Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft
File: XfEaGA3xeZTkitMxhyz9AK2augQ.mft (raw, json)
Hash identifier: VRm1bLd+x0d5XJkcQz1C65snwoet4Dl0ScE0LBCDhPk=
Subject key identifier: D2:B4:B1:C6:89:A3:0E:C4:BF:58:97:DE:AF:45:A8:2F:1A:CE:F1:F7
Authority key identifier: 5D:F1:1A:18:0D:F1:79:94:E4:8A:D3:31:87:2C:FD:00:AD:9A:BA:04
Certificate issuer: /CN=5df11a180df17994e48ad331872cfd00ad9aba04
Certificate serial: 019F9625C3A7AFD893FF362B7C9D43F0FF6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfEaGA3xeZTkitMxhyz9AK2augQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 22:01:24 +0000
Manifest this update: Fri 24 Jul 2026 22:01:24 +0000
Manifest next update: Sat 25 Jul 2026 22:01:24 +0000
Files and hashes: 1: XfEaGA3xeZTkitMxhyz9AK2augQ.crl (hash: FxUfc256JUvHlf5nuOS/OoGveVfgR8edn0eaUPjhHH0=)
2: vOvUH4QL3euA8n5Zs-p3s8pu5OU.roa (hash: qqJCGshMa7lPJa7oCp0UWM6NmrUrD8W4y4uDd4fxLLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfEaGA3xeZTkitMxhyz9AK2augQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:25:c3:a7:af:d8:93:ff:36:2b:7c:9d:43:f0:ff:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df11a180df17994e48ad331872cfd00ad9aba04
Validity
Not Before: Jul 24 22:01:24 2026 GMT
Not After : Jul 25 22:01:24 2026 GMT
Subject: CN=d2b4b1c689a30ec4bf5897deaf45a82f1acef1f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:95:3c:0e:87:68:70:db:9e:99:5b:15:51:be:
98:f2:44:d1:e7:e7:97:46:b5:c2:80:06:73:e1:e4:
d0:63:f2:13:0b:78:dc:77:eb:d3:55:b8:d7:28:87:
2e:63:f3:2d:db:af:3b:b7:1f:d7:5c:71:2e:b8:c4:
08:71:90:cb:78:b4:ba:16:67:a8:56:00:ac:57:e2:
ba:6f:49:40:c5:9b:50:83:df:31:cf:d4:3d:1b:8a:
56:e3:6a:b6:ea:c6:fd:e5:34:06:f0:bf:d3:3a:a9:
fe:72:43:87:a0:6b:3a:03:a8:cc:f3:f1:3d:53:81:
d4:a6:47:b1:5c:df:c6:ce:12:8a:70:a3:7c:bf:29:
6c:99:82:d6:4b:46:ff:6f:80:2b:30:59:91:6c:82:
8f:0a:4b:0a:92:59:c2:42:4b:61:7b:20:7b:a5:3c:
b6:d8:da:e8:cf:e1:ac:6a:75:a6:e0:a0:dc:5b:62:
51:43:95:f1:fd:74:1e:49:60:e5:3e:e0:a4:c0:5d:
83:66:00:35:8d:2f:60:8e:a4:eb:11:d7:fd:b6:29:
c9:40:b9:19:fa:b4:c6:5d:a6:a0:a1:c1:8b:00:f0:
74:31:2d:86:89:e3:08:54:2d:c9:47:b4:79:f5:ce:
63:8e:2c:12:67:51:f7:64:bf:40:cf:62:f0:bc:41:
e7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B4:B1:C6:89:A3:0E:C4:BF:58:97:DE:AF:45:A8:2F:1A:CE:F1:F7
X509v3 Authority Key Identifier:
keyid:5D:F1:1A:18:0D:F1:79:94:E4:8A:D3:31:87:2C:FD:00:AD:9A:BA:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfEaGA3xeZTkitMxhyz9AK2augQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:a6:14:2a:8c:50:2e:2a:08:e5:ce:ac:3c:d7:61:14:16:46:
84:d0:37:47:e7:68:e9:61:92:32:bf:09:da:3b:d5:9b:21:5f:
e3:40:e4:d0:78:96:da:50:dc:c1:f0:ca:76:2c:cf:a7:29:35:
2d:d7:bf:15:c9:86:b8:27:e0:41:0c:9c:65:8c:c4:1d:c0:b4:
65:c0:96:9c:35:4a:81:23:32:6c:c8:96:c1:3e:c0:d0:a9:14:
c8:3d:4d:ee:e1:d8:9f:c9:9c:84:f6:bd:7f:d0:7d:3c:a5:21:
0e:fd:fb:01:41:c8:4c:c0:2a:ac:a1:fb:7b:d0:08:d2:e4:11:
aa:fe:4c:4b:99:ec:d6:16:c7:c4:00:3d:ec:6b:6d:13:3b:48:
a5:8d:95:b8:7a:38:c5:7f:83:70:05:32:28:f4:eb:6a:bb:52:
6a:a2:f5:cf:bd:19:16:ab:e3:8e:78:bd:eb:97:a8:de:ce:e7:
27:4e:fc:0b:bf:21:27:9b:55:97:c8:75:c7:d3:a2:0c:2f:7d:
59:c6:2f:ba:5d:5a:6c:89:90:ca:d2:3e:42:dd:43:24:bb:70:
45:18:67:63:fa:d2:a5:65:e7:92:4c:05:49:5c:34:cd:5e:91:
f0:54:cb:db:e1:ea:5d:2f:15:0f:83:6e:20:44:7a:0d:e7:99:
ad:53:80:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:21:02 2026 by rpki-client