Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.mft
File: _XjxP_qS8HTr5VfSotKa0Noz5dg.mft (raw, json)
Hash identifier: hdRWxKPG2XZYkzNJQcEF38QuSJkqb8jJzThsdeykB5Y=
Subject key identifier: 91:C3:5B:66:A5:C3:43:3A:4B:7D:36:61:BD:59:4C:5A:2A:6D:1E:24
Authority key identifier: FD:78:F1:3F:FA:92:F0:74:EB:E5:57:D2:A2:D2:9A:D0:DA:33:E5:D8
Certificate issuer: /CN=fd78f13ffa92f074ebe557d2a2d29ad0da33e5d8
Certificate serial: 019FA0717803B443FA75FF8BD6FB5442F9DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_XjxP_qS8HTr5VfSotKa0Noz5dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.mft
Manifest number: 0F27
Signing time: Sun 26 Jul 2026 22:00:18 +0000
Manifest this update: Sun 26 Jul 2026 22:00:18 +0000
Manifest next update: Mon 27 Jul 2026 22:00:18 +0000
Files and hashes: 1: H7yvjO1PteMvFud2cVf980xvhOM.roa (hash: RhQsj0SDsU/JKqzjG9Bf/mkgnMQmL8vD/s9sreGOu30=)
2: _XjxP_qS8HTr5VfSotKa0Noz5dg.crl (hash: X7PFD0L3tFwAvWTorxrHOVzLSKMrQ0ujECDGtHmx/pM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_XjxP_qS8HTr5VfSotKa0Noz5dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 22:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:71:78:03:b4:43:fa:75:ff:8b:d6:fb:54:42:f9:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd78f13ffa92f074ebe557d2a2d29ad0da33e5d8
Validity
Not Before: Jul 26 22:00:18 2026 GMT
Not After : Jul 27 22:00:18 2026 GMT
Subject: CN=91c35b66a5c3433a4b7d3661bd594c5a2a6d1e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:14:1e:9f:b3:95:c5:21:cd:72:a1:ef:02:84:
a3:30:93:d7:d2:29:be:ce:1c:48:d8:a0:df:3a:33:
80:b5:c3:a1:40:c3:f0:ea:c5:b6:92:02:df:40:ff:
be:c6:9a:44:ad:69:44:4d:bf:a5:da:98:57:89:f6:
69:98:fc:f2:1a:42:20:32:f8:fb:ae:9c:05:8b:83:
ba:b4:eb:86:52:43:6b:eb:53:5d:78:97:2e:40:d9:
67:4e:1e:60:a0:90:da:b6:1b:24:44:ca:91:b6:c1:
04:ca:19:3f:72:d4:82:13:18:ad:f2:1a:79:ce:92:
f3:bc:04:17:b4:75:6a:fb:7c:12:37:43:6f:17:b0:
09:91:c5:4b:cb:2f:5e:0e:4f:fa:65:2a:be:7e:a8:
68:20:e9:61:8c:ea:75:c7:5a:b4:20:62:20:c6:9f:
d5:b1:97:98:25:3b:af:69:e9:a3:64:18:9a:b3:ab:
0a:65:f6:cd:6a:67:3c:5e:4e:ab:43:85:5b:a2:c8:
67:53:a7:5a:f6:42:df:de:57:5b:6a:76:24:46:e2:
a9:2f:92:9a:50:0e:29:27:23:1d:64:c5:ab:82:79:
06:87:a9:c1:a1:dd:25:3f:5a:c6:6a:68:2c:c4:23:
6c:6b:26:19:e6:f5:77:44:34:82:9d:78:9a:53:83:
31:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C3:5B:66:A5:C3:43:3A:4B:7D:36:61:BD:59:4C:5A:2A:6D:1E:24
X509v3 Authority Key Identifier:
keyid:FD:78:F1:3F:FA:92:F0:74:EB:E5:57:D2:A2:D2:9A:D0:DA:33:E5:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_XjxP_qS8HTr5VfSotKa0Noz5dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:64:3e:d3:13:ea:3d:4f:ab:be:e3:a8:5b:64:38:2c:2c:c9:
36:82:f3:9e:0f:d5:c8:68:6e:47:0c:c2:d2:3a:44:e2:f9:d8:
34:13:e7:4b:45:01:38:42:d8:8f:cb:16:90:ee:ed:4d:ec:2d:
87:04:48:24:17:8b:12:ab:60:b9:84:ed:c5:6b:f3:ad:bc:ba:
84:9a:53:00:67:56:3f:95:9c:4e:93:47:53:17:b9:1f:4f:5e:
de:ce:af:09:c1:f1:73:0a:44:2c:9e:fc:87:33:55:5e:81:17:
72:9e:e0:53:d9:69:f0:75:19:1d:e2:5e:8f:88:d3:76:a0:47:
c0:71:03:71:0c:79:70:3d:3b:0f:2e:e0:f3:42:41:19:d9:7a:
6a:89:b5:2f:13:65:99:06:d1:4c:f8:a0:1a:c2:94:87:0b:b2:
a0:c3:58:fa:6f:2b:5f:94:54:3f:f5:6c:dc:13:26:c2:14:d3:
de:9d:5a:e4:0d:aa:b9:3f:73:9f:ee:cc:03:b5:e0:97:45:bb:
1a:da:55:2b:19:60:13:b6:17:65:23:1b:19:48:92:52:cd:19:
ce:d1:97:6b:67:0a:32:5b:33:8b:4c:3a:04:b7:fd:89:f3:e8:
19:e9:b3:fd:c5:de:1b:d2:f9:29:fb:e4:ce:31:c6:17:fe:4e:
a1:81:81:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 03:16:28 2026 by rpki-client