Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/d0661c-cebb-4e22-b197-139800a8c75f/1/XLOiFF-bTUZgWCrca3NUlp4InKk.mft
File: XLOiFF-bTUZgWCrca3NUlp4InKk.mft (raw, json)
Hash identifier: D+rGtqEz47qUMc2PrcEwVuBaIjx1126UCyTWbZmmzX0=
Subject key identifier: 10:98:58:6A:BA:5E:51:16:82:97:81:65:8E:3C:84:76:83:FB:C3:86
Authority key identifier: 5C:B3:A2:14:5F:9B:4D:46:60:58:2A:DC:6B:73:54:96:9E:08:9C:A9
Certificate issuer: /CN=5cb3a2145f9b4d4660582adc6b7354969e089ca9
Certificate serial: 019F905A499FD45715CAEF96D4B8D26AB5B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLOiFF-bTUZgWCrca3NUlp4InKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/d0661c-cebb-4e22-b197-139800a8c75f/1/XLOiFF-bTUZgWCrca3NUlp4InKk.mft
Manifest number: 1176
Signing time: Thu 23 Jul 2026 19:01:03 +0000
Manifest this update: Thu 23 Jul 2026 19:01:03 +0000
Manifest next update: Fri 24 Jul 2026 19:01:03 +0000
Files and hashes: 1: 2Nc5AsSnBWzCuxjbHnI5SDdmCKE.roa (hash: IY9E1+Z/A+D4/xzAfwUZ6RBDyrzbb4T4cIqPhChpPt8=)
2: XLOiFF-bTUZgWCrca3NUlp4InKk.crl (hash: VSVe9BENHRZH6pMM5JLSyXPV3KTEqKQRwDkSryHGHNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/d0661c-cebb-4e22-b197-139800a8c75f/1/XLOiFF-bTUZgWCrca3NUlp4InKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/d0661c-cebb-4e22-b197-139800a8c75f/1/XLOiFF-bTUZgWCrca3NUlp4InKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XLOiFF-bTUZgWCrca3NUlp4InKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:49:9f:d4:57:15:ca:ef:96:d4:b8:d2:6a:b5:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cb3a2145f9b4d4660582adc6b7354969e089ca9
Validity
Not Before: Jul 23 19:01:03 2026 GMT
Not After : Jul 24 19:01:03 2026 GMT
Subject: CN=1098586aba5e5116829781658e3c847683fbc386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:31:a6:31:32:d6:db:22:a7:fa:18:d0:42:38:
18:50:e2:f9:7c:28:a5:ea:76:5d:d4:8b:23:b1:31:
1f:44:ec:bc:2c:c8:d3:3a:14:3b:f5:50:11:b1:2a:
72:ce:6f:46:25:59:8d:9e:73:24:91:8f:e0:20:8b:
e1:e0:08:2b:72:0a:bd:c8:18:f2:31:33:b1:fb:4f:
e0:57:ca:0b:bd:f0:f8:12:1d:11:8d:1f:93:b9:fd:
df:26:a8:ae:12:75:15:77:3d:f4:c8:7f:51:c5:ee:
ca:5d:2d:b0:ef:12:d8:33:f3:bf:c9:54:67:fb:25:
6d:76:4b:53:ee:5b:59:29:0a:8e:c6:39:84:1d:a0:
71:1c:41:4c:1a:2f:de:0f:f0:53:61:e2:ae:eb:41:
99:ff:f8:84:2f:ac:47:93:fa:ec:29:fe:3a:65:4d:
c0:4a:60:12:cf:83:49:30:82:c3:82:e9:a9:73:46:
31:c5:92:19:d2:f4:19:07:52:d7:91:bd:66:51:e1:
3a:2a:ec:e0:b6:6a:6d:65:2c:d4:15:39:0d:8c:8c:
30:78:84:13:89:2d:a2:27:ec:c1:0b:b9:a6:0a:2c:
9e:20:d9:03:cf:05:26:18:77:84:a9:e0:15:ad:4c:
08:d9:5f:57:a9:ae:52:ff:7a:b5:06:8e:62:cd:0b:
f0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:98:58:6A:BA:5E:51:16:82:97:81:65:8E:3C:84:76:83:FB:C3:86
X509v3 Authority Key Identifier:
keyid:5C:B3:A2:14:5F:9B:4D:46:60:58:2A:DC:6B:73:54:96:9E:08:9C:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLOiFF-bTUZgWCrca3NUlp4InKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d0661c-cebb-4e22-b197-139800a8c75f/1/XLOiFF-bTUZgWCrca3NUlp4InKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d0661c-cebb-4e22-b197-139800a8c75f/1/XLOiFF-bTUZgWCrca3NUlp4InKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:39:dd:5c:16:27:f2:5f:99:2a:f5:c7:b7:6e:40:5a:39:5e:
18:54:5f:cb:4c:8f:30:bb:8e:39:a2:12:37:fb:ec:f5:58:f9:
e6:f8:18:22:8c:9c:ab:a4:cf:e3:fa:38:6a:1b:0a:ee:0b:6c:
c8:27:89:7e:7d:74:35:c9:74:f5:3b:9d:2f:ce:1a:88:4b:28:
c7:d5:c3:be:e3:49:e9:6c:9c:d7:32:e0:dd:0c:1c:df:b2:6f:
32:21:d2:c0:85:c0:ea:36:a2:fd:f8:77:71:53:21:1a:ee:a5:
b5:b5:3a:73:74:0c:ce:6c:6c:18:c1:e3:82:7c:5a:1b:11:b0:
8f:33:77:ab:ea:5d:15:c8:27:20:97:e4:7f:8f:51:3a:e1:61:
72:23:09:04:37:de:e7:aa:75:e4:b1:77:d5:73:e5:c8:06:e5:
f0:2d:fe:46:c7:08:64:88:7a:1d:2d:db:f6:33:24:66:56:52:
b4:6c:ea:27:ee:3c:c4:28:02:f5:48:f3:ed:74:ac:f6:5b:b8:
bc:83:eb:cf:63:72:5b:e4:5b:97:31:ae:e1:65:fb:07:2a:ca:
fd:a3:91:ba:72:39:36:e2:59:30:26:6a:2b:30:b9:ef:65:c4:
fb:23:1c:c9:86:0e:92:2b:2c:3c:f1:e7:4d:61:08:94:73:9b:
99:74:65:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:30:18 2026 by rpki-client