Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
File: XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft (raw, json)
Hash identifier: CiH78q0oLUdV3eV1yfse9V2CcOe3oM1dMvnl5O3nAbw=
Subject key identifier: A1:AC:BD:92:7C:B7:5E:85:1D:D1:21:F9:D7:FB:BD:09:9E:3C:60:9B
Authority key identifier: 5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
Certificate issuer: /CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
Certificate serial: 019F577E3F465B7CB1AA9ED07B0A82DEBE29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
Manifest number: 0C73
Signing time: Sun 12 Jul 2026 18:01:59 +0000
Manifest this update: Sun 12 Jul 2026 18:01:59 +0000
Manifest next update: Mon 13 Jul 2026 18:01:59 +0000
Files and hashes: 1: MXmi4elQgkZloOXKc5KxZJXFILw.roa (hash: 4eGKiA6fp/86boDwfJeXXyGqjfCWRwxGmH0ShZjDAuQ=)
2: XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl (hash: d79Sr4i97FsCUgZDiPeUs0RWorxS56a0EUSzp1JqBYI=)
3: taZbUsGibT55ZZu6Th_Go_ILjiU.roa (hash: d/WlzB5v4feaToE5n6krRnONbSIkTydQjlb9UBErHJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 18:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:57:7e:3f:46:5b:7c:b1:aa:9e:d0:7b:0a:82:de:be:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
Validity
Not Before: Jul 12 18:01:59 2026 GMT
Not After : Jul 13 18:01:59 2026 GMT
Subject: CN=a1acbd927cb75e851dd121f9d7fbbd099e3c609b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f0:3e:f4:8c:79:35:c6:7c:a7:9e:82:1a:28:
ed:d0:e5:86:3c:ff:0a:e4:8c:18:f8:fc:d3:fe:40:
81:d2:ce:2d:eb:59:a3:97:37:6a:ec:18:cf:50:82:
25:b9:ae:8c:51:20:77:60:d9:0a:55:33:d3:23:cf:
31:0f:f8:79:78:9b:1c:8d:15:fe:29:89:20:40:af:
0d:ea:fe:eb:5c:c6:c4:bc:be:72:75:e5:d4:2f:dc:
2b:91:3d:53:b6:df:cf:31:aa:e5:60:d2:3a:53:a1:
1b:55:3a:27:c9:92:17:b6:a0:93:a7:e5:0a:9e:48:
1c:94:12:e2:52:18:f3:22:0b:9a:85:9a:0b:45:d2:
3c:a5:66:3e:e4:a9:51:f7:a5:ae:fc:c3:3d:13:f2:
85:78:6d:b5:96:c5:d5:5b:ed:59:ef:57:21:90:e0:
19:39:89:cf:ea:ea:0a:bf:02:48:b1:03:ec:e5:78:
38:01:d1:97:25:13:1b:1e:b4:40:55:86:ef:79:6a:
f3:71:4e:ba:94:33:75:29:81:87:33:c8:4e:5a:d7:
2f:4b:97:3a:4a:96:a4:06:3d:d5:c2:e4:fd:a0:e2:
69:22:26:24:78:50:4d:ab:57:00:32:95:da:a5:64:
47:3c:25:26:88:d6:1f:5b:92:e6:0d:ee:32:6a:3b:
82:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:AC:BD:92:7C:B7:5E:85:1D:D1:21:F9:D7:FB:BD:09:9E:3C:60:9B
X509v3 Authority Key Identifier:
keyid:5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:29:ef:1b:91:93:a3:68:de:e1:42:91:07:d5:10:1b:d9:10:
c9:c1:bc:b7:e9:bf:d5:6d:ff:16:87:a7:b9:bd:05:31:00:d7:
c0:c4:1c:a0:43:49:63:8a:f9:6e:54:6e:cc:40:15:b0:7f:88:
0d:c0:68:57:a9:04:af:28:c3:c7:3b:42:e6:1c:1e:9c:8a:1f:
fc:e5:09:b8:1e:97:5a:15:e0:94:e0:b5:80:56:05:51:8c:d6:
a3:90:b6:95:f8:4e:e8:b9:8c:f9:ce:d1:34:43:a9:0e:e1:11:
14:52:45:07:c1:b2:68:60:d9:d6:eb:7f:d0:ce:d4:f6:85:01:
7a:2e:62:2f:c2:f7:2c:4c:f1:30:17:55:6c:1e:bc:ed:1c:82:
5e:e6:c2:7f:92:32:1f:d2:eb:ae:43:89:52:34:f3:87:aa:85:
22:c8:60:9b:67:c9:98:08:21:5a:9c:88:1b:21:79:91:c1:90:
26:2e:8e:fe:2d:7e:00:c8:31:1c:39:4b:be:cb:fb:68:c1:5c:
c8:f5:87:2b:72:eb:70:1e:da:c9:70:97:b3:c8:48:30:e6:44:
f2:db:ee:ce:5c:99:e1:f4:9a:0f:a5:8a:14:11:d3:d5:e8:94:
96:ca:16:69:64:99:8c:1a:12:87:d1:6c:9d:a4:0e:fc:b3:cb:
1c:ab:e1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 04:15:25 2026 by rpki-client