Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
File: xX5Yw0bntBVVDBOurdLPkO3QeJU.mft (raw, json)
Hash identifier: tuhtgh9+d1OpgD/zm0lsA3u0Mnplx1vYf0/W7uP3o7s=
Subject key identifier: 63:D5:C7:F6:61:0A:74:38:46:34:6D:F6:44:D6:BD:C2:70:2B:5F:24
Authority key identifier: C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95
Certificate issuer: /CN=c57e58c346e7b415550c13aeadd2cf90edd07895
Certificate serial: 019FA417ADDFCBA20316652554582980F118
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
Manifest number: 19D4
Signing time: Mon 27 Jul 2026 15:00:42 +0000
Manifest this update: Mon 27 Jul 2026 15:00:42 +0000
Manifest next update: Tue 28 Jul 2026 15:00:42 +0000
Files and hashes: 1: 1kAOPGpT_yO1V9aiYjzOs8fosJ4.roa (hash: uKDlJs0NDCjfdYnB+MfIB/jlA65konDisvJIGcTDJUU=)
2: 9j1B5LLZDXYRtu0JrlF53YNgDew.roa (hash: enCaw1pzt1wj9vxuJHJ4PKIp1awPrJly1Aljj7nxS5c=)
3: xX5Yw0bntBVVDBOurdLPkO3QeJU.crl (hash: hzcXuUfVRAseSsIKpxkGO8LMCgqd2s6N1EMRiInwU94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:17:ad:df:cb:a2:03:16:65:25:54:58:29:80:f1:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c57e58c346e7b415550c13aeadd2cf90edd07895
Validity
Not Before: Jul 27 15:00:42 2026 GMT
Not After : Jul 28 15:00:42 2026 GMT
Subject: CN=63d5c7f6610a743846346df644d6bdc2702b5f24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9d:62:a1:28:9e:55:2a:d4:08:73:5b:96:00:
66:ed:5b:39:c9:28:27:03:18:05:30:5a:51:0f:27:
93:da:6e:51:73:07:c1:4b:e2:45:5c:63:86:f9:f3:
85:b5:aa:fb:01:e2:6e:be:1f:07:df:9b:67:eb:de:
0c:e4:f3:2d:7d:2f:8e:dd:cc:75:01:5d:61:b5:40:
eb:cc:64:c1:ba:22:0a:5e:46:c9:7a:cd:f5:39:59:
02:95:6f:30:80:2d:c1:37:24:18:18:66:c0:c8:31:
89:65:19:91:2d:52:fa:4c:fd:d7:3c:9f:d1:f8:0c:
8d:39:2e:98:37:3c:29:b4:dd:04:57:46:1c:a5:20:
87:ef:db:28:aa:80:b3:e1:24:f7:f8:fb:57:8d:b3:
ff:1e:70:fc:10:73:31:52:fd:32:43:44:7e:52:63:
60:fd:3a:a1:9a:ef:f8:57:4f:05:f4:2b:81:97:65:
48:25:f0:5a:c8:e3:cb:73:86:1c:b4:cf:c1:6e:36:
95:4c:fb:a7:91:8b:9c:ab:cb:b7:77:cd:5c:39:7b:
82:f1:1f:0d:2e:50:8e:2e:e9:a8:3d:ca:ad:9c:5e:
07:70:a4:ac:f8:64:15:31:44:83:e6:cc:05:c2:c2:
89:c6:05:98:b9:a5:29:5a:39:ff:ea:6e:3a:a6:52:
26:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D5:C7:F6:61:0A:74:38:46:34:6D:F6:44:D6:BD:C2:70:2B:5F:24
X509v3 Authority Key Identifier:
keyid:C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:55:2a:32:ee:a9:f8:4a:a8:3e:b8:d2:b9:5e:b5:ba:cf:0e:
96:2a:6b:99:92:d5:e3:0c:f6:e9:c7:54:fd:28:56:ef:1f:e3:
fc:07:50:df:45:5a:31:95:d7:d2:fa:38:9b:4c:c6:f1:d5:89:
b6:c7:26:01:47:8c:93:0f:ab:f9:d5:f2:be:81:8e:3c:92:78:
b0:8a:27:4d:20:6e:94:f6:81:95:1d:b4:4d:9e:5d:27:2c:85:
50:56:c8:0b:a5:ed:a9:8f:3d:f9:8d:7f:f9:0f:a7:53:ed:6d:
4e:77:56:8d:ea:2f:8d:4a:56:4d:88:d4:1d:92:fa:4f:28:95:
69:4b:16:71:99:35:30:52:21:8e:2c:30:1e:a1:46:ee:53:f0:
98:cd:a9:b6:5d:98:d2:c0:48:58:6e:c3:30:ab:5f:a0:ae:34:
95:42:fc:22:39:ba:c1:de:67:0f:94:81:48:4b:ce:e0:94:11:
e1:1e:0a:bf:09:cd:38:3a:76:b4:8e:af:5f:b0:f5:06:2b:0a:
7f:74:a6:84:9d:17:79:58:8a:2b:92:f2:5f:8b:fa:d5:2e:89:
15:8b:64:3b:50:5b:8b:32:e2:07:c5:05:5a:af:46:39:b6:9b:
0b:83:e6:cb:63:d8:9d:2c:de:06:1a:e8:17:d4:19:44:68:8e:
ba:b5:73:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 19:22:17 2026 by rpki-client