Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
File: XRKbBGDPnuBQDuiAos-hpSTk3wA.mft (raw, json)
Hash identifier: rqYEJOWAyEPOIw064nGbdaAt9gNMnHPweCqUiDosIyc=
Subject key identifier: E0:22:C4:AB:6D:FC:38:BA:C4:DC:7D:EC:7B:B5:14:6E:02:51:58:93
Authority key identifier: 5D:12:9B:04:60:CF:9E:E0:50:0E:E8:80:A2:CF:A1:A5:24:E4:DF:00
Certificate issuer: /CN=5d129b0460cf9ee0500ee880a2cfa1a524e4df00
Certificate serial: 019F94DC6EF1BF65C71EF75BDD34D5288203
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
Manifest number: 19D1
Signing time: Fri 24 Jul 2026 16:01:41 +0000
Manifest this update: Fri 24 Jul 2026 16:01:41 +0000
Manifest next update: Sat 25 Jul 2026 16:01:41 +0000
Files and hashes: 1: L40pPH6TicBG2s3pYm_kCH0QuH8.roa (hash: T9wzscjITMGr1trkfg1j7FXPyni8Fc+OiviUYZ5c/0E=)
2: XRKbBGDPnuBQDuiAos-hpSTk3wA.crl (hash: VcihZ0FhOnFJ7xMzbyaNeMpqtCWTm6MTcaxMU1BfKuA=)
3: swnpl4td9eb6_J81u2GZTHQvUnM.roa (hash: OzZo/a2puN3YVDYWaueHcqlnkjv3aKzrJf+DmBTG+js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:dc:6e:f1:bf:65:c7:1e:f7:5b:dd:34:d5:28:82:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d129b0460cf9ee0500ee880a2cfa1a524e4df00
Validity
Not Before: Jul 24 16:01:41 2026 GMT
Not After : Jul 25 16:01:41 2026 GMT
Subject: CN=e022c4ab6dfc38bac4dc7dec7bb5146e02515893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5b:97:d9:57:b4:0b:f8:13:4d:71:a8:05:e9:
66:a2:78:e6:eb:b7:8d:6e:c2:82:15:e8:55:c7:a6:
13:34:4e:d4:ce:34:45:bb:22:de:f1:34:6b:2b:48:
fb:0c:e4:35:cb:51:68:05:da:e4:3a:b7:67:27:d8:
ba:1f:09:ab:2e:76:39:93:cb:17:dc:2d:3d:26:4e:
1d:97:4f:e6:02:75:d0:36:aa:91:7d:b3:e0:99:e0:
e7:df:a5:67:0d:3d:58:7e:7d:99:11:95:aa:fd:3f:
92:7c:8e:be:6d:37:f0:5d:2e:4f:34:f7:9d:f7:d2:
20:b9:f8:83:c9:89:34:92:e2:93:e6:b3:7b:73:33:
70:7a:db:4a:98:fe:54:83:e7:a3:3c:be:3a:93:eb:
67:41:eb:0a:56:b3:78:74:ba:ba:61:52:47:f4:b1:
89:9c:8a:b5:cb:77:5d:62:f8:26:46:cb:1f:30:53:
d1:0e:9d:6a:d0:89:e1:0b:e8:a5:83:0e:d0:ba:6f:
d3:2c:c1:8a:21:ed:ef:81:a0:22:34:62:eb:89:79:
b9:bf:a5:03:50:37:35:e5:ef:3f:dc:bf:fe:b9:cd:
ef:6c:87:f9:ca:9e:77:30:3b:f0:bb:c4:6b:f7:61:
f1:66:45:59:97:65:e7:7c:89:ed:f4:9d:92:f6:82:
6c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:22:C4:AB:6D:FC:38:BA:C4:DC:7D:EC:7B:B5:14:6E:02:51:58:93
X509v3 Authority Key Identifier:
keyid:5D:12:9B:04:60:CF:9E:E0:50:0E:E8:80:A2:CF:A1:A5:24:E4:DF:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:df:d8:86:b3:41:3a:ee:bd:d7:f5:f0:1c:3c:4d:ec:e4:22:
55:51:4a:0f:29:9f:85:58:15:83:8e:9f:f1:e3:3c:6d:8a:34:
9c:37:8b:af:04:d1:e7:a0:f4:f6:07:95:44:93:d5:5b:01:6e:
a9:02:36:d3:df:84:be:29:68:b2:6c:0e:09:55:f2:45:46:92:
f2:32:83:64:52:af:9a:23:5b:67:fa:cb:21:77:98:1a:d8:f6:
17:51:11:8b:90:21:c7:2c:2d:b8:08:cc:2f:03:4a:14:c1:64:
be:1e:cc:12:15:4c:3f:8d:a7:67:46:b8:21:39:43:77:4f:1f:
fe:d2:3a:e6:63:31:8b:ee:83:be:5c:5b:c3:84:98:23:a9:b1:
e9:89:50:a9:3b:8a:b4:c6:a0:44:ab:fe:c3:e8:35:8f:11:25:
8a:a3:49:31:65:3b:b8:3e:df:0f:e2:c6:c1:10:a0:49:60:fb:
45:7e:c9:eb:26:d8:f4:7a:6b:36:ec:06:fd:71:bb:9f:6c:f7:
11:58:03:cf:cc:46:db:c7:e6:4a:9e:76:b4:dd:6a:15:f6:1b:
83:0e:02:d8:31:35:95:35:8c:13:41:cd:13:d0:3f:f7:ae:38:
20:8a:5f:e2:11:58:92:4f:3d:67:3d:38:17:16:95:0b:75:ac:
d5:3f:0f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:25:23 2026 by rpki-client