Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
File: XEt3fWoBdf67oFtItHzfCmuJ1_s.mft (raw, json)
Hash identifier: st3Kmg2sBBEw0Qr9VWKW5vrcvpVdjm73c1/U+QoN62U=
Subject key identifier: F9:E9:44:F7:D0:CA:CC:00:67:2C:7F:DB:4A:E2:B4:8D:85:8A:60:23
Authority key identifier: 5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB
Certificate issuer: /CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb
Certificate serial: 019FA0DFB10DDF749D4582E52D49AC5B52B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
Manifest number: 19CD
Signing time: Mon 27 Jul 2026 00:00:42 +0000
Manifest this update: Mon 27 Jul 2026 00:00:42 +0000
Manifest next update: Tue 28 Jul 2026 00:00:42 +0000
Files and hashes: 1: Rjq8qMoUVTv8QuPKAfl_sw6bDWA.roa (hash: Ykk34DqNXHApsE9nxxAgQ38pONoyVUESYWMP39kBFzk=)
2: XEt3fWoBdf67oFtItHzfCmuJ1_s.crl (hash: XDDKwfmNCmovNSMDa+Xzjr71xiYXTpCx0eyuvpdeb8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:df:b1:0d:df:74:9d:45:82:e5:2d:49:ac:5b:52:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb
Validity
Not Before: Jul 27 00:00:42 2026 GMT
Not After : Jul 28 00:00:42 2026 GMT
Subject: CN=f9e944f7d0cacc00672c7fdb4ae2b48d858a6023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ab:33:47:8a:f7:58:71:31:55:06:a5:ac:dd:
9b:0b:71:6b:ce:c5:65:dd:8e:3b:8e:56:90:64:1e:
2b:f6:7c:85:08:74:9c:7c:2d:2e:5b:a8:b7:9c:29:
54:c3:76:6b:64:88:6b:2f:15:89:c1:89:d3:17:09:
35:ca:f7:7b:8e:c4:3d:b6:06:4f:da:07:bb:66:94:
50:b7:b8:68:ed:c6:b1:12:56:c0:7d:df:f3:bf:0f:
15:f7:a6:b9:2b:e5:5c:0f:f4:fa:25:14:6d:57:da:
83:4a:d6:e9:b3:8e:b3:41:b8:8d:ec:fb:18:eb:eb:
0f:aa:3c:ff:61:ea:76:72:b9:99:45:8c:80:a6:93:
03:81:ea:49:3e:8f:41:3e:18:be:9c:55:3f:8c:84:
23:4d:e9:90:78:0d:8e:33:c7:01:85:de:17:40:05:
20:f5:5e:c7:fd:89:d8:f2:31:ee:e1:ba:39:93:c9:
d5:fa:e4:b5:48:4c:62:b7:d0:9d:b7:88:f5:5d:d6:
55:49:7f:bc:4d:0d:b9:57:5b:e5:48:e8:33:30:4f:
77:66:36:c0:9c:a9:ae:a2:17:e8:59:db:2f:9b:30:
d2:7f:f3:86:ea:6e:de:68:a3:aa:62:ef:e1:ab:c8:
f6:4a:ab:d5:27:59:aa:48:ac:85:3b:da:ce:f3:87:
a3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E9:44:F7:D0:CA:CC:00:67:2C:7F:DB:4A:E2:B4:8D:85:8A:60:23
X509v3 Authority Key Identifier:
keyid:5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:6b:b5:64:44:cb:42:b3:de:e8:da:d8:3f:e3:75:75:82:2b:
64:0d:3d:bc:d5:75:9b:89:7c:82:ba:31:5d:94:03:18:75:d9:
26:a1:33:99:fb:a1:e7:34:70:45:2d:69:37:7e:61:18:31:0c:
3c:1f:29:f5:dc:08:9d:42:64:8e:24:15:e8:bd:3f:94:80:03:
34:00:75:c4:86:63:b8:e3:d9:95:33:ae:40:72:93:ed:29:07:
25:41:2a:2a:ee:ec:f1:41:77:61:a3:e3:8b:1f:ca:df:1a:23:
e9:15:e7:a3:38:45:87:13:ab:65:da:22:e9:24:5e:2b:5e:4d:
3a:72:53:33:fe:31:bf:fe:8f:80:3c:40:cb:8a:8d:c2:7c:bb:
42:4c:a6:46:85:24:f4:4b:9b:8a:a2:22:55:fa:51:39:e2:06:
c6:9a:ed:6c:df:71:d9:ba:20:85:68:9e:de:f7:3a:cd:a8:5c:
07:32:92:53:12:6a:9c:47:cf:92:65:fd:91:02:34:d7:c6:f9:
9d:67:ea:5f:7f:06:2e:ed:c4:70:70:7a:5c:3b:88:59:85:98:
cf:4a:c4:93:33:d9:76:3f:c8:a2:0a:a1:74:d6:1a:48:f2:1b:
1e:38:a2:18:e8:27:44:3d:a4:a8:48:4b:e7:1d:07:26:a9:4a:
c7:06:2a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:19:09 2026 by rpki-client