Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
File: x6TS9okT6s5sn1CSvcfdIPV09Dg.mft (raw, json)
Hash identifier: LrOBoi8XidyJ2XdNQzwUaU3xwOUmPdFgNxvM71ed7Yo=
Subject key identifier: DB:98:8C:13:8A:2B:29:27:89:5A:82:18:E0:9B:2A:A2:05:66:0C:75
Authority key identifier: C7:A4:D2:F6:89:13:EA:CE:6C:9F:50:92:BD:C7:DD:20:F5:74:F4:38
Certificate issuer: /CN=c7a4d2f68913eace6c9f5092bdc7dd20f574f438
Certificate serial: 019F8FB51267358D4F9F9F18BA1DF065016A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
Manifest number: 19CC
Signing time: Thu 23 Jul 2026 16:00:36 +0000
Manifest this update: Thu 23 Jul 2026 16:00:36 +0000
Manifest next update: Fri 24 Jul 2026 16:00:36 +0000
Files and hashes: 1: FXTyPwjMGAiU5KxW_Bfbg2AROHw.roa (hash: OnE+aJgFklXNXWETHHDMbnfVlcK0uF/bBVveHl9Em7A=)
2: T3lGsdRYO3Jiv8YeumY1-URxH8k.roa (hash: 2iZU0Zg9KB5iXER8e3UtbINmEwCtWsu/Q8hRWGFKAwI=)
3: x6TS9okT6s5sn1CSvcfdIPV09Dg.crl (hash: Qwvw4RmuaPj4OzpGgVKd6IFIG0iC68aDbE7HiUStgtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:12:67:35:8d:4f:9f:9f:18:ba:1d:f0:65:01:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7a4d2f68913eace6c9f5092bdc7dd20f574f438
Validity
Not Before: Jul 23 16:00:36 2026 GMT
Not After : Jul 24 16:00:36 2026 GMT
Subject: CN=db988c138a2b2927895a8218e09b2aa205660c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:eb:38:e5:2f:37:f1:23:6d:0b:3a:b2:f7:b6:
42:e6:8e:a2:f6:56:e9:8a:82:45:ca:fc:45:71:ff:
da:07:42:15:1e:ff:fb:f6:97:1f:25:ee:a9:d5:d2:
ae:a1:07:5a:b6:e3:d2:d1:dd:98:86:eb:2d:c9:fc:
ba:f9:95:6d:62:85:76:ce:32:79:41:78:ab:ea:f0:
7f:bf:14:ec:68:ce:44:ca:fd:47:a6:7c:69:d8:36:
1a:e7:63:ad:f4:5c:48:e6:eb:5a:31:e4:82:59:a4:
22:f2:39:dc:b0:e7:ac:f3:ad:8c:a7:ba:4c:25:8a:
6d:ef:ef:c0:6b:df:fa:58:7e:31:7c:17:bf:1f:e0:
69:a3:4c:dd:53:80:c1:12:6d:a6:cb:0a:df:17:3e:
00:85:1b:77:66:a7:13:b9:0e:ff:08:33:9d:e4:62:
10:3c:db:c2:38:65:1c:28:21:72:ad:0a:4d:81:12:
e0:de:72:e1:14:26:e5:08:07:9d:2e:a7:e6:dd:38:
30:43:5e:26:24:f2:c3:d6:f5:ae:02:bc:4c:dd:0a:
5f:5b:57:03:f3:33:40:81:18:2a:9c:c5:36:6b:f1:
6a:c2:59:23:48:e4:5f:58:98:66:5e:d7:e9:1c:a3:
fa:e2:7e:6a:87:35:8a:f3:40:59:6c:37:68:97:fa:
cb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:98:8C:13:8A:2B:29:27:89:5A:82:18:E0:9B:2A:A2:05:66:0C:75
X509v3 Authority Key Identifier:
keyid:C7:A4:D2:F6:89:13:EA:CE:6C:9F:50:92:BD:C7:DD:20:F5:74:F4:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:5e:36:12:b9:63:32:03:22:f5:02:ae:e3:b6:5b:42:43:86:
5c:97:d2:30:05:50:5f:ff:7d:30:48:b0:42:d9:03:26:09:3f:
98:6f:64:73:05:aa:da:2f:6d:5d:c7:d3:d9:a3:1d:c1:14:a2:
38:b7:cd:ab:48:d8:cf:66:a3:a8:08:13:7b:5f:fe:d0:6c:02:
54:5a:6d:93:9b:01:25:4a:5b:77:20:82:c8:f2:40:4f:dd:92:
f3:72:dc:09:87:ff:f0:14:7d:91:93:0b:88:00:92:dd:49:1f:
cf:04:51:ff:a7:8b:23:c9:16:c1:bd:10:75:52:ab:e8:9a:62:
ca:49:4f:7c:c2:00:3c:60:1c:27:d5:e8:d0:34:c6:1a:7b:37:
0c:b0:0d:cd:89:72:82:ea:e3:fe:0f:e4:16:0e:ee:3b:78:45:
0d:79:9b:31:b2:41:63:76:ec:a6:3e:3b:5e:64:8a:49:a2:f0:
bf:df:ee:80:dd:8b:7f:b9:b9:90:e8:0c:2f:91:90:7b:ff:72:
cb:aa:c0:c3:5a:ba:53:08:73:5a:5c:37:89:5a:cb:3c:a9:6b:
6a:9e:e9:63:06:d2:63:ff:2c:4c:5b:af:08:95:09:13:86:d0:
9a:0f:5b:77:20:31:48:4f:60:d6:e7:c9:fd:ec:f0:67:65:a9:
c5:be:66:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:26:44 2026 by rpki-client