Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft
File: xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft (raw, json)
Hash identifier: 6C4vT2uRnK4vSMv5mmS3mnxsbKapc5zkCJFZy4j3OMA=
Subject key identifier: BD:22:6B:5F:72:3C:69:8C:67:03:15:BC:8B:43:2E:BC:61:01:38:0A
Authority key identifier: C7:2E:71:63:53:EC:73:3A:B4:B5:08:53:08:B3:86:D8:9A:74:F1:47
Certificate issuer: /CN=c72e716353ec733ab4b5085308b386d89a74f147
Certificate serial: 019FA18490E7AEE4E3CEEE3B618135B7BA2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xy5xY1Psczq0tQhTCLOG2Jp08Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft
Manifest number: 121B
Signing time: Mon 27 Jul 2026 03:00:47 +0000
Manifest this update: Mon 27 Jul 2026 03:00:47 +0000
Manifest next update: Tue 28 Jul 2026 03:00:47 +0000
Files and hashes: 1: xy5xY1Psczq0tQhTCLOG2Jp08Uc.crl (hash: 7UCR3cSSTS26GhbWrQZVrmLZCPmAC1WzsW2Xxq+8uFc=)
2: zWTdP30QPHHdohheUhhfVW3hF4c.roa (hash: /i9LH6nCZuFhrfLjUwLanr2mJf1UJXJyn992vVslFf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xy5xY1Psczq0tQhTCLOG2Jp08Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 03:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:84:90:e7:ae:e4:e3:ce:ee:3b:61:81:35:b7:ba:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c72e716353ec733ab4b5085308b386d89a74f147
Validity
Not Before: Jul 27 03:00:47 2026 GMT
Not After : Jul 28 03:00:47 2026 GMT
Subject: CN=bd226b5f723c698c670315bc8b432ebc6101380a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f7:35:19:51:4d:c1:7a:51:b3:04:68:4c:9b:
87:04:fb:cd:ea:b5:3d:80:6e:59:2a:55:df:26:f8:
9b:61:c5:4e:58:b0:be:95:e2:dc:f4:9e:67:ec:d7:
f9:46:cc:6c:aa:d6:2c:6a:cc:fb:74:b3:54:85:c5:
2b:9b:c4:96:2a:70:a6:09:81:d5:f8:36:73:fd:b3:
17:d2:d9:40:21:0b:7b:5a:bd:82:55:be:e2:30:4e:
44:ae:19:17:9d:44:ab:df:28:46:8a:69:21:4f:f4:
70:f3:f5:32:21:fe:73:ed:1a:3f:61:bc:72:af:dc:
de:d1:99:f4:aa:eb:9f:f6:de:74:ea:48:a0:91:a9:
46:69:1d:d6:81:1d:9d:16:08:51:e3:e9:02:47:0f:
e8:17:4e:fb:02:09:d2:bb:f4:80:ee:c6:f4:2f:23:
44:d4:b3:e3:71:92:58:2b:9c:38:44:21:00:aa:5f:
6a:bc:89:52:52:6e:89:a4:c4:78:c8:be:a0:a1:d2:
82:1d:e5:9d:de:16:12:22:c1:55:02:4a:d3:97:95:
ae:ef:07:61:51:88:b2:5f:67:56:df:b7:41:1c:4e:
f0:be:5d:3d:fd:e5:30:49:d2:db:7c:2c:c0:bb:72:
5b:44:09:25:60:fb:c3:05:eb:c2:b9:de:fa:f9:e9:
db:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:22:6B:5F:72:3C:69:8C:67:03:15:BC:8B:43:2E:BC:61:01:38:0A
X509v3 Authority Key Identifier:
keyid:C7:2E:71:63:53:EC:73:3A:B4:B5:08:53:08:B3:86:D8:9A:74:F1:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xy5xY1Psczq0tQhTCLOG2Jp08Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ca:b2:34:68:b3:ec:a5:bf:c7:b5:e0:d7:3b:53:3d:15:93:
2a:22:dc:0e:8c:a6:a7:d9:e3:2d:ca:72:23:ee:ce:a3:0d:b0:
1b:d4:24:22:ab:94:fe:1f:3b:d5:8a:82:6b:b9:36:a4:67:14:
c9:ee:ad:71:08:9e:a2:fc:3a:4f:3d:c0:ea:2d:21:17:e2:2b:
b9:19:22:43:89:9c:f5:70:9f:5d:e2:e7:19:2f:08:6a:e0:66:
4f:9c:6d:d5:6f:f6:6b:0f:41:82:8e:61:9c:cd:00:69:c8:24:
20:5f:8e:2d:22:c4:c9:b4:24:af:ab:bd:54:23:a2:96:64:a7:
ae:b2:5d:aa:4d:ba:f4:b7:d6:d8:7b:d0:aa:71:5c:d9:1f:5c:
9a:39:80:49:d7:fb:b7:1a:9a:f5:0e:e1:e2:65:61:4b:ec:0d:
63:c6:82:16:84:1b:e3:15:90:3f:7d:17:66:50:dd:c3:95:25:
bc:16:aa:e0:69:92:9b:49:da:10:69:83:b0:b7:8b:5f:d5:70:
aa:fc:ee:e4:dd:f5:69:37:20:2e:28:51:55:73:00:14:c8:7f:
f6:c8:ba:52:bd:2f:f9:53:bc:8f:7a:57:7f:70:a9:02:5f:6c:
8f:2c:4d:e2:c8:e1:3a:08:35:0f:33:0a:a6:70:1b:1f:80:22:
96:ab:82:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:36:53 2026 by rpki-client