Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
File: XTcKSLWfuBFJXxHElzRILyKxo5I.mft (raw, json)
Hash identifier: sKQYNY/HdPdPM7JJXscI9RgqSc6xWob+Uj5A0jEBtuQ=
Subject key identifier: C5:6C:39:D4:D0:36:BE:54:7A:6D:BE:AD:C2:BF:8D:A7:9C:84:8F:B0
Authority key identifier: 5D:37:0A:48:B5:9F:B8:11:49:5F:11:C4:97:34:48:2F:22:B1:A3:92
Certificate issuer: /CN=5d370a48b59fb811495f11c49734482f22b1a392
Certificate serial: 019F86E8962285D25C2EFE0F4BF2688F82D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
Manifest number: 16CA
Signing time: Tue 21 Jul 2026 23:00:17 +0000
Manifest this update: Tue 21 Jul 2026 23:00:17 +0000
Manifest next update: Wed 22 Jul 2026 23:00:17 +0000
Files and hashes: 1: IcvWLfVUU_qQmUluK1ZJPZKwDUE.roa (hash: 5KtWCkiCc0spLueO4XERS0KkPgjFXkSMZZzwBDaPptQ=)
2: XTcKSLWfuBFJXxHElzRILyKxo5I.crl (hash: fy4oVVjKThQAzoUr67LPcytvcoKP9QvIy0/wVQJFcxc=)
3: iTA00PhnwnNaKrIdb7Sf-BOFNWU.roa (hash: VqBJga5+IchMfnf1RmPYAK4MIX90SZMIG8XmiqppDnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:e8:96:22:85:d2:5c:2e:fe:0f:4b:f2:68:8f:82:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d370a48b59fb811495f11c49734482f22b1a392
Validity
Not Before: Jul 21 23:00:17 2026 GMT
Not After : Jul 22 23:00:17 2026 GMT
Subject: CN=c56c39d4d036be547a6dbeadc2bf8da79c848fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:52:a1:63:5b:8c:6b:4f:16:8f:af:43:97:f9:
74:e7:98:ef:de:7b:df:d4:ef:dd:e2:b7:a2:44:d2:
49:e6:44:0e:f7:84:a9:66:7f:45:ee:0c:ff:08:92:
42:17:4f:72:8d:80:e1:ef:e5:f5:c1:9a:e5:a2:48:
e3:7d:31:6f:b0:d1:92:0a:28:4d:9d:55:56:53:ed:
ed:5f:30:cb:a7:57:fa:a0:bb:57:de:08:61:ae:d3:
af:b2:bf:00:52:7d:1a:04:72:e8:19:0c:6a:83:c5:
94:a3:b7:e6:89:2b:aa:e5:28:6d:7f:06:c1:a4:ea:
88:e6:c9:dd:e8:c1:30:85:fc:03:39:b1:ef:18:6d:
50:a0:57:de:f9:96:60:37:b8:ad:c4:8b:e0:b8:fd:
bf:39:81:b4:55:af:fd:27:10:7b:85:fc:28:ca:f3:
f3:67:35:83:4b:c6:99:e0:89:f6:ed:c1:4c:21:ca:
df:6c:38:28:a7:ef:f8:57:cb:db:18:dd:af:79:f8:
4c:0f:3b:b7:8f:f2:47:5c:ba:33:e4:cb:13:75:43:
78:b6:bb:8d:f1:c2:bd:c3:e4:b6:ff:99:6c:81:ec:
c1:90:e2:f6:27:d1:df:09:41:86:3f:a3:8d:c7:c1:
62:47:6f:de:70:8d:e1:b3:a7:df:24:90:b0:6d:4b:
a8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:6C:39:D4:D0:36:BE:54:7A:6D:BE:AD:C2:BF:8D:A7:9C:84:8F:B0
X509v3 Authority Key Identifier:
keyid:5D:37:0A:48:B5:9F:B8:11:49:5F:11:C4:97:34:48:2F:22:B1:A3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:33:75:cd:dd:db:36:ae:ab:e7:76:94:1b:97:be:2b:06:65:
17:34:2b:b8:29:d8:18:4d:23:43:98:13:30:1d:ea:ac:d4:fb:
ea:b1:3c:a0:2f:6d:b5:f6:0c:45:fa:bb:91:a4:82:47:af:ab:
06:a3:f3:1b:74:92:9f:18:64:57:e5:76:f7:4e:96:ea:dd:9d:
bb:b7:31:b8:44:c2:8c:55:63:16:70:25:7a:1b:a2:9e:ea:c7:
30:59:93:d2:ce:c1:00:e6:fd:15:47:89:aa:c9:e8:d4:50:9f:
2c:80:6b:80:9b:34:4a:b8:c7:97:20:40:8f:7d:60:aa:8b:66:
59:af:73:c7:a8:dd:76:29:4c:54:d9:46:df:ca:37:54:36:83:
e4:a2:d7:f8:c2:13:3e:15:41:2f:b7:d4:cd:46:79:ed:39:cf:
c8:c8:68:bf:da:f9:7d:3b:ed:e3:7f:c6:5b:03:f3:67:ad:43:
80:2e:be:53:46:a5:0e:4b:84:f6:a1:a7:43:dd:52:c3:51:55:
5c:98:de:28:f3:24:86:12:e9:59:12:73:a7:ea:89:ae:0f:2a:
c9:e7:09:f5:12:06:50:d6:ce:55:bc:97:61:be:5b:fe:12:bc:
85:2a:58:47:93:78:32:ac:31:55:31:8c:40:a5:2a:8a:5b:0f:
fa:8e:1b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:40:55 2026 by rpki-client