Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.mft
File: XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.mft (raw, json)
Hash identifier: rC7LIrjV0sYgsGdOqxXhHIZZU/+PL5512aiZ//ATvWQ=
Subject key identifier: F9:F3:F4:47:D3:DA:2A:6A:9B:55:39:B1:F8:B4:8D:13:4F:B1:47:E1
Authority key identifier: 5E:77:44:67:E2:18:49:52:49:43:D2:BD:45:90:10:72:0F:3E:20:E4
Certificate issuer: /CN=5e774467e21849524943d2bd459010720f3e20e4
Certificate serial: 019F93C961FA4319F049E3BB414BC5DEE781
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.mft
Manifest number: 14D7
Signing time: Fri 24 Jul 2026 11:01:16 +0000
Manifest this update: Fri 24 Jul 2026 11:01:16 +0000
Manifest next update: Sat 25 Jul 2026 11:01:16 +0000
Files and hashes: 1: 46eH9Cj2ZoAvvZOdO1gLEixXty0.roa (hash: nutrSegvu5QxeGV6g/QuVOtrzFyb4Km/JeoI/dWaXRo=)
2: XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.crl (hash: 2TFadRcfqr539bXnvKCehLRmYLe0PLZ0Ac6IY/jfIbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:61:fa:43:19:f0:49:e3:bb:41:4b:c5:de:e7:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e774467e21849524943d2bd459010720f3e20e4
Validity
Not Before: Jul 24 11:01:16 2026 GMT
Not After : Jul 25 11:01:16 2026 GMT
Subject: CN=f9f3f447d3da2a6a9b5539b1f8b48d134fb147e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e2:b5:4e:5c:5d:9e:7e:c9:e3:7d:ca:4d:c7:
73:5f:ef:b9:4d:a4:01:5c:90:7f:e8:95:0b:69:d0:
8d:be:a0:a1:c0:0a:6c:d1:07:bf:36:47:37:0c:72:
d5:a1:fe:a5:2a:45:ce:a4:16:51:04:58:25:4b:6f:
94:ce:3c:93:d6:b7:27:e4:11:d4:ad:a0:1e:18:7e:
32:91:5d:9c:2e:a3:65:f5:a3:10:3d:e6:56:fc:95:
5a:5b:50:99:94:39:c4:ea:77:0c:be:e3:97:3a:fa:
69:5b:1b:e6:dc:c5:45:e4:4e:5a:f9:9a:83:df:f3:
c7:06:d8:20:4d:d1:61:88:79:7c:6a:e0:22:3f:43:
7c:5f:52:75:19:66:d4:3b:c9:6a:bd:cc:9b:46:d0:
67:d0:de:06:e5:02:ad:d1:37:9c:d3:0b:ab:f1:de:
36:84:79:22:eb:75:4c:ec:59:09:48:eb:96:ea:43:
12:f5:53:ff:56:ee:21:bc:f5:bb:45:a9:81:ab:b5:
da:4d:54:4f:f7:a1:b7:75:dc:5e:70:8d:58:2c:87:
56:33:b3:01:d0:ae:ac:da:4b:e2:dc:eb:d0:48:e3:
06:88:ea:cc:37:fa:bd:8d:8e:99:07:37:9b:b7:9e:
bb:36:6a:ee:40:37:b3:60:06:c7:b0:8a:a7:a3:f5:
66:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F3:F4:47:D3:DA:2A:6A:9B:55:39:B1:F8:B4:8D:13:4F:B1:47:E1
X509v3 Authority Key Identifier:
keyid:5E:77:44:67:E2:18:49:52:49:43:D2:BD:45:90:10:72:0F:3E:20:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:63:d3:ed:73:68:26:64:84:95:a6:d4:5d:34:e6:53:fc:80:
2d:12:91:b7:f2:2e:67:98:cf:19:f2:5a:a8:3d:38:42:21:08:
37:21:dc:b2:7f:b9:e9:e5:ab:d8:ad:11:60:8b:bc:cd:78:21:
a3:6a:66:78:af:35:90:be:6c:4f:1d:1c:a4:bf:61:59:ed:c1:
0d:f4:2b:a5:6c:26:93:7e:ab:cf:1f:0f:42:32:0c:ba:84:28:
0c:cb:17:32:8e:48:7e:ad:f5:98:b1:29:5a:5b:1e:49:6c:e8:
f5:52:df:5d:e6:71:5e:c5:dc:69:fc:7a:1e:02:34:0d:a8:6d:
8b:59:c6:d7:5b:68:8b:02:eb:29:e3:85:04:4d:1d:cd:47:56:
12:fb:e6:bd:69:66:aa:3f:90:9c:0e:aa:0a:91:46:bb:9d:ae:
c7:c1:b6:2b:81:11:11:30:ad:68:10:21:f0:90:76:42:2e:e1:
fd:ee:70:78:e5:a5:3a:21:c4:b8:f8:e8:69:41:0a:82:ea:92:
9c:c2:85:fb:51:86:c6:0e:3e:a6:8f:fb:4e:9b:16:86:7b:7d:
4d:f8:8b:03:13:14:85:6a:ad:3b:09:95:ce:2d:c8:8b:82:18:
24:a4:dd:f6:3f:dd:d1:12:f0:39:16:7b:4b:76:e1:66:13:d4:
78:99:45:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:16:02 2026 by rpki-client