Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
File: xRGedSADkvGi8IvpkHMtgEeyiwk.mft (raw, json)
Hash identifier: uByEMC2rhsone4ZqakciUU2K9EgyZEqD5nHBVyYhGjE=
Subject key identifier: 77:89:A3:BE:AB:60:F4:45:BD:3A:8C:DD:F6:9A:D3:E9:97:52:4B:E0
Authority key identifier: C5:11:9E:75:20:03:92:F1:A2:F0:8B:E9:90:73:2D:80:47:B2:8B:09
Certificate issuer: /CN=c5119e75200392f1a2f08be990732d8047b28b09
Certificate serial: 019FA2CEE138CC6EE8FB4AF10F41C4A1764B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
Manifest number: 19D0
Signing time: Mon 27 Jul 2026 09:01:34 +0000
Manifest this update: Mon 27 Jul 2026 09:01:34 +0000
Manifest next update: Tue 28 Jul 2026 09:01:34 +0000
Files and hashes: 1: 7dSZZTHJ1-e2dDdweLpiAslwQS0.roa (hash: TsQjPnCqokf75A2IgOvFTsvPj11pJfIjU93Enfc2xSU=)
2: xRGedSADkvGi8IvpkHMtgEeyiwk.crl (hash: vgp+vJtDdsJOc/F3eY1xx8ukX9MW9+Tty0+6ehJvNFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:ce:e1:38:cc:6e:e8:fb:4a:f1:0f:41:c4:a1:76:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5119e75200392f1a2f08be990732d8047b28b09
Validity
Not Before: Jul 27 09:01:34 2026 GMT
Not After : Jul 28 09:01:34 2026 GMT
Subject: CN=7789a3beab60f445bd3a8cddf69ad3e997524be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:58:4d:dd:70:48:38:2f:d8:04:3f:05:20:92:
fc:43:b8:b8:26:8a:3b:37:f2:8d:9a:fd:7e:bb:16:
dc:51:85:e9:80:35:7e:31:1f:45:c0:90:18:66:36:
73:9c:33:a5:9b:8d:e4:e8:a2:f2:fd:43:2b:1c:da:
cc:00:e3:cd:52:09:70:84:5f:b7:2f:eb:19:2a:6e:
a7:f8:de:e4:78:71:a1:a3:5b:23:67:4a:f5:a0:53:
5e:71:f9:73:68:5c:fa:70:4d:8e:dd:51:38:3b:d9:
c6:5d:dc:41:6f:99:ad:57:42:d3:48:9a:1d:76:45:
35:b0:ef:6f:9f:13:3f:9f:0b:ba:9b:09:bf:7a:09:
4c:3f:97:ef:76:8f:53:ff:25:b4:f8:c8:f5:90:84:
e2:55:05:92:cf:7b:d6:bb:1f:75:82:39:60:5e:14:
1f:22:51:24:5d:73:c9:3b:68:7a:8e:af:8d:0b:ea:
e6:89:4d:4c:8f:f7:18:cb:a1:e9:34:75:0b:95:4b:
7a:e7:77:c5:0f:2b:fc:d7:ca:70:f6:57:a0:0b:3b:
e5:61:d4:c4:78:2a:ad:b0:a9:6e:91:2e:95:91:9c:
a4:3d:fc:05:a1:b2:70:e4:34:6f:b8:6d:f7:92:b1:
99:0e:cf:df:ce:39:e1:26:0b:4f:85:de:e7:c9:13:
aa:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:89:A3:BE:AB:60:F4:45:BD:3A:8C:DD:F6:9A:D3:E9:97:52:4B:E0
X509v3 Authority Key Identifier:
keyid:C5:11:9E:75:20:03:92:F1:A2:F0:8B:E9:90:73:2D:80:47:B2:8B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:bb:8b:44:30:44:d3:22:22:b1:cd:cb:f3:64:75:ad:d7:3c:
cb:7e:c1:a9:c0:9e:79:2d:c2:88:45:f9:d4:8c:12:bb:c0:81:
d7:d1:a9:ff:9e:0c:38:3c:bf:4c:a1:b4:25:c2:f9:b2:43:83:
1a:39:90:34:44:96:26:52:69:7b:e8:da:4d:11:90:89:b1:57:
88:99:bf:61:bf:19:b3:17:c5:b8:5a:07:ff:76:b2:63:69:08:
49:8c:d4:db:92:75:05:f0:c9:2f:c7:8c:96:b2:5f:30:dd:d2:
41:a6:36:71:a2:33:4c:41:c2:8d:17:88:35:bc:90:b8:f8:a8:
1b:26:bf:98:e5:c7:ab:db:63:cc:26:9f:22:90:1d:e1:93:47:
b8:34:00:52:fb:b4:1d:3d:11:24:e7:28:06:67:85:52:52:22:
77:44:82:b0:8b:9e:90:6e:6e:aa:e9:e5:89:9f:fc:d1:b7:2c:
63:f0:2c:87:73:84:34:93:39:f4:91:10:ff:56:57:9d:3a:7e:
4a:81:ee:e9:b8:d0:4c:26:e0:0a:0c:15:2b:a5:f6:51:a0:3f:
db:e4:f8:58:c8:e6:b9:66:36:1c:63:88:1c:be:80:76:d3:81:
8f:da:85:3f:19:a3:6d:b2:29:74:e7:bb:81:f9:9b:d0:fc:5d:
25:82:d2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:25:54 2026 by rpki-client