Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
File: XYJmcuaPPaXbUO2ButuNM73M0ro.mft (raw, json)
Hash identifier: d1uvQSOYITqAJugPdP/6vuhQpawEGAp0g7lhPJiJITM=
Subject key identifier: 95:81:C5:BF:0F:0E:4D:CD:97:EE:F8:86:3E:78:49:16:54:ED:1A:D1
Authority key identifier: 5D:82:66:72:E6:8F:3D:A5:DB:50:ED:81:BA:DB:8D:33:BD:CC:D2:BA
Certificate issuer: /CN=5d826672e68f3da5db50ed81badb8d33bdccd2ba
Certificate serial: 019F9EF1B755A177FDAC8027B990E4B9981B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYJmcuaPPaXbUO2ButuNM73M0ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
Manifest number: 1609
Signing time: Sun 26 Jul 2026 15:01:08 +0000
Manifest this update: Sun 26 Jul 2026 15:01:08 +0000
Manifest next update: Mon 27 Jul 2026 15:01:08 +0000
Files and hashes: 1: XYJmcuaPPaXbUO2ButuNM73M0ro.crl (hash: sxQcvT1fwR7Nvp3S3LUzzfT6laO+xW6s0crn77fs7c0=)
2: fDzIkCC4HQZF8d8gvy277WuuRYM.roa (hash: TzMFdxwnyUIL4oJ9MUVrNEjKX81ekLEZoq92hFxo3V4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYJmcuaPPaXbUO2ButuNM73M0ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:f1:b7:55:a1:77:fd:ac:80:27:b9:90:e4:b9:98:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d826672e68f3da5db50ed81badb8d33bdccd2ba
Validity
Not Before: Jul 26 15:01:08 2026 GMT
Not After : Jul 27 15:01:08 2026 GMT
Subject: CN=9581c5bf0f0e4dcd97eef8863e78491654ed1ad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:35:fc:70:55:86:ad:e0:97:a4:57:e1:d4:8b:
0e:39:3d:3b:f4:51:92:16:bb:4b:48:90:ac:2b:b4:
4f:49:db:70:78:e6:c8:95:3e:01:e6:12:90:d9:fa:
b9:2b:d7:fd:44:96:6f:df:cb:49:fc:c9:06:77:8e:
01:f6:c5:ab:f8:2a:8e:c1:4e:2e:f6:14:e3:41:75:
1e:cf:a9:9a:a2:97:45:cb:0c:c2:19:bf:73:d9:41:
ae:98:6a:81:7d:a2:b7:30:58:cd:13:e3:72:d1:f9:
29:1e:d6:7c:99:b1:72:9f:0a:d7:8e:ab:c8:88:82:
0f:96:48:3f:84:d6:70:77:7b:76:7c:ba:90:70:66:
90:92:0c:d7:e9:cc:d5:d4:24:8d:f7:cb:38:29:d5:
e4:f0:fe:68:ea:f0:5a:66:e0:df:b8:9a:e8:f2:73:
f9:e2:c5:5b:6d:e0:8a:70:1e:d3:22:a6:21:83:e2:
0a:1a:28:72:a3:18:4b:af:ee:04:df:d5:1d:81:28:
df:6b:56:45:ac:3b:c9:54:02:53:0f:3f:66:66:00:
77:ff:82:52:04:e9:b3:8d:12:10:2a:7f:46:51:e1:
a7:4d:dc:94:16:8e:f0:bf:b3:62:da:f0:a4:6d:c7:
64:3d:d5:62:dc:b4:d9:22:fb:27:2d:a8:7b:99:a9:
b8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:81:C5:BF:0F:0E:4D:CD:97:EE:F8:86:3E:78:49:16:54:ED:1A:D1
X509v3 Authority Key Identifier:
keyid:5D:82:66:72:E6:8F:3D:A5:DB:50:ED:81:BA:DB:8D:33:BD:CC:D2:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYJmcuaPPaXbUO2ButuNM73M0ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:2f:ef:93:49:38:08:ab:e7:a2:3c:c8:8e:f5:26:83:a2:5e:
ed:cc:d8:bc:f2:7a:f2:2f:8e:e8:93:9c:4c:27:e3:d0:6d:12:
45:4d:dc:b9:3d:dc:15:7c:f4:a7:ad:fd:cf:2d:4b:c2:75:77:
c8:e4:ae:82:73:e1:30:5f:e5:9a:ad:fa:86:7c:da:fa:eb:e6:
87:2e:ed:72:96:6d:03:62:c3:ec:61:6e:2b:2d:53:77:c2:44:
1a:5e:ff:8f:fc:9b:2e:dc:9a:df:da:0f:de:e6:d0:d7:f2:f2:
e2:49:8d:5c:d0:ed:0e:18:3e:3f:ee:1d:8e:8f:b4:19:4a:3b:
5d:dd:28:4a:ac:bd:08:f7:b1:45:c9:d8:12:43:87:a8:dc:6c:
38:e3:fa:1e:3b:28:97:f0:e5:ca:74:3d:64:77:47:7a:47:db:
af:e4:fc:49:26:02:ff:b4:a7:73:73:99:cd:5f:0d:2b:90:ec:
77:da:44:6a:c7:09:b3:ea:3e:9a:d3:5a:4c:1f:30:6a:e6:65:
47:27:74:44:63:83:b0:ca:88:38:24:dd:af:aa:c2:32:e5:23:
9b:52:cd:f2:af:81:28:08:ac:86:16:50:a9:8e:c3:19:50:f7:
ec:d9:9e:9d:1b:93:b7:81:c9:8f:47:c6:14:f5:b6:8e:08:c0:
c7:98:e9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:44:37 2026 by rpki-client