Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft
File: XY9AsSSN49pfXWCX-BBoKTxL7vc.mft (raw, json)
Hash identifier: El10mgPJlFz7F9XNccKsyfiB+VmcGOc8RhHFV5jRDTk=
Subject key identifier: 80:C4:C2:20:06:40:0B:EE:17:67:E5:3C:D7:CD:04:4C:F7:EF:9E:E7
Authority key identifier: 5D:8F:40:B1:24:8D:E3:DA:5F:5D:60:97:F8:10:68:29:3C:4B:EE:F7
Certificate issuer: /CN=5d8f40b1248de3da5f5d6097f81068293c4beef7
Certificate serial: 019F9FCCA2A8B0614B911A659974CF5E155A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XY9AsSSN49pfXWCX-BBoKTxL7vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft
Manifest number: 02F9
Signing time: Sun 26 Jul 2026 19:00:16 +0000
Manifest this update: Sun 26 Jul 2026 19:00:16 +0000
Manifest next update: Mon 27 Jul 2026 19:00:16 +0000
Files and hashes: 1: XY9AsSSN49pfXWCX-BBoKTxL7vc.crl (hash: BoeAWie5WidIki1giRjkzAKy03tCNjSiOozfKl028kY=)
2: _a7gNZLlQxgHn1SWkyljxM4Vp8E.roa (hash: riqb9ZgtO6K145lOcaQYpYRovN3sqPG5Tn86hViYkIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XY9AsSSN49pfXWCX-BBoKTxL7vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:cc:a2:a8:b0:61:4b:91:1a:65:99:74:cf:5e:15:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d8f40b1248de3da5f5d6097f81068293c4beef7
Validity
Not Before: Jul 26 19:00:16 2026 GMT
Not After : Jul 27 19:00:16 2026 GMT
Subject: CN=80c4c22006400bee1767e53cd7cd044cf7ef9ee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b5:91:6d:47:95:ec:54:5c:b7:b1:1b:f6:f6:
92:9e:e4:44:77:c4:64:d3:05:8e:45:9f:b1:3f:ee:
05:a6:ac:65:c2:b1:92:be:5d:9b:78:fa:aa:99:f8:
d3:ad:68:8f:db:ac:5f:f8:42:a9:2d:06:d0:c6:e6:
cf:1d:84:56:26:6a:34:0c:85:c0:f1:9b:bc:ba:44:
58:29:a2:4e:ac:cd:69:9d:0a:7e:6d:6e:b3:64:e3:
32:c4:3e:60:ba:e2:df:23:a1:01:4a:ab:f8:e2:98:
94:97:73:83:cd:b0:b7:0e:72:03:2a:e4:78:77:e9:
71:07:82:cd:b0:e1:33:0f:25:8c:27:5f:ca:e0:c2:
ba:32:06:d2:df:5d:fe:18:5e:ed:9f:49:76:c8:96:
7f:cc:f9:15:02:d9:f8:b9:65:66:df:da:28:fc:5d:
6e:6a:ff:ec:56:ea:ac:03:a3:ac:13:67:ff:14:9a:
e4:2f:25:02:c7:38:36:0b:05:78:37:6f:a8:67:81:
79:d0:a8:b1:dc:bd:ff:12:40:d9:10:9d:11:d3:11:
60:43:e0:6b:04:fc:65:65:ca:81:58:d2:5c:1e:4d:
4a:1c:dd:06:17:55:69:ce:b0:ab:73:06:15:28:c6:
8a:03:34:a8:06:d8:c0:ca:ff:52:c2:63:5e:fe:a9:
da:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C4:C2:20:06:40:0B:EE:17:67:E5:3C:D7:CD:04:4C:F7:EF:9E:E7
X509v3 Authority Key Identifier:
keyid:5D:8F:40:B1:24:8D:E3:DA:5F:5D:60:97:F8:10:68:29:3C:4B:EE:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XY9AsSSN49pfXWCX-BBoKTxL7vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:76:a9:a7:40:e0:a6:01:64:e3:ba:f6:2a:bf:ca:4c:ff:10:
71:00:41:df:e7:73:c8:58:b2:7c:02:c4:22:d8:a3:c0:25:b6:
22:fe:a4:d7:a9:75:9b:6d:aa:7f:71:d9:18:2c:36:7f:4a:de:
58:69:ef:87:92:09:47:9d:41:07:6b:10:7d:6b:2f:da:a6:10:
aa:17:67:25:29:07:9d:a5:5f:51:86:7e:c3:56:48:ac:ef:7e:
e2:eb:3b:02:a5:40:66:e0:03:6d:63:b1:55:89:c3:74:64:29:
92:ca:f5:64:07:a1:b0:d4:98:18:a4:46:b3:19:58:23:e8:24:
80:05:c4:2e:da:40:98:e7:6f:90:58:13:25:06:77:3d:ac:a0:
7e:e3:cd:cb:9f:c8:76:07:57:48:1a:77:61:2e:ad:72:10:a5:
3b:0e:9e:82:10:09:02:03:60:fc:a4:9d:46:f5:92:fe:d2:a0:
52:ba:be:b2:51:c1:55:d7:0f:c5:d3:35:c5:7b:e8:fe:2c:6b:
61:f0:08:65:d5:8f:93:65:62:95:63:cf:54:b6:d9:2d:d2:03:
b3:e1:60:e2:30:1b:eb:0e:14:e7:ce:57:45:30:e7:4c:19:0d:
08:81:da:c9:23:6e:ff:cf:1b:15:ca:3d:e6:d2:95:f3:6d:ed:
1f:d0:ef:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:07:27 2026 by rpki-client