Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/XgSwLaV7ADebVhowISLnjl1Qick.mft
File: XgSwLaV7ADebVhowISLnjl1Qick.mft (raw, json)
Hash identifier: JszpQVvhx/IEiLITlc+Z+d10LeTpUYVEW1dlQ6ozsRU=
Subject key identifier: 6C:B4:A9:20:53:91:EA:36:BA:32:DC:60:23:4E:E4:91:65:E6:0F:05
Authority key identifier: 5E:04:B0:2D:A5:7B:00:37:9B:56:1A:30:21:22:E7:8E:5D:50:89:C9
Certificate issuer: /CN=5e04b02da57b00379b561a302122e78e5d5089c9
Certificate serial: 019F9D0344CFACF4859B42F86F498C7BD591
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgSwLaV7ADebVhowISLnjl1Qick.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/XgSwLaV7ADebVhowISLnjl1Qick.mft
Manifest number: 46
Signing time: Sun 26 Jul 2026 06:01:04 +0000
Manifest this update: Sun 26 Jul 2026 06:01:04 +0000
Manifest next update: Mon 27 Jul 2026 06:01:04 +0000
Files and hashes: 1: Dj9kuZWr9tyLTs78iAEnZEz4gVs.roa (hash: NhBr92QCCO8QbowM/v9LvYLKA9Dujq44YfaPAibmCTM=)
2: TQ0wM6huTqh458ZZSQM0KI52teM.roa (hash: nBLiANju/5qfI/HxdXcGxBhrz2L2pBNw4FU6t8WZ4B4=)
3: XgSwLaV7ADebVhowISLnjl1Qick.crl (hash: YlkwDZIlBrIIfInYths6b7CgIAR/NF0qz/RDTkN6iE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/XgSwLaV7ADebVhowISLnjl1Qick.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/XgSwLaV7ADebVhowISLnjl1Qick.mft
rsync://rpki.ripe.net/repository/DEFAULT/XgSwLaV7ADebVhowISLnjl1Qick.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 06:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9d:03:44:cf:ac:f4:85:9b:42:f8:6f:49:8c:7b:d5:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e04b02da57b00379b561a302122e78e5d5089c9
Validity
Not Before: Jul 26 06:01:04 2026 GMT
Not After : Jul 27 06:01:04 2026 GMT
Subject: CN=6cb4a9205391ea36ba32dc60234ee49165e60f05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b4:15:09:76:86:f3:fa:e9:66:b3:e9:90:1e:
7b:c2:0b:f7:f8:fe:0c:bb:cd:7b:cc:72:26:a8:d5:
67:66:55:92:cb:7e:23:60:b0:e3:09:b9:29:c7:64:
1f:69:17:84:2e:82:86:f3:f7:c6:77:ed:05:52:f0:
55:37:8d:35:7c:5b:4d:1a:3c:1a:08:41:33:6e:31:
5d:64:c9:d6:5b:4f:fe:1d:29:db:91:ee:8e:a6:54:
3b:94:19:57:09:0d:6a:39:58:29:fc:c2:8c:00:c4:
9e:21:59:ce:77:f7:eb:bc:16:dc:71:09:a7:05:4d:
fc:0d:0d:99:e2:1d:47:5e:46:71:75:6a:6c:82:35:
5c:8a:0e:c8:ea:e2:9f:99:58:51:12:1d:9d:f3:86:
33:39:fd:ff:c7:8c:10:e6:4e:19:b4:e9:d3:2a:0d:
bb:1d:cf:79:61:77:c4:fb:1f:54:c5:fa:1f:98:34:
b6:1b:00:66:7a:16:6f:b3:d0:ee:53:60:d2:4b:3b:
60:16:12:cc:bc:8f:a3:6b:62:b0:11:c9:2b:fd:2d:
1f:6d:64:25:c5:ba:0e:92:2c:c2:5a:bd:31:39:e5:
67:9e:c1:f9:7e:7d:00:2e:82:52:fd:a4:92:8a:f9:
28:37:87:cd:06:c9:5a:3f:4d:33:45:b5:ca:8d:2b:
bc:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B4:A9:20:53:91:EA:36:BA:32:DC:60:23:4E:E4:91:65:E6:0F:05
X509v3 Authority Key Identifier:
keyid:5E:04:B0:2D:A5:7B:00:37:9B:56:1A:30:21:22:E7:8E:5D:50:89:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgSwLaV7ADebVhowISLnjl1Qick.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/XgSwLaV7ADebVhowISLnjl1Qick.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/XgSwLaV7ADebVhowISLnjl1Qick.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:dd:74:da:45:7d:6a:d1:3b:91:94:67:ad:1b:0a:0f:f0:03:
e2:86:89:4f:74:06:04:a0:97:99:68:a8:5d:93:05:41:90:9e:
c6:43:1d:dd:6c:08:fd:2c:84:69:40:87:a4:22:6c:b4:2b:f7:
d3:b2:4f:71:07:63:02:8f:9b:29:0a:83:67:53:6e:3d:bc:43:
f3:89:27:85:a4:93:b7:04:95:42:12:3e:71:df:f7:e9:d5:15:
a6:93:35:83:e3:44:c7:95:2c:e4:76:7d:c0:5d:2e:44:84:59:
78:1d:fd:a8:86:49:0f:4c:00:f4:52:e2:c4:2b:a6:0d:8c:e4:
8a:5d:88:f7:c3:2f:57:77:82:60:69:47:bb:04:12:8d:31:f3:
cd:13:8f:d2:23:65:27:ba:01:c3:74:b1:97:ab:02:c9:4e:25:
a8:27:c4:d4:e7:bf:07:ff:c4:4e:6c:1f:c2:d7:60:be:15:44:
a9:17:9c:bf:5f:d1:b1:a7:51:76:4f:75:89:d0:53:e1:90:86:
7b:70:5c:58:70:a8:ad:a3:c6:bc:65:65:f1:78:81:68:b6:12:
42:c0:c9:63:d7:e3:65:fd:55:11:d4:e9:58:bd:1d:5b:1c:f5:
1b:25:3c:dd:7d:57:2c:b0:13:5f:e0:fc:ef:49:6b:64:e4:45:
3b:00:34:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 15:45:59 2026 by rpki-client