Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
File: x1eZ_0M1t7GucYjt-lP9fiE-shY.mft (raw, json)
Hash identifier: FEU6oE/gNEyD/9rK81OsanTa+TQUuFSRC3ZePQzg9ts=
Subject key identifier: 08:1C:FE:00:31:BA:7E:5B:35:95:A4:27:12:FF:3F:73:6A:7C:FC:A2
Authority key identifier: C7:57:99:FF:43:35:B7:B1:AE:71:88:ED:FA:53:FD:7E:21:3E:B2:16
Certificate issuer: /CN=c75799ff4335b7b1ae7188edfa53fd7e213eb216
Certificate serial: 019FA229B3E083341DB57AA56CE78ED4F4BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
Manifest number: 1952
Signing time: Mon 27 Jul 2026 06:01:09 +0000
Manifest this update: Mon 27 Jul 2026 06:01:09 +0000
Manifest next update: Tue 28 Jul 2026 06:01:09 +0000
Files and hashes: 1: 7wQkjJzOFmhj4SlVLo-x26w_WTc.roa (hash: uBOYkM28EcQ5gB0Rh8GkUGQb+Ga2UZ8JgAHYGzfSXXI=)
2: uabo7ndnRWzy9MUqP3Ih5P2gxe8.roa (hash: j629zk7F2qIP3WUGuPA4LCpVgjs/1/AZWtVe090YvCY=)
3: x1eZ_0M1t7GucYjt-lP9fiE-shY.crl (hash: ueIUewkBcCzaoAuqDFQkhF59JxEbmyCLd2EPIgy9xIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:29:b3:e0:83:34:1d:b5:7a:a5:6c:e7:8e:d4:f4:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c75799ff4335b7b1ae7188edfa53fd7e213eb216
Validity
Not Before: Jul 27 06:01:09 2026 GMT
Not After : Jul 28 06:01:09 2026 GMT
Subject: CN=081cfe0031ba7e5b3595a42712ff3f736a7cfca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b3:83:ef:68:2c:a1:91:80:fb:ee:5e:b6:f2:
57:15:ae:67:26:7a:5e:ae:a3:b4:b9:ec:90:c8:75:
fe:cc:c1:66:04:43:32:1a:90:a3:30:34:50:a1:eb:
3d:d5:e1:89:71:5c:aa:78:6a:99:d5:63:53:69:ec:
7f:ef:78:9f:0b:7c:98:59:89:19:02:e0:f8:64:4e:
34:9c:f8:4b:3e:ac:37:82:b9:0e:c6:52:3d:03:a4:
db:54:d2:a6:11:2f:97:c4:a5:40:ad:de:37:ab:83:
5e:1f:6a:34:4e:6d:d0:6b:8a:ca:61:a7:b9:c1:b4:
fc:2b:2e:c9:87:91:ea:64:25:af:c6:81:81:62:d9:
14:5e:50:ac:2c:1f:87:a7:f0:3c:41:9a:55:fd:53:
52:b4:c3:9e:a2:fe:72:d4:71:61:c1:c2:9b:c4:ef:
08:99:1d:e7:f9:aa:c1:c1:3a:56:94:98:52:2c:d0:
cd:cb:e1:ca:a8:1b:09:77:5c:67:28:ef:2f:11:74:
86:2a:27:96:75:3c:07:60:69:ec:26:6b:a9:dc:70:
43:ce:7f:21:f3:53:e2:67:88:0d:24:48:c4:f8:3f:
a5:bb:ea:5f:10:5f:b8:e2:11:55:bc:a6:7e:79:56:
a8:2c:78:23:6f:43:bb:00:e8:65:02:2e:13:e2:c4:
98:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:1C:FE:00:31:BA:7E:5B:35:95:A4:27:12:FF:3F:73:6A:7C:FC:A2
X509v3 Authority Key Identifier:
keyid:C7:57:99:FF:43:35:B7:B1:AE:71:88:ED:FA:53:FD:7E:21:3E:B2:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:a4:37:0f:87:8c:b8:25:e2:dc:4c:e1:25:b5:12:31:91:a4:
a4:3b:c4:eb:ad:36:e6:04:8e:2f:6e:e5:d8:62:5b:7c:4c:af:
95:a3:5e:b1:ad:9d:92:51:c2:91:e1:10:3b:9a:3b:24:5f:5f:
24:8c:75:97:59:e4:40:76:49:bf:05:f9:2c:c0:c8:01:3c:6c:
02:31:56:65:4c:a6:de:1d:ae:e5:28:f7:c5:3d:14:9f:6d:a3:
0d:21:0c:78:93:fb:ba:29:b3:ff:1a:46:92:1a:11:ea:87:ad:
15:37:46:4f:d1:d0:93:82:cd:a9:06:25:84:4f:9b:64:d8:2f:
1a:0c:42:e3:4b:65:9e:76:f4:c3:69:18:2c:98:1d:f1:2c:d0:
ba:d0:dc:4f:5f:4f:75:20:28:1d:db:fd:27:3d:56:c8:c0:1d:
e0:5f:f0:5a:db:56:38:05:4b:c6:ed:1c:f3:f4:8f:74:6f:6d:
84:fd:e8:55:8d:ec:2d:e4:12:de:b4:14:3e:cd:0a:2e:cd:bc:
2f:0b:87:14:d2:67:0c:e0:e4:b5:82:88:8a:14:13:0e:35:2e:
e1:f7:84:bf:fd:6e:92:7b:bd:81:23:ec:93:d2:6f:78:f7:40:
a7:32:34:58:97:35:fd:f6:d7:9b:55:fc:51:54:07:d0:51:8b:
3e:44:94:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:37:15 2026 by rpki-client