Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
File: XW8uSaMejfnFqgiq8kC1yDK5y5M.mft (raw, json)
Hash identifier: IM0cnpf8LzuptB2Nu2VarTSuz/+xIYeU6RgsP9pnUsg=
Subject key identifier: EA:6C:5E:74:AD:9D:86:31:AC:19:66:19:15:ED:5D:87:57:D2:AE:47
Authority key identifier: 5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93
Certificate issuer: /CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93
Certificate serial: 019FA3733113792C17A7F23A56E031ABAB59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
Manifest number: 19D0
Signing time: Mon 27 Jul 2026 12:01:02 +0000
Manifest this update: Mon 27 Jul 2026 12:01:02 +0000
Manifest next update: Tue 28 Jul 2026 12:01:02 +0000
Files and hashes: 1: 017yR2AH3nhtreOuYgsNpqkrBt0.roa (hash: jH8rFvA13JhY4szX2F6JGpx37/sl3RxTDMuhAZiU224=)
2: OOfgMgyirAjAQpzlSeWvWZ7kZIQ.roa (hash: wpPBvbubRrWqOyJudWgmsWq2Hw2lni+AI3RKu2B28mg=)
3: XW8uSaMejfnFqgiq8kC1yDK5y5M.crl (hash: wLEfc7FMTlL3elre869C6qN3CFZcNFzElN8kmAGrPO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 12:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:73:31:13:79:2c:17:a7:f2:3a:56:e0:31:ab:ab:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93
Validity
Not Before: Jul 27 12:01:02 2026 GMT
Not After : Jul 28 12:01:02 2026 GMT
Subject: CN=ea6c5e74ad9d8631ac19661915ed5d8757d2ae47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b3:dc:28:3a:af:f5:df:e3:81:75:79:c6:b4:
8e:7b:40:e5:70:86:1c:39:f6:65:84:0a:fd:60:87:
a8:72:96:8f:50:09:92:7f:5a:e3:fe:36:b6:01:c5:
8e:bc:03:26:91:03:9c:83:dd:67:b0:81:f5:01:84:
e0:85:e2:4a:31:01:43:74:56:60:e6:59:8f:04:82:
c1:11:4d:98:17:06:fc:ed:c3:39:40:6a:f4:78:cf:
21:bb:28:c0:8d:09:33:7f:ef:b7:53:98:19:e7:5f:
d4:c4:16:ed:0c:0f:a9:e2:c5:dc:0f:13:86:0c:92:
99:fd:e0:e4:b1:d1:1f:5f:c6:7f:e3:d7:3c:d3:6a:
20:14:ba:b7:95:f4:41:0a:ea:88:4c:89:af:5c:17:
1f:ef:60:a3:5d:f3:a7:2f:e4:4d:67:c6:86:85:ca:
1d:51:14:d1:27:66:3a:94:36:e5:98:2b:30:ae:eb:
bf:96:39:4c:d3:ab:a4:27:3c:a3:c3:a6:2c:86:28:
38:c8:eb:27:47:be:12:32:5a:ff:38:8e:3d:52:84:
f1:41:15:dc:a2:6c:55:c3:f1:b9:a9:b4:a4:cc:61:
94:91:93:09:50:05:39:3a:61:69:0b:60:3a:ec:7d:
3d:c7:df:26:be:df:6b:c7:66:20:d2:5d:3b:b5:c4:
95:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:6C:5E:74:AD:9D:86:31:AC:19:66:19:15:ED:5D:87:57:D2:AE:47
X509v3 Authority Key Identifier:
keyid:5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:01:d5:91:83:14:df:72:bd:c2:0f:b7:a2:a6:c6:f5:c8:60:
c8:70:66:e2:24:45:f0:4b:6f:3a:3d:33:30:21:b5:d2:f0:26:
c1:95:7b:25:d8:ed:4f:e6:90:8f:0b:90:de:eb:dd:6b:79:fb:
72:f2:07:2e:80:da:c6:f8:e8:8e:f3:b5:08:ee:c8:dd:14:18:
77:e4:8e:98:69:26:c3:45:1a:af:82:ef:da:0c:d4:02:e9:bf:
89:aa:2f:c3:9e:a8:b3:c7:4d:19:b9:53:f0:21:8c:5d:3f:48:
0f:a4:37:83:e4:b6:1e:3b:1c:e4:c0:9c:eb:2a:af:cd:ad:0f:
cb:77:f8:d8:a2:53:10:1e:aa:b8:ce:ae:c6:cb:2d:6e:1f:53:
e6:75:a3:f8:85:37:5e:c2:ac:5c:30:70:67:61:be:3a:90:f6:
96:89:a9:eb:55:e9:6d:9d:7a:78:c2:fe:39:39:89:17:15:a8:
aa:88:ce:bd:77:b9:8c:ed:18:40:8e:94:bf:cb:cc:63:f8:49:
e6:ff:c5:25:eb:0a:16:8b:f7:d2:7e:9b:63:31:56:02:d6:80:
c5:ba:c7:4d:f8:6e:85:fd:b7:c3:d8:99:ad:d7:f2:0c:46:0d:
c3:22:20:88:46:54:9d:75:a4:bc:4f:79:5d:14:53:a0:ce:61:
be:89:5b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 17:50:45 2026 by rpki-client