Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
File: XNaRDPHi4rHKNHPEt9CSAg57fGE.mft (raw, json)
Hash identifier: nXhv4Difc87UwsfD+h6gSD8KglXbOYgBgi5G+MhDyBU=
Subject key identifier: C3:96:6C:65:77:70:63:7D:78:59:65:65:D4:BC:F2:7F:E9:9D:D7:F5
Authority key identifier: 5C:D6:91:0C:F1:E2:E2:B1:CA:34:73:C4:B7:D0:92:02:0E:7B:7C:61
Certificate issuer: /CN=5cd6910cf1e2e2b1ca3473c4b7d092020e7b7c61
Certificate serial: 019FA4179410188F736301B63C3AF1D58327
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
Manifest number: 1961
Signing time: Mon 27 Jul 2026 15:00:36 +0000
Manifest this update: Mon 27 Jul 2026 15:00:36 +0000
Manifest next update: Tue 28 Jul 2026 15:00:36 +0000
Files and hashes: 1: 1-JQqdOgGI5A2jgfNA9GBznLZL4o.roa (hash: 8aD9D5dY520w/e92POgprpQwJQRjt7y1yNeMs6zlp6Y=)
2: XNaRDPHi4rHKNHPEt9CSAg57fGE.crl (hash: BPoHk9asgauiuWH458rIaYJDE1GCYY2awntOQWmZgk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:17:94:10:18:8f:73:63:01:b6:3c:3a:f1:d5:83:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd6910cf1e2e2b1ca3473c4b7d092020e7b7c61
Validity
Not Before: Jul 27 15:00:36 2026 GMT
Not After : Jul 28 15:00:36 2026 GMT
Subject: CN=c3966c657770637d78596565d4bcf27fe99dd7f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:76:fc:fa:4f:fe:ed:79:71:41:44:76:d4:a9:
c4:dd:df:7c:41:27:18:7e:0f:b1:44:a6:0e:49:f4:
5c:c2:0c:6f:fa:60:4e:9b:16:1e:07:d7:d4:71:46:
86:ac:74:c5:96:59:bc:a2:bb:bc:55:47:03:a7:e6:
26:7d:50:39:17:52:02:87:10:f3:b0:8c:c0:f5:48:
3c:b7:f2:e6:cd:97:00:26:31:e8:ce:de:c0:af:b5:
c9:ce:af:30:a8:87:33:68:fe:23:1f:a3:35:e8:d0:
37:53:60:1e:5a:15:d6:c3:5a:0f:f2:c0:a6:9e:39:
a2:8e:90:92:86:58:d7:04:e2:b9:75:34:4a:6b:e8:
52:39:3f:78:d3:33:2a:ac:ee:58:cc:72:98:2b:15:
62:b7:77:1d:00:2a:11:60:f2:d2:06:bb:7e:b1:71:
c3:8a:07:cd:78:51:b4:22:4b:de:4c:e2:69:09:8f:
a9:94:cf:7f:47:67:58:9a:ea:42:9d:e2:38:46:33:
a6:e2:ae:e2:37:c7:05:1a:b6:0f:f4:3b:03:76:9d:
7c:d7:9d:be:fc:4d:c0:47:f3:47:15:d5:36:18:44:
98:2e:2a:77:10:48:0c:87:9a:8d:c5:1f:1c:fa:8a:
50:21:25:ce:99:7b:d1:de:13:38:8b:b4:e5:80:ec:
5c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:96:6C:65:77:70:63:7D:78:59:65:65:D4:BC:F2:7F:E9:9D:D7:F5
X509v3 Authority Key Identifier:
keyid:5C:D6:91:0C:F1:E2:E2:B1:CA:34:73:C4:B7:D0:92:02:0E:7B:7C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:c3:5f:0d:89:ab:24:f6:2d:2b:99:40:2d:a0:55:b6:61:16:
9d:d7:02:2d:d1:4f:8c:db:a7:23:a7:df:bb:08:ed:35:19:a8:
31:4c:b7:5e:51:55:c0:ba:1e:90:32:52:1e:ec:32:5a:d2:e3:
ce:74:5a:47:96:e0:21:03:a4:94:c7:7d:62:80:a4:13:96:96:
a9:4e:51:08:ec:f9:57:94:56:f6:0c:4e:66:c1:f7:74:a3:f0:
24:f5:c6:34:ff:ae:eb:53:5d:dd:52:e7:b0:9b:5e:a0:8b:ac:
29:4a:5b:9a:fb:1c:2d:2e:7b:41:2a:23:a2:2e:0f:0b:7f:1d:
fb:69:fc:ba:13:33:ea:b4:16:07:4b:52:c7:3b:76:95:f7:2d:
7a:a3:3e:62:fd:3b:04:ff:e3:4f:0d:07:7b:8e:c1:9f:17:7c:
75:c4:54:48:0f:fa:65:6d:25:ad:08:e7:9e:28:2a:7e:12:4a:
c7:93:48:94:13:73:5b:25:7a:7e:9b:13:93:4b:10:8d:89:f2:
ee:32:88:ee:95:ed:73:c1:7c:9f:a7:26:65:92:64:54:c7:97:
32:d4:54:47:e6:08:78:e4:c8:68:77:16:4b:86:f4:1c:ac:66:
d0:b7:c2:ed:a9:c0:69:6f:b9:8c:f2:4d:83:53:c4:70:60:76:
0f:cb:8e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 16:24:40 2026 by rpki-client