Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
File: XXg76LX3rdAI1xK0N72fmXwIT98.mft (raw, json)
Hash identifier: SpNQOwTw1eu2+Oa8JpcNIKqQcSiWUB2ZbhC4iCnofzI=
Subject key identifier: 3D:32:1D:BA:24:73:7F:9E:B5:AD:2F:64:77:86:3C:37:A2:79:59:9C
Authority key identifier: 5D:78:3B:E8:B5:F7:AD:D0:08:D7:12:B4:37:BD:9F:99:7C:08:4F:DF
Certificate issuer: /CN=5d783be8b5f7add008d712b437bd9f997c084fdf
Certificate serial: 019FA1163B42E4DBD91B091979DD9F024D7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
Manifest number: 19D2
Signing time: Mon 27 Jul 2026 01:00:16 +0000
Manifest this update: Mon 27 Jul 2026 01:00:16 +0000
Manifest next update: Tue 28 Jul 2026 01:00:16 +0000
Files and hashes: 1: 80ddEu08r1uFh6uix50N7d9F0o8.roa (hash: DtyowyLw2dVPCBg0r3cdDO/1HWaqkm/fNKE6IcB/i2Y=)
2: XXg76LX3rdAI1xK0N72fmXwIT98.crl (hash: FxqGZZE+id8tcbvw7n18RQAw97BrZew7e/p2vBhQ+iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 01:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:16:3b:42:e4:db:d9:1b:09:19:79:dd:9f:02:4d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d783be8b5f7add008d712b437bd9f997c084fdf
Validity
Not Before: Jul 27 01:00:16 2026 GMT
Not After : Jul 28 01:00:16 2026 GMT
Subject: CN=3d321dba24737f9eb5ad2f6477863c37a279599c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e4:b8:e6:10:1b:20:fc:ec:7f:1d:95:af:95:
b6:83:98:ae:f4:98:d4:6f:cc:da:52:da:c4:1b:ad:
d7:a6:ab:cd:f0:a1:bc:27:5d:a9:9d:b1:11:6d:ef:
0c:08:47:b5:39:3a:3e:1e:45:75:43:68:ec:73:bf:
51:55:7f:4a:fc:ec:a1:08:6e:9a:33:32:d9:f8:7d:
d2:79:29:a0:f3:e4:f1:e4:e0:b7:ad:92:05:dc:b6:
7e:6b:40:06:d7:37:f6:0f:dd:9e:b9:a6:8c:cb:cd:
6f:35:35:f5:fc:37:71:32:f3:5c:4c:f3:2a:5f:06:
b6:ee:33:e8:46:ac:c2:15:da:92:6f:b5:92:f1:c0:
40:3e:8c:46:f5:56:8e:53:00:cd:17:21:0d:7a:05:
a5:ac:ed:8f:07:78:5f:ad:80:5a:7e:c1:6a:69:d7:
47:75:4d:df:be:0e:88:58:48:29:e3:b7:b0:b2:02:
8e:5b:06:a0:17:ea:99:30:9c:ae:04:d9:a1:b2:0a:
64:46:fd:d6:7e:05:b4:57:17:45:d4:d8:ee:32:88:
39:1e:02:eb:0b:fe:c7:90:6d:94:dc:54:7c:7c:79:
2f:54:5e:c9:f8:50:df:26:f4:3b:64:41:d0:0f:7d:
d0:72:f1:69:87:40:48:6b:e4:8c:2d:31:2d:e1:ef:
11:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:32:1D:BA:24:73:7F:9E:B5:AD:2F:64:77:86:3C:37:A2:79:59:9C
X509v3 Authority Key Identifier:
keyid:5D:78:3B:E8:B5:F7:AD:D0:08:D7:12:B4:37:BD:9F:99:7C:08:4F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:43:06:cf:f3:d5:e5:56:48:4a:9b:6d:a6:e8:11:05:58:2e:
ee:14:d0:92:20:8f:ae:35:a9:b4:96:13:0c:23:fd:6d:bf:40:
ea:d7:37:98:96:df:d0:21:56:a4:27:b6:cb:f6:06:45:6c:fa:
09:95:9c:ed:66:2e:34:a9:a7:ad:5c:83:75:3d:c3:69:e6:c4:
1f:bf:3a:36:34:11:1a:98:2a:3c:77:3b:49:32:f9:1b:cb:8a:
5e:26:05:2e:04:02:ec:0b:4d:f5:2a:b6:ed:6d:31:bd:da:d9:
8d:10:cf:79:58:fc:d0:58:1d:37:9c:78:a9:ef:a5:51:92:f4:
60:5c:5b:f6:a1:06:a7:46:39:7e:98:76:a0:4f:4b:00:ab:8e:
00:93:5d:0a:93:d1:76:a1:c1:8d:f2:ce:a6:ab:39:5c:c2:1c:
7c:62:6a:23:72:d7:23:d6:ad:26:35:37:f7:17:46:bf:65:bb:
1b:e6:03:c6:78:d1:2f:93:5c:4b:a9:66:a9:8d:69:59:6d:c1:
3f:e6:e2:66:d5:e9:b0:aa:ce:74:9c:36:ae:b7:e4:78:b7:b1:
6a:0b:0f:a6:29:38:50:e5:8b:10:67:0d:19:56:88:33:0d:65:
c6:9f:7b:2e:57:fc:82:f9:cf:e5:07:3e:27:3e:a4:57:4d:b0:
14:0e:90:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:50:26 2026 by rpki-client