Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
File: xN_w4VI3gFUHr10Dq-3riDK0uMs.mft (raw, json)
Hash identifier: xMuTvW/F2h6vTIbiAFYSfp12PsN0H7WnyzbyexT/zuM=
Subject key identifier: 9D:A4:90:4D:6B:6B:CB:E0:99:F3:94:01:4B:BA:3E:9A:7D:0A:19:44
Authority key identifier: C4:DF:F0:E1:52:37:80:55:07:AF:5D:03:AB:ED:EB:88:32:B4:B8:CB
Certificate issuer: /CN=c4dff0e15237805507af5d03abedeb8832b4b8cb
Certificate serial: 019F957FFD28FC10B5A781A6D252BB72D185
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 19:00:20 +0000
Manifest this update: Fri 24 Jul 2026 19:00:20 +0000
Manifest next update: Sat 25 Jul 2026 19:00:20 +0000
Files and hashes: 1: EEs8_2SQ9wdEKnETnYAXwnbvPvI.roa (hash: CFxGxtKRpFSwMaRFJt3q5WoVWboKnoyoeoco0rArRao=)
2: xN_w4VI3gFUHr10Dq-3riDK0uMs.crl (hash: AbsolTVjHgqQl/tMvCU1gX6EdhtlDBAP/RYRXLIDubA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:7f:fd:28:fc:10:b5:a7:81:a6:d2:52:bb:72:d1:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4dff0e15237805507af5d03abedeb8832b4b8cb
Validity
Not Before: Jul 24 19:00:20 2026 GMT
Not After : Jul 25 19:00:20 2026 GMT
Subject: CN=9da4904d6b6bcbe099f394014bba3e9a7d0a1944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:68:a0:09:c9:a8:52:b3:f7:20:c3:0e:ec:4d:
0b:46:cd:4e:61:0a:3d:9a:6c:0c:ef:49:9d:d6:17:
0e:77:96:f3:7f:93:4a:5e:a3:b3:3e:17:ee:b3:b9:
65:e0:15:85:5c:22:5f:0d:55:8b:f2:e6:6f:cf:f3:
62:f9:9c:5f:fd:90:2d:1a:72:cc:fc:9c:4b:e5:e0:
cf:0d:08:fc:98:1b:e5:71:39:ec:a8:15:af:81:4c:
f5:4a:15:1a:dc:27:08:5a:58:55:d8:e2:15:c5:4b:
31:9e:a3:34:ee:91:a6:a1:af:8f:3c:27:c6:3b:8e:
d5:20:c6:2f:41:46:96:e7:ff:ec:03:dc:65:de:5f:
50:62:0d:71:9e:7e:3a:84:20:12:ea:df:26:a5:55:
d6:11:7f:28:be:75:b9:e3:40:97:58:be:c4:67:41:
82:59:7c:3c:a6:c9:97:4f:f7:f7:59:36:ff:9d:70:
ea:e4:b7:c0:87:9e:8c:f9:5c:68:d2:06:9d:49:02:
92:53:55:bf:2f:3e:10:bd:fd:26:f0:b6:23:b9:83:
16:9f:c0:01:d9:c1:52:2e:1d:a8:3c:75:42:92:22:
6b:3b:8f:36:e5:b9:c4:2b:ed:db:71:78:69:83:fb:
44:38:8f:47:b1:a8:53:39:60:48:79:e5:f0:59:11:
4b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A4:90:4D:6B:6B:CB:E0:99:F3:94:01:4B:BA:3E:9A:7D:0A:19:44
X509v3 Authority Key Identifier:
keyid:C4:DF:F0:E1:52:37:80:55:07:AF:5D:03:AB:ED:EB:88:32:B4:B8:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:f6:11:3f:6d:69:7c:a4:42:96:d8:b9:ab:58:ce:61:03:39:
5e:36:30:31:f3:0a:16:b4:9b:0a:99:09:81:ac:19:6e:ea:52:
85:76:dc:02:ff:db:ae:fb:05:62:eb:59:51:48:16:2d:ff:6f:
ba:89:dd:ea:54:44:c9:d3:e3:3c:47:48:61:5a:9d:28:13:ac:
6f:69:11:d9:28:c1:70:9e:68:f8:13:ce:5c:26:2f:e6:38:d7:
7c:83:ee:87:09:32:38:d6:f0:f5:18:2f:ed:23:78:91:a2:0e:
a4:5c:de:03:63:43:7a:eb:17:73:5e:03:07:31:5e:8a:67:fa:
96:1e:f0:22:d4:4f:7a:8c:87:a7:07:a5:e0:fa:03:28:28:26:
bf:29:79:61:78:88:ab:20:34:f2:89:17:47:14:b2:e9:04:96:
4a:b3:f1:ab:05:07:1c:e9:bf:5e:1b:b3:64:80:04:27:1c:82:
de:dc:a2:f8:e4:f7:d9:7e:59:e7:78:c7:1e:85:f6:63:79:a9:
0d:55:45:2f:67:9e:4d:41:2f:f4:d5:a9:f3:7b:f2:a0:b8:f8:
43:fc:ed:0f:4d:81:b3:e8:79:57:62:cf:71:50:bf:06:f5:7b:
9f:2e:f6:a2:74:d2:83:51:5e:4c:c2:d0:e1:9b:36:63:de:45:
1a:22:32:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:06:39 2026 by rpki-client