Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft
File: Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft (raw, json)
Hash identifier: hRpQ2HHwVca8dxKMmH2Ma8nQPLb5ieMlS0jce3NsxPI=
Subject key identifier: 99:E3:E1:8D:5F:D4:92:DC:AC:F7:68:21:30:BD:F1:A8:FC:48:5A:7A
Authority key identifier: 5E:CC:B7:CD:1B:9D:6F:C3:9D:71:58:F2:FE:9C:F5:21:7A:12:D3:74
Certificate issuer: /CN=5eccb7cd1b9d6fc39d7158f2fe9cf5217a12d374
Certificate serial: 019F37F31A5B09A58B689C1CEB3DA5CCAEBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft
Manifest number: 1999
Signing time: Mon 06 Jul 2026 15:01:46 +0000
Manifest this update: Mon 06 Jul 2026 15:01:46 +0000
Manifest next update: Tue 07 Jul 2026 15:01:46 +0000
Files and hashes: 1: GqSD-huFyN5KnbmOJE2G9Ex44l8.roa (hash: 3Qs/JfYQSZ6IzynE4ipg87qcZBEyHL3uWN4yF6V7P0w=)
2: VS_M4cAagWUGuW9fqRkh-RrWxeM.roa (hash: hZcQF43INC8Yz5JTh0PAiO/K0ZNFR1rzI3rKsJwe74E=)
3: Xsy3zRudb8OdcVjy_pz1IXoS03Q.crl (hash: 55rpO7nZx1C9PYocL9XQHhOiKicMjjJ6m23227+MYZo=)
4: rwfC2i-yhf4UtPPyaXqIB4OR2c8.roa (hash: 7pkGwTQxoCILPcgqkjDlu2UDM7lXD5BJiZpj+8CPoC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 15:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:37:f3:1a:5b:09:a5:8b:68:9c:1c:eb:3d:a5:cc:ae:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eccb7cd1b9d6fc39d7158f2fe9cf5217a12d374
Validity
Not Before: Jul 6 15:01:46 2026 GMT
Not After : Jul 7 15:01:46 2026 GMT
Subject: CN=99e3e18d5fd492dcacf7682130bdf1a8fc485a7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:36:c7:f8:8a:0b:ee:69:03:53:c4:1b:5c:86:
b6:64:c7:32:c4:8a:88:6b:76:fd:58:e4:c5:48:d0:
f6:00:b9:69:7f:03:a1:dc:5d:a0:4a:9b:4d:c5:1e:
a0:3d:0a:83:14:82:a6:4f:81:5e:68:76:55:72:6d:
de:fb:fd:a3:93:14:e6:62:7f:7a:9b:72:d4:72:71:
4c:99:c1:cf:b8:8c:ba:45:c7:3c:f8:13:73:cb:16:
3c:a4:62:3f:63:15:a3:ca:bf:50:ea:c1:48:cd:9a:
d5:99:5a:c3:18:c4:24:c9:a5:4b:d7:fb:f2:2a:7d:
0a:48:a1:6d:6a:08:58:57:88:37:3b:86:06:27:46:
ec:28:99:69:70:78:b2:83:f7:20:67:32:70:80:76:
dd:bb:ef:cf:e2:0f:34:13:f3:eb:fa:b2:59:d2:fd:
cf:2a:10:9a:be:6e:15:94:ef:0f:40:75:3e:ee:ea:
a3:de:1b:35:48:ae:00:ca:1b:90:4d:0b:00:3a:4d:
6d:ef:a6:c5:0d:1c:50:be:57:bd:cf:da:e2:03:8d:
fa:40:99:76:b9:15:c7:64:af:75:5f:05:a5:10:cc:
69:0f:fc:d4:cc:6c:2f:8f:a2:8c:26:73:b3:d5:74:
ad:c3:19:9a:d9:9f:dd:04:73:da:14:0a:11:28:77:
a2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E3:E1:8D:5F:D4:92:DC:AC:F7:68:21:30:BD:F1:A8:FC:48:5A:7A
X509v3 Authority Key Identifier:
keyid:5E:CC:B7:CD:1B:9D:6F:C3:9D:71:58:F2:FE:9C:F5:21:7A:12:D3:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:44:5c:31:6c:ad:c6:9a:18:f5:43:6e:49:7c:15:23:5f:3a:
1c:17:10:0c:bd:da:25:bb:01:6b:89:91:9a:20:96:15:7b:c8:
75:8f:9b:ee:97:bd:de:dc:42:d6:87:ee:03:60:c9:cd:1b:8d:
f2:7f:45:e8:84:57:7d:54:e5:fc:e4:1e:1a:2f:d2:fa:72:c6:
4f:ef:e7:ea:a9:73:45:35:f9:68:7b:95:02:8a:cc:73:1e:2d:
09:f4:ad:20:6e:3c:66:30:d3:54:eb:f7:25:b2:54:59:b5:b8:
ab:eb:9e:7c:37:40:44:9f:c4:8e:de:ef:e8:b2:c0:b0:b2:db:
44:de:6c:10:93:18:87:12:e1:52:9a:3e:f2:cc:50:f5:48:e3:
d0:18:45:d1:bb:20:e0:51:fa:28:50:e7:4c:7c:0f:88:c1:97:
d8:5a:7f:a7:91:29:f6:43:da:95:2c:83:65:97:c0:21:44:76:
35:ae:cc:7b:d5:0e:77:71:bc:32:f1:bf:56:68:54:ec:c7:95:
37:55:1d:5b:ed:a0:47:30:4e:37:00:8b:36:ec:c0:99:79:35:
e2:8e:22:dd:74:32:22:64:47:d3:89:fa:32:4c:76:98:4e:6a:
6b:d6:10:8f:a8:81:48:2c:0c:41:10:98:82:f0:cd:41:8e:94:
1d:28:7d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 00:07:08 2026 by rpki-client