Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.mft
File: xypST5sbOAHb18iaFgrsB2tX5yk.mft (raw, json)
Hash identifier: dhwkM5FVWW+CjCE1tz28lbSYj9veo3ZJixpE1NEklz4=
Subject key identifier: 32:7A:99:A7:68:4B:07:72:15:09:FC:9C:4A:8C:CD:BC:E8:04:2B:40
Authority key identifier: C7:2A:52:4F:9B:1B:38:01:DB:D7:C8:9A:16:0A:EC:07:6B:57:E7:29
Certificate issuer: /CN=c72a524f9b1b3801dbd7c89a160aec076b57e729
Certificate serial: 019F932400AA1D9CCC188071B05524B5060D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xypST5sbOAHb18iaFgrsB2tX5yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.mft
Manifest number: 122F
Signing time: Fri 24 Jul 2026 08:00:37 +0000
Manifest this update: Fri 24 Jul 2026 08:00:37 +0000
Manifest next update: Sat 25 Jul 2026 08:00:37 +0000
Files and hashes: 1: 6MOGH8oGvh6IYApLtSaZowTuqtk.roa (hash: HJrHUPLTq5etSutfssfFpw4hmCz6YgNXH+NQPFP+7uM=)
2: U2uOljUf-48wSNUQgF-2wsauE-g.roa (hash: 2YVcDn6Ax9cXhQHx8fyaxNd0XJvsq3/OJmSqm70WvIg=)
3: xypST5sbOAHb18iaFgrsB2tX5yk.crl (hash: kuq4nv8bc+qbDgsmqlvDn/WI0DJGTTZ6WQXruSvuqKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xypST5sbOAHb18iaFgrsB2tX5yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:00:aa:1d:9c:cc:18:80:71:b0:55:24:b5:06:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c72a524f9b1b3801dbd7c89a160aec076b57e729
Validity
Not Before: Jul 24 08:00:37 2026 GMT
Not After : Jul 25 08:00:37 2026 GMT
Subject: CN=327a99a7684b07721509fc9c4a8ccdbce8042b40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a9:1d:db:37:4d:38:41:67:ec:ef:80:94:6a:
15:5e:5e:e6:e0:71:76:98:07:da:87:d5:7b:e7:f5:
6c:0e:2b:c8:86:c2:9c:22:02:51:06:3c:eb:74:03:
4a:a9:0c:b7:eb:01:20:43:fb:2f:29:67:a9:a9:8d:
3e:6b:e5:09:d7:35:7d:65:20:7d:9f:b6:18:3a:3b:
49:70:55:60:46:4c:d8:83:28:b6:eb:a9:64:e4:25:
f5:c2:fc:b3:ac:6a:47:ae:fe:9e:d7:92:fd:b1:2c:
2e:9e:de:ff:6c:1e:62:91:e6:da:cd:0c:a6:51:36:
9d:10:5b:3a:0f:05:62:ff:aa:bb:50:26:3f:68:49:
f0:f4:24:24:c6:11:87:61:75:36:55:dd:11:23:72:
a9:7e:49:17:19:77:6b:64:e5:28:74:2c:d1:89:f7:
7d:ea:28:fc:5e:86:a7:45:05:23:0d:2f:ca:ac:63:
f6:37:14:cd:49:36:1e:63:62:bc:0f:89:24:e5:94:
79:bf:16:ff:f8:d4:d8:87:01:22:36:72:9c:11:56:
d9:a7:9a:d9:92:00:46:8e:79:ef:17:7e:55:b9:4b:
51:a0:72:d6:36:a1:0d:8a:04:2c:e8:55:c0:d4:31:
e0:d2:2f:29:93:ce:5e:82:d7:8b:05:0e:a1:d3:d7:
1c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:7A:99:A7:68:4B:07:72:15:09:FC:9C:4A:8C:CD:BC:E8:04:2B:40
X509v3 Authority Key Identifier:
keyid:C7:2A:52:4F:9B:1B:38:01:DB:D7:C8:9A:16:0A:EC:07:6B:57:E7:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xypST5sbOAHb18iaFgrsB2tX5yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:57:f5:46:d3:ac:8d:25:b6:f4:c4:9a:0a:7e:06:c0:3f:c6:
da:43:09:fc:2c:75:60:a6:8b:55:bf:68:8e:07:0e:b5:64:f0:
6d:16:b7:03:8b:5f:18:c8:83:70:c1:ad:db:c2:43:02:f2:a9:
0d:6f:92:c7:cc:d1:2e:70:1f:d6:e6:3a:a7:6f:16:ae:f4:1a:
19:90:b9:c2:0c:f4:7f:11:a1:80:de:2d:2b:2a:9a:bb:e4:93:
e5:1b:a0:96:a5:9c:fa:7e:15:00:17:5e:82:47:2e:a1:09:45:
1b:ae:04:6f:2d:83:9c:d4:d3:23:ba:59:4c:c6:7b:35:9b:e4:
14:99:f4:23:5f:ee:ac:80:67:f2:16:3e:45:0b:0e:59:70:93:
86:66:27:40:f2:bb:50:e4:fc:76:63:9f:5e:a4:77:5d:5e:f9:
91:c9:be:e6:9c:82:cf:6d:58:27:27:6b:a8:84:89:c0:22:05:
e3:24:07:61:cb:61:f6:a7:97:89:96:66:3e:54:dc:c8:12:74:
13:3d:a1:13:c5:1f:0d:b6:74:2b:42:fa:13:28:fe:c8:da:1e:
eb:16:62:ab:20:9b:ea:37:d5:7a:d2:f0:2b:15:f2:bf:c7:dc:
2e:bb:26:77:aa:74:df:05:8f:88:a3:4d:86:59:01:3a:e6:47:
57:4b:a2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:11:01 2026 by rpki-client