Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.mft
File: xcgmUInL3eamxXnNd2tfgMD4rdQ.mft (raw, json)
Hash identifier: kTWlk/Dx/7MxTk9LZiT8MzuFg364hAK14E2mzrIhniQ=
Subject key identifier: AF:53:B7:C2:D7:7E:20:56:F1:FA:0E:BD:E8:B1:61:BE:2F:24:A8:AF
Authority key identifier: C5:C8:26:50:89:CB:DD:E6:A6:C5:79:CD:77:6B:5F:80:C0:F8:AD:D4
Certificate issuer: /CN=c5c8265089cbdde6a6c579cd776b5f80c0f8add4
Certificate serial: 019F916CFAB6A672F2E6B0A1FC05381E18B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xcgmUInL3eamxXnNd2tfgMD4rdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.mft
Manifest number: 04DE
Signing time: Fri 24 Jul 2026 00:01:06 +0000
Manifest this update: Fri 24 Jul 2026 00:01:06 +0000
Manifest next update: Sat 25 Jul 2026 00:01:06 +0000
Files and hashes: 1: m7FhPhHs11a2vSve5xnlsfFohsw.roa (hash: hMpM0IenW1hqeUpQGO4ux70XpFaz54EzPiQ0jMGVOds=)
2: xcgmUInL3eamxXnNd2tfgMD4rdQ.crl (hash: W8eMjk1ENDflJoQ2FVM262wWfLrl+cyZT9IVloEgU8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xcgmUInL3eamxXnNd2tfgMD4rdQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:fa:b6:a6:72:f2:e6:b0:a1:fc:05:38:1e:18:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5c8265089cbdde6a6c579cd776b5f80c0f8add4
Validity
Not Before: Jul 24 00:01:06 2026 GMT
Not After : Jul 25 00:01:06 2026 GMT
Subject: CN=af53b7c2d77e2056f1fa0ebde8b161be2f24a8af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:95:63:46:35:07:19:6d:3e:f8:27:53:e6:f9:
e0:ec:1a:a8:87:b3:7f:87:a9:5d:56:1b:e5:ea:8e:
74:14:ea:fb:9c:bb:2c:73:2d:19:19:9c:35:2d:bc:
7f:68:9d:c7:47:69:e0:cb:49:89:cd:38:20:36:88:
29:51:0b:21:53:de:6b:3e:f5:1c:72:ce:f4:a6:81:
d3:7a:22:45:5f:fd:0c:26:5b:44:e2:f1:77:d2:fc:
78:50:82:ef:32:8b:41:a2:11:7d:30:fb:27:3c:aa:
05:c2:88:47:e7:b9:c2:f0:fb:d7:2b:52:6c:72:4b:
00:f4:d3:57:5e:92:b7:84:de:ee:fb:90:7d:18:fd:
c1:29:a9:05:b3:3c:2d:50:f1:9b:2b:87:1f:81:fa:
5c:55:63:0e:87:c5:a9:f5:9e:3b:1c:3b:af:b0:cd:
9b:5d:64:43:c1:f6:41:dd:83:31:84:d5:fb:d2:75:
82:aa:e3:b2:5f:ec:2b:5d:14:f3:4a:16:1d:7e:23:
be:02:e9:08:e7:2d:9a:aa:b4:f9:bb:c0:c4:de:d1:
c6:8d:cc:a4:71:c3:ea:39:5f:27:27:e1:5b:db:d9:
a5:bc:f8:45:89:e6:ab:92:cc:9b:1f:9b:a5:5f:f2:
08:91:38:ea:eb:d2:74:39:ef:af:d6:f4:f7:2c:96:
51:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:53:B7:C2:D7:7E:20:56:F1:FA:0E:BD:E8:B1:61:BE:2F:24:A8:AF
X509v3 Authority Key Identifier:
keyid:C5:C8:26:50:89:CB:DD:E6:A6:C5:79:CD:77:6B:5F:80:C0:F8:AD:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcgmUInL3eamxXnNd2tfgMD4rdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:f0:ab:f2:67:ff:74:1b:91:92:f4:99:cc:77:3a:21:09:e0:
7c:6e:4d:96:67:db:8e:ed:b7:5f:76:f5:f9:48:90:42:e3:60:
5a:d4:05:25:d4:75:ad:4b:29:03:92:e8:0e:94:03:32:3b:3b:
8e:1d:9b:a9:5e:6d:47:16:91:2b:59:c3:ee:0f:a2:4f:d9:de:
84:21:d7:0d:ae:57:da:1b:96:d3:ee:f9:c3:cc:70:79:af:29:
4e:f8:f2:12:9b:6a:2a:fc:2f:b2:9a:49:6c:27:7a:49:5c:19:
e6:77:84:04:0d:8f:82:6b:29:33:25:bc:89:7f:a5:3a:bf:21:
06:76:00:c9:d5:e6:75:00:06:e9:92:63:d5:18:f0:ec:ba:fe:
be:b7:7c:e2:a6:4d:85:19:da:bc:78:1f:84:81:60:14:9b:8f:
7f:92:23:3d:d9:57:ed:e4:8e:d1:f6:ab:12:6f:78:71:fc:af:
f5:51:a4:e4:a7:79:f1:7d:30:0f:6c:2b:3e:b7:d6:ae:0d:18:
1c:00:1a:2c:14:b8:8f:b8:48:c6:46:e2:d3:4b:60:be:5d:f4:
7a:a7:5b:3a:92:aa:7f:f0:98:df:29:35:6d:2e:62:8f:fd:09:
32:aa:f6:65:a5:86:39:32:db:5a:25:6b:03:11:69:a3:c5:be:
46:03:80:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:00:42 2026 by rpki-client