Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
File: XZxbcz-6cemMB-E7A6fFWrhMyO0.mft (raw, json)
Hash identifier: 2u8eWV8IEvYQHRdfXkmGt1NC4JBRnpED7qyTMSqgR3Y=
Subject key identifier: 12:F2:59:BE:A9:DD:7E:6B:31:99:F5:54:84:99:15:0B:2C:6E:71:01
Authority key identifier: 5D:9C:5B:73:3F:BA:71:E9:8C:07:E1:3B:03:A7:C5:5A:B8:4C:C8:ED
Certificate issuer: /CN=5d9c5b733fba71e98c07e13b03a7c55ab84cc8ed
Certificate serial: 019F9512AF0BC45C0D1B71B18E02F77F124B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
Manifest number: 19CB
Signing time: Fri 24 Jul 2026 17:00:57 +0000
Manifest this update: Fri 24 Jul 2026 17:00:57 +0000
Manifest next update: Sat 25 Jul 2026 17:00:57 +0000
Files and hashes: 1: D7RyDh7lTL4H2jBeI3MtODxeB2w.roa (hash: j4FPb00AEU8sTGz7vN2WFChjUdkqXvKYmGt4w0kqQbw=)
2: XZxbcz-6cemMB-E7A6fFWrhMyO0.crl (hash: YbPNX05oCvtJMTy5s2xpGyCevvz4rJgcwH9a9MvimEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:12:af:0b:c4:5c:0d:1b:71:b1:8e:02:f7:7f:12:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c5b733fba71e98c07e13b03a7c55ab84cc8ed
Validity
Not Before: Jul 24 17:00:57 2026 GMT
Not After : Jul 25 17:00:57 2026 GMT
Subject: CN=12f259bea9dd7e6b3199f5548499150b2c6e7101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:64:23:bc:59:e8:1e:c4:fe:d2:c5:24:16:1a:
b8:3f:e3:f3:20:27:17:05:1f:c6:8c:32:02:f2:ec:
ca:2f:ec:71:d1:aa:31:05:e6:74:60:57:00:3a:ed:
75:fb:17:dc:35:e9:52:c5:86:57:67:b4:36:b2:a6:
bd:67:6a:c6:5c:9e:d6:b5:8b:27:0b:0f:21:ce:cb:
e6:16:47:0d:54:6a:e2:31:83:b0:eb:3e:0a:86:3b:
bb:bc:66:d7:96:3c:f7:d9:2d:0a:e2:d6:72:7c:ee:
b1:44:e3:d8:11:2a:ef:41:7d:a3:03:56:25:18:68:
e5:be:e4:9d:72:30:98:18:d3:c1:e2:5a:aa:22:48:
2a:a6:62:8c:02:d1:82:8f:6b:cd:93:c4:9f:81:82:
f2:15:c8:9e:c1:77:e8:23:f8:79:70:9d:05:54:39:
db:0e:0b:6f:0d:a2:0d:59:2c:3a:75:67:27:f3:f7:
17:6e:92:d2:42:2d:17:d5:65:78:c2:b6:30:05:81:
42:d7:b8:56:84:0d:66:c2:7f:43:5f:10:fe:a1:2c:
d0:18:4b:0a:ad:cd:76:5f:23:7b:4b:8d:90:00:a3:
bb:82:a4:38:1d:a9:ca:ea:3f:50:4a:5e:c6:bb:88:
69:33:40:66:b7:00:2d:aa:01:fd:a6:1b:49:98:6d:
63:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F2:59:BE:A9:DD:7E:6B:31:99:F5:54:84:99:15:0B:2C:6E:71:01
X509v3 Authority Key Identifier:
keyid:5D:9C:5B:73:3F:BA:71:E9:8C:07:E1:3B:03:A7:C5:5A:B8:4C:C8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:a4:44:7c:55:25:54:67:aa:56:2a:d6:5c:cd:a9:fc:6b:d1:
29:fd:03:5e:de:bd:66:cc:ed:49:52:2a:ad:ca:7d:a6:22:7c:
f1:fe:a8:15:26:da:63:a8:ad:cb:59:42:10:1e:9e:2e:f7:4a:
aa:9d:e8:27:70:1e:34:1b:f2:26:b8:fa:de:a3:d8:4f:a6:01:
51:46:46:00:1e:0e:a3:f5:75:3a:2f:ca:d7:57:01:21:28:f6:
26:79:ab:2b:04:a8:fa:57:02:b4:c9:96:60:d2:56:de:4e:48:
c8:c8:97:bc:90:e2:f5:1d:c1:bf:67:c9:6e:bc:14:21:b6:dc:
4c:a1:ad:c6:ce:9f:09:39:39:ed:7d:f0:2a:b6:4b:a7:e5:f6:
bc:76:0d:cb:2a:af:12:f9:29:ca:a0:7c:52:88:6e:84:cf:13:
6b:c8:93:e8:01:e3:b2:61:00:9f:98:7e:2a:86:4f:6a:77:d2:
cf:c9:5c:fe:be:82:26:79:bd:1b:50:e9:73:07:22:48:97:95:
96:59:71:b4:b2:38:09:be:eb:0f:d3:54:67:9f:a8:66:48:c2:
53:1f:19:b8:a2:3b:92:b8:64:da:25:bc:50:69:42:a5:0f:0f:
96:93:2a:88:a4:3b:50:a9:1f:98:74:c5:ad:e5:55:82:d1:d5:
79:a8:49:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:46:00 2026 by rpki-client