Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft
File: xyCKi4W8uAfK1kE4VDJjrLIERIs.mft (raw, json)
Hash identifier: xHw//15A0xcCjNR4fSety6QdnHKNdI+zrwpP/7zT4Fo=
Subject key identifier: B5:51:26:BF:28:18:6C:D8:24:10:7E:7D:7E:54:C7:E5:03:99:91:77
Authority key identifier: C7:20:8A:8B:85:BC:B8:07:CA:D6:41:38:54:32:63:AC:B2:04:44:8B
Certificate issuer: /CN=c7208a8b85bcb807cad64138543263acb204448b
Certificate serial: 019F92B63EE23949DC3546BC15A7D96734DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xyCKi4W8uAfK1kE4VDJjrLIERIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft
Manifest number: 09B4
Signing time: Fri 24 Jul 2026 06:00:44 +0000
Manifest this update: Fri 24 Jul 2026 06:00:44 +0000
Manifest next update: Sat 25 Jul 2026 06:00:44 +0000
Files and hashes: 1: RgWi-aprHOGj2N0T2_M-Cs4Yuhc.roa (hash: FwSEX5ZWPDMp7ATa85IYHEA7kyGOC21zknxdskogO04=)
2: xyCKi4W8uAfK1kE4VDJjrLIERIs.crl (hash: WmNXSZ6FykojMKnqMaZ2tyQ/E1F/K2ic8hQeu7oK7lQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xyCKi4W8uAfK1kE4VDJjrLIERIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:3e:e2:39:49:dc:35:46:bc:15:a7:d9:67:34:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7208a8b85bcb807cad64138543263acb204448b
Validity
Not Before: Jul 24 06:00:44 2026 GMT
Not After : Jul 25 06:00:44 2026 GMT
Subject: CN=b55126bf28186cd824107e7d7e54c7e503999177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5f:c0:4e:58:26:0e:23:5d:19:e8:72:6d:17:
8e:28:a6:13:4f:76:93:30:b6:cf:68:9d:da:5f:50:
07:ca:15:09:76:84:19:7d:6f:21:1c:c7:40:db:d6:
d2:3c:15:46:94:85:f1:3d:2a:49:00:96:a4:9a:d6:
45:c6:9c:21:35:de:2b:44:09:58:9e:06:90:e6:51:
d9:bb:bc:b5:8b:00:53:7a:79:9b:87:ec:c1:fc:20:
ed:6d:aa:d0:c3:29:73:d6:11:6d:00:aa:40:1a:43:
12:9f:bd:0b:0b:77:84:36:27:2e:96:07:82:28:f8:
2a:8d:92:38:69:2b:a7:7e:bd:1e:60:51:2b:b7:73:
5e:f1:4f:d3:cc:36:5f:3a:ef:08:bf:30:1b:52:19:
8b:86:22:b7:d4:3a:25:98:e3:f4:b1:a1:23:cc:2a:
2b:35:97:2d:36:66:55:46:af:01:38:18:d9:66:84:
b2:63:7a:cc:e8:75:42:9b:8a:3b:a6:41:78:5b:1f:
31:35:8c:6a:9e:ce:2c:9e:67:1a:08:cc:72:5d:53:
9b:ca:29:5b:2c:38:b8:2f:17:a2:76:ef:ff:66:1a:
57:a2:94:e2:54:48:2e:38:09:7d:26:82:71:91:e2:
53:ce:91:b8:cd:2c:be:f8:0f:72:71:7b:ce:48:cc:
b3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:51:26:BF:28:18:6C:D8:24:10:7E:7D:7E:54:C7:E5:03:99:91:77
X509v3 Authority Key Identifier:
keyid:C7:20:8A:8B:85:BC:B8:07:CA:D6:41:38:54:32:63:AC:B2:04:44:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xyCKi4W8uAfK1kE4VDJjrLIERIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:76:74:59:56:45:d9:f9:ac:ac:e1:e9:6f:f7:55:63:fd:50:
82:61:37:e1:f0:53:8d:8e:02:a9:8c:1b:fa:4c:ce:89:71:37:
c4:4e:2c:34:94:cc:c1:76:3a:ab:59:63:a1:aa:63:2b:79:7c:
a5:89:8d:41:44:cd:84:91:e2:eb:91:c5:33:83:b0:61:a6:2d:
c1:c7:1f:c9:c7:58:55:af:bc:7d:5e:bf:92:72:af:bd:07:5a:
9e:3d:9b:0e:fd:e8:2f:ee:e2:7e:e5:c1:48:56:e5:e8:c0:d5:
95:95:32:d6:6c:6c:ee:2d:7c:b9:38:45:50:29:19:cd:16:2a:
68:70:29:dc:dd:69:20:12:d7:35:bc:2d:16:fd:92:00:dd:3d:
f5:a1:c1:e2:29:95:a2:8d:49:b3:8d:4f:0c:64:f2:3c:1e:1a:
fc:92:00:ed:e1:e7:00:6e:18:dd:b3:08:35:bc:5a:69:a2:42:
a0:f2:7e:d6:12:8a:8f:f7:0e:bd:7e:59:21:3d:e9:60:2a:10:
51:44:b2:34:37:45:31:f4:1b:54:a3:8e:ab:6f:4d:c6:03:a4:
4d:da:46:0b:2d:5e:17:8f:e6:9e:2f:3d:77:f3:3d:d4:ee:c0:
63:5b:29:e9:3f:89:8e:30:03:3e:d6:a2:3d:6b:15:f2:81:af:
19:0f:db:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:20:07 2026 by rpki-client