Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
File: xZvR6MWPZBvZRDBfEcVO_l86DOI.mft (raw, json)
Hash identifier: wTdI4sTII+a77DDFdML+9wyFDU0CXLj4MKDlpDf3tls=
Subject key identifier: 7D:22:9D:1F:3C:AA:BB:06:F6:67:06:5B:49:70:01:C9:0B:DE:B1:3A
Authority key identifier: C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
Certificate issuer: /CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Certificate serial: 019F935C0BBC7E8E6247D856005D232CB5D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
Manifest number: 19E8
Signing time: Fri 24 Jul 2026 09:01:50 +0000
Manifest this update: Fri 24 Jul 2026 09:01:50 +0000
Manifest next update: Sat 25 Jul 2026 09:01:50 +0000
Files and hashes: 1: EvezJV6Vs9jqKeUbJVzpq1KiVDU.roa (hash: 2svyQKGgqn/3aPQxfvJ2sTwJRY+qNPgcGyhkMpZSELI=)
2: NCLucTkvi3guFUx3Unodz7qu3f8.roa (hash: XS6lokDQlSUVgmf31X4rX8+KGasUvIdfEySA8Treukc=)
3: _wgviRVG1K_5o-U9fJ7o7ZJk_RE.roa (hash: 8X8kwr6+94gamc2uAWENoz4y3O77vpqIsVr/rcSuqCo=)
4: ezXML66PH_53DvtrZpee7wJgcq8.roa (hash: 8PYXc5RxO1awIA2fhoLa9kTXnH71YLw1uLcJ1CNtRqs=)
5: h5hIPsJLhskffy-sowI0XWx6XlE.roa (hash: SZZgcDO6xitZpi8SqVoNBovZysldQ3yiUtrtfkP4Ct8=)
6: tqRuH8AtUL10GIVamWVHWz8fxNg.roa (hash: RZkT6lVI+WQmmrPn0pAsOsM6VyHGnWPmG3xanKfDovc=)
7: xZvR6MWPZBvZRDBfEcVO_l86DOI.crl (hash: VTTnS3+qRxFUd2H70GXQre6TeJI8RBX+8DqkpTMleDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5c:0b:bc:7e:8e:62:47:d8:56:00:5d:23:2c:b5:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Validity
Not Before: Jul 24 09:01:50 2026 GMT
Not After : Jul 25 09:01:50 2026 GMT
Subject: CN=7d229d1f3caabb06f667065b497001c90bdeb13a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:27:22:23:e0:83:6b:5d:48:2e:49:1e:15:8e:
90:3b:86:7c:e1:f9:9a:76:c0:20:0b:d0:72:6d:9b:
d1:95:dc:c8:e9:96:51:cd:80:f3:b7:cc:cf:9a:e3:
4c:a5:5a:83:bd:23:00:da:e0:d6:f6:5d:81:48:4e:
78:0c:eb:cf:d3:a7:dd:c5:b6:94:e2:03:ee:1f:68:
a9:c1:0b:27:8c:e6:55:79:2b:c6:65:33:97:c5:fa:
75:68:f4:00:22:9c:d2:10:16:44:d5:2c:25:9e:2a:
41:71:ab:69:7e:53:f9:52:1d:90:33:4f:73:9a:b3:
70:9d:e5:49:b4:07:bb:59:cd:bd:e7:d2:43:0b:c5:
2c:89:11:c7:77:19:5e:82:a0:d5:cc:95:13:e5:2d:
40:ab:cd:ff:74:1e:14:ad:a4:7c:c5:03:5a:39:04:
aa:f1:43:24:49:e7:72:5f:b3:02:83:5e:f4:5d:c8:
1c:ec:c9:c2:33:87:99:17:d7:84:b3:43:3f:46:9b:
28:8d:03:5d:a7:d2:2f:41:76:8e:57:43:98:bf:dc:
d3:78:10:20:67:19:14:b3:67:fb:ab:2e:af:6c:13:
e7:ef:c6:b8:55:6a:9b:48:d0:ba:4c:3f:a2:18:44:
a3:b2:8f:69:f4:7c:44:c5:12:87:6f:2e:cf:d1:ef:
8d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:22:9D:1F:3C:AA:BB:06:F6:67:06:5B:49:70:01:C9:0B:DE:B1:3A
X509v3 Authority Key Identifier:
keyid:C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:10:a5:64:8b:5e:5b:f9:bd:9d:59:e7:1c:6f:b6:48:56:84:
3b:72:52:1f:73:6b:6f:8b:eb:0d:41:8d:7d:69:ab:cc:1a:9d:
64:0b:59:34:13:23:50:8c:51:a8:02:9f:8a:0d:9f:9b:6a:71:
ca:de:7e:94:e8:7c:0e:79:fc:51:a8:84:95:91:3c:63:0f:88:
4c:53:58:d0:c2:1f:5b:04:5a:16:7a:bf:24:6d:19:22:ec:6f:
42:ef:0e:18:9f:8a:a7:a7:33:6c:6c:06:79:4c:1c:01:a6:c6:
a3:13:b4:c5:3b:35:46:8d:19:97:d7:e3:3e:66:fd:ca:55:a4:
7c:dd:b2:16:3e:68:09:d7:bd:81:48:88:ff:10:c5:6a:34:63:
4e:bf:92:8f:b3:8b:1d:d5:27:9e:d4:1a:61:07:88:40:06:60:
1c:f3:3f:36:f2:43:6d:5c:42:78:0b:ce:0f:f7:55:d6:4f:bd:
3d:40:22:c9:68:93:33:2a:20:37:e8:8d:1a:b9:a8:32:18:31:
3a:24:d2:cf:51:10:8f:f6:4e:05:7d:6c:cc:dc:d5:7d:89:66:
de:5b:3e:54:92:36:fa:83:83:03:7a:2f:4a:2d:3f:f0:5a:8a:
75:4d:a8:ac:7f:4e:3a:83:09:73:41:e2:b2:54:3d:4a:05:03:
18:e2:66:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:35:21 2026 by rpki-client