
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
File: xN_w4VI3gFUHr10Dq-3riDK0uMs.mft (raw, json)
Hash identifier: /jT3TVrg9cfxvF0lLB3/JO/pRU+Ly5Cpw8E0JOBv7jQ=
Subject key identifier: 9E:F4:14:67:14:A6:C9:22:46:9C:DF:B0:0B:8E:2A:AB:C6:DE:BC:2A
Authority key identifier: C4:DF:F0:E1:52:37:80:55:07:AF:5D:03:AB:ED:EB:88:32:B4:B8:CB
Certificate issuer: /CN=c4dff0e15237805507af5d03abedeb8832b4b8cb
Certificate serial: 019F9F2829039B2FF711A15E883B83043469
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
Manifest number: 19CE
Signing time: Sun 26 Jul 2026 16:00:36 +0000
Manifest this update: Sun 26 Jul 2026 16:00:36 +0000
Manifest next update: Mon 27 Jul 2026 16:00:36 +0000
Files and hashes: 1: EEs8_2SQ9wdEKnETnYAXwnbvPvI.roa (hash: CFxGxtKRpFSwMaRFJt3q5WoVWboKnoyoeoco0rArRao=)
2: xN_w4VI3gFUHr10Dq-3riDK0uMs.crl (hash: kkzyLnDFgHXT4cbUPWOjwd/ElnpAmyIXLqVQd+rJ+wM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 15:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:28:29:03:9b:2f:f7:11:a1:5e:88:3b:83:04:34:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4dff0e15237805507af5d03abedeb8832b4b8cb
Validity
Not Before: Jul 26 16:00:36 2026 GMT
Not After : Jul 27 16:00:36 2026 GMT
Subject: CN=9ef4146714a6c922469cdfb00b8e2aabc6debc2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ef:c4:c0:36:86:4b:8f:75:75:2a:e6:75:ea:
1f:80:6b:e8:09:85:d1:59:bd:7a:95:b9:ce:81:5b:
6e:74:b6:be:cd:25:65:23:78:c1:b4:02:e7:31:f0:
a5:8e:a0:b1:85:89:3c:f8:16:79:6b:a0:6a:d8:fc:
96:df:fb:c0:06:eb:4f:01:9b:aa:13:b8:fc:21:73:
6a:1a:f5:8e:54:db:b3:28:41:e3:66:55:09:d8:b2:
b0:7c:32:a1:1f:2d:95:77:8b:33:2a:dc:8a:fb:b6:
ca:7b:f7:d9:ff:7d:1e:d7:13:cb:22:e8:7d:8f:6b:
3d:2a:34:28:42:9f:01:63:93:70:ba:11:77:a4:8d:
39:4c:38:bb:39:37:29:9d:40:7c:2f:be:78:d7:f4:
bf:5b:35:f8:10:be:f0:95:51:e9:39:b7:b6:9c:16:
13:dd:41:52:a9:7b:ce:46:e8:63:8f:06:24:c4:c8:
09:33:74:84:e9:e1:7a:8b:1d:1f:06:a2:48:95:44:
b9:76:7f:a6:f8:6d:6c:90:80:99:8c:9b:b6:2a:98:
78:2d:89:3c:6b:3b:9a:e8:74:c1:23:9c:4e:83:76:
6a:2f:4d:a5:7a:de:57:7f:cc:50:4a:53:ce:69:da:
86:a7:a2:fd:e0:c2:38:f8:54:11:08:8c:b6:86:56:
c0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F4:14:67:14:A6:C9:22:46:9C:DF:B0:0B:8E:2A:AB:C6:DE:BC:2A
X509v3 Authority Key Identifier:
keyid:C4:DF:F0:E1:52:37:80:55:07:AF:5D:03:AB:ED:EB:88:32:B4:B8:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:d3:24:56:2b:4e:72:ea:f0:ec:5f:fe:48:24:d3:b7:aa:d3:
3f:2b:e5:c0:30:60:4d:bf:74:16:5c:7d:4f:cc:8d:2e:a8:6f:
39:c7:c1:de:52:0a:9f:76:45:4b:19:68:6a:9a:91:31:da:9f:
74:f2:13:20:e5:ed:58:cd:6d:c7:3f:bd:4b:76:d5:02:98:19:
0e:8b:c7:88:f3:ce:c3:b6:34:23:35:70:38:3b:80:66:b1:34:
e9:4e:2e:4e:b5:6d:50:da:15:78:53:3d:15:6e:e0:70:e2:bd:
08:dd:8b:0e:2c:ac:27:b4:31:f8:86:a6:6e:52:1e:83:38:b5:
c0:ad:69:8f:3d:b2:4c:70:8d:e0:4c:20:9d:c1:37:af:47:f2:
89:59:e0:d6:cf:7c:5f:78:71:95:45:09:b9:41:a4:1f:e7:a6:
14:ec:8a:9a:06:ec:f6:5f:50:da:03:80:d5:cb:7d:fe:72:fb:
13:0a:1f:70:ee:fe:76:fb:e3:5d:17:6b:a3:ed:8e:b6:df:d2:
d7:72:14:25:08:1e:71:0d:c6:9f:ef:ab:5c:3e:02:3a:4d:c2:
39:6b:c7:84:81:02:0c:42:a7:12:1d:ac:c5:55:63:9f:e9:17:
2b:42:d6:72:ca:58:e5:c5:7e:4f:a9:a5:34:d3:25:d5:3f:f1:
ea:b3:7c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:59:25 2026 by rpki-client