hash: TGW/5QS6JbE4Kgv/BQuztTXSA+arEATHRmrX7yklqtY=)
2: gjzkvOpwo1VRhdor0ibZ6CC1RMY.roa (hash: rl9pYDDMx4wTP/iHtIkLTivkQb2U2V3qvKBigsxkyqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/4bdf30-f2a8-44ff-8737-a472fb2d4c90/1/XeNpl3lT5b198zgXiKQlpXvBwlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/4bdf30-f2a8-44ff-8737-a472fb2d4c90/1/XeNpl3lT5b198zgXiKQlpXvBwlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XeNpl3lT5b198zgXiKQlpXvBwlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:18:c2:cd:d4:ea:45:8f:bb:67:f7:e2:be:2d:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5de369977953e5bd7df3381788a425a57bc1c254
Validity
Not Before: Jul 24 00:01:13 2026 GMT
Not After : Jul 25 00:01:13 2026 GMT
Subject: CN=3d72408589fb7c7a3224bcd6d8f5e348ad27c714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:18:a0:25:91:e6:f6:e9:fe:d0:c6:3f:cf:07:
f1:a2:ec:3c:ab:51:e9:35:e2:01:0f:d0:1c:30:cb:
b2:98:2f:aa:26:a0:02:54:c5:ec:e0:b3:c1:f3:fc:
d4:8e:7c:ed:07:38:b3:ea:ed:c3:fe:76:98:34:86:
e1:26:3a:ff:91:8d:a9:6a:87:a4:68:2a:83:de:6d:
3c:eb:84:cd:74:c3:6a:28:d4:e7:d2:a4:aa:8b:61:
47:62:14:af:6a:38:9e:82:54:8d:9b:b8:b5:99:58:
d3:75:f9:14:5d:bf:67:79:f4:80:95:2a:70:d5:7f:
69:7a:fc:a8:90:b5:a7:08:2e:da:70:3e:1b:49:70:
11:2c:39:5c:18:7f:80:db:5f:e8:6b:71:00:11:cc:
0f:bb:a1:b6:26:2f:b5:66:6a:5e:f0:bb:0f:4d:57:
f7:17:91:e4:fa:10:12:dd:70:84:e9:17:77:5d:cb:
7d:8a:f8:2d:13:09:53:a0:f6:a8:75:b8:c9:d1:ae:
fd:95:bf:27:9c:7f:94:cb:49:ee:53:61:da:ab:5f:
4a:da:6d:f5:23:b7:f5:9d:ea:ff:a3:66:3f:5d:db:
45:9b:2b:c1:f3:b6:3b:3d:77:26:a0:ca:e2:ac:a2:
08:66:ad:e9:f3:48:f2:19:47:a3:7b:6d:ce:5b:28:
1d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:72:40:85:89:FB:7C:7A:32:24:BC:D6:D8:F5:E3:48:AD:27:C7:14
X509v3 Authority Key Identifier:
keyid:5D:E3:69:97:79:53:E5:BD:7D:F3:38:17:88:A4:25:A5:7B:C1:C2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XeNpl3lT5b198zgXiKQlpXvBwlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4bdf30-f2a8-44ff-8737-a472fb2d4c90/1/XeNpl3lT5b198zgXiKQlpXvBwlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4bdf30-f2a8-44ff-8737-a472fb2d4c90/1/XeNpl3lT5b198zgXiKQlpXvBwlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:36:50:7d:27:3c:31:35:85:40:42:15:e6:e3:ef:56:e4:b5:
f4:3b:a4:8a:17:04:e9:63:6b:eb:52:e7:37:00:1e:7c:e5:15:
79:99:f2:34:e5:0f:e1:5c:3d:01:61:88:f2:e5:6d:87:48:c4:
83:f2:da:a8:32:14:50:d1:e4:1c:f5:62:61:ee:ab:73:80:91:
2a:1c:d5:da:ed:88:f7:0e:b5:7b:8b:ce:dd:5a:14:3d:4a:fd:
d4:5d:94:b0:f8:cc:c5:88:2e:b1:ca:b3:3c:61:a4:a7:26:f6:
d9:01:67:0f:20:6b:ed:5e:d5:5b:fe:21:49:91:95:43:7d:97:
d4:a4:b6:b6:76:4d:50:76:5c:f2:d2:57:03:33:5d:5c:11:0a:
9c:c3:df:d1:72:ef:aa:b0:e2:dd:88:bd:a6:37:e6:6b:97:f1:
b7:9c:c5:33:9c:92:e1:8d:1a:c7:9e:48:59:64:cf:82:35:70:
7b:c3:77:e7:56:39:f2:f5:12:37:84:ba:76:cd:00:54:ac:df:
43:8d:3d:1f:c0:af:55:86:cf:27:bf:06:9e:72:16:54:50:ea:
78:6a:c3:16:ab:9a:d0:03:d9:47:71:ad:b0:7b:de:25:64:9c:
b7:19:b3:07:d7:2b:11:8f:c5:15:60:d8:83:f0:8d:5c:76:49:
87:65:8e:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbRjCzdTqRY+7Z/fivi1XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZTM2OTk3Nzk1M2U1YmQ3ZGYzMzgxNzg4YTQyNWE1N2Jj
MWMyNTQwHhcNMjYwNzI0MDAwMTEzWhcNMjYwNzI1MDAwMTEzWjAzMTEwLwYDVQQD
EygzZDcyNDA4NTg5ZmI3YzdhMzIyNGJjZDZkOGY1ZTM0OGFkMjdjNzE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthigJZHm9un+0MY/zwfxouw8q1Hp
NeIBD9AcMMuymC+qJqACVMXs4LPB8/zUjnztBziz6u3D/naYNIbhJjr/kY2paoek
aCqD3m0864TNdMNqKNTn0qSqi2FHYhSvajieglSNm7i1mVjTdfkUXb9nefSAlSpw
1X9pevyokLWnCC7acD4bSXARLDlcGH+A21/oa3EAEcwPu6G2Ji+1Zmpe8LsPTVf3
F5Hk+hAS3XCE6Rd3Xct9ivgtEwlToPaodbjJ0a79lb8nnH+Uy0nuU2Haq19K2m31
I7f1ner/o2Y/XdtFmyvB87Y7PXcmoMrirKIIZq3p80jyGUeje23OWygdJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD1yQIWJ+3x6MiS81tj140itJ8cUMB8GA1UdIwQY
MBaAFF3jaZd5U+W9ffM4F4ikJaV7wcJUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGVOcGwzbFQ1YjE5OHpnWGlLUWxwWHZCd2xRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy80YmRmMzAtZjJhOC00NGZmLTg3Mzct
YTQ3MmZiMmQ0YzkwLzEvWGVOcGwzbFQ1YjE5OHpnWGlLUWxwWHZCd2xRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy80YmRmMzAtZjJhOC00NGZmLTg3MzctYTQ3MmZiMmQ0Yzkw
LzEvWGVOcGwzbFQ1YjE5OHpnWGlLUWxwWHZCd2xRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGDZQfSc8
MTWFQEIV5uPvVuS19DukihcE6WNr61LnNwAefOUVeZnyNOUP4Vw9AWGI8uVth0jE
g/LaqDIUUNHkHPViYe6rc4CRKhzV2u2I9w61e4vO3VoUPUr91F2UsPjMxYguscqz
PGGkpyb22QFnDyBr7V7VW/4hSZGVQ32X1KS2tnZNUHZc8tJXAzNdXBEKnMPf0XLv
qrDi3Yi9pjfma5fxt5zFM5yS4Y0ax55IWWTPgjVwe8N351Y58vUSN4S6ds0AVKzf
Q409H8CvVYbPJ78GnnIWVFDqeGrDFqua0APZR3GtsHveJWSctxmzB9crEY/FFWDY
g/CNXHZJh2WOaA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:07:35 2026 by rpki-client