Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.mft
File: 500-XZlL7NPyWMQd858fY-xWPh0.mft (raw, json)
Hash identifier: X4QVCRbfKQ+TlxKw2Pba2uHVxtXHymRc/H4nRx59250=
Subject key identifier: A1:B3:A4:50:E2:FB:FC:3C:E6:66:7D:54:0A:F9:85:F4:D6:29:7B:CA
Authority key identifier: E7:4D:3E:5D:99:4B:EC:D3:F2:58:C4:1D:F3:9F:1F:63:EC:56:3E:1D
Certificate issuer: /CN=e74d3e5d994becd3f258c41df39f1f63ec563e1d
Certificate serial: 019F8FEC01074BDBCB5AA3BF86F4CE07938D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/500-XZlL7NPyWMQd858fY-xWPh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.mft
Manifest number: 1370
Signing time: Thu 23 Jul 2026 17:00:36 +0000
Manifest this update: Thu 23 Jul 2026 17:00:36 +0000
Manifest next update: Fri 24 Jul 2026 17:00:36 +0000
Files and hashes: 1: 500-XZlL7NPyWMQd858fY-xWPh0.crl (hash: Uz1YB3ro2Oh2iTIz3kLRjqKCukPTkhBSPNoFdCG5dtk=)
2: xJQkEE-myuee2xusX84h4jOXGkk.roa (hash: bgfimRITzgygmGvHr8W4DzraqoP9/oX3mukFAiSIHn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/500-XZlL7NPyWMQd858fY-xWPh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:01:07:4b:db:cb:5a:a3:bf:86:f4:ce:07:93:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e74d3e5d994becd3f258c41df39f1f63ec563e1d
Validity
Not Before: Jul 23 17:00:36 2026 GMT
Not After : Jul 24 17:00:36 2026 GMT
Subject: CN=a1b3a450e2fbfc3ce6667d540af985f4d6297bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8a:2c:2d:2e:87:77:ca:82:7b:cd:5a:be:62:
05:18:3c:ce:00:d5:8e:ae:b1:c6:9b:47:9f:9b:a3:
65:2d:8a:a8:5e:b7:f8:30:ab:9e:d4:58:f3:5f:21:
3b:1b:4b:04:82:2c:e5:b9:f2:0b:bd:dc:b1:46:9a:
97:2a:fe:96:79:7b:e9:f2:5a:80:05:9a:68:54:14:
59:44:d5:b0:6f:8d:04:a6:c9:42:df:03:1a:83:bf:
a3:de:27:6d:8e:d8:66:5f:40:5d:a7:fe:10:5d:36:
c9:80:60:1d:08:07:72:d1:a1:99:43:25:49:f4:64:
1b:0e:54:e2:ef:f5:91:fd:cc:74:f9:eb:b7:4b:93:
42:be:a6:f1:61:c0:1f:97:72:1d:e0:e2:91:80:25:
4c:dc:54:24:20:22:81:cc:84:b1:7b:7b:30:7f:94:
8f:4b:da:88:0f:2f:5f:18:9a:74:44:0a:8a:13:eb:
27:56:7c:85:9f:c4:05:f6:d4:e2:a2:4d:0d:1c:c5:
e4:52:de:90:27:52:67:be:55:8d:12:7d:34:b6:5b:
00:12:fa:f2:1f:1b:34:b6:d3:4f:4c:c1:7a:b1:ba:
ab:e2:37:f7:f2:0e:1d:bd:f0:2a:4d:0d:8d:bb:65:
d2:5c:21:43:ca:a0:35:2b:1e:aa:1f:ba:40:0d:29:
de:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B3:A4:50:E2:FB:FC:3C:E6:66:7D:54:0A:F9:85:F4:D6:29:7B:CA
X509v3 Authority Key Identifier:
keyid:E7:4D:3E:5D:99:4B:EC:D3:F2:58:C4:1D:F3:9F:1F:63:EC:56:3E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/500-XZlL7NPyWMQd858fY-xWPh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:a1:da:de:99:46:e6:fe:88:10:4b:fd:46:e0:a9:74:03:28:
19:81:eb:de:74:62:3e:3d:f4:51:49:c8:47:0c:59:a3:1e:0f:
b3:2d:40:7b:8f:e7:e7:f6:18:ed:a6:ae:d3:e0:fa:a6:a4:a8:
c1:ef:8b:18:42:d9:31:3c:98:7c:02:3c:2f:31:07:bc:71:6b:
ef:9a:16:a4:23:18:03:fe:cc:8d:cf:1b:2b:32:e9:4c:b7:2b:
f0:34:84:17:6a:b2:86:41:ac:23:74:f5:da:f0:b4:c8:08:b7:
a2:87:a1:f4:6f:73:e3:fa:6f:84:77:81:ea:43:96:50:4b:1f:
3f:c4:88:8a:a4:ed:9f:6f:78:7d:dc:20:ad:4d:46:62:49:d9:
c6:17:cb:38:f7:25:16:22:6a:86:c0:fb:e4:c2:bf:94:94:f3:
56:4d:fe:a2:03:66:cd:cc:33:a5:73:53:08:40:7e:5f:47:f8:
c1:3c:07:6b:71:71:a5:df:12:ee:7b:8e:c2:ab:a2:36:4b:f9:
58:db:ac:2f:df:9a:50:7d:0d:64:ef:da:40:9e:48:0f:bc:f9:
2b:eb:90:fe:5d:60:2c:42:55:9c:cc:3d:5e:29:e8:fc:6d:6e:
52:8e:aa:69:12:da:6b:0a:59:c2:5a:28:f7:7b:49:ba:5d:b2:
24:53:64:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:02:42 2026 by rpki-client