Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/44dd9f-4891-45ae-9030-8da8317de3f6/1/XchzCYds7EBPAHv22gQ0wL3GLYs.mft
File: XchzCYds7EBPAHv22gQ0wL3GLYs.mft (raw, json)
Hash identifier: psbYQ9nfwvrfA6ZP5YaMDudAKZ7UeO1eGQ65OBarA6A=
Subject key identifier: 7D:2A:7C:03:2B:C6:4F:43:61:86:09:7A:34:D8:AE:3D:94:84:07:E1
Authority key identifier: 5D:C8:73:09:87:6C:EC:40:4F:00:7B:F6:DA:04:34:C0:BD:C6:2D:8B
Certificate issuer: /CN=5dc87309876cec404f007bf6da0434c0bdc62d8b
Certificate serial: 019F9FCD324D1FA1D9BF4EFF1BC598A5F6A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XchzCYds7EBPAHv22gQ0wL3GLYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/44dd9f-4891-45ae-9030-8da8317de3f6/1/XchzCYds7EBPAHv22gQ0wL3GLYs.mft
Manifest number: 19CB
Signing time: Sun 26 Jul 2026 19:00:52 +0000
Manifest this update: Sun 26 Jul 2026 19:00:52 +0000
Manifest next update: Mon 27 Jul 2026 19:00:52 +0000
Files and hashes: 1: XchzCYds7EBPAHv22gQ0wL3GLYs.crl (hash: AiV9Tvdk6fekEA/ug6IzFWxDIcWMTK1Et1ALGDvqrT8=)
2: fOblkOKnVrmUSkTncbBDEMnfaWM.roa (hash: JWgHw+0HX00Em/lbw5J4guVx3tmSNMauopcN/+iFVxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/44dd9f-4891-45ae-9030-8da8317de3f6/1/XchzCYds7EBPAHv22gQ0wL3GLYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/44dd9f-4891-45ae-9030-8da8317de3f6/1/XchzCYds7EBPAHv22gQ0wL3GLYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/XchzCYds7EBPAHv22gQ0wL3GLYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 19:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:cd:32:4d:1f:a1:d9:bf:4e:ff:1b:c5:98:a5:f6:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc87309876cec404f007bf6da0434c0bdc62d8b
Validity
Not Before: Jul 26 19:00:52 2026 GMT
Not After : Jul 27 19:00:52 2026 GMT
Subject: CN=7d2a7c032bc64f436186097a34d8ae3d948407e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:17:45:e4:a8:63:70:91:71:a4:70:b7:2a:98:
52:e5:29:f5:96:7c:8b:8c:55:a2:ad:0c:3b:95:53:
27:a6:36:10:f1:5e:01:be:f7:60:c1:2c:86:87:64:
7d:11:cf:9d:f4:e8:c8:18:2b:cb:f1:d5:43:9c:77:
23:67:f2:0e:79:46:87:72:6a:cf:fe:84:6e:23:54:
1d:6d:07:8d:c7:e8:5c:4b:7d:81:a8:39:78:97:40:
ec:e7:fe:a0:bf:74:73:68:75:cd:d9:06:a8:2b:67:
ce:55:5a:aa:c6:b2:4a:2a:f6:02:d6:c3:2f:cd:d8:
45:c9:58:c6:0d:3e:b0:88:a9:0a:ad:cb:f1:c1:f7:
94:4e:dc:1c:cb:2b:6d:52:ca:5b:03:7d:31:65:7f:
07:81:43:f7:c3:f0:ab:66:cc:47:2e:86:11:ce:22:
64:40:d7:99:d9:ad:b7:a4:8f:7b:77:33:64:cb:02:
5f:2d:0b:18:60:3d:c4:b6:99:20:b2:5f:34:96:18:
00:be:c3:3c:e9:df:6a:bd:7d:14:f7:61:0a:b9:bb:
73:5e:e1:38:74:61:94:af:89:91:2b:66:d9:c2:39:
77:41:1c:e4:fb:fb:15:f6:a2:68:fb:c5:a1:fb:7c:
26:cb:c7:2e:cb:2f:38:60:b6:4c:33:24:1f:d1:fd:
e6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:2A:7C:03:2B:C6:4F:43:61:86:09:7A:34:D8:AE:3D:94:84:07:E1
X509v3 Authority Key Identifier:
keyid:5D:C8:73:09:87:6C:EC:40:4F:00:7B:F6:DA:04:34:C0:BD:C6:2D:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XchzCYds7EBPAHv22gQ0wL3GLYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/44dd9f-4891-45ae-9030-8da8317de3f6/1/XchzCYds7EBPAHv22gQ0wL3GLYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/44dd9f-4891-45ae-9030-8da8317de3f6/1/XchzCYds7EBPAHv22gQ0wL3GLYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:53:64:29:8d:88:8e:f5:87:c7:73:eb:dd:a0:a5:e9:09:a7:
1f:29:f0:ac:d8:31:9b:bc:9c:52:15:ff:f6:ff:77:8b:f2:eb:
9e:13:c9:69:ad:e1:53:5d:2a:06:54:3e:20:57:af:38:52:ac:
fb:a3:bd:e1:a9:c4:04:64:00:77:19:0b:cf:c7:60:d9:16:54:
fb:0c:1a:e2:19:56:3e:6c:bd:47:7b:a5:a2:53:e3:ca:99:3e:
86:04:10:66:ba:4c:ab:1b:b2:45:e9:1c:c6:3e:23:7e:13:9c:
f6:1e:15:83:83:26:0d:ca:e4:a6:fc:e8:c7:93:a2:cc:09:5d:
77:7b:c0:79:c9:7b:0c:49:9d:39:c0:e2:b0:1c:bc:16:6d:22:
47:f7:e5:5f:91:75:9d:a7:d7:fc:db:13:54:2a:34:89:cf:96:
94:17:8f:f7:c4:18:fa:88:e0:e3:33:8a:f2:15:54:1d:10:29:
ca:c8:e0:5d:7d:a2:39:a7:b0:92:74:d5:6e:9a:8a:1f:ef:c5:
99:8e:9e:41:c0:b7:23:26:6e:f8:1f:de:d6:f8:99:f3:e1:22:
c1:aa:bd:bd:2f:ef:55:10:9c:be:93:9e:94:b0:1a:93:b1:28:
c4:69:16:73:38:e2:ce:95:34:5f:f9:4b:2f:20:b5:b9:ac:2d:
0b:4e:7f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 02:02:54 2026 by rpki-client