Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
File: XYJmcuaPPaXbUO2ButuNM73M0ro.mft (raw, json)
Hash identifier: utrCSou09vXrkyMvqRdX4FWmBV9UAno/38o72JALHg4=
Subject key identifier: 2B:E0:A3:2D:2E:7C:FB:7E:6F:E8:28:AD:3B:63:D1:15:A8:E0:21:36
Authority key identifier: 5D:82:66:72:E6:8F:3D:A5:DB:50:ED:81:BA:DB:8D:33:BD:CC:D2:BA
Certificate issuer: /CN=5d826672e68f3da5db50ed81badb8d33bdccd2ba
Certificate serial: 019F935BEFBF0D125C66B8984133FEAAD3C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYJmcuaPPaXbUO2ButuNM73M0ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
Manifest number: 1603
Signing time: Fri 24 Jul 2026 09:01:43 +0000
Manifest this update: Fri 24 Jul 2026 09:01:43 +0000
Manifest next update: Sat 25 Jul 2026 09:01:43 +0000
Files and hashes: 1: XYJmcuaPPaXbUO2ButuNM73M0ro.crl (hash: bJ5bBlsG789jmnd0LCG93Ik8hIKXJmwpgYILI6tW8Ks=)
2: fDzIkCC4HQZF8d8gvy277WuuRYM.roa (hash: TzMFdxwnyUIL4oJ9MUVrNEjKX81ekLEZoq92hFxo3V4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYJmcuaPPaXbUO2ButuNM73M0ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:ef:bf:0d:12:5c:66:b8:98:41:33:fe:aa:d3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d826672e68f3da5db50ed81badb8d33bdccd2ba
Validity
Not Before: Jul 24 09:01:43 2026 GMT
Not After : Jul 25 09:01:43 2026 GMT
Subject: CN=2be0a32d2e7cfb7e6fe828ad3b63d115a8e02136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f9:36:f7:66:6d:28:a2:67:a6:7a:bf:0b:61:
13:b4:e5:0e:68:47:51:7d:1e:1a:b5:73:53:bf:55:
ab:91:d5:c8:36:37:58:ea:01:65:93:35:6c:3a:8f:
ff:2f:b6:44:30:5a:74:79:65:26:28:2f:15:0e:76:
3b:7e:4c:2b:9e:a8:df:71:d1:e4:a1:dc:4d:34:a3:
da:a1:e1:29:75:51:e1:c2:01:25:ba:c6:8a:7a:0f:
ae:c2:a1:0a:c6:34:aa:70:0f:fe:f6:30:c5:47:c0:
af:1e:a1:62:ac:cd:5e:b7:04:52:c1:ec:07:c9:b9:
14:97:57:48:27:a4:6c:39:fd:a7:33:fa:ff:64:8d:
13:e8:45:aa:55:3d:58:82:59:09:1d:db:0c:06:c1:
1d:32:a9:0c:2e:86:e8:64:08:4a:9d:39:47:e3:d3:
6e:f7:66:c1:3f:a0:54:36:81:ae:a6:91:90:b1:a4:
a6:42:af:41:35:46:80:e9:46:f1:34:02:85:47:04:
4b:eb:10:e9:cc:a8:b1:c3:56:00:a5:a9:06:1f:d7:
c0:f8:03:f9:ee:ea:eb:c0:08:30:bb:44:7b:06:b1:
5a:bb:19:9a:66:b8:56:3f:6c:df:aa:e6:7d:92:39:
d4:9d:cf:90:37:e8:30:01:b7:0e:f8:a8:e0:d4:93:
50:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E0:A3:2D:2E:7C:FB:7E:6F:E8:28:AD:3B:63:D1:15:A8:E0:21:36
X509v3 Authority Key Identifier:
keyid:5D:82:66:72:E6:8F:3D:A5:DB:50:ED:81:BA:DB:8D:33:BD:CC:D2:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYJmcuaPPaXbUO2ButuNM73M0ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:6c:17:f6:d4:93:96:bb:17:f5:88:01:22:31:58:a8:bf:02:
f0:bc:66:e0:b6:0e:e3:f3:27:ac:3d:65:f0:05:10:e2:60:25:
d1:b1:21:0d:5e:b4:fc:c4:44:3d:a8:ee:88:67:ec:c5:72:cb:
d8:1e:0a:08:78:67:91:b7:e6:39:f1:6d:dd:5a:96:23:b7:82:
5e:2c:51:a2:4a:7b:a9:16:31:8b:2d:5c:40:6b:5d:a5:fb:33:
be:94:18:67:13:1e:aa:11:5b:e1:ae:c2:60:49:e0:c4:7e:f5:
03:18:b9:7b:c1:8e:4c:52:b0:bb:7f:ab:c6:55:ea:bf:2d:29:
86:3f:c8:e0:52:06:e9:8c:6f:59:40:6e:fb:70:9b:8a:6d:d8:
be:6e:ef:c0:47:94:f4:38:0b:8a:be:40:8a:de:4c:6f:e8:6a:
c2:ad:d8:b7:65:0a:99:cf:ed:3c:5e:4a:b6:a1:e6:4d:7e:be:
97:90:0e:63:c7:93:02:e4:a0:4e:4e:33:9d:0a:de:ce:14:b2:
a5:ce:91:cc:f9:fe:a7:1e:eb:c0:c3:1d:fa:07:63:3d:7c:54:
e1:b6:1a:4a:5b:71:73:81:8d:95:25:ea:20:d1:ea:1f:2b:fc:
4c:9c:96:2f:84:60:46:00:b9:c6:c5:c6:78:e3:b0:b8:d5:61:
49:c8:c5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:18:00 2026 by rpki-client