Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
File: XigJUGU6fsWMUzhdALOB77tGWCQ.mft (raw, json)
Hash identifier: E0ePnquKvzitDRvpRyi+bw/Yd1K0ahspGoxMh22MMM4=
Subject key identifier: 90:D2:0A:0D:91:7F:37:78:88:2A:D2:95:2B:5E:2C:A5:25:90:C9:CA
Authority key identifier: 5E:28:09:50:65:3A:7E:C5:8C:53:38:5D:00:B3:81:EF:BB:46:58:24
Certificate issuer: /CN=5e280950653a7ec58c53385d00b381efbb465824
Certificate serial: 019F935C4999E23A53F578CF1801E1B0CCE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
Manifest number: 0988
Signing time: Fri 24 Jul 2026 09:02:06 +0000
Manifest this update: Fri 24 Jul 2026 09:02:06 +0000
Manifest next update: Sat 25 Jul 2026 09:02:06 +0000
Files and hashes: 1: 1-N-Z3cPVFu_Om0GHK2AgOkgXdoM.roa (hash: fr16WHaKP/dmz7kwPH4GVwwXFVV/SyIEEVY49/wQV+U=)
2: 1aw8Nv97xOelgCP3-YnwnaxEm5Y.roa (hash: jy29WIgwdNl8op/0r93ONPzqQSdB42DU8p3Gs7efZY0=)
3: 2PxDuTNSWd2nVBQOyZp7w-a3G48.roa (hash: nuRMk74zjQwmTzVhehj6QjrkhW4+qo+fGCHLFEBJBC0=)
4: XigJUGU6fsWMUzhdALOB77tGWCQ.crl (hash: hwBJT/IGJdBc6K+Hy3cfaQ/q5L/2iLAM5w9Q75UOON8=)
5: c9R4pyYEgXuth8LibhVlQrijaqw.roa (hash: GjJoF2AKi6roB+eJMggN2owFvnp/FEnfdBtdPLGnDgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5c:49:99:e2:3a:53:f5:78:cf:18:01:e1:b0:cc:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e280950653a7ec58c53385d00b381efbb465824
Validity
Not Before: Jul 24 09:02:06 2026 GMT
Not After : Jul 25 09:02:06 2026 GMT
Subject: CN=90d20a0d917f3778882ad2952b5e2ca52590c9ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9c:0a:fe:b9:66:9e:c8:ad:22:93:0f:8b:e4:
76:6c:b1:66:a9:57:37:1e:f8:16:71:c5:b3:b1:0f:
19:6d:a5:cf:87:e5:87:55:eb:8f:b0:98:d2:ea:1b:
7b:3d:6d:59:29:cc:65:6a:9d:70:bb:39:8c:44:f7:
86:05:f5:32:2f:58:8c:75:d3:32:f8:ba:58:2b:d7:
99:7b:0e:d3:95:5f:fb:7a:89:39:1e:69:37:e7:86:
8b:41:2f:b4:44:64:24:d9:18:1b:26:5d:5e:5a:f3:
06:44:37:ca:49:22:2a:c3:8a:28:39:e5:21:05:6b:
08:4f:a3:36:0e:45:0c:fd:73:17:71:f4:06:a1:c4:
03:5c:10:06:ad:c9:8f:4c:05:49:2d:a7:30:af:1d:
3c:f2:58:5c:9e:52:38:97:bc:ea:cd:65:5c:b7:d5:
33:62:c3:b5:6c:6d:50:c9:8c:a7:49:28:c8:d6:a2:
d8:9b:a5:ba:23:f5:75:9f:2e:b0:ba:8b:83:76:ac:
01:d5:1a:33:fe:7a:4c:7f:bd:16:a5:d5:6a:9e:ff:
fe:da:50:7e:86:a5:6c:51:06:bb:e3:f2:20:1e:51:
c3:b3:a6:d7:08:53:6b:58:6f:2c:b2:a2:a1:a8:6b:
5f:46:d1:c6:4c:43:d4:5f:69:3c:05:64:cd:0a:22:
51:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D2:0A:0D:91:7F:37:78:88:2A:D2:95:2B:5E:2C:A5:25:90:C9:CA
X509v3 Authority Key Identifier:
keyid:5E:28:09:50:65:3A:7E:C5:8C:53:38:5D:00:B3:81:EF:BB:46:58:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a6:13:cb:dc:61:fe:f4:10:dd:f0:6a:f3:23:18:60:93:35:
80:fb:7d:e1:79:32:93:6b:25:ee:62:9c:23:8d:32:17:a7:26:
ff:9c:12:a2:d9:74:ed:d4:d2:77:47:c3:27:07:57:44:d2:b8:
7b:0c:15:7e:bf:61:7a:fc:76:c1:2d:55:9e:ba:7b:52:1a:c7:
f7:c8:da:91:ea:89:18:29:60:b4:ef:de:81:63:ab:a1:2c:15:
92:22:19:12:1d:97:cb:84:e2:27:9b:18:1a:a8:2c:4d:65:a5:
25:e5:44:96:6c:4a:36:e8:0c:94:35:3e:30:4a:aa:57:e2:47:
06:65:75:86:f4:60:51:2a:40:c4:6a:7f:e4:d7:70:60:d2:02:
aa:44:8c:39:08:88:99:1f:9c:9c:d7:b0:a5:fd:20:b9:d8:71:
7d:10:32:83:b8:d6:4b:57:1a:0b:39:63:ed:bb:78:ea:9d:98:
29:5a:06:a2:db:b5:4a:ca:d0:16:60:85:40:b9:d4:73:6e:55:
f5:69:2d:43:61:b1:5e:e5:c1:56:ab:93:29:45:84:e0:b0:2d:
77:97:11:71:b2:ef:87:bc:eb:66:5f:41:43:30:94:60:2b:e2:
78:f2:de:ce:bd:ee:74:96:c9:a2:4c:71:97:4e:e9:b3:f9:ea:
3e:b1:d6:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TXEmZ4jpT9XjPGAHhsMzpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMjgwOTUwNjUzYTdlYzU4YzUzMzg1ZDAwYjM4MWVmYmI0
NjU4MjQwHhcNMjYwNzI0MDkwMjA2WhcNMjYwNzI1MDkwMjA2WjAzMTEwLwYDVQQD
Eyg5MGQyMGEwZDkxN2YzNzc4ODgyYWQyOTUyYjVlMmNhNTI1OTBjOWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpwK/rlmnsitIpMPi+R2bLFmqVc3
HvgWccWzsQ8ZbaXPh+WHVeuPsJjS6ht7PW1ZKcxlap1wuzmMRPeGBfUyL1iMddMy
+LpYK9eZew7TlV/7eok5Hmk354aLQS+0RGQk2RgbJl1eWvMGRDfKSSIqw4ooOeUh
BWsIT6M2DkUM/XMXcfQGocQDXBAGrcmPTAVJLacwrx088lhcnlI4l7zqzWVct9Uz
YsO1bG1QyYynSSjI1qLYm6W6I/V1ny6wuouDdqwB1Roz/npMf70WpdVqnv/+2lB+
hqVsUQa74/IgHlHDs6bXCFNrWG8ssqKhqGtfRtHGTEPUX2k8BWTNCiJRiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJDSCg2Rfzd4iCrSlSteLKUlkMnKMB8GA1UdIwQY
MBaAFF4oCVBlOn7FjFM4XQCzge+7RlgkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGlnSlVHVTZmc1dNVXpoZEFMT0I3N3RHV0NRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC83MmM1ODctYzVjYi00MGU0LThjZTEt
ZTFiNTM1NTZjMWMzLzEvWGlnSlVHVTZmc1dNVXpoZEFMT0I3N3RHV0NRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC83MmM1ODctYzVjYi00MGU0LThjZTEtZTFiNTM1NTZjMWMz
LzEvWGlnSlVHVTZmc1dNVXpoZEFMT0I3N3RHV0NRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO6YTy9xh
/vQQ3fBq8yMYYJM1gPt94Xkyk2sl7mKcI40yF6cm/5wSotl07dTSd0fDJwdXRNK4
ewwVfr9hevx2wS1Vnrp7UhrH98jakeqJGClgtO/egWOroSwVkiIZEh2Xy4TiJ5sY
GqgsTWWlJeVElmxKNugMlDU+MEqqV+JHBmV1hvRgUSpAxGp/5NdwYNICqkSMOQiI
mR+cnNewpf0gudhxfRAyg7jWS1caCzlj7bt46p2YKVoGotu1SsrQFmCFQLnUc25V
9WktQ2GxXuXBVquTKUWE4LAtd5cRcbLvh7zrZl9BQzCUYCviePLezr3udJbJokxx
l07ps/nqPrHWrQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:53:17 2026 by rpki-client