Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft
File: xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft (raw, json)
Hash identifier: zeHabKHP1wYDHacQXRFAUt0OLkFI0Se8ws1iYOrSXH8=
Subject key identifier: 92:74:85:42:13:F5:3A:F7:2F:28:A9:EB:A0:5F:19:0D:7D:B7:68:BD
Authority key identifier: C5:16:74:FE:E5:55:67:28:17:5E:FB:56:EA:A8:B9:9F:38:15:AF:A7
Certificate issuer: /CN=c51674fee5556728175efb56eaa8b99f3815afa7
Certificate serial: 019F8720484720D18EB6B485BB377AA72527
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft
Manifest number: 17C3
Signing time: Wed 22 Jul 2026 00:01:07 +0000
Manifest this update: Wed 22 Jul 2026 00:01:07 +0000
Manifest next update: Thu 23 Jul 2026 00:01:07 +0000
Files and hashes: 1: 5VgBPMnvg-Y4r70mw9zcqUHf-ms.roa (hash: P3U3l0akrscgsoVcKLjR90FDWEx4VR/+ukAn/96yuzo=)
2: xRZ0_uVVZygXXvtW6qi5nzgVr6c.crl (hash: LTXQy/xHyi6swiCkx/8Ckp45UdmZqMV63SHnlMJzjMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:87:20:48:47:20:d1:8e:b6:b4:85:bb:37:7a:a7:25:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c51674fee5556728175efb56eaa8b99f3815afa7
Validity
Not Before: Jul 22 00:01:07 2026 GMT
Not After : Jul 23 00:01:07 2026 GMT
Subject: CN=9274854213f53af72f28a9eba05f190d7db768bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:af:70:cb:1d:bc:f6:93:75:38:82:bd:4e:c6:
ac:c1:7c:83:15:33:08:73:de:84:86:0e:42:7c:e1:
4d:74:17:f8:e3:b3:45:1c:a0:11:d2:94:3a:b3:fe:
ff:03:41:ef:02:f0:b7:58:a1:41:74:b6:e6:87:41:
4c:fd:12:25:8c:3b:fe:49:26:ba:b4:a6:38:81:49:
4e:70:89:f1:06:80:9c:6b:6c:2a:3b:83:b0:25:e7:
47:d3:06:ce:6b:6e:5f:0e:58:9f:4f:a5:1f:bc:23:
6b:c1:26:38:d4:bd:48:d0:a7:e4:b6:11:8f:0e:1d:
af:05:c5:e2:08:b6:1b:7f:55:13:87:95:5a:3a:8c:
3a:4b:34:78:a7:0f:17:b6:a1:14:52:e3:b0:db:16:
32:8c:f9:92:e5:c1:b8:a7:c2:9d:42:fb:9a:ef:0a:
4d:5e:29:cc:74:54:2f:86:0d:64:27:78:88:c6:c6:
31:33:71:3a:2c:7a:c6:ad:33:1e:0c:4e:0f:c1:2c:
e7:ae:f0:cd:3b:f8:15:ec:fa:60:4c:7b:71:85:08:
17:65:df:f1:46:d7:a4:96:d8:c5:74:71:e3:72:3c:
d6:37:45:10:45:86:ee:75:4c:11:ac:62:48:a0:be:
70:e1:53:ae:74:03:9c:07:de:00:f6:bc:24:f5:f7:
68:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:74:85:42:13:F5:3A:F7:2F:28:A9:EB:A0:5F:19:0D:7D:B7:68:BD
X509v3 Authority Key Identifier:
keyid:C5:16:74:FE:E5:55:67:28:17:5E:FB:56:EA:A8:B9:9F:38:15:AF:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:43:a6:22:c5:bd:3c:97:b9:ad:b7:fd:1d:57:4a:b0:a5:a4:
49:a1:b9:c6:b8:1a:84:df:19:fa:77:0b:c7:1f:9f:d1:0f:72:
35:cf:f9:f3:50:fc:60:06:81:41:8e:0e:a3:37:55:3f:9e:8e:
47:61:e9:f8:31:0d:63:e6:78:f2:c9:8c:c5:ba:34:38:cc:21:
1c:72:08:d7:dc:1f:3f:18:9d:13:8d:d3:31:36:c7:20:f2:20:
d2:11:0e:76:81:a3:a2:44:97:b1:79:72:13:3d:53:83:90:df:
d8:88:54:77:99:77:9d:96:80:8c:4b:1e:66:59:54:b6:ac:6a:
a0:92:72:64:83:26:99:e3:4d:a1:2a:57:c1:ce:fc:3e:3a:40:
4f:32:79:58:da:43:11:df:bf:d1:d7:c1:2f:7b:19:0d:24:45:
22:9b:ea:d9:47:8c:67:c1:92:12:e4:89:6b:b7:e1:a1:0f:18:
02:75:d4:ab:2b:c1:21:8e:3e:05:c5:da:6c:e0:5a:e2:ca:c4:
ca:e8:4a:ba:cc:5e:11:3b:e4:ca:31:4f:d6:ac:8f:39:60:94:
25:5c:2e:a3:cb:b8:8f:d7:23:98:49:fe:12:cf:0e:2b:8f:24:
35:8d:9f:75:5f:c6:14:c0:c6:93:60:94:87:97:e8:89:b8:52:
bd:f3:78:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:45:22 2026 by rpki-client