Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
File: X6OG6XZW1kirU4GylmZBQIGwAIQ.mft (raw, json)
Hash identifier: BoqWxjuKsNTzi+nZFz1q4ogugaow7ZmfhgC1I800Xh4=
Subject key identifier: 86:76:6F:21:97:3C:89:FF:4B:A1:B6:44:27:DE:79:CF:85:B4:68:AA
Authority key identifier: 5F:A3:86:E9:76:56:D6:48:AB:53:81:B2:96:66:41:40:81:B0:00:84
Certificate issuer: /CN=5fa386e97656d648ab5381b29666414081b00084
Certificate serial: 019FA1F25C620966FB4DD6A3DFBC2253F348
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
Manifest number: 0956
Signing time: Mon 27 Jul 2026 05:00:42 +0000
Manifest this update: Mon 27 Jul 2026 05:00:42 +0000
Manifest next update: Tue 28 Jul 2026 05:00:42 +0000
Files and hashes: 1: X6OG6XZW1kirU4GylmZBQIGwAIQ.crl (hash: E7M6MA4CyKqHn3EYqNPHbfQgxNVSMicHQVIfAQid2Y0=)
2: xhYgnKDXKCLXTlxGKn83qxGD5Wk.roa (hash: 4Tr8pcApL7OMPNYK6DHiqFf/BMOwe5lvOFY1rUx8z6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f2:5c:62:09:66:fb:4d:d6:a3:df:bc:22:53:f3:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fa386e97656d648ab5381b29666414081b00084
Validity
Not Before: Jul 27 05:00:42 2026 GMT
Not After : Jul 28 05:00:42 2026 GMT
Subject: CN=86766f21973c89ff4ba1b64427de79cf85b468aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b9:b5:21:52:1c:d7:bb:d9:22:26:00:66:68:
0d:fb:67:de:9d:c1:54:1f:42:90:26:b7:0d:4e:51:
69:4c:98:bd:b0:f0:1b:1f:11:90:84:91:be:80:a3:
f0:b3:69:e4:b0:0e:c0:a3:2a:df:d8:75:e8:c7:e5:
66:79:62:04:6f:b9:d8:6d:3f:5b:e5:86:74:0d:25:
b4:7c:2f:83:8f:a8:d7:84:c2:8d:e3:8d:7c:c5:17:
d7:6b:9d:b2:fe:5a:79:4f:3a:9d:d4:1f:12:88:d3:
88:b3:09:e0:9f:42:c6:94:c4:18:47:eb:45:5d:db:
e7:38:02:6b:f7:52:a8:96:d2:26:f9:ce:e6:5f:ff:
64:40:3b:10:92:2a:ab:d5:3b:c7:78:38:80:43:67:
74:0a:a9:57:6e:ed:a7:0c:d8:8e:08:4b:02:09:0a:
10:1c:32:b0:df:08:1b:87:29:f7:e2:b4:ff:cc:e1:
9d:dd:be:e5:13:0d:3e:1c:a2:bf:ce:23:1d:05:cb:
9f:a2:c4:8c:06:1e:45:0f:17:fd:96:38:90:54:78:
c3:1c:74:34:96:2d:64:b5:1e:9c:67:91:8c:e0:77:
d0:64:b8:e9:0e:46:bb:b4:32:9c:5a:ce:31:b9:54:
f3:8e:78:5d:b6:e9:61:bd:11:75:1e:29:c5:24:fc:
a7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:76:6F:21:97:3C:89:FF:4B:A1:B6:44:27:DE:79:CF:85:B4:68:AA
X509v3 Authority Key Identifier:
keyid:5F:A3:86:E9:76:56:D6:48:AB:53:81:B2:96:66:41:40:81:B0:00:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:bf:9d:a8:40:a6:58:61:5f:b4:d3:db:6b:c8:3c:d2:bd:90:
1a:23:6d:4a:4e:a1:46:49:d3:f8:24:0a:8a:7e:cc:67:7d:b9:
c1:40:ec:19:01:12:fd:fc:75:cb:0f:2c:22:d7:73:53:9d:0e:
03:c3:83:50:ad:b7:31:70:d9:8f:0a:3f:fe:df:48:c1:a8:2e:
e2:97:5e:92:ea:f2:03:60:68:63:92:8c:96:63:09:a1:32:34:
eb:b5:fb:5d:5f:f0:10:c9:08:64:9c:54:7f:61:2d:59:09:ca:
b3:85:7f:30:6d:32:56:eb:57:9e:f3:4f:cb:c9:bb:76:48:87:
eb:8b:fb:10:5e:af:33:8b:34:15:11:a5:24:3d:14:31:fe:af:
9b:50:cb:95:45:9d:4f:4e:60:7c:91:ba:7b:92:49:83:02:71:
9f:a6:00:4e:e5:55:83:70:60:f9:07:b1:eb:ca:09:0a:58:18:
5e:4f:88:89:42:cd:e2:fc:b8:af:43:2b:06:ab:ef:cd:c7:b8:
96:a6:00:3c:0a:f4:1c:c0:bd:02:27:c8:de:30:7a:c0:de:f8:
5a:fa:be:00:14:1f:df:59:64:0d:37:19:4c:ea:cb:24:9e:0c:
bc:00:a1:56:46:68:f0:33:af:cd:17:d8:6a:61:07:95:4f:6a:
b5:61:20:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 12:31:21 2026 by rpki-client