Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.mft
File: XQwn-FWB4ue94MmPvVS-HUlnBRc.mft (raw, json)
Hash identifier: 2RlgP6YHLORvUoloP3eAXRu+E8rq+OJhEhcHGOr9onI=
Subject key identifier: BE:2B:10:41:C5:7F:79:24:59:B5:BA:6F:43:56:F4:78:09:55:CB:2F
Authority key identifier: 5D:0C:27:F8:55:81:E2:E7:BD:E0:C9:8F:BD:54:BE:1D:49:67:05:17
Certificate issuer: /CN=5d0c27f85581e2e7bde0c98fbd54be1d49670517
Certificate serial: 019F9512A4F7C16EA3CF0BCAADAF27E6F2AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XQwn-FWB4ue94MmPvVS-HUlnBRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 17:00:54 +0000
Manifest this update: Fri 24 Jul 2026 17:00:54 +0000
Manifest next update: Sat 25 Jul 2026 17:00:54 +0000
Files and hashes: 1: XQwn-FWB4ue94MmPvVS-HUlnBRc.crl (hash: /633bep0Sju9BLR3GjvaUw7sfdQ+JTN2SQr4TrjfiyQ=)
2: vBd96lvIsDsfGISTsOxkg88egXA.roa (hash: RnnbPzBvvvPoGwsnPKy9bGG71tb5eaAdI+LKM3Dltq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XQwn-FWB4ue94MmPvVS-HUlnBRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:12:a4:f7:c1:6e:a3:cf:0b:ca:ad:af:27:e6:f2:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d0c27f85581e2e7bde0c98fbd54be1d49670517
Validity
Not Before: Jul 24 17:00:54 2026 GMT
Not After : Jul 25 17:00:54 2026 GMT
Subject: CN=be2b1041c57f792459b5ba6f4356f4780955cb2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2f:94:a4:75:f4:f2:bf:26:89:ad:2d:9f:5f:
eb:0c:65:9a:d4:23:a2:88:fe:d7:0b:1b:a8:b5:42:
4e:e3:d7:e8:bc:33:86:8a:d0:28:c6:50:87:6e:45:
6f:81:56:62:cd:66:ad:00:bf:a5:2b:83:f3:ab:07:
e8:58:24:81:f0:20:e3:05:ad:70:26:7d:3c:f7:14:
4f:63:ac:aa:fd:2f:18:89:2f:7d:3f:2d:68:fd:12:
51:0b:59:03:fd:aa:4e:ca:09:f0:47:3a:42:d8:21:
71:2d:9d:aa:27:7d:0b:24:97:10:93:51:4f:3a:b2:
3d:ba:63:ca:4a:c1:4a:1a:d9:bd:3d:a2:c9:57:3d:
f3:9e:e7:d6:bb:19:b8:de:51:da:0c:32:9c:07:74:
f3:fb:39:2d:30:da:cb:e1:8d:e0:82:e1:dd:61:0b:
99:b2:6f:b9:49:52:64:ce:77:80:ff:34:f8:2a:24:
e2:0c:1b:a7:90:2b:88:a8:c3:1d:39:86:08:ed:85:
95:e1:35:a5:86:3e:15:cc:4e:b0:db:ff:1e:0c:ff:
c8:4b:ce:69:59:63:09:92:93:78:54:4e:80:aa:21:
67:47:19:61:9d:c6:88:21:26:23:68:e5:7d:21:77:
aa:a2:ec:04:a1:ec:16:69:9f:71:d5:16:80:48:cd:
78:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:2B:10:41:C5:7F:79:24:59:B5:BA:6F:43:56:F4:78:09:55:CB:2F
X509v3 Authority Key Identifier:
keyid:5D:0C:27:F8:55:81:E2:E7:BD:E0:C9:8F:BD:54:BE:1D:49:67:05:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XQwn-FWB4ue94MmPvVS-HUlnBRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:eb:30:4a:45:42:39:cd:a1:a4:0e:6d:47:e5:c5:a9:79:62:
4e:56:6e:0a:d8:f5:7f:f7:74:34:c1:e8:2b:3e:1c:1d:81:ce:
fc:8f:92:59:f0:bd:f0:5c:d8:14:78:34:70:ac:70:91:2a:c2:
0c:82:52:d8:3d:01:00:ed:5b:ed:58:90:eb:e2:df:e3:34:93:
ef:d5:93:95:5f:c5:77:be:73:1c:59:31:9f:62:83:34:ad:3a:
3f:7d:c4:b0:71:da:ba:7b:36:25:fb:1f:ae:d2:e8:07:6f:c6:
b7:69:06:cf:36:b6:38:3d:1c:a5:f3:80:a2:ad:3e:2d:f3:6c:
dc:88:b1:52:fe:75:9e:59:29:24:2f:2f:42:2a:25:71:ee:f6:
f1:b2:f8:3d:cf:7d:b3:4d:68:2d:c7:f4:07:95:fc:3b:58:fa:
1b:15:84:f1:57:58:48:e7:13:d3:32:d7:4a:ad:a4:51:fa:58:
86:b6:87:4a:e2:dc:27:17:85:6b:c6:f3:08:33:08:be:5b:cc:
76:da:b8:d1:a8:23:5d:b1:67:0e:84:e6:5e:2e:2f:3a:f3:a2:
e0:56:1a:eb:f6:28:90:da:14:44:37:e8:e1:60:fb:72:22:e8:
80:12:71:36:eb:3d:53:e2:0a:0b:a8:fa:13:a7:97:31:e8:84:
8e:07:41:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:53:12 2026 by rpki-client