Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.mft
File: XQwn-FWB4ue94MmPvVS-HUlnBRc.mft (raw, json)
Hash identifier: PgUgCvrNwVbVExfSTFquHCFky+Lbuq4naC5Dhe1M8zQ=
Subject key identifier: 24:A1:AE:CA:BE:C7:CB:EB:D1:7B:A9:3B:69:EA:72:1A:62:B4:27:76
Authority key identifier: 5D:0C:27:F8:55:81:E2:E7:BD:E0:C9:8F:BD:54:BE:1D:49:67:05:17
Certificate issuer: /CN=5d0c27f85581e2e7bde0c98fbd54be1d49670517
Certificate serial: 019FA29769F8342991B0BB085EDFFC69E60A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XQwn-FWB4ue94MmPvVS-HUlnBRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.mft
Manifest number: 19D0
Signing time: Mon 27 Jul 2026 08:00:59 +0000
Manifest this update: Mon 27 Jul 2026 08:00:59 +0000
Manifest next update: Tue 28 Jul 2026 08:00:59 +0000
Files and hashes: 1: XQwn-FWB4ue94MmPvVS-HUlnBRc.crl (hash: B9bmYBdnoRA6ZHotOuuKRREUpJu1uUtR9RHR/K7bTOk=)
2: vBd96lvIsDsfGISTsOxkg88egXA.roa (hash: RnnbPzBvvvPoGwsnPKy9bGG71tb5eaAdI+LKM3Dltq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XQwn-FWB4ue94MmPvVS-HUlnBRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:97:69:f8:34:29:91:b0:bb:08:5e:df:fc:69:e6:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d0c27f85581e2e7bde0c98fbd54be1d49670517
Validity
Not Before: Jul 27 08:00:59 2026 GMT
Not After : Jul 28 08:00:59 2026 GMT
Subject: CN=24a1aecabec7cbebd17ba93b69ea721a62b42776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cd:6e:71:c9:2f:13:c6:47:e8:fb:84:23:51:
53:1e:59:a3:53:b8:0a:35:90:70:31:e6:75:39:f2:
17:1d:3b:63:25:79:c4:34:b0:93:47:41:8b:03:ca:
7d:05:6f:8d:9f:ce:59:12:6e:3b:31:dc:36:99:52:
14:ea:3a:8c:90:e8:8f:f3:16:47:97:fc:4f:8c:35:
78:a2:b2:1f:95:c0:56:13:1b:ec:8e:e1:7f:2e:81:
e9:63:a3:bf:c7:c5:d5:d1:69:8c:c2:c7:92:74:28:
df:36:f0:1b:98:2f:56:e8:e7:e1:13:3d:c9:a9:a4:
f2:e3:9e:55:d3:ba:cf:fd:09:80:2c:30:8e:ed:26:
5a:c9:a8:51:af:06:41:63:bd:9c:4f:1e:44:fb:c0:
98:46:9b:78:66:cd:d8:a5:2e:e7:45:45:ce:2a:54:
71:42:67:ba:eb:4f:21:20:96:fc:83:9d:c5:05:f4:
19:73:08:c2:50:ff:c0:69:69:5b:04:77:d7:25:9c:
49:b7:93:a0:5a:af:0b:bd:6c:92:b3:1c:da:6b:a3:
26:32:88:a8:28:2e:70:c7:68:71:5b:ff:d9:49:d8:
83:21:67:63:e0:14:4f:00:8f:2b:14:4a:50:2c:8d:
95:33:9d:f9:3a:b8:4b:84:ea:21:6e:d2:3f:ea:55:
b2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A1:AE:CA:BE:C7:CB:EB:D1:7B:A9:3B:69:EA:72:1A:62:B4:27:76
X509v3 Authority Key Identifier:
keyid:5D:0C:27:F8:55:81:E2:E7:BD:E0:C9:8F:BD:54:BE:1D:49:67:05:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XQwn-FWB4ue94MmPvVS-HUlnBRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:98:22:4f:b2:50:ec:09:e2:31:dd:6e:13:80:51:bf:5c:5f:
42:a5:95:b1:62:4f:c7:00:f3:d9:85:f3:52:e3:3b:5f:b0:d7:
18:05:83:61:20:8d:d8:76:67:74:32:88:9d:e6:00:b3:6c:a9:
b0:9b:03:cb:91:d4:de:8e:58:c7:b0:1a:7f:97:b3:e8:b7:78:
74:55:ea:1b:da:8c:29:ba:94:72:8b:ba:12:51:95:89:39:ca:
92:93:bd:ce:64:7d:48:14:27:1e:7b:0b:6a:76:4a:3b:5b:dd:
09:ab:b5:48:be:6a:29:b2:6c:05:01:12:ae:16:a0:e1:75:2d:
95:89:64:0b:ef:3b:37:c5:a5:53:6f:d5:22:f6:33:6e:bc:51:
74:08:7f:ff:86:be:02:b6:49:db:52:07:c4:cd:9d:93:d5:73:
16:ef:ce:bd:ea:d0:b2:87:e4:c4:e3:7c:5a:44:71:cd:ea:db:
f7:49:dc:36:8d:06:05:79:70:5d:91:b5:8d:f7:6a:20:ff:a1:
e9:09:6e:ac:09:fd:79:70:0d:ae:72:2d:af:84:a2:53:c4:17:
81:d1:55:c4:3c:e5:1d:2e:a9:62:3e:d9:58:40:77:9e:ce:3f:
a6:9e:28:0d:ba:c9:32:14:34:01:dd:6f:05:76:30:3d:94:0d:
bc:e7:b5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:13:26 2026 by rpki-client