Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
File: XP44gfPER3T1HMde5-b5HFVlpgY.mft (raw, json)
Hash identifier: vpqqdQUdXor4qwOg/seX2BHEeguAeqD8SJdGkfbNjR0=
Subject key identifier: E2:21:5C:66:79:95:B3:F9:7C:59:53:7C:35:20:4C:8A:5F:8A:58:F0
Authority key identifier: 5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06
Certificate issuer: /CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606
Certificate serial: 019F90FECD2BCEC20D69767BA8C375FCCED2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
Manifest number: 19CA
Signing time: Thu 23 Jul 2026 22:00:45 +0000
Manifest this update: Thu 23 Jul 2026 22:00:45 +0000
Manifest next update: Fri 24 Jul 2026 22:00:45 +0000
Files and hashes: 1: MsnqFaljx-vLs6R1klCk-k4mqbE.roa (hash: 9w5Fj/ix8Y1oWU+nhqJcIUFjp29qAgz5fs3U3GbWExc=)
2: XP44gfPER3T1HMde5-b5HFVlpgY.crl (hash: HfmZeLmiKiatHZxEjlAgDxWLE/4g59GNa2fuL5J2N6k=)
3: Y-0LFW4QQXme0gq1FoIF-wZ-SQc.roa (hash: wu/R/xhocC/i/LlV9UK65CdEa6/Nxe99KI2JumwUKlc=)
4: a_XjHLHQF6uE4SSOtjsOa8f4-2Q.roa (hash: m3nX1Uyzi87lTewY/HPBoiE0m8iVkIMnK/iQX/3hwYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:cd:2b:ce:c2:0d:69:76:7b:a8:c3:75:fc:ce:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606
Validity
Not Before: Jul 23 22:00:45 2026 GMT
Not After : Jul 24 22:00:45 2026 GMT
Subject: CN=e2215c667995b3f97c59537c35204c8a5f8a58f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:d3:b9:da:fd:4a:1a:a2:72:6f:bb:fc:fd:8b:
99:b2:32:10:13:ad:69:23:92:a9:63:c3:a8:7b:3b:
f5:b9:88:e9:a4:a1:63:8c:0b:31:46:51:b9:39:f4:
46:64:24:01:9c:10:bd:4f:06:b9:35:3b:d2:7b:cc:
02:5f:1e:32:4c:13:53:79:a9:e3:f6:6e:fb:57:de:
fb:38:f7:2b:2c:c0:45:39:a2:c7:c5:83:de:11:fe:
f2:25:20:e3:73:bc:e5:ec:95:17:f2:8e:7a:fe:9d:
33:c4:b1:34:bc:4b:58:dc:5a:84:cb:a1:45:47:ae:
9d:a1:f9:8d:62:74:20:c7:05:b3:17:83:b5:39:0e:
91:36:dd:87:81:ba:13:23:75:38:d0:be:f5:3d:fa:
97:95:b1:29:85:0a:70:ce:db:62:e9:ff:05:42:5b:
35:d8:81:f2:71:5d:3c:15:46:43:9b:ef:42:8c:ad:
f7:74:f2:5f:fb:ea:10:99:a6:c8:e1:e6:27:17:39:
04:5d:7f:e9:29:8c:c3:92:a3:ad:8a:db:73:a6:96:
c8:24:d7:74:c1:0e:49:c9:98:de:66:45:5a:e6:57:
c8:a0:61:51:1f:f5:a2:a2:ce:24:8c:ec:f5:ec:e5:
14:f9:c0:17:ab:0b:20:74:df:93:db:31:9d:71:c2:
ac:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:21:5C:66:79:95:B3:F9:7C:59:53:7C:35:20:4C:8A:5F:8A:58:F0
X509v3 Authority Key Identifier:
keyid:5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:52:d7:9d:12:e5:9d:0c:1f:b8:52:5d:3c:f0:4e:a5:89:70:
96:46:89:65:df:66:f2:c0:f2:98:10:d4:6f:41:d5:f5:be:de:
aa:c8:fe:81:9a:0d:d1:c6:b3:91:de:4c:05:55:ff:5b:a6:7e:
7d:47:13:82:34:95:68:7e:f8:1f:16:28:a5:26:8c:ce:9b:8c:
19:1e:65:b7:a5:7a:ed:d3:34:8a:dc:ea:77:2c:22:43:1b:bd:
9e:3a:1f:7f:30:ff:ae:a5:eb:f9:8e:ba:57:00:0c:41:5e:c1:
a1:37:5c:c8:08:6d:eb:8c:34:2f:1b:0e:1b:2a:a2:4d:c2:b3:
53:09:31:d7:57:98:04:76:18:5d:6a:b6:a8:e7:3d:f7:b0:cd:
af:1c:55:81:2f:18:47:09:cd:02:8d:5d:e5:78:52:9e:f0:89:
08:03:72:6f:e3:53:48:de:53:7c:5d:07:d6:02:fb:f5:12:d2:
7a:b4:be:3f:4a:96:c2:c5:48:75:98:f4:6b:9d:99:26:5d:a0:
dd:dc:7c:fa:e1:f2:5d:88:eb:99:69:b1:f4:9c:09:62:de:f0:
6b:12:a8:70:d9:7f:f7:07:be:73:eb:da:87:8a:97:88:45:3f:
8c:d8:0a:a2:c2:7f:17:57:0f:5d:12:08:4a:ce:67:7e:2d:57:
06:7b:40:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Q/s0rzsINaXZ7qMN1/M7SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZmUzODgxZjNjNDQ3NzRmNTFjYzc1ZWU3ZTZmOTFjNTU2
NWE2MDYwHhcNMjYwNzIzMjIwMDQ1WhcNMjYwNzI0MjIwMDQ1WjAzMTEwLwYDVQQD
EyhlMjIxNWM2Njc5OTViM2Y5N2M1OTUzN2MzNTIwNGM4YTVmOGE1OGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7dO52v1KGqJyb7v8/YuZsjIQE61p
I5KpY8Ooezv1uYjppKFjjAsxRlG5OfRGZCQBnBC9Twa5NTvSe8wCXx4yTBNTeanj
9m77V977OPcrLMBFOaLHxYPeEf7yJSDjc7zl7JUX8o56/p0zxLE0vEtY3FqEy6FF
R66dofmNYnQgxwWzF4O1OQ6RNt2HgboTI3U40L71PfqXlbEphQpwztti6f8FQls1
2IHycV08FUZDm+9CjK33dPJf++oQmabI4eYnFzkEXX/pKYzDkqOtittzppbIJNd0
wQ5JyZjeZkVa5lfIoGFRH/Wios4kjOz17OUU+cAXqwsgdN+T2zGdccKskQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOIhXGZ5lbP5fFlTfDUgTIpfiljwMB8GA1UdIwQY
MBaAFFz+OIHzxEd09RzHXufm+RxVZaYGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFA0NGdmUEVSM1QxSE1kZTUtYjVIRlZscGdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS81MjYwZDAtMTg1NS00ZjMwLWI4ZWYt
N2M5OTgwNzlhNmE5LzEvWFA0NGdmUEVSM1QxSE1kZTUtYjVIRlZscGdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS81MjYwZDAtMTg1NS00ZjMwLWI4ZWYtN2M5OTgwNzlhNmE5
LzEvWFA0NGdmUEVSM1QxSE1kZTUtYjVIRlZscGdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgVLXnRLl
nQwfuFJdPPBOpYlwlkaJZd9m8sDymBDUb0HV9b7eqsj+gZoN0cazkd5MBVX/W6Z+
fUcTgjSVaH74HxYopSaMzpuMGR5lt6V67dM0itzqdywiQxu9njoffzD/rqXr+Y66
VwAMQV7BoTdcyAht64w0LxsOGyqiTcKzUwkx11eYBHYYXWq2qOc997DNrxxVgS8Y
RwnNAo1d5XhSnvCJCANyb+NTSN5TfF0H1gL79RLSerS+P0qWwsVIdZj0a52ZJl2g
3dx8+uHyXYjrmWmx9JwJYt7waxKocNl/9we+c+vah4qXiEU/jNgKosJ/F1cPXRII
Ss5nfi1XBntAtQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:16:32 2026 by rpki-client