Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
File: xVnUaTVVufKtaAe6ztxLWi5wGkg.mft (raw, json)
Hash identifier: 1uqCTLQfULEq6SeJdJFIpjkACbxio2S7gPQAKf5XyvY=
Subject key identifier: E1:CF:F6:48:36:85:D8:3D:2C:AF:A9:E2:AB:31:42:24:EC:E8:F6:EA
Authority key identifier: C5:59:D4:69:35:55:B9:F2:AD:68:07:BA:CE:DC:4B:5A:2E:70:1A:48
Certificate issuer: /CN=c559d4693555b9f2ad6807bacedc4b5a2e701a48
Certificate serial: 019F92B667586FEAC06AA823E5BA928F7A33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
Manifest number: 0CF6
Signing time: Fri 24 Jul 2026 06:00:55 +0000
Manifest this update: Fri 24 Jul 2026 06:00:55 +0000
Manifest next update: Sat 25 Jul 2026 06:00:55 +0000
Files and hashes: 1: Hi_yIbXB_AqEZvECw_6A2niKbbY.roa (hash: V9KwW6TEefSi+Nbg4IOw24z7gPz8KPWyVOeCLVyS3EY=)
2: xVnUaTVVufKtaAe6ztxLWi5wGkg.crl (hash: Jwl92OXmMhZqOPYwzyxP+9t3kYw/aQYqa7IjZTv33fE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:67:58:6f:ea:c0:6a:a8:23:e5:ba:92:8f:7a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c559d4693555b9f2ad6807bacedc4b5a2e701a48
Validity
Not Before: Jul 24 06:00:55 2026 GMT
Not After : Jul 25 06:00:55 2026 GMT
Subject: CN=e1cff6483685d83d2cafa9e2ab314224ece8f6ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:69:87:4e:4d:ca:85:2d:9b:6d:15:d8:59:d0:
7f:bf:bd:99:b0:db:c6:39:0c:1d:fe:c0:d0:35:4b:
f6:cb:af:8c:a6:51:69:d3:67:81:a0:7c:c3:b1:61:
d0:37:56:38:9c:09:ec:c4:0e:8d:fa:85:84:dc:34:
19:a8:2a:84:1b:cf:77:89:45:e1:84:04:d3:a1:a9:
78:99:f3:41:c0:86:05:73:0e:0e:f9:84:87:98:39:
32:4c:dd:b7:b3:d8:1d:a9:55:f2:eb:ad:5d:8b:a4:
57:65:64:fd:64:7d:d0:fe:ae:43:59:aa:0d:62:0d:
dd:5d:bd:5b:32:9b:9b:cd:b5:67:d6:0b:a9:b4:13:
3e:96:ad:0a:af:a3:7b:bb:d5:12:5e:8f:96:cf:7f:
fe:db:39:3d:f0:ae:31:4e:fe:03:62:fe:42:a5:9d:
01:58:ca:72:60:3b:4d:30:95:e5:25:5c:1c:51:bb:
77:75:a5:e1:09:3a:74:c6:6d:94:73:aa:e5:0c:81:
fd:9e:19:31:73:77:fc:34:2e:70:87:2f:86:c9:6e:
7c:84:4a:cc:6d:86:5a:58:f7:24:92:1a:09:55:cc:
cd:9c:e7:6c:be:9e:d3:b6:46:d2:9d:0c:92:63:bc:
e8:a6:4f:bd:9a:1b:93:a0:b7:b6:fd:6f:6f:d0:42:
52:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:CF:F6:48:36:85:D8:3D:2C:AF:A9:E2:AB:31:42:24:EC:E8:F6:EA
X509v3 Authority Key Identifier:
keyid:C5:59:D4:69:35:55:B9:F2:AD:68:07:BA:CE:DC:4B:5A:2E:70:1A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:a9:fa:47:bb:e7:f7:a4:8d:bc:b7:5f:db:63:40:91:28:c2:
c9:b4:75:86:7d:53:3b:8a:9f:d5:57:49:f4:db:31:a5:4a:f8:
c9:09:c5:38:04:57:b3:5f:a1:d0:39:4a:6e:fa:8b:33:e5:42:
f8:3c:d4:d5:e8:08:12:18:e9:4b:8f:73:d2:68:41:28:4f:08:
36:d8:1a:39:57:aa:e6:e3:a1:50:45:30:4f:b6:ad:0b:39:56:
0d:13:8f:29:59:78:2a:fc:06:7b:16:de:66:d5:93:41:16:c2:
cb:bd:e2:57:26:34:23:ad:49:f9:10:d5:58:7b:e8:2f:3b:e5:
25:04:31:9c:72:34:bc:8a:48:aa:31:cb:46:cf:3a:50:96:07:
2d:66:12:f1:c3:5a:f0:8f:52:1f:92:5f:30:d3:8e:5c:fe:a0:
ff:89:66:71:7e:77:95:58:a2:72:62:27:db:ce:85:f1:b4:19:
74:57:72:0c:a4:ff:f9:6d:9b:2f:58:54:08:2b:ff:f0:c0:76:
70:26:61:01:42:c0:e3:23:c1:a5:66:02:5d:92:92:c2:c8:c2:
da:94:f6:19:11:00:d4:69:96:e7:8b:12:0a:2d:c1:2c:fe:37:
11:92:9e:cf:27:a6:71:63:6e:e0:f2:15:f1:74:30:f3:5a:56:
62:26:a3:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:19:37 2026 by rpki-client