Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
File: xYigeeTOtrskwjxSceRYPhzy-ak.mft (raw, json)
Hash identifier: 4ef7/6n02kEhs8NE3JDD1HmBU5mmZKN/1Gkp7+U3cHo=
Subject key identifier: 8A:B8:66:18:1A:22:A6:44:51:3D:A6:05:B0:29:20:D1:32:77:D1:22
Authority key identifier: C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9
Certificate issuer: /CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9
Certificate serial: 019F91361A097C4AB02D1821E6DDF992BC8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
Manifest number: 19CE
Signing time: Thu 23 Jul 2026 23:01:09 +0000
Manifest this update: Thu 23 Jul 2026 23:01:09 +0000
Manifest next update: Fri 24 Jul 2026 23:01:09 +0000
Files and hashes: 1: Pt1Psw1-lXzUqfn0X0LMWdzipP0.roa (hash: 15BXKGLsn5CILBGoCHvyltyRe1OA4GGdr684IX7Rfck=)
2: xYigeeTOtrskwjxSceRYPhzy-ak.crl (hash: hc9oRK63boAW6KKzlxfMVNrcP/9IPcyNWYW8wG3Zej8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:36:1a:09:7c:4a:b0:2d:18:21:e6:dd:f9:92:bc:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9
Validity
Not Before: Jul 23 23:01:09 2026 GMT
Not After : Jul 24 23:01:09 2026 GMT
Subject: CN=8ab866181a22a644513da605b02920d13277d122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9f:7b:25:4d:bf:80:06:75:fa:92:49:c3:5c:
28:06:36:b8:71:61:e6:a7:cd:4b:53:b9:19:57:aa:
e2:ba:c4:75:97:69:2a:7a:c9:07:d4:df:2e:db:0c:
03:87:dd:5e:2a:de:45:55:c5:6a:c7:27:8b:fd:20:
e0:52:b6:1b:25:f8:2c:0f:26:c1:1c:49:dd:11:d2:
bb:7e:7f:76:7a:9a:95:3c:d3:57:67:16:eb:84:bd:
9c:4d:9d:5a:87:92:95:c0:e4:12:2f:e9:0d:8c:60:
ca:b3:02:39:0c:b6:9a:fc:bc:b9:16:e1:13:b8:98:
a5:ab:66:1f:e6:5c:fe:31:db:29:cd:d6:6f:59:bd:
e1:10:d6:ae:f1:86:08:12:10:18:1b:05:44:e9:4d:
4a:5c:97:a3:0c:54:66:4e:ed:b8:c0:ed:3e:3a:73:
6b:ec:9f:5e:32:05:b3:26:70:dc:56:fc:83:db:63:
1c:b6:7b:d2:4b:c0:f4:6f:af:73:40:8d:64:5a:48:
47:7a:08:ea:6d:3b:02:b1:1e:b3:29:e0:0d:1c:7f:
28:76:4a:9c:bc:02:82:f1:0a:39:d6:d9:83:ce:ea:
ba:e4:64:75:f0:54:8f:13:81:22:ff:0c:7d:38:37:
96:a6:26:52:37:6c:a4:82:c6:d2:f4:db:f3:ce:15:
ed:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B8:66:18:1A:22:A6:44:51:3D:A6:05:B0:29:20:D1:32:77:D1:22
X509v3 Authority Key Identifier:
keyid:C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:74:ea:dd:29:b5:f9:52:f9:e8:7d:d3:02:d2:e6:48:3a:70:
51:9d:02:50:d7:8d:75:76:36:0c:bb:0d:15:d3:8e:b3:77:48:
45:23:b6:a4:c3:0f:79:bb:1a:e2:a9:74:8b:31:4d:45:d5:4a:
62:a8:71:31:c4:4a:44:cc:d4:fe:17:b7:e9:94:f6:69:67:5f:
6d:29:72:58:ef:de:35:39:cb:93:cc:fb:9d:22:96:25:8c:1e:
0c:5f:5b:37:9c:48:2c:42:6d:f0:6d:ca:d1:03:0b:d2:72:02:
de:f7:5a:e6:32:eb:38:86:6f:fa:db:51:57:97:a9:57:a6:94:
9c:14:7d:5e:d2:1f:38:bf:06:a5:f2:a8:6c:62:b1:de:7b:00:
80:1c:81:83:9e:0d:b1:29:bd:ed:d4:63:69:70:8d:36:05:e4:
05:ab:6c:a5:e2:41:53:35:bd:5a:bc:d9:31:d2:10:aa:7a:8f:
1b:e2:3a:64:ff:e3:b6:c1:83:f6:40:88:fb:40:51:49:ce:47:
5b:b8:e8:cf:8d:a4:f5:11:3d:61:35:ce:d5:36:89:06:3c:dd:
2b:02:c8:d4:a2:6a:57:73:3a:5e:8f:48:34:1a:91:87:76:24:
0a:f5:14:f6:a4:88:d3:d6:82:95:d5:21:8d:64:66:2a:21:40:
10:93:ed:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:36:34 2026 by rpki-client