Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft
File: XX9jQBQHwcx5excDToE9IlT5dz4.mft (raw, json)
Hash identifier: Ll107ji1SZwZvt5VaTdhVv4wo9i2IaMeJrl61CIY8uM=
Subject key identifier: 1D:CD:92:55:83:24:07:14:DC:3D:E0:42:87:06:CF:44:98:30:34:46
Authority key identifier: 5D:7F:63:40:14:07:C1:CC:79:7B:17:03:4E:81:3D:22:54:F9:77:3E
Certificate issuer: /CN=5d7f63401407c1cc797b17034e813d2254f9773e
Certificate serial: 019F42E403743F01BFDCACBB3859451713C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XX9jQBQHwcx5excDToE9IlT5dz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft
Manifest number: 1035
Signing time: Wed 08 Jul 2026 18:01:07 +0000
Manifest this update: Wed 08 Jul 2026 18:01:07 +0000
Manifest next update: Thu 09 Jul 2026 18:01:07 +0000
Files and hashes: 1: IJctrhezjfWjiA84ZaayWYeZh1k.roa (hash: VetyKsjNSyH6fNCp1k97xHgv6Vja8yJIQbMcO2qIjkU=)
2: XX9jQBQHwcx5excDToE9IlT5dz4.crl (hash: EP/fbeYcbLGKyYSoBPKpi7eueXYxfCac88JHvmnIwdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XX9jQBQHwcx5excDToE9IlT5dz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 18:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:42:e4:03:74:3f:01:bf:dc:ac:bb:38:59:45:17:13:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d7f63401407c1cc797b17034e813d2254f9773e
Validity
Not Before: Jul 8 18:01:07 2026 GMT
Not After : Jul 9 18:01:07 2026 GMT
Subject: CN=1dcd925583240714dc3de0428706cf4498303446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:dd:18:88:64:27:35:8d:05:06:31:95:e9:b0:
0e:36:02:8a:3f:d4:45:4b:61:1b:b1:27:45:60:c0:
bb:d8:7b:ad:6d:80:dc:14:85:b6:5a:35:a9:ba:ed:
3c:02:a0:75:bc:6b:5e:6a:13:0c:8e:9f:d5:2d:15:
7e:0c:41:26:64:e2:73:8e:7f:97:58:58:04:95:0c:
9b:6b:f0:0b:5a:b8:8c:1e:94:d5:56:3d:8b:6f:ed:
5a:32:c7:4d:49:a8:63:66:c9:8c:6c:35:1c:26:42:
97:1b:7d:a8:39:4c:94:bb:f0:f6:2f:92:84:94:e2:
ac:e0:78:61:89:d6:b9:33:30:16:e6:e3:0c:b7:41:
f1:6e:9f:5d:6f:af:a4:a2:32:b6:e0:87:41:fb:34:
6d:66:92:58:4e:29:9d:06:e9:9a:9d:56:6f:a6:ae:
99:bc:ec:f2:e1:98:09:32:58:28:a8:df:2f:84:68:
eb:18:5d:bc:41:f8:df:9d:e7:24:d2:7e:9f:3f:b7:
12:8e:c8:bd:73:61:1c:27:0b:86:70:26:e2:50:fc:
7f:bb:30:35:e5:a8:e7:ed:a3:e3:72:85:67:14:f9:
e6:72:8a:04:db:30:85:1d:03:b5:9f:b1:15:68:e5:
1f:ef:6b:09:07:15:39:2e:0b:4f:a9:be:5c:97:5e:
96:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:CD:92:55:83:24:07:14:DC:3D:E0:42:87:06:CF:44:98:30:34:46
X509v3 Authority Key Identifier:
keyid:5D:7F:63:40:14:07:C1:CC:79:7B:17:03:4E:81:3D:22:54:F9:77:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XX9jQBQHwcx5excDToE9IlT5dz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:69:8d:1c:cd:62:36:47:4c:87:09:5e:5a:7a:28:b4:41:60:
01:28:a6:a5:2b:79:f0:31:96:47:b7:e8:be:25:d3:37:55:27:
7c:df:4e:0c:3a:0d:f5:09:e2:c3:f8:e8:68:a7:bd:b1:e1:2a:
67:4e:4f:eb:08:f7:ef:20:27:18:20:a1:57:f1:62:69:d9:1a:
03:c1:c0:3d:0d:dc:5b:98:1f:6f:34:a4:6d:f0:8f:87:0d:08:
34:52:52:8d:bd:4b:f9:e4:ea:99:c8:fe:fa:d9:9c:1d:8b:3f:
08:62:86:a0:77:cd:cd:da:62:40:2c:73:9b:a0:2b:9b:53:2c:
d3:40:bf:00:8c:96:14:a9:a5:f0:b7:45:98:1e:85:d9:75:60:
26:9d:7c:e3:60:f6:5a:e5:74:c4:98:8c:20:25:2e:34:41:04:
4b:e4:47:3a:54:2e:5b:b4:6c:5f:3e:73:2f:04:8d:ba:d4:ab:
3c:0b:70:12:57:d8:84:55:8b:65:41:91:1f:a9:3d:a4:01:8f:
ba:02:63:2e:bf:c2:d9:29:c9:8a:15:e9:c0:59:39:a9:1b:24:
f5:84:be:1c:75:6b:4c:8e:34:b8:ba:73:e9:b9:ff:b3:e5:d6:
a2:04:30:0f:a5:a2:e2:66:d5:23:ba:76:63:96:0a:5e:44:44:
84:6f:d8:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 02:52:05 2026 by rpki-client