Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft
File: xmCFijitXhG3sYk5KIO8g-trNh0.mft (raw, json)
Hash identifier: ApwoTfo7pzDItU1JdJRCSPgVdJ3lcwdyR+rJV1o1YpY=
Subject key identifier: 60:DB:B4:5E:A6:3F:68:57:49:73:02:92:A7:6C:8A:96:AB:0E:86:1A
Authority key identifier: C6:60:85:8A:38:AD:5E:11:B7:B1:89:39:28:83:BC:83:EB:6B:36:1D
Certificate issuer: /CN=c660858a38ad5e11b7b189392883bc83eb6b361d
Certificate serial: 019F8EA258319029E3B9C38E66D8799B9E42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmCFijitXhG3sYk5KIO8g-trNh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft
Manifest number: 19C4
Signing time: Thu 23 Jul 2026 11:00:31 +0000
Manifest this update: Thu 23 Jul 2026 11:00:31 +0000
Manifest next update: Fri 24 Jul 2026 11:00:31 +0000
Files and hashes: 1: xmCFijitXhG3sYk5KIO8g-trNh0.crl (hash: i4AQjRq03txmr5F0q6PCbVfi5AlIMFllAItGx0CtYm8=)
2: xsHwN39t7Lg_0JrvQJX-o8s4wJc.asa (hash: uUROjO5Wuy6f76sPTNQEiOJg9EZNcnwz3IXWyZD8TU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmCFijitXhG3sYk5KIO8g-trNh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:58:31:90:29:e3:b9:c3:8e:66:d8:79:9b:9e:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c660858a38ad5e11b7b189392883bc83eb6b361d
Validity
Not Before: Jul 23 11:00:31 2026 GMT
Not After : Jul 24 11:00:31 2026 GMT
Subject: CN=60dbb45ea63f685749730292a76c8a96ab0e861a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e4:ff:19:f0:45:7e:20:1a:c5:03:ce:d5:4e:
b8:bf:bb:29:79:69:9b:df:44:2d:16:f6:ec:66:09:
17:29:0f:85:bf:c6:1f:5b:35:d6:6a:1e:3a:65:3b:
69:6e:1c:1e:c8:60:e8:b7:e1:f1:0e:82:44:98:22:
3a:58:87:b5:3c:da:e9:58:0f:20:b9:df:f1:13:a9:
85:64:66:12:01:38:07:6e:c1:3e:47:c2:f0:b9:d2:
6f:aa:3e:8d:2c:3e:d7:76:f0:e9:a6:f4:1d:a9:ee:
ff:92:3e:78:c1:d6:1e:35:5a:ae:c5:52:c8:c8:6c:
88:12:62:44:7d:e5:8d:0f:07:0e:4e:0e:7c:4d:89:
63:d5:34:28:f8:e9:2a:b6:47:f7:e7:51:d5:6d:c4:
58:27:02:b7:c8:95:38:4e:d2:42:92:5a:29:65:96:
19:a8:97:50:d1:db:48:4d:fa:ff:dc:dc:51:05:4b:
be:fe:ce:3d:46:d3:e5:21:ab:1d:81:af:ae:93:2a:
dd:67:25:d7:77:d5:5f:e5:64:80:20:ce:ec:cd:f1:
76:92:86:cc:9a:a0:3d:17:f4:e0:08:c9:b1:66:86:
a3:eb:f1:ab:eb:bd:16:c5:8a:f8:16:90:47:c9:e2:
2b:3b:c6:32:cf:3d:46:4b:20:83:65:f0:58:e7:bb:
78:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:DB:B4:5E:A6:3F:68:57:49:73:02:92:A7:6C:8A:96:AB:0E:86:1A
X509v3 Authority Key Identifier:
keyid:C6:60:85:8A:38:AD:5E:11:B7:B1:89:39:28:83:BC:83:EB:6B:36:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmCFijitXhG3sYk5KIO8g-trNh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:dc:88:09:a0:2b:db:0c:3f:e6:56:67:d6:31:90:05:0d:d2:
bd:8a:72:6f:cc:61:2f:6c:ec:b4:ad:a9:ef:b5:38:fd:18:02:
79:cd:26:d1:94:eb:c5:b1:3a:3b:90:ba:51:7a:22:2b:b3:f5:
96:7a:86:c4:8d:f2:56:66:9a:5a:01:7d:86:d1:8e:45:27:1b:
44:f2:75:32:45:f3:81:91:5a:27:0c:f0:c1:0c:72:ec:ac:fd:
a0:9e:02:5a:be:6f:ea:a2:48:27:62:d5:17:ea:4c:0c:a2:f6:
01:13:93:12:7b:ab:06:21:98:b9:a3:62:54:dd:e1:3a:50:e4:
9d:96:d1:a2:90:8f:79:9c:39:f7:dc:37:56:dc:cc:c5:c6:45:
1c:ac:70:77:96:a3:37:b8:be:43:df:09:44:57:68:b8:e1:e0:
24:db:8a:ef:17:3f:7a:bc:1b:db:cf:12:43:95:72:3f:9f:1f:
41:05:e6:76:de:d2:71:f5:45:27:79:34:e5:64:f2:b3:35:8e:
bd:90:71:fd:da:99:83:4a:8d:0c:fd:1a:de:2e:ae:48:fb:d7:
a6:7a:ea:d0:a3:9f:9c:ec:8c:87:60:4c:15:3f:f0:ac:85:78:
f1:80:90:6a:02:d5:20:62:32:4a:c5:78:6a:80:b4:02:a6:6e:
09:b3:a2:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:47 2026 by rpki-client