Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
File: X1mAEy0ZPicO0e_grShJ_oqw12w.mft (raw, json)
Hash identifier: p1cDyKKvQw2vN7xEAMC2x+K601o7sKoAQXR/NSoqlFM=
Subject key identifier: 71:AD:32:83:EB:A9:A0:22:41:35:16:E5:06:D0:D8:D9:C1:DE:2A:4F
Authority key identifier: 5F:59:80:13:2D:19:3E:27:0E:D1:EF:E0:AD:28:49:FE:8A:B0:D7:6C
Certificate issuer: /CN=5f5980132d193e270ed1efe0ad2849fe8ab0d76c
Certificate serial: 019F935AD8FB201590D093C8C483383A09D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
Manifest number: 19CE
Signing time: Fri 24 Jul 2026 09:00:32 +0000
Manifest this update: Fri 24 Jul 2026 09:00:32 +0000
Manifest next update: Sat 25 Jul 2026 09:00:32 +0000
Files and hashes: 1: 6-Ew-si9J0hf6ZarrCVeQjfqjE4.roa (hash: ljHxNRtveUXCickR/eyPdSx4OKRRH+YbhLZnTAcXkXg=)
2: I2tNxhGFF35MT6ATAQ34a1mldMA.roa (hash: aCwLuTKx+lT5TRi4XqsraXtHCM8YuZl8sxF9wyX0Vvo=)
3: JCTQgcUELCWna8Z80DBMEn0zGk0.roa (hash: aQm1A8aMpcGmR9Y0OhWPfstPmLBs4VFn6LiSckCGnCs=)
4: X1mAEy0ZPicO0e_grShJ_oqw12w.crl (hash: wi2Joxa8DDl3ndR8fAz9qFI4wANHH4ABCT1UlOVLeXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:d8:fb:20:15:90:d0:93:c8:c4:83:38:3a:09:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5980132d193e270ed1efe0ad2849fe8ab0d76c
Validity
Not Before: Jul 24 09:00:32 2026 GMT
Not After : Jul 25 09:00:32 2026 GMT
Subject: CN=71ad3283eba9a022413516e506d0d8d9c1de2a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a4:ad:b1:71:07:0d:0e:66:20:82:8e:2c:61:
15:e6:27:45:5f:04:0a:ec:44:57:3d:0f:0d:54:34:
d6:95:3b:0c:1a:d0:3e:cf:26:98:74:ba:5d:fb:b6:
a8:b1:41:6c:c2:ca:5f:7d:e5:8c:47:40:38:c3:d9:
88:19:b5:34:92:a9:6a:59:86:c7:7c:a6:37:df:f5:
d9:49:f1:44:89:95:6b:14:6c:b5:38:fb:5a:36:0b:
25:8a:aa:68:2e:92:1d:26:5c:80:43:1d:63:aa:2b:
db:6c:c7:e0:39:2c:83:32:ba:c2:34:b6:af:cb:40:
41:8b:06:e8:3b:0b:94:48:f7:9c:76:38:2c:24:f1:
3c:56:47:ed:3d:d2:0b:d8:f9:51:55:7b:03:64:d3:
24:96:5b:37:a0:1a:f0:6c:5a:e0:37:89:93:22:8a:
8c:6a:f6:c1:72:46:15:ca:16:84:ec:8a:bb:d4:09:
05:c3:f2:0f:dd:ab:d4:5e:60:e5:94:53:a2:ff:20:
ac:e3:d3:9a:86:62:9f:f4:81:a1:78:9a:7a:8a:ab:
ed:93:67:eb:cb:01:49:79:5f:0b:1a:3c:47:15:46:
f9:52:3f:b2:52:4e:25:11:5d:7b:b0:60:f0:1a:9d:
de:73:67:3f:7e:28:96:29:3a:94:73:c4:ba:d6:df:
44:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:AD:32:83:EB:A9:A0:22:41:35:16:E5:06:D0:D8:D9:C1:DE:2A:4F
X509v3 Authority Key Identifier:
keyid:5F:59:80:13:2D:19:3E:27:0E:D1:EF:E0:AD:28:49:FE:8A:B0:D7:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:de:8b:05:c7:d4:ce:03:ed:b3:53:a6:0b:83:72:df:e4:fe:
c9:81:2e:91:3f:08:81:b5:38:50:b6:73:e6:1b:34:0d:f9:45:
0c:4f:1f:99:cc:a6:a2:f3:fc:5a:d6:a9:23:fe:7c:37:47:94:
24:6b:01:bb:04:54:42:bd:c0:36:aa:fc:8f:8d:17:1d:85:bf:
eb:ab:cd:86:39:c7:88:76:22:55:76:41:6b:f4:41:66:d1:2b:
bc:45:dc:cc:95:34:6e:db:4a:2e:9e:73:3e:7d:3e:95:a6:92:
b0:db:dd:c9:f4:ff:f0:ae:14:86:be:f1:33:43:66:3a:6e:56:
e8:ca:4f:aa:c7:7c:37:2a:a4:09:7d:ff:59:23:f3:f7:10:92:
41:03:c2:cd:79:12:c7:a4:57:1f:fa:0c:9f:52:ab:64:77:26:
2d:12:7d:6c:5a:5a:17:f0:3e:cc:cb:c8:11:8e:6c:8f:29:a8:
aa:84:37:07:1b:d7:bd:96:81:3f:02:39:de:34:b3:d4:52:f0:
e7:b1:29:60:5c:9c:32:5b:15:09:b5:17:87:1b:f7:b7:0c:19:
59:51:80:af:bd:44:1c:42:96:6f:dd:99:c7:4d:0b:8f:4b:c5:
cb:8c:53:02:f5:e1:18:7b:85:7c:a8:70:1d:f1:63:96:eb:a7:
e8:b9:ce:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TWtj7IBWQ0JPIxIM4OgnUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmNTk4MDEzMmQxOTNlMjcwZWQxZWZlMGFkMjg0OWZlOGFi
MGQ3NmMwHhcNMjYwNzI0MDkwMDMyWhcNMjYwNzI1MDkwMDMyWjAzMTEwLwYDVQQD
Eyg3MWFkMzI4M2ViYTlhMDIyNDEzNTE2ZTUwNmQwZDhkOWMxZGUyYTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqStsXEHDQ5mIIKOLGEV5idFXwQK
7ERXPQ8NVDTWlTsMGtA+zyaYdLpd+7aosUFswspffeWMR0A4w9mIGbU0kqlqWYbH
fKY33/XZSfFEiZVrFGy1OPtaNgsliqpoLpIdJlyAQx1jqivbbMfgOSyDMrrCNLav
y0BBiwboOwuUSPecdjgsJPE8VkftPdIL2PlRVXsDZNMklls3oBrwbFrgN4mTIoqM
avbBckYVyhaE7Iq71AkFw/IP3avUXmDllFOi/yCs49OahmKf9IGheJp6iqvtk2fr
ywFJeV8LGjxHFUb5Uj+yUk4lEV17sGDwGp3ec2c/fiiWKTqUc8S61t9EjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHGtMoPrqaAiQTUW5QbQ2NnB3ipPMB8GA1UdIwQY
MBaAFF9ZgBMtGT4nDtHv4K0oSf6KsNdsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDFtQUV5MFpQaWNPMGVfZ3JTaEpfb3F3MTJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9hYThhYzgtMTNiOC00MTk3LWJlNTYt
MWUxZGU5MWE5ODdjLzEvWDFtQUV5MFpQaWNPMGVfZ3JTaEpfb3F3MTJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9hYThhYzgtMTNiOC00MTk3LWJlNTYtMWUxZGU5MWE5ODdj
LzEvWDFtQUV5MFpQaWNPMGVfZ3JTaEpfb3F3MTJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVd6LBcfU
zgPts1OmC4Ny3+T+yYEukT8IgbU4ULZz5hs0DflFDE8fmcymovP8WtapI/58N0eU
JGsBuwRUQr3ANqr8j40XHYW/66vNhjnHiHYiVXZBa/RBZtErvEXczJU0bttKLp5z
Pn0+laaSsNvdyfT/8K4Uhr7xM0NmOm5W6MpPqsd8NyqkCX3/WSPz9xCSQQPCzXkS
x6RXH/oMn1KrZHcmLRJ9bFpaF/A+zMvIEY5sjymoqoQ3BxvXvZaBPwI53jSz1FLw
57EpYFycMlsVCbUXhxv3twwZWVGAr71EHEKWb92Zx00Lj0vFy4xTAvXhGHuFfKhw
HfFjluun6LnOmg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:20:39 2026 by rpki-client