
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft
File: xm2dULO4nVHIqiST5-9HAdYlHa0.mft (raw, json)
Hash identifier: XjJxiyFQAUJ2Ma1oCaWVqowek/MoBGOm+exwcwQVa+w=
Subject key identifier: 18:6F:50:7C:F2:57:6B:F1:48:DE:92:E4:3B:DE:D8:57:01:18:BD:91
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 019F8F7EA6FE5D2B85AF0431B6C775FA590E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft
Manifest number: 19E5
Signing time: Thu 23 Jul 2026 15:01:09 +0000
Manifest this update: Thu 23 Jul 2026 15:01:09 +0000
Manifest next update: Fri 24 Jul 2026 15:01:09 +0000
Files and hashes: 1: 327Pemqk9sFkUW1UuW8ziGGSZZw.roa (hash: ppw0czaBOT9M4S3v5W/5Tq+8LmykMNtbgTkUQ8yWE2Q=)
2: 4O2FbX601-gBzb6h9g4rxWyIEtQ.roa (hash: TijnigUxJO0VkgNYCCWevg979evUf45Yv9DM6CJB1YQ=)
3: 4TLc-RZQvXpmyF7h4Csz7X13aCg.roa (hash: fUAGwVoyhs0QW1ur6F37wVxXLEtCjowCKYYnC+aO+oo=)
4: 7bWHpI5hLkVOOVMwaLDHOJjE-AQ.roa (hash: OG4wWGCUVxMVLCl+iWc5JLI3OgOP6z2IIPVQAsdzDqI=)
5: B65xybVJWOfMzOFS0UR9-O1GM7A.roa (hash: tAOeBsLf6DKyiC/JTFGsAeHLZ/oPpzm8mDnfepadXxE=)
6: Hs0H6CP8Sdc8K234nEi8yZ7lpcY.roa (hash: 38bwfsJmZUq97h+cdER4fwtCEcCYr5ZXIT6zw+0Jdhc=)
7: KCSkG-M_vayCpo68Ad12Z_kuFiw.roa (hash: pV60C6kU4d2wz1aLgEquE6I7nPbu+DSy0MC61QN3nt8=)
8: MP9GV1aDbU5FCATFFEpagOxKq5E.roa (hash: /TchIxxmMugLDKCX9UaOzPAAl6PEOMasQ2iLjcExFwM=)
9: Mdbc7JKGBe-JSvKB28h6Q_ApLiU.roa (hash: ixbEaYXOURIbpbdcksYTq3QhDvoC08h0/HFaZkHONBA=)
10: N7ElhbVyCmGSjUSh1AxjT63WzYw.roa (hash: W3FJJT1fp/7XCFXKVQfC6wjn61A9LFjVkKvFsdNlvHw=)
11: NMRSYRWPNEeA7-bAu7YGKb77w-w.roa (hash: eW8TDQOugRRowNyUaDmP0iEfShcpqstWsoeuH1rCrD0=)
12: PoFBrEh2SMRPYVmU_szomrEefgE.roa (hash: rlWtklGuZq/V0ptMquWiRwvkcGUeR1KUGk/odJwJIoc=)
13: V1PdVFoshW1ar5HpIYyNCl-wxZg.roa (hash: 8JNuhL/a0qXG5i850tam3mN3diEt2c5ox0iX3jf8huA=)
14: XJjk4iuq21KJi_eSHwzmqhjc_8c.roa (hash: jOGURgmK75hsefYMnVhRtGVJY5YkbyE0SgF+Nks8cp8=)
15: Ybb4MF7W8pI3PYYiVsp0XR6vOko.roa (hash: Dj07k3KstrBcF52pApqtwtaTx2esJLpuT2QwAiWYbk8=)
16: _6J7AwPIqd15mIlwq2cJqNgjb0I.roa (hash: jxk3CJkvfpWrVN7KbiWix7L1eSxCaMfAPSl2gWvHW9o=)
17: _X1aB1grD4SEnY0N9BS0XD2icYQ.roa (hash: 8ohwVFQyC0+8LBOZ3vBnB2ZQPF3XbCAWhyBCtY+3UwE=)
18: bNLCkSinXiYwmDqOGOa8s-V6Q3Q.roa (hash: haFcBNVZwKKJJG8if5wj//WNo7O84ixbtXTuzJ5h90o=)
19: c7r0L2ENZSmqzGht-gN0WK2wO-w.roa (hash: qscdcuXNHP5xr9NKr0pzszSsGawZRBL4L0aRxzbki3I=)
20: da2QfG6A8HePFVhHUZPAybEpN68.roa (hash: TKp47i1BUIPNcl+xrP72HbJ0DwhwhsJyAX+gufSHOcQ=)
21: efwlLLHqb-bdy8PqwUcM4smevIk.roa (hash: dziFMotDF0gnY460BoEIQb6O67mGB4C/hN9W6acAk18=)
22: f8XSqcnwlZlK4hs1lSB5rn58js0.roa (hash: tjsQfcci6+epX3kib5qTfEfmQbUbQ46VzjgDJsHnqJc=)
23: fl030ykYWSfFMJ3I618xpKaj2Ho.roa (hash: pFEqmv+BjHNl0B+g2h17soeMDVxIGqWF0IhtOC2J1Tg=)
24: i39T_sxoePa7FkwXjI2KlpcV9nQ.roa (hash: xjv51Wh2+JZgrJ+iRtvSyXOWKDVobdGo9gsPb02h2X4=)
25: iPKJwckHS7fTX2BYHqvx9q3JA4g.roa (hash: 2bHm3BwYJ52KpSHXTQlcz+x91m3fEq3PirchX6IlyGw=)
26: iqnR0QT5Gp1ysbpIbYG1Jx1Dr-A.roa (hash: uT81Q71i5BXjU2YhhS0n8jdqFaplDdaFrFqRykt33OM=)
27: kIUbbYh6ze26nak_H_v-MD0wSSY.roa (hash: CmhR0RNFprtW/FUqKS4N2o6ZxexEDi835cZpYYZrHUo=)
28: lcn7Wtg6ulEkp1Lc7XKZFro-mds.roa (hash: QCmVx87F8wdoRkStlUnKFmP4R7y7QH8VIpoG6J8hkG4=)
29: mGHfTe4HlOI6ikD255Ba9ypvq-M.roa (hash: 3pJb7Pd785PsGkpCHW3Ncqf7JB0x9mA0Rp7Wk5mjymw=)
30: oKT0teDRuCKghhjJR_CyLi3LsKQ.roa (hash: UJ60ENBvDsOG9AkFDPJ8MVNUvDKatIBnVyDiXubzPPQ=)
31: uFClGSpeGEjwQsC_QTd20Dprr-I.roa (hash: ZSHME475VpVZlfM6MiJmA1EyOYGOLuRVRvJ6kvFPsNM=)
32: ww6z6hjsuMEOP6vTR3LMLKMyV6M.roa (hash: LaoHrX4huXBTGyoLgvfv7cFh+2fdya3FBkPDLWzF0sg=)
33: x3ERDAaeO48LeOr6lKQKB6Ey2mM.roa (hash: Y+nAlXRY4txRKWouCnodtOhRL0mCZVwY0SjTTDgCeMQ=)
34: xm2dULO4nVHIqiST5-9HAdYlHa0.crl (hash: VW4FhY8e/a0hZfnpjBJYpd/OPnG8O6Ft3XufsB9q+Qc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:a6:fe:5d:2b:85:af:04:31:b6:c7:75:fa:59:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Jul 23 15:01:09 2026 GMT
Not After : Jul 24 15:01:09 2026 GMT
Subject: CN=186f507cf2576bf148de92e43bded8570118bd91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:03:93:69:29:65:61:80:80:b0:b9:2f:24:bd:
5a:51:4c:b4:2c:17:74:0a:97:ad:3f:d2:61:94:3e:
99:e0:47:3f:85:ac:f3:a4:1d:8b:06:e9:f4:2e:4e:
27:ba:81:70:a7:1f:cd:48:1a:17:f6:75:65:44:0a:
72:37:26:a8:82:5d:5d:c6:ff:9f:cb:61:6b:8a:0d:
95:fe:34:9a:c8:84:12:f7:1e:df:0d:43:6a:ad:0b:
01:16:7f:de:ab:93:23:d4:6f:8c:ec:2f:6c:a0:e0:
e8:3b:a4:94:ab:29:2b:aa:9f:c7:5f:c2:14:28:ea:
7b:85:e7:37:f0:d7:aa:af:87:3b:94:37:f0:87:fb:
13:fe:27:04:46:30:98:0f:a6:33:a8:f3:a4:a0:cc:
84:9f:79:c2:89:7f:a5:9e:7f:48:3f:8f:75:52:78:
b2:79:09:0d:14:a2:70:df:7e:cb:a2:a4:ad:6b:4c:
99:ef:ef:db:72:90:f0:26:dc:4e:11:d2:9b:23:42:
ed:70:1c:32:fb:0c:67:35:98:83:70:a9:22:9d:45:
a2:6f:b6:a7:da:47:70:8f:fd:e2:ae:3e:0d:a9:7b:
ba:d1:b7:03:4b:67:ec:b6:da:83:d8:30:8e:d5:fd:
fb:28:28:ce:89:bb:ae:55:e6:26:87:7a:ef:93:71:
fc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:6F:50:7C:F2:57:6B:F1:48:DE:92:E4:3B:DE:D8:57:01:18:BD:91
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:cc:9c:9c:ef:0c:5d:13:8f:06:88:0f:18:dc:9e:30:c6:eb:
ba:31:1c:ba:08:b6:12:c7:22:1d:c8:dd:5e:ca:88:60:95:79:
1b:26:c5:d3:f9:f0:47:fa:76:a7:d5:3a:9a:b2:ee:91:3d:c8:
cb:2a:ee:97:f1:70:15:aa:5d:52:f0:6b:9c:7f:3a:39:b7:9e:
ca:d8:a2:a0:c3:72:de:84:b6:93:bf:33:d2:c0:41:f0:6c:8c:
05:9e:19:fc:9d:f2:46:41:42:cc:3e:8a:a0:b8:d9:bf:14:88:
38:d7:9b:1b:4d:a1:31:df:a1:89:20:05:8a:b5:4d:a5:08:8c:
2f:5c:90:ef:b1:79:ca:a3:32:02:77:4d:f7:2f:fa:3e:63:89:
37:12:50:33:fe:3c:e3:86:df:2d:7d:cb:a0:96:c2:b0:fc:05:
92:89:af:33:f9:97:35:38:b6:52:5e:c5:c6:d5:8e:9b:f2:93:
9c:62:93:9d:c6:be:54:be:b2:6a:de:f9:9e:5a:3f:e6:35:2f:
c7:50:7d:17:67:6d:80:3b:f0:61:30:53:65:e4:66:7f:99:2e:
4f:d9:bd:73:65:19:a1:19:d2:33:fb:d1:b1:4a:68:03:57:a3:
a5:b9:22:cc:f2:8f:ea:88:c0:0a:5c:2b:c5:f3:ad:05:cf:5b:
4c:5a:7b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:38:01 2026 by rpki-client