Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.mft
File: XiZI8SkNRHG821C4K-TtkyADCU0.mft (raw, json)
Hash identifier: NSBctEEEzVQFs5bza8bmpEFvRxMCUZ/ifkJb+akDr08=
Subject key identifier: 1E:D2:88:3C:A8:6C:2A:1A:63:B3:E0:4D:98:50:3A:E0:59:C3:7D:95
Authority key identifier: 5E:26:48:F1:29:0D:44:71:BC:DB:50:B8:2B:E4:ED:93:20:03:09:4D
Certificate issuer: /CN=5e2648f1290d4471bcdb50b82be4ed932003094d
Certificate serial: 019FA03AD846FC1BDFB91CA86A5CF1480A02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XiZI8SkNRHG821C4K-TtkyADCU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.mft
Manifest number: 1960
Signing time: Sun 26 Jul 2026 21:00:38 +0000
Manifest this update: Sun 26 Jul 2026 21:00:38 +0000
Manifest next update: Mon 27 Jul 2026 21:00:38 +0000
Files and hashes: 1: XiZI8SkNRHG821C4K-TtkyADCU0.crl (hash: 9X56BwF9fy6WNv10SbCzjHk8YvMCG3AlfslfuKeQIJA=)
2: sq8rzyi0UVog1iS5Ju1CZc-6dl0.roa (hash: hTNSZci/jvQbgI5g6zcbraZud5VHWLa8WEC2pVISMYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XiZI8SkNRHG821C4K-TtkyADCU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 21:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:3a:d8:46:fc:1b:df:b9:1c:a8:6a:5c:f1:48:0a:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e2648f1290d4471bcdb50b82be4ed932003094d
Validity
Not Before: Jul 26 21:00:38 2026 GMT
Not After : Jul 27 21:00:38 2026 GMT
Subject: CN=1ed2883ca86c2a1a63b3e04d98503ae059c37d95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e0:11:fb:5f:30:73:7c:f2:54:4c:82:5a:43:
88:22:ea:92:b1:5d:d3:5f:9b:7c:11:db:75:4c:33:
ca:3b:40:03:5a:26:99:b9:86:d7:01:bc:2d:40:dd:
fb:b4:99:e7:90:1e:15:bc:85:ea:6b:52:a7:c6:4d:
95:78:28:b7:2f:ec:77:c2:07:de:65:06:a2:5f:61:
3a:0c:3c:d3:bc:04:7c:18:e8:16:32:7b:1c:9f:b5:
f8:ed:57:66:ae:59:5a:19:e0:17:34:8c:01:30:0d:
1c:e8:71:2e:b8:7a:98:44:3c:9e:9e:8b:23:2d:2d:
1e:99:fe:8e:01:06:57:ef:f1:0d:f3:0e:c0:ee:d0:
b4:3b:24:a8:3a:a3:97:60:fa:49:00:9f:34:ca:27:
1c:65:bf:a7:0a:3c:04:63:1d:eb:b7:40:7f:d3:57:
ab:ab:2c:20:cc:59:21:f7:f8:8a:cc:da:90:1e:f2:
09:28:4d:ea:59:e7:ae:d8:98:52:1a:19:d6:0c:5b:
f1:b7:3a:a2:2f:d6:91:0d:5b:c2:3c:93:7d:98:64:
f8:b0:fe:b3:8f:e2:0d:30:e2:57:ca:39:2b:aa:ed:
0a:c1:33:d8:ac:65:e2:a9:b8:41:0a:2f:ac:d7:8f:
71:74:1f:14:fc:40:84:3c:ed:67:d7:26:ac:6f:4a:
5a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D2:88:3C:A8:6C:2A:1A:63:B3:E0:4D:98:50:3A:E0:59:C3:7D:95
X509v3 Authority Key Identifier:
keyid:5E:26:48:F1:29:0D:44:71:BC:DB:50:B8:2B:E4:ED:93:20:03:09:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiZI8SkNRHG821C4K-TtkyADCU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ba:8e:fa:96:da:61:4f:47:0c:3c:c4:95:98:8c:1a:05:55:
b6:64:16:1f:e8:a0:4b:f9:0a:d3:61:c7:72:71:d2:5d:a8:0d:
75:95:a6:3f:06:6d:b0:b8:20:b4:2c:9b:c9:5f:78:1c:d8:fc:
33:df:63:48:70:92:4d:80:c2:66:92:67:d8:dc:64:d3:64:08:
ba:a5:48:0b:93:05:c7:57:1e:92:2b:e6:6d:c3:48:8a:00:82:
de:8d:03:5b:e6:d8:13:c4:d2:59:89:64:8a:e3:bc:19:03:ae:
e4:3e:a7:8b:7e:e6:5d:0a:cd:cf:c0:6c:de:21:b3:66:3b:7e:
d9:a8:69:8c:84:ff:08:4a:a1:02:a9:99:a6:99:14:67:69:c1:
a8:92:36:5f:e6:3a:e8:50:31:d9:25:56:f6:0a:7f:c1:28:b1:
2c:61:89:3a:e6:17:62:4e:cd:b2:f9:fc:3b:ac:2a:5b:cc:0f:
ff:cb:a3:23:2f:ce:09:3c:63:aa:4f:13:d8:dd:69:8e:99:a4:
fa:10:52:ff:6c:3e:f5:b0:48:c0:bd:2b:69:c3:88:70:24:82:
52:20:cd:59:e4:43:be:f9:c4:82:f9:e4:83:02:9c:2d:fa:6d:
71:09:51:89:07:76:f1:ac:a3:90:59:56:81:19:96:a4:32:04:
df:65:4a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:58:03 2026 by rpki-client