Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/xJyIRCupc0W8AQZVnm-nhpRK3KQ.mft
File: xJyIRCupc0W8AQZVnm-nhpRK3KQ.mft (raw, json)
Hash identifier: uCMWo7AgNnC1OOJQpVfn4X/rY3bkE3RzpLNxaXSoL3g=
Subject key identifier: 97:F8:8A:61:E0:32:A5:38:BB:13:5E:86:21:3E:4E:AC:90:B9:93:ED
Authority key identifier: C4:9C:88:44:2B:A9:73:45:BC:01:06:55:9E:6F:A7:86:94:4A:DC:A4
Certificate issuer: /CN=c49c88442ba97345bc0106559e6fa786944adca4
Certificate serial: 019FA1BB1165FB932D1AE038DFA82EFF3128
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJyIRCupc0W8AQZVnm-nhpRK3KQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/xJyIRCupc0W8AQZVnm-nhpRK3KQ.mft
Manifest number: 0FA0
Signing time: Mon 27 Jul 2026 04:00:19 +0000
Manifest this update: Mon 27 Jul 2026 04:00:19 +0000
Manifest next update: Tue 28 Jul 2026 04:00:19 +0000
Files and hashes: 1: TxIZNzzKaH19rbmOUyZ9uXJGBrA.roa (hash: /R4FGOkjkhFDesEVBEJOaS2Lp1AMWloELlEn3WOI3+4=)
2: xJyIRCupc0W8AQZVnm-nhpRK3KQ.crl (hash: RIRg84eEgNhdAPax1X4DgiTpC1VhYVUsHrD7kgHNJ74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/xJyIRCupc0W8AQZVnm-nhpRK3KQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/xJyIRCupc0W8AQZVnm-nhpRK3KQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJyIRCupc0W8AQZVnm-nhpRK3KQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:11:65:fb:93:2d:1a:e0:38:df:a8:2e:ff:31:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c49c88442ba97345bc0106559e6fa786944adca4
Validity
Not Before: Jul 27 04:00:19 2026 GMT
Not After : Jul 28 04:00:19 2026 GMT
Subject: CN=97f88a61e032a538bb135e86213e4eac90b993ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1b:10:f1:24:35:d0:29:37:fc:a9:c0:04:20:
6c:41:38:64:91:2a:05:54:63:d5:30:f1:79:2a:8f:
7e:a8:71:19:81:e4:d2:e7:6e:2e:70:1a:4c:96:9d:
b4:8a:1c:0a:14:21:b8:3f:e7:61:c6:77:47:1d:28:
05:b0:6c:73:e2:37:af:8e:ce:43:13:50:a2:e8:fd:
84:70:26:4c:d9:08:f7:57:17:38:47:b5:a9:bb:5f:
d0:93:fd:1c:15:c5:67:3d:96:a4:4c:e3:ad:d5:3c:
d8:d5:4f:ab:2f:62:2b:8e:47:78:66:0f:b9:8a:20:
be:7e:8a:ec:68:02:b6:ac:86:4c:b5:49:34:81:88:
4c:ac:2c:82:2d:7c:be:06:40:d4:50:6b:57:f2:2c:
14:3a:5a:e2:b0:63:67:09:9c:29:f9:9f:8e:a7:f0:
21:a1:a5:70:64:b5:fc:78:48:ae:c6:93:16:5b:f3:
2b:4f:ec:5d:ae:37:a5:4a:ee:46:e3:0a:1c:40:d0:
2a:e4:14:05:9c:a4:75:97:61:cd:80:d5:d6:a2:da:
9d:3e:ef:9c:0a:89:ae:fa:a1:cd:c9:ca:d2:71:31:
8e:c8:37:20:c6:38:7a:40:f7:a7:8e:97:6d:eb:91:
de:75:22:00:93:3a:f6:cd:cc:fa:7c:15:90:bd:d8:
a5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F8:8A:61:E0:32:A5:38:BB:13:5E:86:21:3E:4E:AC:90:B9:93:ED
X509v3 Authority Key Identifier:
keyid:C4:9C:88:44:2B:A9:73:45:BC:01:06:55:9E:6F:A7:86:94:4A:DC:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJyIRCupc0W8AQZVnm-nhpRK3KQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/xJyIRCupc0W8AQZVnm-nhpRK3KQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/xJyIRCupc0W8AQZVnm-nhpRK3KQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:94:e7:70:c2:68:0a:a8:f5:7d:4d:27:e3:1a:ce:8f:7f:55:
1e:e6:b9:e5:2f:0c:dd:2a:79:72:bb:bd:9f:86:29:58:63:37:
1b:63:cd:a5:b4:b1:49:5f:3b:9e:34:94:20:3b:db:51:d1:c1:
b0:a4:27:15:2c:77:58:17:9e:9f:3b:ed:93:4f:ed:31:86:79:
22:72:1c:22:4d:33:4b:a1:b1:a3:97:41:b4:e1:36:08:3e:6a:
61:89:bc:61:d7:2e:ef:44:ec:3d:ae:a1:82:07:cf:f8:34:6a:
9a:cb:3f:48:31:6d:52:9e:9e:5e:8b:43:06:9f:94:a3:23:f1:
da:b3:6b:a5:6a:ac:1d:38:32:da:6b:9d:8f:56:97:10:99:8a:
c1:8f:ca:32:94:5b:4f:52:6b:88:10:99:eb:06:1f:56:e3:bb:
04:d3:3b:25:f2:e0:af:87:a7:60:16:5c:ec:5c:97:5b:70:75:
2e:ab:d8:b9:c9:09:46:44:33:cd:73:ae:e5:a8:3f:e4:fe:60:
5b:bc:72:02:a9:f1:55:46:8b:86:79:f2:fb:35:cd:24:8d:dd:
09:83:87:a5:3f:df:9b:fd:24:ee:30:d3:c9:74:97:01:7a:9d:
49:c6:e8:35:7a:f9:7c:bf:67:2c:3d:17:a3:4c:75:98:2a:71:
c1:da:85:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:20:14 2026 by rpki-client