Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
File: XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft (raw, json)
Hash identifier: mTg+ZhSgUv5tPw7WKMQ1hePQGDuKwHdQi9mEApxk1aM=
Subject key identifier: 2B:CC:7F:F1:1E:D2:7F:26:2E:75:C1:12:FF:73:62:B8:86:BF:57:A1
Authority key identifier: 5E:7C:13:F5:FF:16:9A:FE:D8:25:B7:5D:8F:C0:77:AF:CA:50:D6:A1
Certificate issuer: /CN=5e7c13f5ff169afed825b75d8fc077afca50d6a1
Certificate serial: 019FCC021785AB2F74EB90E0D6E930014329
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
Manifest number: 0DCD
Signing time: Tue 04 Aug 2026 09:01:56 +0000
Manifest this update: Tue 04 Aug 2026 09:01:56 +0000
Manifest next update: Wed 05 Aug 2026 09:01:56 +0000
Files and hashes: 1: XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl (hash: Rv6dDMM+LBID2nkNjSJMYXpj82ntmNTgQ4F8qWSPqJA=)
2: YNrAk_rW-_hv_7y0q7L07WQbD3k.roa (hash: Q+lutWQbfqBQmTQcTTUR6g2UUXMHO1t1l0Opc14EpV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cc:02:17:85:ab:2f:74:eb:90:e0:d6:e9:30:01:43:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7c13f5ff169afed825b75d8fc077afca50d6a1
Validity
Not Before: Aug 4 09:01:56 2026 GMT
Not After : Aug 5 09:01:56 2026 GMT
Subject: CN=2bcc7ff11ed27f262e75c112ff7362b886bf57a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d1:97:0a:9b:d9:41:4a:7f:cc:b6:61:9a:c9:
c9:9b:a6:1b:b4:5c:62:4b:df:63:42:a5:16:00:d3:
3d:1f:ab:7c:d5:6c:fe:9c:66:83:aa:49:da:42:1d:
56:94:7f:de:b8:7b:ac:b9:27:c4:b4:fa:2b:30:10:
1e:af:ca:19:25:f3:02:c7:40:03:93:16:7c:f9:ce:
61:e1:fd:22:a1:e7:87:77:ab:c6:fd:69:f1:bb:3e:
1e:55:f7:c5:24:6f:32:e0:ae:a5:1f:bd:d9:7b:5c:
e8:98:f9:90:8b:51:1e:09:13:98:01:8d:65:c8:af:
32:43:f7:b3:b4:b8:b8:9c:b9:85:3b:b9:95:97:3c:
6a:47:84:c5:59:d8:21:86:7c:a7:b7:56:4a:10:0d:
58:12:98:88:b8:19:b4:6c:61:c3:ed:d0:c6:f2:21:
bf:dc:81:85:ee:83:80:15:9c:fd:fe:87:4b:3a:70:
a5:63:58:2f:c7:3b:7a:4c:d2:ec:74:62:c6:37:d0:
64:b4:a0:78:20:af:9c:0a:1e:b6:63:57:e4:f1:58:
87:ed:83:16:3a:53:87:ce:0e:72:e5:e9:9e:e0:f3:
a1:83:77:e2:aa:10:5f:84:06:78:ab:ea:3c:60:f8:
18:ae:fc:8e:f6:1c:f0:8c:b9:ff:99:fe:8a:03:1c:
4e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:CC:7F:F1:1E:D2:7F:26:2E:75:C1:12:FF:73:62:B8:86:BF:57:A1
X509v3 Authority Key Identifier:
keyid:5E:7C:13:F5:FF:16:9A:FE:D8:25:B7:5D:8F:C0:77:AF:CA:50:D6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:77:c8:2e:da:58:a8:de:3a:e9:e4:34:11:db:4f:c3:b3:86:
43:64:39:f6:d4:e3:68:ae:56:57:33:00:07:50:c8:ca:fa:ab:
9a:c7:db:4b:30:13:98:ee:53:e9:52:43:f7:0d:7b:68:08:10:
00:fe:24:f9:97:93:fd:53:00:64:f9:d3:37:0b:93:0a:4f:2d:
47:9b:1b:08:05:ad:77:6b:fc:cd:98:ed:71:e7:54:70:b7:f9:
95:95:a4:07:25:f4:e5:5e:c1:65:ea:82:ab:59:1b:c3:22:92:
7d:cb:3c:75:3e:51:34:2f:fe:51:ae:0d:3f:39:9a:39:9f:f1:
e6:29:f4:7e:b9:4c:e0:61:a5:0a:90:0c:ae:27:c5:2a:5f:f1:
6a:88:65:f6:a0:47:dc:d9:22:0f:67:7c:0b:ec:89:55:d1:94:
73:b5:7e:f5:e2:70:c9:e1:18:26:83:e5:b0:ea:bb:aa:af:29:
45:18:97:dc:7e:08:68:5f:04:ac:b4:29:d8:77:bb:e8:d6:c1:
89:c8:8e:da:09:e9:5e:93:4d:b5:5f:21:a3:7d:31:2c:81:ed:
6f:da:77:3c:b5:03:32:7f:cc:c6:2c:f5:7b:1f:21:10:50:05:
b6:66:31:93:66:ef:24:d4:7f:a1:d1:2e:0c:eb:c5:5c:3c:12:
3f:69:6a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 14:01:44 2026 by rpki-client