Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
File: XYLKb462haVz5dHZH48GEhqwKjc.mft (raw, json)
Hash identifier: IgFyTSZ//z6MDyxuoPmo656DkfC8I0DBw2nTE8qjgrk=
Subject key identifier: 9B:38:0C:D3:40:6B:E8:1D:66:7F:F7:40:95:44:E0:C7:B2:F6:76:01
Authority key identifier: 5D:82:CA:6F:8E:B6:85:A5:73:E5:D1:D9:1F:8F:06:12:1A:B0:2A:37
Certificate issuer: /CN=5d82ca6f8eb685a573e5d1d91f8f06121ab02a37
Certificate serial: 019F935BCDF1B2098DFE395E5A1CBE2E23DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
Manifest number: 15FF
Signing time: Fri 24 Jul 2026 09:01:34 +0000
Manifest this update: Fri 24 Jul 2026 09:01:34 +0000
Manifest next update: Sat 25 Jul 2026 09:01:34 +0000
Files and hashes: 1: Sg_4XUAI-4zoY2AzgRoGFITRYgE.roa (hash: J1EWDPsgpuehOfFX0CglsLJx+tt5cw97sY3WgurbJXo=)
2: TeQy6kFDHKNYmWvI94KK1SajumM.roa (hash: 9uvICF7tqz4KyCQG2zRzp+9JspsGn3aZOu1Zg1a40nY=)
3: XYLKb462haVz5dHZH48GEhqwKjc.crl (hash: cUZR1bQfKx10okunojlZAtvxQM3I872MKUi2Ou304fY=)
4: dhOZf_4fAgQZi4_moQSI8o9EFj0.roa (hash: 5T/3rUQwrhAAxuFwErHVP6jvrc57b61OVidSPKCnMBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:cd:f1:b2:09:8d:fe:39:5e:5a:1c:be:2e:23:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d82ca6f8eb685a573e5d1d91f8f06121ab02a37
Validity
Not Before: Jul 24 09:01:34 2026 GMT
Not After : Jul 25 09:01:34 2026 GMT
Subject: CN=9b380cd3406be81d667ff7409544e0c7b2f67601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:14:9a:90:bb:9d:1b:5c:a0:61:c4:8c:ab:b6:
82:ea:88:0d:34:65:9a:ac:7c:59:f8:dd:7a:a0:3f:
4d:c8:9b:a9:49:d5:1e:7a:7a:3b:6a:6b:4d:c0:7f:
51:40:12:19:1f:ba:2d:9b:19:47:5b:82:91:cb:62:
52:30:65:15:81:ce:15:20:8f:6a:38:76:e9:33:70:
94:a8:b0:8b:58:b3:09:3a:38:cf:01:e1:76:be:d6:
3e:83:88:7f:e8:0e:2d:bf:14:a1:3e:af:d1:57:34:
21:a2:cb:71:62:a5:e7:a4:02:e6:8d:47:49:3c:00:
bd:ac:6b:49:64:e1:6a:aa:34:bf:f5:8a:a8:77:34:
c2:19:59:6e:fc:e6:c1:53:de:53:1e:e7:9b:d2:9a:
bc:fe:00:01:93:b9:00:55:3f:01:28:3a:b0:be:7a:
ae:07:0b:16:45:28:54:f3:79:2b:8a:41:e7:0d:8f:
13:cd:c5:f2:37:77:b8:76:87:f2:2f:84:f1:55:47:
a2:b4:50:14:fd:56:93:87:ce:00:15:4f:d4:b4:a2:
a1:c1:f2:f5:18:ac:8e:7a:1e:ca:64:7c:03:2f:29:
94:53:2c:c8:96:27:99:e8:f9:3f:a7:45:a9:43:36:
af:6e:5a:d4:43:c6:3d:cd:e4:83:b6:22:a5:47:88:
c2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:38:0C:D3:40:6B:E8:1D:66:7F:F7:40:95:44:E0:C7:B2:F6:76:01
X509v3 Authority Key Identifier:
keyid:5D:82:CA:6F:8E:B6:85:A5:73:E5:D1:D9:1F:8F:06:12:1A:B0:2A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:6c:e2:eb:3b:b6:55:6d:fc:ca:ef:3a:e0:d0:29:47:b4:54:
78:b2:2d:34:52:1b:8f:b7:cc:20:c2:a1:52:70:ae:41:dc:d9:
d8:4f:41:fc:76:79:71:f5:c0:86:b0:b4:a1:40:e6:d9:15:f0:
48:36:b9:8b:4a:81:40:5a:d0:8b:60:af:32:20:d6:28:0b:71:
43:a1:7e:a7:92:83:2e:f0:ff:b3:17:c6:a9:49:04:c2:af:93:
5b:5e:7b:48:dd:c3:39:dd:84:75:ea:46:00:e5:5f:34:95:f3:
e6:00:70:0b:b8:a3:d6:85:8b:1e:6b:38:43:87:8e:b2:05:af:
33:5c:56:b1:d2:26:2a:0b:4c:14:60:87:c7:56:f8:54:7e:ed:
b9:97:54:7f:30:8b:2c:b5:b3:c7:26:bc:25:97:a4:b4:97:8c:
4e:af:a3:92:96:dd:bc:ee:33:68:e1:15:48:03:2c:d1:02:dc:
4c:36:10:81:06:e1:aa:10:60:d4:8e:5d:63:81:2b:66:b6:0c:
cf:36:06:d7:61:ef:cc:86:d0:be:5c:a3:80:81:88:0a:6c:d5:
e8:c4:55:cc:38:04:17:92:45:be:c5:ed:2a:ff:54:0c:5c:df:
48:3b:fa:c4:3b:f3:6c:98:3f:99:94:a6:01:54:f9:66:46:44:
95:34:e9:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:06:34 2026 by rpki-client