Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft
File: XDDZUEYzG9zjAYt__g8T2_n8cY0.mft (raw, json)
Hash identifier: T6r8FCy9o5YEhQujZOwRr6AL072K7j4LcbE1EtBYeEw=
Subject key identifier: 72:C3:26:D6:5C:D4:82:8C:EC:A2:E9:65:8D:56:75:87:0B:9F:37:6C
Authority key identifier: 5C:30:D9:50:46:33:1B:DC:E3:01:8B:7F:FE:0F:13:DB:F9:FC:71:8D
Certificate issuer: /CN=5c30d95046331bdce3018b7ffe0f13dbf9fc718d
Certificate serial: 019F92ED6B2F4852C486482EEFFB9E64FAAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDDZUEYzG9zjAYt__g8T2_n8cY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft
Manifest number: 19C6
Signing time: Fri 24 Jul 2026 07:01:00 +0000
Manifest this update: Fri 24 Jul 2026 07:01:00 +0000
Manifest next update: Sat 25 Jul 2026 07:01:00 +0000
Files and hashes: 1: XDDZUEYzG9zjAYt__g8T2_n8cY0.crl (hash: LpejlN1FjJlADtl6kXFlnmSPqbEIFhZDFmiy0orbXkE=)
2: i7ahmmzCoN5G9N5UQomOHHe69RA.roa (hash: GGCZiPMQLo6nn63tOlWXS7/n5qwIMxP1oeej8rFYFvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDDZUEYzG9zjAYt__g8T2_n8cY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:6b:2f:48:52:c4:86:48:2e:ef:fb:9e:64:fa:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c30d95046331bdce3018b7ffe0f13dbf9fc718d
Validity
Not Before: Jul 24 07:01:00 2026 GMT
Not After : Jul 25 07:01:00 2026 GMT
Subject: CN=72c326d65cd4828ceca2e9658d5675870b9f376c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:98:2e:02:d1:31:4a:4d:c0:88:58:bc:97:5c:
54:57:52:13:08:ce:30:76:08:ac:6a:d9:8e:4d:83:
5b:8f:07:90:8e:5f:d7:a0:1e:c8:83:d0:6d:30:b8:
2f:2b:aa:8b:ff:c0:04:cd:af:88:43:79:57:64:fd:
3c:25:7a:be:61:da:cb:dd:5c:1f:97:c0:6c:b1:99:
20:14:fa:a0:20:04:c5:e1:cf:3c:82:81:59:7f:21:
16:4d:0b:77:01:80:b3:b5:e1:6e:6c:13:54:15:0c:
d8:56:45:2f:36:70:4d:48:fa:95:6f:a0:21:96:e2:
1b:e6:44:b3:53:b3:b9:51:aa:7d:41:f8:b9:fe:2f:
75:d2:5a:50:d1:6d:cb:4d:79:eb:87:7c:47:70:5a:
c9:26:4d:cb:3c:0d:e7:40:1a:45:0c:b1:dc:a4:38:
b0:76:57:16:dd:1e:e5:f4:2f:03:fe:a5:72:02:52:
84:ab:5a:88:32:4f:d7:d6:ee:e1:cf:e1:46:5d:22:
e5:f2:b0:55:f6:07:3d:1f:24:2e:62:97:85:7c:61:
43:9e:3e:a2:1b:65:9f:22:4c:bd:ab:1f:b4:ec:da:
bc:0d:74:5e:20:68:dd:33:a9:9e:f1:1e:cd:7d:99:
25:e2:2c:e6:da:72:02:ab:27:49:5f:81:73:c5:3c:
bd:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C3:26:D6:5C:D4:82:8C:EC:A2:E9:65:8D:56:75:87:0B:9F:37:6C
X509v3 Authority Key Identifier:
keyid:5C:30:D9:50:46:33:1B:DC:E3:01:8B:7F:FE:0F:13:DB:F9:FC:71:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDDZUEYzG9zjAYt__g8T2_n8cY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:b3:ac:a4:eb:6e:34:01:99:ef:45:c9:1e:99:9a:f1:ae:8e:
19:dc:b8:92:9e:c5:7c:ce:a3:51:3e:05:ab:f8:b8:c1:5d:c4:
41:e3:f8:fb:9d:ae:13:06:ae:ee:3c:b5:3a:63:70:22:c9:e0:
4b:ba:b7:32:31:de:8e:a0:a9:2c:e7:a1:7e:2f:37:49:cf:5f:
5d:7e:6b:77:37:ca:27:09:1c:0c:44:6e:00:22:98:3a:8d:0a:
64:7a:08:22:5b:7c:db:a9:96:32:b5:65:a3:42:49:e8:cf:fd:
89:8a:c2:e3:2d:7d:f3:ed:c3:08:45:3d:b6:39:31:71:6b:18:
61:db:f8:d1:16:99:e2:a6:6d:63:05:ff:55:f2:01:b9:85:b7:
93:38:ee:2e:66:6e:09:1a:35:c6:61:cc:30:64:8a:d9:41:1b:
cf:f8:c7:2c:f3:68:ab:08:a5:95:75:cf:35:f4:e0:6f:1c:c7:
ac:cf:f1:9b:7b:ce:3b:37:0f:fd:24:44:f7:f7:a7:15:85:88:
98:13:ad:a5:68:45:68:5c:1d:67:84:42:24:94:03:61:51:b2:
37:9e:18:90:79:05:4d:44:95:7e:2c:19:83:08:92:02:f2:ff:
f9:5f:a9:f4:54:28:3f:31:d7:17:75:26:80:66:21:5d:7c:24:
6b:81:4f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:00:51 2026 by rpki-client