Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
File: xs_ZQjfv0gDdCxFuH2-be8plnKc.mft (raw, json)
Hash identifier: EHHrc3oMfu6SrcMEwBmRO6RnOqkYBCJxScDJawvCjXU=
Subject key identifier: 9B:54:35:A7:7A:E7:5D:52:83:C7:EA:11:0A:06:C6:90:CA:B9:84:24
Authority key identifier: C6:CF:D9:42:37:EF:D2:00:DD:0B:11:6E:1F:6F:9B:7B:CA:65:9C:A7
Certificate issuer: /CN=c6cfd94237efd200dd0b116e1f6f9b7bca659ca7
Certificate serial: 019F93923EC4103DDE450A85FE08A88CB0B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 10:01:02 +0000
Manifest this update: Fri 24 Jul 2026 10:01:02 +0000
Manifest next update: Sat 25 Jul 2026 10:01:02 +0000
Files and hashes: 1: RB5D86Eez18oD-QABqEilaFp2nQ.roa (hash: cNT5vI1+Epdr8/RiwTV50sHhN6dBP41X/USYdNru1kM=)
2: xs_ZQjfv0gDdCxFuH2-be8plnKc.crl (hash: t7WikI4c0JjuuwJ5wnsE99Db33ZU3ldcY6y7bfK9mVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:3e:c4:10:3d:de:45:0a:85:fe:08:a8:8c:b0:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6cfd94237efd200dd0b116e1f6f9b7bca659ca7
Validity
Not Before: Jul 24 10:01:02 2026 GMT
Not After : Jul 25 10:01:02 2026 GMT
Subject: CN=9b5435a77ae75d5283c7ea110a06c690cab98424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:33:e9:b2:d0:cf:14:ef:16:4a:ec:cd:f4:a7:
0d:27:b3:be:d0:57:dc:14:75:33:54:8b:00:69:21:
38:5e:9d:47:43:ba:61:df:e1:cb:37:97:68:94:b5:
cb:bc:da:fe:f4:a4:56:68:48:69:b8:51:c4:42:7b:
d3:db:39:38:29:0f:59:39:f0:67:39:a0:07:5e:3d:
74:ce:2a:81:27:b7:c4:a7:e5:55:77:fe:f9:3b:d3:
af:d0:0e:f8:d7:57:8a:4e:db:0f:cc:7c:33:43:39:
19:d6:14:73:7d:bf:34:be:85:9d:ec:a0:b0:af:8b:
d7:14:fe:83:4f:29:c1:4c:f5:9c:86:c3:1a:1d:e5:
75:5b:a2:2d:63:19:4d:3c:65:77:09:4a:04:30:43:
70:21:b6:4d:6b:0f:dd:f0:20:7e:96:da:b2:a8:7a:
a0:09:f7:1a:ed:9d:18:30:bc:43:f7:6f:8f:63:e6:
b7:fe:88:ea:1b:75:09:2c:a3:91:bd:65:48:93:53:
9d:27:59:60:7d:00:53:2d:ba:23:d9:ce:71:a3:63:
86:8e:a7:af:b2:9d:1f:14:bf:29:dc:55:80:0d:6d:
ff:b9:43:87:f9:71:a3:04:34:7a:eb:38:e3:61:fe:
8c:ea:63:3a:b4:ed:ef:05:2c:0e:5d:54:3f:e2:bf:
26:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:54:35:A7:7A:E7:5D:52:83:C7:EA:11:0A:06:C6:90:CA:B9:84:24
X509v3 Authority Key Identifier:
keyid:C6:CF:D9:42:37:EF:D2:00:DD:0B:11:6E:1F:6F:9B:7B:CA:65:9C:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:6b:25:2d:b0:bd:38:18:44:a7:93:2a:38:21:bd:a1:0c:f1:
3c:75:00:34:7d:8d:9f:5c:0b:8b:21:3e:72:7f:60:83:e8:59:
0c:ca:04:8f:82:43:c9:72:93:13:5d:0b:08:b6:7e:4e:a4:3e:
02:34:0f:00:54:ce:c4:98:86:01:fe:7a:ae:0b:62:d4:1d:46:
46:57:5b:8b:a9:18:e8:3c:90:1a:29:bd:74:fb:f4:a7:9d:5f:
c1:c4:c8:90:f6:32:71:83:04:06:e4:9f:f2:2d:c5:c6:52:b9:
81:b1:36:25:09:c3:fc:df:ca:d0:f9:98:2b:80:5d:be:a1:29:
3b:c7:11:fc:21:6d:34:47:41:88:51:4e:67:9f:2c:a1:6b:d2:
ce:d0:dd:2b:9f:1c:d0:56:5d:2f:66:d6:33:11:77:74:1c:02:
19:c9:78:1d:1e:78:25:e5:9a:a2:3e:6b:59:37:80:b2:08:33:
c9:05:dc:0e:3c:a4:7a:c5:fc:33:31:58:d2:03:e1:a0:f3:d7:
31:f6:90:cc:78:82:79:11:8f:d6:96:64:11:a8:6f:64:5f:5c:
64:6f:3e:2a:18:f9:e4:5e:34:08:eb:82:97:f1:c1:80:bc:aa:
8c:3e:50:10:78:58:3c:9a:b5:d1:17:b2:ce:70:ba:e1:08:e8:
d8:40:b1:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Tkj7EED3eRQqF/giojLC0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2Y2ZkOTQyMzdlZmQyMDBkZDBiMTE2ZTFmNmY5YjdiY2E2
NTljYTcwHhcNMjYwNzI0MTAwMTAyWhcNMjYwNzI1MTAwMTAyWjAzMTEwLwYDVQQD
Eyg5YjU0MzVhNzdhZTc1ZDUyODNjN2VhMTEwYTA2YzY5MGNhYjk4NDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzPpstDPFO8WSuzN9KcNJ7O+0Ffc
FHUzVIsAaSE4Xp1HQ7ph3+HLN5dolLXLvNr+9KRWaEhpuFHEQnvT2zk4KQ9ZOfBn
OaAHXj10ziqBJ7fEp+VVd/75O9Ov0A7411eKTtsPzHwzQzkZ1hRzfb80voWd7KCw
r4vXFP6DTynBTPWchsMaHeV1W6ItYxlNPGV3CUoEMENwIbZNaw/d8CB+ltqyqHqg
Cfca7Z0YMLxD92+PY+a3/ojqG3UJLKORvWVIk1OdJ1lgfQBTLboj2c5xo2OGjqev
sp0fFL8p3FWADW3/uUOH+XGjBDR66zjjYf6M6mM6tO3vBSwOXVQ/4r8mmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJtUNad6511Sg8fqEQoGxpDKuYQkMB8GA1UdIwQY
MBaAFMbP2UI379IA3QsRbh9vm3vKZZynMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHNfWlFqZnYwZ0RkQ3hGdUgyLWJlOHBsbktjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8wYjcyNzEtMDIyMS00NjBlLTgzMWEt
ZGM4ODRmMWJlM2U1LzEveHNfWlFqZnYwZ0RkQ3hGdUgyLWJlOHBsbktjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8wYjcyNzEtMDIyMS00NjBlLTgzMWEtZGM4ODRmMWJlM2U1
LzEveHNfWlFqZnYwZ0RkQ3hGdUgyLWJlOHBsbktjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHmslLbC9
OBhEp5MqOCG9oQzxPHUANH2Nn1wLiyE+cn9gg+hZDMoEj4JDyXKTE10LCLZ+TqQ+
AjQPAFTOxJiGAf56rgti1B1GRldbi6kY6DyQGim9dPv0p51fwcTIkPYycYMEBuSf
8i3FxlK5gbE2JQnD/N/K0PmYK4BdvqEpO8cR/CFtNEdBiFFOZ58soWvSztDdK58c
0FZdL2bWMxF3dBwCGcl4HR54JeWaoj5rWTeAsggzyQXcDjykesX8MzFY0gPhoPPX
MfaQzHiCeRGP1pZkEahvZF9cZG8+Khj55F40COuCl/HBgLyqjD5QEHhYPJq10Rey
znC64Qjo2ECx2g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:02:33 2026 by rpki-client