Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
File: xaL0JAfyHJ12kPsw_YzbK_320DA.mft (raw, json)
Hash identifier: 8Di5HJJPyuSLJH5z3jTjcPNzF6OnsqYIJQimuUvV++8=
Subject key identifier: 19:F0:42:A0:D9:4B:F3:F1:C9:7A:B1:39:61:4C:C1:3D:D9:62:3E:2F
Authority key identifier: C5:A2:F4:24:07:F2:1C:9D:76:90:FB:30:FD:8C:DB:2B:FD:F6:D0:30
Certificate issuer: /CN=c5a2f42407f21c9d7690fb30fd8cdb2bfdf6d030
Certificate serial: 019F9549D4D715154B131398A4DB2B0EC341
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
Manifest number: 19E5
Signing time: Fri 24 Jul 2026 18:01:11 +0000
Manifest this update: Fri 24 Jul 2026 18:01:11 +0000
Manifest next update: Sat 25 Jul 2026 18:01:11 +0000
Files and hashes: 1: vvOgIMkDpg0381NKvOJ6xEsVrhU.roa (hash: Ilfe2d/82ILTFX47xfIYllXXNOO6y9+T+nkxBpSb/2g=)
2: xaL0JAfyHJ12kPsw_YzbK_320DA.crl (hash: s1bKoRjjtrtDotZFKSfU/M9No0mIO2pOyg7+XB61PEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:d4:d7:15:15:4b:13:13:98:a4:db:2b:0e:c3:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a2f42407f21c9d7690fb30fd8cdb2bfdf6d030
Validity
Not Before: Jul 24 18:01:11 2026 GMT
Not After : Jul 25 18:01:11 2026 GMT
Subject: CN=19f042a0d94bf3f1c97ab139614cc13dd9623e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e2:0c:b0:e1:ff:9d:08:5e:4d:35:3c:82:d3:
b5:3f:d4:04:44:d7:e5:d7:1c:82:a7:ac:1c:aa:9a:
20:cf:b4:d2:85:3a:38:21:20:f8:e5:d1:3d:c7:a8:
61:ee:30:31:13:84:22:83:fc:61:e6:7d:96:fa:27:
6e:28:23:7c:83:95:f4:5e:a2:89:9e:b7:70:df:12:
8e:b8:2f:23:3b:d1:5a:f2:47:65:6a:91:32:fe:62:
eb:35:49:8e:10:56:e3:b6:bb:0a:94:05:7c:1d:e8:
98:41:a5:21:a2:31:53:a2:39:35:5c:01:f6:d5:f4:
ce:5d:91:2f:e8:eb:8d:8d:0d:55:e9:15:77:e3:b9:
27:1b:92:bf:f5:80:56:0a:87:b5:ee:95:cd:20:e0:
2b:c7:3f:13:c1:a3:f2:7e:e2:f2:81:0c:96:7c:93:
8a:6c:be:f4:ed:29:a4:b0:95:92:f6:28:46:bb:5b:
55:5a:d7:05:7f:77:10:59:e6:46:5b:55:41:d6:e0:
ec:d3:63:46:df:b0:27:f4:dc:d7:25:dc:8d:6d:ac:
85:11:5a:93:33:68:cc:0c:08:ee:27:ec:37:7b:69:
a8:0f:40:60:3b:f7:36:76:77:0c:08:e8:65:63:15:
12:1a:b1:a3:ea:3f:fb:da:00:7d:46:9c:09:46:27:
0c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F0:42:A0:D9:4B:F3:F1:C9:7A:B1:39:61:4C:C1:3D:D9:62:3E:2F
X509v3 Authority Key Identifier:
keyid:C5:A2:F4:24:07:F2:1C:9D:76:90:FB:30:FD:8C:DB:2B:FD:F6:D0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:52:61:91:63:a6:2f:45:7f:6d:66:71:0d:4e:58:fd:8d:dc:
61:07:8f:02:89:9b:8e:e4:d1:2a:ce:11:e5:bd:a8:e4:17:f5:
57:3e:f1:5e:c9:ce:02:da:d5:77:ee:cb:f2:98:e6:41:86:c9:
da:7c:65:70:0e:fe:96:f8:b5:98:2a:1c:67:01:b0:bd:00:5c:
a3:ec:6e:76:90:47:7e:18:21:a0:69:d7:d0:9d:6e:46:22:ec:
3e:2b:16:fc:b8:13:62:1c:89:d6:09:63:58:c1:e3:a1:ea:32:
b3:77:b2:b6:0f:8a:72:72:56:cd:83:2a:66:58:4c:8a:a6:b8:
cd:41:50:7f:b0:9b:bd:ee:52:5f:e4:08:c4:eb:93:ba:a2:21:
c3:2f:97:21:48:b2:b7:c4:04:43:3a:40:63:04:81:f6:e2:a5:
3f:96:59:ff:c5:61:17:1e:90:da:36:1f:1c:d2:b6:6a:16:24:
e8:c3:2e:34:03:e1:66:35:23:00:98:c6:00:91:6b:51:c1:0b:
fe:fd:cf:cd:70:e3:19:cc:dc:d3:24:29:b9:61:e2:b5:a1:83:
06:df:ef:5a:28:26:3b:cd:a5:28:91:d5:10:ff:81:9e:07:64:
1c:ed:84:81:d6:88:77:f7:72:ec:31:09:ae:16:14:a2:a8:53:
82:4a:30:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:15:53 2026 by rpki-client