Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft
File: xX4MBpirwZpWiv7OaxkM7QM6coU.mft (raw, json)
Hash identifier: PIkgKQxDAPfvHMoxblpe7RKWYqJu7cZKlxLwYgt4exI=
Subject key identifier: 59:97:DE:BF:C7:7F:65:DD:98:2B:AD:6F:72:B7:6C:99:5D:80:8E:59
Authority key identifier: C5:7E:0C:06:98:AB:C1:9A:56:8A:FE:CE:6B:19:0C:ED:03:3A:72:85
Certificate issuer: /CN=c57e0c0698abc19a568afece6b190ced033a7285
Certificate serial: 019F8EA225DC83478C1BE70C1A77EB1D7FF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xX4MBpirwZpWiv7OaxkM7QM6coU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft
Manifest number: 18C4
Signing time: Thu 23 Jul 2026 11:00:18 +0000
Manifest this update: Thu 23 Jul 2026 11:00:18 +0000
Manifest next update: Fri 24 Jul 2026 11:00:18 +0000
Files and hashes: 1: hvm-1sw6yKhG-M4wHJ1S06-4bQ8.roa (hash: tKs3IGxy6JfH17/EICz+WfGgz3jmWl7OeQzPl058cdo=)
2: rHb_iz-JiMdt3RDI2-qf4obfFyQ.asa (hash: PB1OmdbHMMh/Gs2lwxTkfdhg+R2oRe0ZvKNcBWEoM4Q=)
3: xX4MBpirwZpWiv7OaxkM7QM6coU.crl (hash: vMIjbWScPeh7cc00TkZfCQZzbgqHc5/XeqCl1pioSIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xX4MBpirwZpWiv7OaxkM7QM6coU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:25:dc:83:47:8c:1b:e7:0c:1a:77:eb:1d:7f:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c57e0c0698abc19a568afece6b190ced033a7285
Validity
Not Before: Jul 23 11:00:18 2026 GMT
Not After : Jul 24 11:00:18 2026 GMT
Subject: CN=5997debfc77f65dd982bad6f72b76c995d808e59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8d:c2:f1:74:d9:db:c2:b4:a5:b8:2f:7a:28:
1f:29:44:6d:ef:49:05:5b:78:28:f4:ed:fe:56:18:
c8:83:d4:8c:90:ed:9b:d5:75:ba:4a:d4:92:c2:9c:
16:15:d5:d5:90:29:71:bd:8d:c2:03:29:67:2e:b3:
53:94:ad:bc:f9:59:48:31:c9:18:6b:73:27:6c:b5:
fb:b0:cf:7d:5c:8d:1d:7e:26:bb:ea:84:0e:fa:ec:
b9:a5:24:26:14:71:6f:e6:a0:aa:33:65:c6:0b:e1:
19:dd:d5:fa:3c:ae:1f:74:16:99:60:1f:cc:f5:83:
81:b0:a2:b6:ea:93:a7:cc:c1:1d:27:ef:99:ad:f3:
41:a8:d7:8c:41:07:df:9c:36:38:b6:05:8f:ef:2b:
04:f9:79:2b:b7:a9:8e:c4:b2:0d:0b:ca:6d:01:41:
00:53:f8:3d:db:3b:1c:af:a6:f8:e7:72:f4:df:4a:
56:70:83:e8:ab:17:0c:34:9c:68:a7:05:a7:e5:36:
92:db:33:3b:44:f5:11:45:68:d6:ff:d5:a5:86:a4:
01:65:01:3c:4a:2b:a3:34:bb:18:68:47:18:d5:13:
4f:b1:0d:ed:12:51:68:41:22:b1:7e:25:97:2b:97:
57:f5:0a:94:97:61:5c:9a:d3:c9:11:b5:d6:4b:fd:
d5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:97:DE:BF:C7:7F:65:DD:98:2B:AD:6F:72:B7:6C:99:5D:80:8E:59
X509v3 Authority Key Identifier:
keyid:C5:7E:0C:06:98:AB:C1:9A:56:8A:FE:CE:6B:19:0C:ED:03:3A:72:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xX4MBpirwZpWiv7OaxkM7QM6coU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:4b:0e:cf:55:1f:6c:ee:e0:50:2d:7b:2b:98:37:54:7a:1a:
15:8a:c9:fa:a9:db:a3:f5:6a:f7:29:e2:6b:b5:41:a3:63:1c:
a7:21:a9:cb:32:46:6e:bf:d6:58:11:da:2f:d0:4d:26:7e:96:
f7:3a:c2:ce:eb:cc:bb:cc:ff:d5:0e:df:73:ae:ae:4a:68:5e:
f9:6f:16:6b:cb:9c:02:52:88:fd:41:44:d1:b9:4b:4e:1d:82:
42:d2:61:48:48:a9:10:4d:21:83:e6:66:e9:df:fd:ab:f5:13:
59:fa:94:28:52:07:bf:23:48:84:dc:e7:81:8e:12:74:57:e0:
c9:59:40:4f:79:36:6a:27:83:69:be:d4:cf:4a:37:48:6c:65:
43:ba:ae:14:09:df:f6:68:fb:16:19:bc:ea:11:25:ad:7f:3d:
db:6a:a2:a3:d0:58:a9:a2:d8:8b:39:21:bd:06:e1:26:58:ce:
17:2c:95:ce:f3:61:4c:c0:d4:af:c1:ff:00:f6:e4:c7:7a:4e:
b7:25:09:07:f7:9c:75:45:4c:a2:bc:9e:ae:22:3c:ea:9d:db:
ad:72:38:91:cd:96:e7:f4:a4:2c:bd:eb:fa:89:a1:8c:7d:b6:
fb:09:21:1f:ca:b8:3c:18:0c:85:8e:70:72:09:9d:f8:48:29:
64:c4:02:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:08:09 2026 by rpki-client