Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
File: Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft (raw, json)
Hash identifier: qJkXTBGCMm8Vt2nyL1vR6MN8nK0pbD/mCEb0RqCP9qM=
Subject key identifier: AA:09:77:5A:88:74:E5:CA:E3:7C:DA:96:9D:95:91:A2:B4:46:B6:82
Authority key identifier: 5F:17:68:E2:6F:F4:F9:A2:A8:A5:6D:A4:DC:B7:E1:EC:0C:2E:4A:93
Certificate issuer: /CN=5f1768e26ff4f9a2a8a56da4dcb7e1ec0c2e4a93
Certificate serial: 019F9436824D04D1BB99225127E36774CD9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 13:00:27 +0000
Manifest this update: Fri 24 Jul 2026 13:00:27 +0000
Manifest next update: Sat 25 Jul 2026 13:00:27 +0000
Files and hashes: 1: 1-KKEOWBhq-Xin1u07sp8fmHrvqc.roa (hash: PYl3rvHgnbdTXI4oGxGWGnIZl/efX3OeaWnZ83sqU1U=)
2: Xxdo4m_0-aKopW2k3Lfh7AwuSpM.crl (hash: c67+kfXU0hdk2qDUCXD2W6rpOe5J/X7fXrQ9bbLts3Y=)
3: hRCE6LdZkeQzF92rmCQdMQvaaL8.roa (hash: UB0DT/MFY2dNlWf8e/9nwn7NarMnjJ7fyxrd+zzOII8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:82:4d:04:d1:bb:99:22:51:27:e3:67:74:cd:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1768e26ff4f9a2a8a56da4dcb7e1ec0c2e4a93
Validity
Not Before: Jul 24 13:00:27 2026 GMT
Not After : Jul 25 13:00:27 2026 GMT
Subject: CN=aa09775a8874e5cae37cda969d9591a2b446b682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:73:53:97:08:c3:d9:0b:25:9f:b7:56:02:19:
80:e7:39:36:50:a3:fe:2e:38:ca:d3:dd:72:e6:d5:
9a:96:9d:09:50:ff:80:48:57:90:96:01:02:a1:80:
f1:71:76:bf:59:29:35:1c:36:03:11:3b:bd:86:17:
db:19:b3:a6:36:28:ac:27:46:c6:80:c1:1d:03:dc:
ca:35:50:fa:93:d4:5d:cb:ad:88:61:b1:a7:9f:50:
7b:bc:16:6b:c6:e0:ad:5b:59:17:c1:81:2e:ca:63:
32:18:4b:b7:ec:77:5e:c8:41:40:1b:5e:7b:fc:33:
3f:0c:8e:97:3b:2d:f1:4a:d2:c3:76:c8:15:e1:1a:
3f:90:7d:7c:aa:64:26:00:f1:23:5c:3f:cf:0a:11:
1b:c7:4b:af:57:0a:23:5f:65:85:21:3a:0d:62:a1:
ce:18:4b:d4:50:bd:d2:c1:a8:d2:bf:81:78:e1:9a:
21:0f:5c:49:6d:6d:79:e2:6e:be:57:f9:62:b2:61:
ac:3d:3a:a4:7f:23:55:d9:6f:79:38:61:3c:82:f5:
a1:f2:d2:25:79:db:a1:78:0f:fa:bf:54:4d:8b:08:
a0:03:9a:d1:3b:b3:2a:40:b3:34:5b:99:30:3a:26:
ec:9b:25:86:23:5e:b2:cd:ee:45:e1:df:25:f2:c3:
a7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:09:77:5A:88:74:E5:CA:E3:7C:DA:96:9D:95:91:A2:B4:46:B6:82
X509v3 Authority Key Identifier:
keyid:5F:17:68:E2:6F:F4:F9:A2:A8:A5:6D:A4:DC:B7:E1:EC:0C:2E:4A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ff:d0:81:3f:67:e5:0e:5c:98:d4:47:c4:ac:32:e0:e7:68:
9e:28:d5:23:9e:45:4c:ff:ce:24:5b:25:05:a9:00:79:b2:63:
6b:ee:66:54:53:ee:a1:1e:eb:7a:05:81:5a:06:59:54:ac:91:
17:ba:32:ea:f7:27:75:7a:ca:1a:80:18:63:e3:9e:38:bd:1a:
cf:95:40:17:e2:12:3f:85:12:be:11:c9:f2:94:90:d3:6f:3b:
7c:b6:bb:3a:8b:1d:eb:7e:ce:12:2b:0b:ec:94:45:07:c7:af:
7c:f6:75:e7:97:b5:71:bd:04:12:7a:b2:34:b4:8d:63:76:a5:
5e:d9:87:49:27:a3:f0:01:d3:f0:e2:c0:1f:16:6c:97:51:43:
7f:ad:96:34:b8:c0:17:df:42:bb:18:4c:fb:88:29:48:75:1f:
36:29:1b:dc:3d:38:8f:0a:04:9c:21:a8:61:2e:4b:fd:63:45:
fb:94:9c:d9:2b:86:de:ae:d8:1f:82:a6:bf:26:da:65:7d:c3:
6d:be:9b:8a:63:c5:8e:43:ae:62:e8:92:45:5f:06:b3:88:7c:
0f:cb:14:d8:6f:b4:f7:f7:1b:de:f9:6d:29:15:23:b4:32:ae:
2a:24:26:24:38:8a:24:64:7d:0a:41:f1:55:42:c1:c2:1a:2d:
6c:15:13:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UNoJNBNG7mSJRJ+NndM2bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMTc2OGUyNmZmNGY5YTJhOGE1NmRhNGRjYjdlMWVjMGMy
ZTRhOTMwHhcNMjYwNzI0MTMwMDI3WhcNMjYwNzI1MTMwMDI3WjAzMTEwLwYDVQQD
EyhhYTA5Nzc1YTg4NzRlNWNhZTM3Y2RhOTY5ZDk1OTFhMmI0NDZiNjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HNTlwjD2Qsln7dWAhmA5zk2UKP+
LjjK091y5tWalp0JUP+ASFeQlgECoYDxcXa/WSk1HDYDETu9hhfbGbOmNiisJ0bG
gMEdA9zKNVD6k9Rdy62IYbGnn1B7vBZrxuCtW1kXwYEuymMyGEu37HdeyEFAG157
/DM/DI6XOy3xStLDdsgV4Ro/kH18qmQmAPEjXD/PChEbx0uvVwojX2WFIToNYqHO
GEvUUL3SwajSv4F44ZohD1xJbW154m6+V/lismGsPTqkfyNV2W95OGE8gvWh8tIl
eduheA/6v1RNiwigA5rRO7MqQLM0W5kwOibsmyWGI16yze5F4d8l8sOnFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKoJd1qIdOXK43zalp2VkaK0RraCMB8GA1UdIwQY
MBaAFF8XaOJv9PmiqKVtpNy34ewMLkqTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHhkbzRtXzAtYUtvcFcyazNMZmg3QXd1U3BNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9lNWU1M2EtZGZlOC00ZTk5LTg1YTgt
MWUwMzY3YzA3ZDQ2LzEvWHhkbzRtXzAtYUtvcFcyazNMZmg3QXd1U3BNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9lNWU1M2EtZGZlOC00ZTk5LTg1YTgtMWUwMzY3YzA3ZDQ2
LzEvWHhkbzRtXzAtYUtvcFcyazNMZmg3QXd1U3BNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ//QgT9n
5Q5cmNRHxKwy4OdonijVI55FTP/OJFslBakAebJja+5mVFPuoR7regWBWgZZVKyR
F7oy6vcndXrKGoAYY+OeOL0az5VAF+ISP4USvhHJ8pSQ0287fLa7Oosd637OEisL
7JRFB8evfPZ155e1cb0EEnqyNLSNY3alXtmHSSej8AHT8OLAHxZsl1FDf62WNLjA
F99CuxhM+4gpSHUfNikb3D04jwoEnCGoYS5L/WNF+5Sc2SuG3q7YH4KmvybaZX3D
bb6bimPFjkOuYuiSRV8Gs4h8D8sU2G+09/cb3vltKRUjtDKuKiQmJDiKJGR9CkHx
VULBwhotbBUTEA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:01:15 2026 by rpki-client