Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
File: XsF2nT_wQhJGmOMcRytju_G7ta0.mft (raw, json)
Hash identifier: /8Tvr5cUvroaQGUk1pn9I98xFSsJFVBwnbf7ght6Iiw=
Subject key identifier: 2A:7D:D6:E0:36:72:4D:0F:E9:11:4C:F6:29:C8:F2:EE:28:AE:5F:1C
Authority key identifier: 5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
Certificate issuer: /CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Certificate serial: 019F927FCC82B276A9ECA3C32F8EED92F5CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
Manifest number: 07BC
Signing time: Fri 24 Jul 2026 05:01:16 +0000
Manifest this update: Fri 24 Jul 2026 05:01:16 +0000
Manifest next update: Sat 25 Jul 2026 05:01:16 +0000
Files and hashes: 1: Gkzr8cmq5l-SJW535VAbg6PLMB0.roa (hash: Y4hmK6YPKNo9n40cQMscOcZSxtVZskzUJfJT11sn8vQ=)
2: OpYOp0A5IPKJ7jbcXskpSxQGlaQ.roa (hash: rADmm3meTWoAJpb+yfOPFFjI2xZfTZaGcVmBPuOR9B8=)
3: XsF2nT_wQhJGmOMcRytju_G7ta0.crl (hash: fMcf07tCfSTv3WtxxwRbU+VJM61UFffDi/EfBooAsCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:cc:82:b2:76:a9:ec:a3:c3:2f:8e:ed:92:f5:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Validity
Not Before: Jul 24 05:01:16 2026 GMT
Not After : Jul 25 05:01:16 2026 GMT
Subject: CN=2a7dd6e036724d0fe9114cf629c8f2ee28ae5f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:8a:49:cc:78:47:46:0e:18:b9:33:d6:35:70:
4e:66:cd:6f:d3:72:b1:a6:fc:9e:4f:e7:9f:01:9c:
de:87:26:19:31:4c:9f:3c:9e:74:73:b7:d5:c9:6d:
b9:ed:53:0f:bc:ad:56:ab:36:20:0e:75:86:b6:b5:
fb:93:d0:42:41:5b:b3:73:35:02:6d:f9:fc:99:93:
57:37:ca:d6:15:e5:62:d3:d3:7d:66:71:90:c0:7f:
08:d9:68:64:74:01:b6:a0:4a:70:5a:5d:32:58:5d:
69:d6:13:42:fd:0f:78:fb:7d:a0:d3:54:96:76:fb:
94:10:a8:64:80:0e:7c:ad:61:10:42:d9:df:b0:e8:
93:87:a2:26:c0:23:6a:4b:68:bf:d8:e4:c2:73:d3:
42:91:58:7e:11:73:74:36:06:61:b3:80:7f:56:a0:
97:db:3f:e2:69:5c:69:28:bd:d8:17:18:d2:e1:17:
58:a5:82:3e:f3:73:8d:39:b0:95:fa:95:3e:a5:45:
47:f8:7a:e2:db:f0:55:d2:70:e4:db:1c:e9:b5:74:
da:cb:f0:7f:74:e8:98:1c:f1:31:50:31:2f:e8:59:
8f:39:4b:74:e2:53:fe:fb:46:a6:71:59:63:81:7b:
1d:1f:5d:e8:43:00:00:5d:4c:21:aa:c6:72:7c:27:
db:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:7D:D6:E0:36:72:4D:0F:E9:11:4C:F6:29:C8:F2:EE:28:AE:5F:1C
X509v3 Authority Key Identifier:
keyid:5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:e5:09:a8:e8:6e:69:c9:72:e2:e4:69:97:2f:98:a9:9c:60:
87:55:e5:a0:19:a3:17:9f:eb:24:e7:32:83:20:cd:d6:c6:82:
21:6b:16:4d:07:59:93:4c:49:95:5b:57:9c:68:f0:41:47:eb:
99:8b:f6:68:4d:ef:91:42:65:83:df:be:8c:c9:19:11:32:6e:
fb:95:5b:6f:81:6f:20:9b:fe:7a:47:28:67:72:fa:8f:f1:a5:
15:28:f0:b5:a3:78:63:83:e3:2b:2a:8c:21:04:e5:84:47:1b:
9f:73:45:f4:07:b6:01:00:06:72:7c:b3:77:d8:db:4c:22:63:
85:f4:b2:2c:fb:05:d5:ad:ba:eb:59:61:0e:2d:ac:6d:22:e7:
ae:97:32:26:ca:8f:96:cb:0b:53:ba:3e:d1:ee:44:d8:13:35:
be:18:2e:c2:d3:90:8f:c3:cf:bf:5e:30:81:ea:4f:d5:10:76:
ec:8d:16:0a:2e:b3:d1:e3:fa:c8:a4:16:f4:87:83:83:f5:5a:
ac:61:fa:cf:a8:09:f8:7d:39:c7:ab:87:06:cc:94:a9:08:5c:
65:79:67:2d:e0:41:7d:12:6d:6e:5c:06:e0:d1:15:d7:a5:8f:
62:e2:44:4a:02:d6:8e:42:dd:99:fd:6f:b1:63:4d:56:97:de:
86:a9:65:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:48:02 2026 by rpki-client