Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/XBRlCm-eyMOFcLG8SZdYZYaK3uA.mft
File: XBRlCm-eyMOFcLG8SZdYZYaK3uA.mft (raw, json)
Hash identifier: Fu2QsGLVY8c2/VyxWU+Ur196mq34iQzXStintz0gC+M=
Subject key identifier: 74:21:B1:CE:C7:E5:63:CE:9B:07:0D:9D:0B:BE:82:9E:8A:05:A8:42
Authority key identifier: 5C:14:65:0A:6F:9E:C8:C3:85:70:B1:BC:49:97:58:65:86:8A:DE:E0
Certificate issuer: /CN=5c14650a6f9ec8c38570b1bc49975865868adee0
Certificate serial: 019F954957E9C56071A19CD835123A280820
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XBRlCm-eyMOFcLG8SZdYZYaK3uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/XBRlCm-eyMOFcLG8SZdYZYaK3uA.mft
Manifest number: 42
Signing time: Fri 24 Jul 2026 18:00:39 +0000
Manifest this update: Fri 24 Jul 2026 18:00:39 +0000
Manifest next update: Sat 25 Jul 2026 18:00:39 +0000
Files and hashes: 1: 04Jned94Tm4i1zjB6zNQbqDkj_E.roa (hash: SONtOeyZ10Os/7J4wXL7zFzVJyuJnftLszlFQu+LaN8=)
2: XBRlCm-eyMOFcLG8SZdYZYaK3uA.crl (hash: AsKDR0/zKBLixpOyqIaRT4PMnEaBvhICkAN2+SEhFmE=)
3: ZVwy0ZfFb9sOAQVJkv6jGWwOzQA.roa (hash: aaY2/fswTLKyyajK0wJbHpj/eHxX7OB2bAMISHRWGRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/XBRlCm-eyMOFcLG8SZdYZYaK3uA.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/XBRlCm-eyMOFcLG8SZdYZYaK3uA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XBRlCm-eyMOFcLG8SZdYZYaK3uA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:57:e9:c5:60:71:a1:9c:d8:35:12:3a:28:08:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c14650a6f9ec8c38570b1bc49975865868adee0
Validity
Not Before: Jul 24 18:00:39 2026 GMT
Not After : Jul 25 18:00:39 2026 GMT
Subject: CN=7421b1cec7e563ce9b070d9d0bbe829e8a05a842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:37:85:b3:48:95:1e:2f:c7:8b:d0:9e:fd:b9:
66:1e:f3:c4:45:d8:c2:d2:4b:70:e0:52:1f:f1:e1:
71:f7:7c:ff:59:e8:f7:83:3c:34:5a:eb:05:86:58:
92:b3:64:70:f3:f6:08:74:a5:78:80:83:dc:e5:b9:
a1:da:10:72:5b:27:b8:4e:40:06:50:28:f6:2a:de:
5f:e8:3b:d8:ee:64:b7:6b:ef:c7:22:21:16:ee:0b:
16:64:f4:ee:68:f5:61:75:0b:e6:e2:a5:95:d2:e9:
37:34:f9:c4:b6:c7:73:fc:20:9e:b8:f3:79:cd:9e:
3f:31:2a:52:e3:ef:56:4b:91:00:e3:70:49:e9:a5:
65:78:8a:38:f4:f1:e3:f2:e1:29:3c:43:77:bf:6f:
d6:31:f4:22:dd:ef:cc:3e:17:ad:f4:2e:98:f7:60:
25:9d:dc:2e:e0:de:bf:af:c9:d7:d2:a6:0a:98:63:
c1:b2:6d:c8:0c:78:4d:c8:96:86:bd:a4:69:53:60:
28:03:3e:8c:21:c0:fb:c3:97:0d:8a:86:3c:65:42:
3b:f9:ea:c2:08:f5:88:6c:da:8a:21:34:b9:b4:7a:
bd:1d:8b:88:01:20:86:01:e9:26:f0:8e:ac:03:82:
2f:2b:d8:c9:e2:15:53:d7:73:ba:62:a2:03:dc:2d:
09:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:21:B1:CE:C7:E5:63:CE:9B:07:0D:9D:0B:BE:82:9E:8A:05:A8:42
X509v3 Authority Key Identifier:
keyid:5C:14:65:0A:6F:9E:C8:C3:85:70:B1:BC:49:97:58:65:86:8A:DE:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XBRlCm-eyMOFcLG8SZdYZYaK3uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/XBRlCm-eyMOFcLG8SZdYZYaK3uA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/XBRlCm-eyMOFcLG8SZdYZYaK3uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:a0:d3:af:d4:85:1b:65:00:94:c0:b0:3f:1d:77:fa:08:09:
85:3b:76:b5:72:a6:69:6a:a8:80:35:be:ba:d6:30:90:ff:bc:
3e:b3:a0:e5:d6:ae:e2:7d:e8:8d:6d:63:58:fe:c7:a9:31:9f:
a3:34:52:67:b3:5f:33:b0:0b:c1:3f:94:de:3f:26:cd:99:ac:
fb:2d:74:ea:80:f1:c1:43:cc:92:6b:2f:4f:66:8b:41:58:f8:
18:38:1f:af:87:2e:15:10:58:ed:20:fa:ba:a3:20:65:9c:c7:
79:df:bb:5d:78:91:01:7c:9d:fb:39:ba:e3:08:5e:5a:67:b1:
68:09:2a:f5:bd:d9:9a:c8:cb:3a:a7:8c:3a:bb:65:fc:bc:57:
9d:3c:6d:a1:10:e4:a2:f1:67:b7:07:00:32:c3:d4:99:86:4f:
28:69:cb:5f:45:e5:68:86:e5:77:1e:68:3d:48:bf:ad:27:12:
c4:03:cd:7b:e7:a9:a0:f8:3c:22:dc:fa:bc:65:92:fb:60:ea:
a6:6b:9d:fd:97:a9:9e:50:bd:8c:66:4b:a9:93:fa:9d:92:d9:
e7:d2:13:87:4c:66:a8:66:6a:e6:e5:d1:71:20:a0:03:4e:0b:
01:9a:0e:ef:2b:c3:3b:17:cf:14:00:19:94:9d:71:4d:fb:33:
64:ae:20:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:06:50 2026 by rpki-client