Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
File: x4QShQX3-Zx1cEQpgK3rivkMwnA.mft (raw, json)
Hash identifier: ykFOZ6OyEU8sqiyDp8HiYgFoHYDyfuwpiabyp1tlpAY=
Subject key identifier: 29:38:6B:DF:E1:D6:55:9E:8C:36:8D:B5:99:5D:C2:58:70:27:61:D4
Authority key identifier: C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70
Certificate issuer: /CN=c784128505f7f99c7570442980adeb8af90cc270
Certificate serial: 019F9323DB1DA8754A9671C784406F8A3F7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
Manifest number: 19CC
Signing time: Fri 24 Jul 2026 08:00:28 +0000
Manifest this update: Fri 24 Jul 2026 08:00:28 +0000
Manifest next update: Sat 25 Jul 2026 08:00:28 +0000
Files and hashes: 1: 6adJkufM2vCd-z5ZhfO9iFInD5I.roa (hash: eStOI3RXAw0Itmdq+ACmIjyoC4OiC/7VPLcYAGLEjE8=)
2: WpjjTnaqAZv75i8pt4da5AeyrG8.roa (hash: zVLZyAPVL7um6st0K7rE7n1hsZMqjYHJuIbZn63Z38s=)
3: x4QShQX3-Zx1cEQpgK3rivkMwnA.crl (hash: HPk96qrvi6I2cBTDO+m6DLqjgw4w50foLX/tpT6T53o=)
4: zFQaWtM5PgZgQ7lLGiUdAyDYFlk.roa (hash: T++koCK9BmrUNL9Ums78HVke+W3UNP2l17fVLv+FlR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:db:1d:a8:75:4a:96:71:c7:84:40:6f:8a:3f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c784128505f7f99c7570442980adeb8af90cc270
Validity
Not Before: Jul 24 08:00:28 2026 GMT
Not After : Jul 25 08:00:28 2026 GMT
Subject: CN=29386bdfe1d6559e8c368db5995dc258702761d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:4b:e9:d7:ae:5c:32:87:65:62:41:db:c4:49:
1c:37:b7:c6:47:ed:f3:8a:94:d5:93:28:27:62:ee:
27:3e:92:6d:dd:73:ee:99:a7:b2:c1:8b:5b:97:84:
e6:03:b3:b9:1d:f7:22:b6:c9:e7:48:f5:41:de:55:
ec:9f:35:e8:b1:d1:7f:86:c2:b9:71:99:52:6e:4e:
8f:8e:ed:c7:04:d1:e1:2b:74:54:b2:47:21:7d:69:
bb:00:ce:f0:63:db:3e:55:25:c1:aa:bc:a5:0a:5f:
55:36:14:22:fb:c5:21:31:6c:d0:98:83:8a:b1:77:
85:85:ff:91:58:a4:be:ca:fb:67:a7:3d:da:11:32:
c9:c5:cc:1b:66:19:2b:bc:76:97:6d:5d:3d:c0:eb:
e0:63:f5:ea:3c:91:52:4d:9c:01:0d:f2:e8:85:5b:
dc:b0:c3:a9:71:91:04:7b:0a:62:23:5f:1b:e5:e7:
44:9d:ac:d5:f3:41:26:75:54:ec:6d:e2:19:26:f3:
e6:65:3a:53:10:c3:3c:63:b2:c7:58:8f:40:8f:6d:
29:1a:7f:75:fb:5f:b6:28:93:53:49:d7:54:47:e7:
ad:dc:5d:40:71:33:47:c2:e2:84:85:6a:7d:01:93:
85:69:40:51:af:96:30:eb:59:29:fb:98:3a:21:5b:
2a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:38:6B:DF:E1:D6:55:9E:8C:36:8D:B5:99:5D:C2:58:70:27:61:D4
X509v3 Authority Key Identifier:
keyid:C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:a9:ae:a8:64:13:52:01:94:86:a5:47:96:c2:99:30:ca:75:
fb:06:5f:0c:db:4c:f8:e5:2d:c9:87:c9:63:bc:33:71:c5:6a:
cb:1d:d7:b5:fc:11:52:9a:91:0c:02:c6:4c:af:32:63:74:5c:
5c:db:09:95:df:f7:3d:ea:e8:3b:a9:f8:bc:80:e6:18:cf:69:
d2:a4:8b:5f:9a:3e:4b:97:2c:5d:75:be:f7:12:6e:aa:de:98:
81:be:70:df:48:e4:be:be:fe:66:fd:5f:94:6a:bb:7e:41:7a:
f8:48:b2:88:25:6d:b4:8c:67:09:37:97:30:24:f0:bc:db:67:
50:a3:8f:21:37:ca:54:77:76:d9:18:6c:5b:71:5e:b7:a5:58:
ba:af:0a:ba:38:00:03:dc:8e:4d:a1:68:26:77:b8:dc:bc:3d:
61:72:21:65:2d:eb:a2:c4:99:e9:28:f1:5f:5e:ea:7a:2f:c9:
d7:05:64:9d:b1:1c:35:60:d0:0a:85:e6:b4:09:06:9d:e6:06:
43:40:1a:21:62:00:62:e8:fd:d0:b5:52:57:fc:53:16:f4:e1:
d0:02:af:5b:23:47:33:a7:63:09:71:5a:f9:7f:0a:8c:db:2e:
bf:80:5f:a1:2b:3c:14:46:8c:fd:c8:e5:d3:f8:ed:17:42:42:
6d:5d:97:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:25:13 2026 by rpki-client