Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
File: XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft (raw, json)
Hash identifier: 3qKuSCwFZvrU2ygA+WxwpzWeGb8DBcugYwN9PmrgsD4=
Subject key identifier: 43:C2:86:2D:C2:67:34:43:24:1B:AD:01:72:61:D9:55:AE:30:E7:5A
Authority key identifier: 5D:F5:ED:04:0E:FE:2E:58:17:54:DE:B5:C3:CD:82:D9:9D:FE:E8:D9
Certificate issuer: /CN=5df5ed040efe2e581754deb5c3cd82d99dfee8d9
Certificate serial: 019FA0A87A9C5C3A03AF1ABDCCDDE406DA6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
Manifest number: 19D4
Signing time: Sun 26 Jul 2026 23:00:23 +0000
Manifest this update: Sun 26 Jul 2026 23:00:23 +0000
Manifest next update: Mon 27 Jul 2026 23:00:23 +0000
Files and hashes: 1: BVjAALpJvxuQy2GyePspuTkr6KE.roa (hash: n2Oqqyn+P3DE0EdI3BsAkGnYPcIXpRm9D9/3qqS3Klw=)
2: XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl (hash: hEv5C/dwkNICCybcO9NRDyeywsTB4/pyfgR10vfumHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:a8:7a:9c:5c:3a:03:af:1a:bd:cc:dd:e4:06:da:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df5ed040efe2e581754deb5c3cd82d99dfee8d9
Validity
Not Before: Jul 26 23:00:23 2026 GMT
Not After : Jul 27 23:00:23 2026 GMT
Subject: CN=43c2862dc2673443241bad017261d955ae30e75a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:b2:96:85:68:64:2a:9f:d3:e3:39:6a:b4:04:
f8:d5:28:0b:e8:6f:66:4d:3b:ee:f3:61:5a:9a:03:
b2:46:1d:cb:c1:0e:b8:79:62:86:c5:e7:cd:23:ee:
d0:95:3a:fe:53:71:26:95:a2:42:1f:e9:20:f4:c4:
69:3d:cd:10:7e:ae:0a:d4:5d:b6:df:42:45:49:0d:
0d:ce:40:7e:86:df:9d:6a:d4:01:a9:10:69:ab:e8:
21:6e:78:24:df:6c:74:8c:65:3b:42:a7:73:d1:bc:
4a:18:97:52:3b:81:8a:5e:4a:15:8b:99:f6:73:47:
90:04:dd:7c:31:c4:76:e3:c8:30:39:49:1f:4c:f3:
36:c4:9e:e7:84:1f:3c:92:ec:ca:b7:98:e3:d1:01:
2a:79:44:09:1d:57:a1:e8:bc:1c:16:1a:ff:07:bb:
55:c6:b7:d5:20:2d:fe:ce:63:08:c7:79:dd:f6:5f:
86:57:01:15:6d:09:1c:f1:90:64:91:a1:8a:79:36:
ea:a2:0e:23:06:16:39:c6:e2:93:1b:62:c7:92:26:
c3:d1:a6:03:97:55:de:e5:2a:d8:92:20:31:53:89:
30:12:05:9a:18:48:68:ca:0f:26:8b:33:62:e1:4e:
9d:84:2f:a0:ca:bd:5e:f5:d6:1e:18:1b:7b:bf:23:
03:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C2:86:2D:C2:67:34:43:24:1B:AD:01:72:61:D9:55:AE:30:E7:5A
X509v3 Authority Key Identifier:
keyid:5D:F5:ED:04:0E:FE:2E:58:17:54:DE:B5:C3:CD:82:D9:9D:FE:E8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:cd:e2:1b:1e:0d:91:7a:c0:4b:95:f3:38:eb:1f:8b:6f:58:
d4:a5:0b:d6:03:da:55:29:8c:ad:b1:2c:85:b6:63:90:de:4f:
fa:32:91:95:d6:bc:93:18:98:04:f5:f1:c1:09:98:2c:9a:c9:
b4:88:fa:54:f2:31:69:8b:8d:ef:8f:cf:0f:19:0a:1f:14:ca:
e7:94:cb:13:c9:66:5b:94:94:f1:18:25:4b:22:f0:ff:ae:58:
aa:18:2e:29:e2:8e:1d:cd:f8:88:eb:17:f7:18:0f:54:09:b9:
8b:6d:7d:34:7a:94:36:82:b2:72:4a:7e:ab:76:59:a2:03:8f:
4d:cf:07:eb:67:2c:5d:ec:ae:ec:0f:dd:fe:c7:e4:ba:6e:fc:
c9:95:af:55:be:90:4f:7c:48:c9:55:29:f9:1d:8f:02:5c:15:
e5:4a:11:2e:fb:6f:72:a9:69:aa:32:63:32:e1:b2:9f:d7:69:
ee:3d:33:26:95:cb:b6:6d:2a:a2:95:96:44:01:c5:e2:75:e8:
f3:3d:8e:62:f3:c2:de:db:c2:9f:f6:7d:39:a3:50:01:f7:bb:
5c:d7:21:f0:9d:9c:71:f9:e3:85:ee:ec:60:55:8e:d2:64:42:
5c:c4:f7:7d:38:9e:ad:54:90:ed:bf:f4:be:69:02:a0:da:2b:
21:fa:61:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 02:04:08 2026 by rpki-client