Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/XcsAiY2alEXGzuY3o1j-Mv3YVyE.mft
File: XcsAiY2alEXGzuY3o1j-Mv3YVyE.mft (raw, json)
Hash identifier: b/hzHBihshJ+LH3XShjXWb41JhrAnBwEnxAUfWZHNJ0=
Subject key identifier: 77:C3:14:7C:B6:3D:64:6F:5C:E7:EF:EE:9F:AC:1D:E0:C1:94:7D:A2
Authority key identifier: 5D:CB:00:89:8D:9A:94:45:C6:CE:E6:37:A3:58:FE:32:FD:D8:57:21
Certificate issuer: /CN=5dcb00898d9a9445c6cee637a358fe32fdd85721
Certificate serial: 019F91DAFEC1280D2D2C98CA4C6DDE641621
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcsAiY2alEXGzuY3o1j-Mv3YVyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/XcsAiY2alEXGzuY3o1j-Mv3YVyE.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 02:01:16 +0000
Manifest this update: Fri 24 Jul 2026 02:01:16 +0000
Manifest next update: Sat 25 Jul 2026 02:01:16 +0000
Files and hashes: 1: XcsAiY2alEXGzuY3o1j-Mv3YVyE.crl (hash: KeHaOQs9yGoRFwgK7b0OGPYt0Qn4ulde+rfJzRz+ojg=)
2: dtDYTTev40_KP4gDD8l2B4FoWRU.roa (hash: KG4iIFsSaxHV4OzMuERalzQ2ir8/nTV6jkLr4CLycfo=)
3: lldCsQ1hgTCDcrFWBWU0S5eC1nE.roa (hash: PQn0MUfrufkEibOpWiDwl2hJpMI+Yw+jzN0Z4rlm5DI=)
4: whybmoJ3UH-tZcQj28IxhxnuNWU.roa (hash: XoXTuKuWN/G+ZqFwydqG+jUtoRxuSHXL1j3ltwwohOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/XcsAiY2alEXGzuY3o1j-Mv3YVyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/XcsAiY2alEXGzuY3o1j-Mv3YVyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XcsAiY2alEXGzuY3o1j-Mv3YVyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:fe:c1:28:0d:2d:2c:98:ca:4c:6d:de:64:16:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dcb00898d9a9445c6cee637a358fe32fdd85721
Validity
Not Before: Jul 24 02:01:16 2026 GMT
Not After : Jul 25 02:01:16 2026 GMT
Subject: CN=77c3147cb63d646f5ce7efee9fac1de0c1947da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c2:d2:cb:64:48:c3:3e:31:1d:c8:1d:a2:7b:
c7:70:4a:0a:e8:51:4f:c3:ab:4b:f4:c3:f9:f9:dd:
65:47:10:84:d5:e8:18:c7:7f:aa:a6:84:07:d6:94:
bb:c8:73:04:cf:89:61:4f:4d:7f:2f:5a:45:1f:75:
2a:8c:63:e9:7a:78:73:0f:3b:03:2a:15:26:3b:96:
d6:84:44:99:f1:a5:67:f6:88:1e:37:18:60:a9:af:
a0:30:5c:86:00:fa:4e:8b:e4:98:a8:a1:1c:d4:7e:
6a:a2:e8:4d:ac:38:62:b3:94:64:05:c0:a6:c3:a2:
c9:4f:7e:dc:e9:05:00:e4:6e:5a:e5:f6:a8:4d:f7:
22:e8:1b:90:50:10:a3:74:07:54:cc:46:a7:69:87:
a2:e9:b9:f0:82:7b:8d:8e:f1:c3:ad:dd:b4:0d:62:
d3:f9:56:71:48:28:46:aa:64:75:24:39:96:b9:4a:
48:e8:63:76:52:01:6d:70:f1:67:d5:43:35:9e:6b:
2c:9a:b3:ac:6b:e0:ed:94:a9:ae:41:4e:4e:19:d2:
ea:f9:e2:01:f2:94:19:50:97:6f:02:8d:ae:08:d5:
70:90:26:47:61:3c:4a:b0:2d:07:6c:50:bb:5a:50:
ad:b6:fa:47:a7:5f:47:15:f0:cb:a3:8e:78:09:6e:
ff:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C3:14:7C:B6:3D:64:6F:5C:E7:EF:EE:9F:AC:1D:E0:C1:94:7D:A2
X509v3 Authority Key Identifier:
keyid:5D:CB:00:89:8D:9A:94:45:C6:CE:E6:37:A3:58:FE:32:FD:D8:57:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcsAiY2alEXGzuY3o1j-Mv3YVyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/XcsAiY2alEXGzuY3o1j-Mv3YVyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/XcsAiY2alEXGzuY3o1j-Mv3YVyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:07:ad:ad:0d:fb:9c:e1:d6:41:c1:33:3d:43:a7:c9:6c:88:
bc:6e:52:50:a1:04:37:54:22:01:31:cd:9d:b2:83:f3:bb:96:
96:7a:73:28:b5:94:11:ef:1d:38:27:d7:0a:7d:58:ca:72:f9:
8e:62:cd:f7:99:0c:6d:7c:ee:ca:d9:9d:cb:9b:7e:c6:25:e8:
95:2a:08:6c:d5:39:09:bf:0d:de:ee:3c:b6:6c:17:68:5b:f9:
1e:a6:41:ea:7e:31:4c:b8:fc:a8:d4:0c:de:77:4b:34:35:35:
6d:d7:aa:45:8d:ea:6e:17:4b:48:77:ee:76:55:39:f5:b0:75:
15:ea:03:84:c4:d4:21:fb:53:c8:00:76:82:83:fb:c2:37:37:
de:f3:fb:69:78:2e:6c:e8:d9:35:20:14:ae:09:d3:d1:e1:b3:
05:3c:22:91:5e:31:f6:3f:76:9b:67:8a:59:50:f1:4e:5b:7a:
7b:a7:fd:01:bd:5e:9f:cc:ab:e7:71:7e:5a:65:d7:62:00:00:
4e:3b:89:f4:e6:f4:1a:44:b2:95:0f:62:6a:32:d0:b6:30:08:
f0:6c:9b:7f:d5:66:95:c4:4f:0d:95:e8:90:d1:cb:d0:45:f3:
45:41:a8:fc:d2:40:81:d5:42:33:74:b0:d9:84:84:f1:f8:d3:
51:fb:39:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:41:27 2026 by rpki-client