Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
File: XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft (raw, json)
Hash identifier: 8FZFnSKBmqdSdBIpzX5Dgx4SqLZBzzO96vhvgbDhZQ8=
Subject key identifier: F2:F1:61:84:56:95:73:85:76:CB:46:91:2C:F8:C4:69:88:91:E5:E9
Authority key identifier: 5F:09:9F:49:97:8B:96:0F:A3:1F:81:AC:F5:46:71:27:3D:C7:FF:61
Certificate issuer: /CN=5f099f49978b960fa31f81acf54671273dc7ff61
Certificate serial: 019F829E11095E788E901375E6EBD062DA04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
Manifest number: 19BD
Signing time: Tue 21 Jul 2026 03:00:24 +0000
Manifest this update: Tue 21 Jul 2026 03:00:24 +0000
Manifest next update: Wed 22 Jul 2026 03:00:24 +0000
Files and hashes: 1: 0ZEt5hO5jk8I5B1ric3lV5QOPjY.roa (hash: 2SzUB4ARPZ7+BuiAiToaYolTUFVyZHL4/odctgbUciE=)
2: PX4jRvV2Is0w59EuWq6-Cko1_qM.roa (hash: o5zSrmvOazS6EGtXXnfbpDTf59xV6PS54zdbjnXbBvw=)
3: XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl (hash: bmLuByb8V9HCuHD8X28iBG4P+U7lWtOm+ZiSY9ymdao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 03:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:82:9e:11:09:5e:78:8e:90:13:75:e6:eb:d0:62:da:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f099f49978b960fa31f81acf54671273dc7ff61
Validity
Not Before: Jul 21 03:00:24 2026 GMT
Not After : Jul 22 03:00:24 2026 GMT
Subject: CN=f2f161845695738576cb46912cf8c4698891e5e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9f:74:f0:91:d8:26:1c:a0:64:07:60:7d:16:
2a:ee:51:a3:e9:2d:72:20:7c:fb:d5:ef:19:02:34:
56:36:04:91:b3:2f:e7:33:03:06:cd:87:d1:36:8d:
3c:06:c3:16:67:18:4b:88:ff:3e:65:14:63:41:e2:
60:4d:bb:ba:e5:71:f4:e9:67:85:2e:33:88:e6:0c:
96:fd:65:87:39:54:c2:70:c7:96:eb:c6:6e:2d:97:
05:f6:83:4b:42:2a:80:52:f8:b2:04:a9:e4:08:bb:
93:1f:e7:53:97:40:e1:2e:12:59:df:a4:05:a1:83:
ae:5d:67:ef:d8:d8:59:2d:2b:4c:e7:af:81:a4:6c:
3d:57:d1:0b:36:6b:2a:25:e6:66:bf:03:8a:c8:28:
e0:57:a6:d0:f5:c0:24:bd:82:9a:51:e9:12:8f:17:
0c:40:71:84:6f:e6:53:cf:2e:41:5c:13:52:82:c8:
36:43:d5:d6:1c:62:8b:a8:9b:fc:cf:71:ee:99:88:
b9:eb:bd:16:31:3e:2a:34:41:59:fa:5b:13:e2:3b:
5d:8e:35:3c:b4:5a:41:5a:b6:98:59:4a:d3:8d:db:
21:6b:7d:5b:d7:11:b0:10:47:d2:ba:2e:44:0e:f5:
09:93:e5:38:3d:bf:41:07:e9:d9:3a:3d:9f:22:d4:
dd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F1:61:84:56:95:73:85:76:CB:46:91:2C:F8:C4:69:88:91:E5:E9
X509v3 Authority Key Identifier:
keyid:5F:09:9F:49:97:8B:96:0F:A3:1F:81:AC:F5:46:71:27:3D:C7:FF:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:52:fd:14:d8:9f:a5:ef:2f:8b:3c:15:81:3f:88:64:59:2d:
c5:e8:a7:7e:46:37:7f:eb:d0:9d:08:d4:be:2d:58:9a:3f:27:
cb:14:b4:ee:30:f6:0c:68:57:49:f4:cd:eb:21:30:18:99:7e:
55:9a:e4:5e:83:18:30:41:67:11:3e:2f:67:1e:63:1c:9e:79:
e8:7f:40:ca:e8:23:da:95:71:2b:86:9d:9b:57:ea:71:dd:49:
66:ea:95:53:12:da:3d:19:0b:98:7b:38:fe:55:27:3f:df:f7:
29:c8:b2:0b:33:ad:0d:ba:43:59:9b:52:36:36:ad:d3:45:00:
a8:38:6a:a5:72:48:13:d4:82:65:38:2e:0e:d6:76:e7:58:78:
3e:ae:d1:5b:c2:76:99:8a:29:7f:a5:e3:ff:c1:85:22:28:13:
aa:39:9a:14:d6:a1:f8:32:f8:06:65:3d:d8:aa:f8:20:00:05:
03:e5:cb:dc:21:cb:16:12:6c:e6:d6:a7:af:c5:c3:c7:66:c6:
0f:fd:8d:3c:61:36:1a:71:aa:23:d8:fe:14:79:44:f2:8d:eb:
63:59:73:15:a9:25:32:31:49:88:d2:df:b9:73:6f:a0:ce:02:
6e:7b:ab:9c:59:46:6d:42:b3:00:38:74:cb:e9:5c:3b:5f:a2:
99:69:e3:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 10:05:06 2026 by rpki-client