Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.mft
File: XlFUwaEL4eJaptT4rvpGrTH5uW4.mft (raw, json)
Hash identifier: npMe6TL6faUP+QthHgpCq8RMDugIkkVbJyUYeNSAtIQ=
Subject key identifier: D7:E2:8B:C6:A8:98:04:E5:4D:D0:C8:C8:6B:8C:05:FD:F7:2C:F1:B1
Authority key identifier: 5E:51:54:C1:A1:0B:E1:E2:5A:A6:D4:F8:AE:FA:46:AD:31:F9:B9:6E
Certificate issuer: /CN=5e5154c1a10be1e25aa6d4f8aefa46ad31f9b96e
Certificate serial: 019F4B796EA85AE2D3FADB6E3AF9FE22E8B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlFUwaEL4eJaptT4rvpGrTH5uW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.mft
Manifest number: 0173
Signing time: Fri 10 Jul 2026 10:01:17 +0000
Manifest this update: Fri 10 Jul 2026 10:01:17 +0000
Manifest next update: Sat 11 Jul 2026 10:01:17 +0000
Files and hashes: 1: XlFUwaEL4eJaptT4rvpGrTH5uW4.crl (hash: 6x6iMS7xnG8qTSBDk9g0kuQx2kMr43wQ2MhQWmJ4Fp0=)
2: y9CLGthskm4bnZl6iRpadOOvcw0.asa (hash: 4oKFMMI1txxJcbOTwatF9YPUQxB0wLl2gg3DiiRkr5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlFUwaEL4eJaptT4rvpGrTH5uW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4b:79:6e:a8:5a:e2:d3:fa:db:6e:3a:f9:fe:22:e8:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e5154c1a10be1e25aa6d4f8aefa46ad31f9b96e
Validity
Not Before: Jul 10 10:01:17 2026 GMT
Not After : Jul 11 10:01:17 2026 GMT
Subject: CN=d7e28bc6a89804e54dd0c8c86b8c05fdf72cf1b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7f:cf:05:47:63:0b:b2:59:b6:b6:37:15:e0:
fd:ea:6f:77:69:9f:52:f5:dd:04:f7:7e:62:e5:fc:
b4:5c:f6:31:52:ed:9b:e0:34:1d:b0:b0:f4:1b:b9:
b0:12:3d:b3:2e:0d:4d:d0:d1:ab:bb:03:23:81:c1:
55:28:88:dc:fb:bd:ff:03:fa:bd:f8:af:7b:5a:2c:
f8:d6:70:53:f7:9a:db:d6:62:03:b4:c0:0f:b7:4b:
c5:1b:43:06:d5:a3:d6:9f:57:50:d3:68:38:c7:95:
c3:72:58:74:0d:79:0f:b9:96:47:b6:5c:ba:c9:8e:
42:53:a4:52:b7:9f:bf:7a:f5:c8:df:12:64:76:c3:
9b:ac:a2:05:a1:b8:5c:ae:54:cf:e0:b4:9c:cd:39:
05:44:f6:f5:56:92:e5:25:4e:3c:72:66:2d:b1:9d:
69:46:6f:10:fd:69:26:df:d2:99:63:4d:8e:21:3e:
2b:19:ac:ed:f5:c6:e1:e7:e0:3c:b8:31:0f:98:a3:
38:b7:cf:a4:38:90:b4:f9:9c:cf:af:9e:bb:44:29:
0f:e4:83:eb:18:48:89:33:89:25:10:a5:4a:d1:38:
33:74:1f:78:88:42:d1:3e:9f:6c:48:ec:63:c9:94:
05:42:80:24:9a:92:bc:54:be:42:14:be:70:77:a9:
01:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E2:8B:C6:A8:98:04:E5:4D:D0:C8:C8:6B:8C:05:FD:F7:2C:F1:B1
X509v3 Authority Key Identifier:
keyid:5E:51:54:C1:A1:0B:E1:E2:5A:A6:D4:F8:AE:FA:46:AD:31:F9:B9:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlFUwaEL4eJaptT4rvpGrTH5uW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:d5:19:fc:7c:df:19:87:0d:38:65:36:32:54:3f:4d:44:74:
37:4c:78:99:5f:4d:8e:e1:14:ae:14:79:3b:81:9d:9b:34:16:
e3:e3:dd:39:47:38:47:c6:55:70:4c:53:01:04:74:1b:18:ae:
58:8d:71:6d:55:84:2a:e5:e3:74:5a:45:e5:57:b9:2f:00:fa:
a3:41:ed:29:e5:9c:ba:16:73:a4:4a:6e:7a:1d:0c:b9:ac:3a:
e8:62:c6:3e:d5:5e:00:96:be:8e:fe:eb:d7:80:69:27:98:ce:
13:7e:97:2f:a7:d0:e9:61:9b:48:7f:84:20:a0:0a:73:13:3e:
61:c0:c2:12:31:c1:23:cf:cd:d2:95:ad:ad:9c:be:34:b1:ec:
09:7c:9c:41:37:70:1a:12:f6:27:07:ba:bf:cb:78:e1:c6:87:
b8:39:31:cb:5f:3f:1b:42:f6:6c:cb:3b:84:e2:d1:97:c7:f1:
de:1e:6b:af:9d:75:52:bd:33:f9:eb:53:f4:c1:cb:00:82:c1:
7c:8b:5a:fe:9d:01:06:8a:03:79:8b:5a:4b:00:be:6b:54:72:
c2:63:38:8c:09:f1:70:92:9d:26:8d:2c:a4:60:3f:9a:f3:3c:
7a:19:b5:1d:bc:1c:9d:87:5c:52:75:bd:41:46:01:28:d6:a2:
7f:82:e8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 18:52:26 2026 by rpki-client