Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.mft
File: XLtvfRHev55LqLH2nDg7j8PErhI.mft (raw, json)
Hash identifier: tZuA4Jh3STyQcXpCtx+PAOTiR9rWC+1W7L67BUGjIfY=
Subject key identifier: 5A:9B:05:F7:B8:2F:14:B2:0C:20:4E:2C:E4:4D:DF:F9:3D:CF:A3:97
Authority key identifier: 5C:BB:6F:7D:11:DE:BF:9E:4B:A8:B1:F6:9C:38:3B:8F:C3:C4:AE:12
Certificate issuer: /CN=5cbb6f7d11debf9e4ba8b1f69c383b8fc3c4ae12
Certificate serial: 019FA2CEAF0966595848B132C058E7D62CF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLtvfRHev55LqLH2nDg7j8PErhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.mft
Manifest number: 0DF5
Signing time: Mon 27 Jul 2026 09:01:21 +0000
Manifest this update: Mon 27 Jul 2026 09:01:21 +0000
Manifest next update: Tue 28 Jul 2026 09:01:21 +0000
Files and hashes: 1: XLtvfRHev55LqLH2nDg7j8PErhI.crl (hash: m/Yr5jDpUhIQcrx5P8aKC795SbAXRWFoOKuoPUyW+NE=)
2: eO46gXXoSZwATk8MoN76YPpN1jQ.roa (hash: F/WomuEJ+uQlAxaPHkR6qqNqSNUL0B0LVxqFRNytneU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XLtvfRHev55LqLH2nDg7j8PErhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:ce:af:09:66:59:58:48:b1:32:c0:58:e7:d6:2c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cbb6f7d11debf9e4ba8b1f69c383b8fc3c4ae12
Validity
Not Before: Jul 27 09:01:21 2026 GMT
Not After : Jul 28 09:01:21 2026 GMT
Subject: CN=5a9b05f7b82f14b20c204e2ce44ddff93dcfa397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c1:c7:c8:76:99:7e:0f:46:96:83:ac:19:6c:
49:2a:42:e0:4c:87:ef:0c:60:0b:f6:da:53:8a:53:
d2:16:94:eb:03:fb:f7:af:60:cb:75:a6:c4:bd:75:
a0:1b:75:a5:a1:d0:90:86:eb:0a:76:45:71:e6:b1:
1f:6d:13:e0:ed:02:97:14:10:1e:d3:fe:a7:26:68:
65:b4:95:3c:b3:e4:69:f5:51:fb:12:9f:18:a2:6c:
5e:18:60:d5:41:2e:36:be:1c:54:3d:32:10:1a:ca:
d8:92:82:f0:48:75:47:d1:db:62:3b:b3:6a:a0:35:
67:7d:df:cf:58:7c:d2:0c:99:97:40:f8:7a:f3:ca:
83:62:3a:79:29:a1:b6:37:92:ae:11:e1:9b:62:96:
cd:ba:d2:9c:19:f7:00:4d:c3:d3:db:94:d6:2a:fb:
24:f5:0c:20:39:0c:4a:4f:a8:1f:5f:86:84:ef:de:
68:9d:9c:bb:2d:ec:e0:4f:16:ad:99:64:22:63:24:
2c:f2:5e:dc:e6:35:56:12:59:2e:dd:a3:16:14:d5:
1a:53:e6:3d:f1:a3:de:34:30:31:ed:c4:c0:e2:b5:
49:63:6c:3f:f9:9f:8c:57:52:8d:bd:49:0c:5f:87:
be:c6:aa:01:1e:aa:c6:0f:fb:3f:f7:aa:30:bd:3b:
56:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:9B:05:F7:B8:2F:14:B2:0C:20:4E:2C:E4:4D:DF:F9:3D:CF:A3:97
X509v3 Authority Key Identifier:
keyid:5C:BB:6F:7D:11:DE:BF:9E:4B:A8:B1:F6:9C:38:3B:8F:C3:C4:AE:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLtvfRHev55LqLH2nDg7j8PErhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:75:c7:fc:f6:f6:dd:ba:44:5a:a3:fd:1c:5b:00:0d:1e:57:
39:eb:d0:11:6a:16:43:45:5a:76:1c:1a:3d:b3:5a:79:a2:4d:
84:94:53:ea:ec:c2:66:ba:28:02:61:d7:65:a2:ae:38:f1:66:
53:73:a0:10:b0:27:2e:3a:1d:c7:38:78:0d:54:e1:2a:f6:40:
c4:2f:d6:46:09:c5:5f:c4:ac:ce:05:ae:bf:ec:ca:3d:88:1b:
63:da:4a:2c:33:65:70:3a:7f:a7:04:22:3f:b9:60:bf:a2:fd:
20:e5:8e:db:bd:51:fc:f2:2c:2d:a6:4c:7b:c5:c8:b2:42:bd:
e6:59:9a:ac:51:80:e7:3e:2e:a7:91:7a:44:26:55:a3:ce:a1:
e1:44:4e:4e:64:76:33:6a:73:ff:49:d9:05:79:c2:79:f9:cd:
b8:97:a9:db:a3:f9:07:0e:e5:67:c2:d4:b3:fa:dc:d5:3e:c6:
5b:cd:cd:af:27:7a:6c:11:0d:fe:bf:71:64:bb:d1:43:d9:7c:
74:f8:19:8f:bf:12:3f:de:97:92:21:ff:56:a5:95:8d:b6:0e:
6f:80:7f:43:3b:6b:aa:8e:c9:9a:d2:bf:71:46:45:8a:bc:a4:
b2:ed:2d:bc:83:67:e5:7a:42:a1:e2:b3:d6:05:3f:2c:3e:06:
46:0b:29:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:28:58 2026 by rpki-client