Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/105433-83d9-412c-9fc4-1d51c468d556/1/XKn3Xcos07OTU-AwCzC6W2KXais.mft
File: XKn3Xcos07OTU-AwCzC6W2KXais.mft (raw, json)
Hash identifier: 3Z/EAdDA3JtQdgFC8+nBo8BD25iVoiLeLNa7nqeQzug=
Subject key identifier: 3B:49:43:7B:B2:9C:8E:3E:E7:C0:49:5E:07:C6:8E:D8:00:6B:37:2E
Authority key identifier: 5C:A9:F7:5D:CA:2C:D3:B3:93:53:E0:30:0B:30:BA:5B:62:97:6A:2B
Certificate issuer: /CN=5ca9f75dca2cd3b39353e0300b30ba5b62976a2b
Certificate serial: 019F9EF16C0B6236D7EFB8574886F90C1D19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XKn3Xcos07OTU-AwCzC6W2KXais.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/105433-83d9-412c-9fc4-1d51c468d556/1/XKn3Xcos07OTU-AwCzC6W2KXais.mft
Manifest number: 0D57
Signing time: Sun 26 Jul 2026 15:00:49 +0000
Manifest this update: Sun 26 Jul 2026 15:00:49 +0000
Manifest next update: Mon 27 Jul 2026 15:00:49 +0000
Files and hashes: 1: O93rUG0ldryuh9-LYis7w6UfO1w.roa (hash: ojZEmISFm5RdmO2THEEsy3HBhCvY1rlDIunZCRL5byg=)
2: XKn3Xcos07OTU-AwCzC6W2KXais.crl (hash: b1xeUSwlfkzPqd8gGD1Ik6Ao/WpGzTT/VpdASF0FyfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/105433-83d9-412c-9fc4-1d51c468d556/1/XKn3Xcos07OTU-AwCzC6W2KXais.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/105433-83d9-412c-9fc4-1d51c468d556/1/XKn3Xcos07OTU-AwCzC6W2KXais.mft
rsync://rpki.ripe.net/repository/DEFAULT/XKn3Xcos07OTU-AwCzC6W2KXais.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:f1:6c:0b:62:36:d7:ef:b8:57:48:86:f9:0c:1d:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ca9f75dca2cd3b39353e0300b30ba5b62976a2b
Validity
Not Before: Jul 26 15:00:49 2026 GMT
Not After : Jul 27 15:00:49 2026 GMT
Subject: CN=3b49437bb29c8e3ee7c0495e07c68ed8006b372e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:bc:a8:37:3f:0f:b2:4f:4f:77:5e:59:43:70:
ab:61:dd:0e:53:89:e6:e7:9e:f3:89:5b:a3:ed:d7:
fd:18:a9:7b:d9:75:fc:d8:3a:17:7b:83:b9:36:23:
1d:7f:fa:be:cd:83:a4:26:8b:43:f3:a0:dd:4f:22:
5f:46:83:0f:9c:eb:b1:11:17:2b:21:e1:76:32:4d:
e4:8d:64:65:42:d2:8b:95:69:ae:27:c6:53:fa:96:
44:35:d2:f0:e0:be:f3:6d:ff:cd:96:30:78:8e:1c:
93:f1:28:a6:8d:6b:7f:04:10:1d:68:58:72:44:c6:
b9:6d:a7:6e:69:8e:97:79:d2:f4:c4:a1:c4:fe:5b:
d0:01:84:75:1c:fa:bc:44:08:d6:e4:c0:5f:04:cd:
c8:a7:1f:db:35:92:60:01:39:cc:01:c0:f3:bf:2d:
b9:31:38:b3:3e:86:28:a1:2a:d1:dd:db:f3:d4:4d:
54:cb:39:d2:2f:16:ae:f5:21:93:88:21:4a:b7:2f:
fb:f6:5f:1d:87:7e:bb:89:f9:2e:94:48:54:03:32:
de:89:66:92:3a:60:8d:2b:97:09:8e:c5:7f:e6:cb:
f1:6c:cb:ea:de:8e:0f:ec:04:68:a4:bd:6b:c5:a7:
fa:93:ea:6b:88:e2:ff:a5:83:f0:52:a1:a5:0d:19:
c7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:49:43:7B:B2:9C:8E:3E:E7:C0:49:5E:07:C6:8E:D8:00:6B:37:2E
X509v3 Authority Key Identifier:
keyid:5C:A9:F7:5D:CA:2C:D3:B3:93:53:E0:30:0B:30:BA:5B:62:97:6A:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XKn3Xcos07OTU-AwCzC6W2KXais.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/105433-83d9-412c-9fc4-1d51c468d556/1/XKn3Xcos07OTU-AwCzC6W2KXais.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/105433-83d9-412c-9fc4-1d51c468d556/1/XKn3Xcos07OTU-AwCzC6W2KXais.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:09:b2:82:3f:94:5b:49:12:ed:97:04:94:da:33:bc:db:a7:
93:c4:88:4c:c1:6e:5f:7e:41:5c:ec:97:83:10:de:87:bc:f6:
fb:7c:b5:ae:f1:99:10:bf:90:3a:14:76:d7:bb:b3:4b:9c:6b:
78:e7:ec:a0:15:f5:1b:6d:d2:4e:a9:f0:57:5c:09:3e:02:5e:
1a:03:13:bb:ce:18:26:92:f4:e6:fc:7b:a5:17:e3:0f:d2:af:
cb:79:ec:00:81:3c:b9:cc:df:4b:fe:59:7f:fd:58:ac:50:4a:
d4:a3:63:eb:7e:e1:ef:60:cc:e8:a9:2c:1e:e7:6f:ec:17:de:
c4:5e:a4:e7:cb:f1:da:1b:b3:69:d5:c5:4e:45:6d:8f:96:3c:
49:ab:96:8e:c9:1d:3b:a7:ad:35:6e:d9:5c:6a:a9:30:77:ae:
e5:bd:62:05:f8:22:4d:7d:bf:08:37:7e:da:71:79:5f:72:91:
2f:58:8e:f0:45:4f:5b:11:7c:27:2b:9b:ca:58:68:ca:7a:a2:
a8:b1:27:cc:b7:bd:38:c4:1d:90:6c:d4:89:00:18:83:bd:ad:
4b:97:50:c8:b5:0b:ce:c8:06:e4:9a:6a:b5:91:2b:63:28:68:
01:2f:b6:c5:09:1d:3f:05:51:59:1b:99:20:3e:51:ba:59:12:
12:f9:75:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 23:37:23 2026 by rpki-client