Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft
File: xTtM8KdHHwAPilagSbFjlnzDvZk.mft (raw, json)
Hash identifier: FEiHxb1DMeccvoWlVxduzfGPgJ+4ycr+/E085vZ3VtA=
Subject key identifier: 8F:21:86:AA:EF:14:31:F4:9A:C4:DB:89:DE:8F:1E:E2:52:B6:8F:A8
Authority key identifier: C5:3B:4C:F0:A7:47:1F:00:0F:8A:56:A0:49:B1:63:96:7C:C3:BD:99
Certificate issuer: /CN=c53b4cf0a7471f000f8a56a049b163967cc3bd99
Certificate serial: 019F95B6EFA67B997123B77F113DEFA54FC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTtM8KdHHwAPilagSbFjlnzDvZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft
Manifest number: 18E7
Signing time: Fri 24 Jul 2026 20:00:21 +0000
Manifest this update: Fri 24 Jul 2026 20:00:21 +0000
Manifest next update: Sat 25 Jul 2026 20:00:21 +0000
Files and hashes: 1: 4O_QOhMXcJ0t8sIeKd1mrxtJgYw.roa (hash: TciVqBMkJDUC0ydXbkijfxJoweOnHoMs5V4ucXCEH+g=)
2: xTtM8KdHHwAPilagSbFjlnzDvZk.crl (hash: rufrF7yUTJKpJ5NmwClHzb45uhkhcJgrmcb7ZyPS1m4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTtM8KdHHwAPilagSbFjlnzDvZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:b6:ef:a6:7b:99:71:23:b7:7f:11:3d:ef:a5:4f:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53b4cf0a7471f000f8a56a049b163967cc3bd99
Validity
Not Before: Jul 24 20:00:21 2026 GMT
Not After : Jul 25 20:00:21 2026 GMT
Subject: CN=8f2186aaef1431f49ac4db89de8f1ee252b68fa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3e:c9:be:8f:27:aa:b1:60:33:48:ea:65:fe:
0c:09:99:51:37:dc:5b:34:fe:52:91:4c:d7:b4:f0:
78:1e:89:6e:67:38:ec:7f:1d:86:a1:2c:b2:94:85:
79:9d:db:be:50:04:d7:b7:64:4e:96:66:7e:98:f4:
04:02:c8:3f:51:f1:89:2a:5b:4d:c1:4c:51:ef:15:
b5:ab:99:61:0f:c1:c1:eb:18:8e:3d:9f:1c:9c:c0:
d9:61:4c:2d:14:76:04:6d:d0:3d:46:37:12:15:04:
18:27:93:fe:21:3c:c0:12:54:ae:7a:ca:2a:c7:5d:
46:ca:87:99:87:e7:55:b7:f1:64:ca:f9:74:b5:ee:
87:4b:8a:16:c9:64:e9:fc:15:eb:4f:91:5d:22:d8:
94:57:03:27:c4:52:61:dd:7b:a6:29:94:a7:36:f3:
26:c6:86:03:c7:fb:d0:4c:aa:a9:42:f6:4f:52:5d:
a1:7f:0e:e4:50:49:d2:47:1e:7b:22:cf:9f:55:55:
b4:39:36:a9:7a:63:34:ac:fd:be:62:f7:96:f0:bc:
48:94:11:a7:6e:2f:2a:1a:14:25:dc:27:ff:6b:e6:
98:54:99:02:1c:0a:aa:f7:3f:a8:19:36:4c:8a:eb:
d6:ba:50:1b:11:ea:3b:52:b2:3a:38:09:78:77:9a:
14:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:21:86:AA:EF:14:31:F4:9A:C4:DB:89:DE:8F:1E:E2:52:B6:8F:A8
X509v3 Authority Key Identifier:
keyid:C5:3B:4C:F0:A7:47:1F:00:0F:8A:56:A0:49:B1:63:96:7C:C3:BD:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTtM8KdHHwAPilagSbFjlnzDvZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:33:e6:6b:ea:aa:2d:26:50:a6:e5:e2:8b:34:7a:97:06:a5:
5a:1a:dd:f6:6a:da:a3:b7:a4:46:31:ff:64:9c:93:e0:bd:e1:
f2:1a:ff:d0:b2:14:31:a2:ec:78:ac:3b:67:df:f2:8d:0b:c1:
fb:32:1f:6d:37:d2:3a:f6:4c:e9:2e:8d:0a:5a:1b:ed:f0:cb:
56:cb:f1:d1:09:03:63:a5:71:db:bb:50:ff:fd:fb:37:5c:76:
56:27:cd:e8:74:7c:61:38:04:94:16:04:c2:f1:07:2d:04:dc:
dd:4b:73:8b:27:eb:5a:4f:b0:bf:ee:69:ee:1f:fb:05:e9:e3:
58:c5:31:c7:e6:28:a2:5f:f6:1b:f3:b8:63:c9:1a:2b:32:55:
36:a6:34:87:7e:27:c8:64:5b:02:fc:fd:bf:79:0d:68:21:a4:
df:23:b5:e4:eb:e5:4b:2d:80:68:5f:2a:f0:0d:a9:c9:06:7a:
ad:50:01:b6:59:76:17:f1:19:85:9c:13:5e:2c:ff:6a:b1:eb:
dd:29:d7:86:0f:40:d5:ca:82:b4:35:83:3d:e8:3c:f6:1b:05:
50:fc:8a:86:8a:45:58:0f:4a:2a:0f:ec:58:86:7a:c7:d1:2e:
83:8b:8c:7a:71:25:e5:02:6e:cd:52:f2:46:46:c6:b1:1d:a3:
b8:40:dc:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:45:48 2026 by rpki-client