Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
File: X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft (raw, json)
Hash identifier: +Wb25w/FFGpLNAVe6deKtgRfQVMXtBxftJ97/oEYNY8=
Subject key identifier: BE:3C:A7:AB:2F:41:83:A8:A2:A6:A4:12:90:B7:E1:00:45:1C:89:40
Authority key identifier: 5F:83:C3:97:6C:F0:0E:42:CB:ED:53:92:4C:4A:86:55:6B:D7:01:42
Certificate issuer: /CN=5f83c3976cf00e42cbed53924c4a86556bd70142
Certificate serial: 019FA2CEEEF997EF259869655C5BF48F1D49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
Manifest number: 19CF
Signing time: Mon 27 Jul 2026 09:01:38 +0000
Manifest this update: Mon 27 Jul 2026 09:01:38 +0000
Manifest next update: Tue 28 Jul 2026 09:01:38 +0000
Files and hashes: 1: X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl (hash: I9yfdPf4M9/z71KVjNT0r6H1AfGYvujyf2nnQ4FHtLQ=)
2: YboTsZW5E_LquEoNeH4f-DKai2A.roa (hash: rVnU6oaQsX3x5ymp+Ryvp8mswyZTbG+O1Im+gcRa5NQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 09:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:ce:ee:f9:97:ef:25:98:69:65:5c:5b:f4:8f:1d:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f83c3976cf00e42cbed53924c4a86556bd70142
Validity
Not Before: Jul 27 09:01:38 2026 GMT
Not After : Jul 28 09:01:38 2026 GMT
Subject: CN=be3ca7ab2f4183a8a2a6a41290b7e100451c8940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0e:71:b9:dc:44:0b:c8:04:9a:c6:f8:b5:ac:
23:d1:b2:dc:17:60:6b:d8:10:f4:5f:de:3d:20:a3:
7b:eb:b0:13:65:1f:30:19:46:68:28:f6:db:b9:3c:
56:b4:0d:37:a6:68:3a:f3:5a:06:66:2a:73:56:29:
3c:fa:1a:2e:48:6f:83:e3:5e:c6:34:5a:22:38:be:
12:79:6a:af:d4:ba:e3:15:2a:01:d1:2f:05:4e:2b:
3c:3d:d4:c1:24:4d:a6:b1:e3:1d:6f:ac:31:89:97:
7c:82:a3:cb:61:1d:66:4d:0f:8f:58:c3:d1:9b:05:
1e:9c:8e:7b:e1:77:fe:4e:24:0c:1d:4c:9c:3a:8b:
3b:16:4b:12:61:db:63:06:5b:ee:39:3d:97:db:89:
c7:56:5c:84:3a:98:e0:5b:9d:c6:4a:37:7c:2c:5e:
02:3f:d8:c6:a1:02:38:15:37:95:eb:31:ba:84:08:
9e:27:cf:5c:e1:ab:b4:87:cc:22:b0:a0:34:44:54:
f1:1f:89:73:27:f7:22:1d:62:a1:98:a9:11:f4:18:
92:4b:bb:d9:8f:b7:0f:bd:cf:0b:3e:77:a0:2d:96:
43:64:21:c8:07:9c:d8:af:2e:47:8f:1a:36:a2:86:
26:f2:de:62:0e:27:94:90:e6:7a:94:68:38:ea:8e:
72:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:3C:A7:AB:2F:41:83:A8:A2:A6:A4:12:90:B7:E1:00:45:1C:89:40
X509v3 Authority Key Identifier:
keyid:5F:83:C3:97:6C:F0:0E:42:CB:ED:53:92:4C:4A:86:55:6B:D7:01:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:da:e2:c1:ea:65:ea:90:04:62:97:0d:22:e2:8a:7d:22:ff:
09:bf:21:64:41:8a:93:ff:82:ea:f0:b1:d9:bc:a9:b7:76:41:
9f:e7:17:38:98:c7:86:8b:ad:6b:ad:4c:53:a2:f8:40:6c:f3:
ec:eb:4e:c5:99:3e:31:0e:e7:41:4e:6c:d9:3a:0e:b5:45:06:
41:bf:5e:fe:c9:da:4b:b1:e1:f2:5c:60:b8:b8:fd:03:11:4a:
78:2c:62:01:f5:97:cb:57:f3:4d:44:31:b3:6c:37:92:90:ea:
9f:6f:19:e8:e7:12:e3:c2:3a:cb:0a:6a:20:a8:be:43:7b:65:
af:91:8f:da:40:5a:02:85:79:8e:8d:a5:bd:00:16:53:e5:53:
71:2c:8e:64:fd:ef:6d:67:62:ab:70:f6:1f:92:ad:c9:99:93:
ba:c4:e4:9b:a1:67:95:70:21:83:67:e2:99:92:ec:19:25:b6:
77:5b:c7:3e:dc:03:d0:8f:8c:c3:e7:04:a4:a5:e1:da:95:cb:
a3:b4:9b:35:b8:16:bd:2a:be:07:66:78:97:5f:52:75:3c:b3:
f8:d5:67:c3:40:26:35:c2:fb:67:a8:03:ea:b0:83:c0:d5:1f:
d8:d6:3d:df:ae:80:f7:48:3a:eb:b4:22:de:d3:e9:7b:ca:30:
18:cb:b6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 17:25:18 2026 by rpki-client