Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/XgSwLaV7ADebVhowISLnjl1Qick.mft
File: XgSwLaV7ADebVhowISLnjl1Qick.mft (raw, json)
Hash identifier: zwmkDwsRElu7G4+M0cgqzCAV7+1smKk+uQZmb2Xf1JA=
Subject key identifier: 80:31:A2:44:9A:B0:C3:E7:5B:18:AC:76:5C:A5:FB:33:6F:E4:45:32
Authority key identifier: 5E:04:B0:2D:A5:7B:00:37:9B:56:1A:30:21:22:E7:8E:5D:50:89:C9
Certificate issuer: /CN=5e04b02da57b00379b561a302122e78e5d5089c9
Certificate serial: 019F935B3B62EC7D8ECED40294BF48752BCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgSwLaV7ADebVhowISLnjl1Qick.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/XgSwLaV7ADebVhowISLnjl1Qick.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:00:57 +0000
Manifest this update: Fri 24 Jul 2026 09:00:57 +0000
Manifest next update: Sat 25 Jul 2026 09:00:57 +0000
Files and hashes: 1: Dj9kuZWr9tyLTs78iAEnZEz4gVs.roa (hash: NhBr92QCCO8QbowM/v9LvYLKA9Dujq44YfaPAibmCTM=)
2: TQ0wM6huTqh458ZZSQM0KI52teM.roa (hash: nBLiANju/5qfI/HxdXcGxBhrz2L2pBNw4FU6t8WZ4B4=)
3: XgSwLaV7ADebVhowISLnjl1Qick.crl (hash: 41slpXN2F9FKiaPa4XUoLOtkWVeTakWbDnyHDd51ToA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/XgSwLaV7ADebVhowISLnjl1Qick.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/XgSwLaV7ADebVhowISLnjl1Qick.mft
rsync://rpki.ripe.net/repository/DEFAULT/XgSwLaV7ADebVhowISLnjl1Qick.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:3b:62:ec:7d:8e:ce:d4:02:94:bf:48:75:2b:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e04b02da57b00379b561a302122e78e5d5089c9
Validity
Not Before: Jul 24 09:00:57 2026 GMT
Not After : Jul 25 09:00:57 2026 GMT
Subject: CN=8031a2449ab0c3e75b18ac765ca5fb336fe44532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:06:70:d1:b0:b7:6b:62:d0:dd:52:dc:13:07:
e8:c9:fb:44:46:ab:ea:66:06:4e:27:4a:45:af:c2:
0e:14:8e:a5:f6:83:14:24:3b:f7:1b:28:f4:2b:0e:
e9:78:1e:ce:17:84:14:1b:20:6a:67:0e:e7:53:f2:
25:52:f9:5f:28:63:61:c6:bb:5a:e1:3c:8d:69:98:
27:06:a4:ae:34:3c:7c:bc:dd:87:74:c9:df:14:e9:
c5:86:4e:d3:a3:7e:37:04:1b:fd:a3:77:c3:85:4e:
3d:77:53:03:d0:b8:8c:c6:7f:cd:e0:a2:8e:23:78:
c3:bd:77:de:a6:c0:ff:0c:2c:0c:09:38:a5:d7:b5:
d4:17:6d:9f:32:bd:57:5c:72:22:71:43:29:1f:91:
52:05:38:7e:85:f0:63:2e:cb:ff:ff:9f:d1:3b:cf:
99:28:0a:2f:cb:32:94:da:7c:c1:4f:ce:74:ef:f9:
b6:03:da:a3:9f:11:91:8c:eb:85:3c:ba:fa:7e:4b:
00:c7:58:3e:5e:95:18:35:f1:18:c2:2a:ec:da:07:
d6:d3:d4:21:36:2f:b2:cc:9f:c2:a3:5a:f2:8c:01:
92:66:d4:ea:ce:87:35:32:bc:f3:85:71:08:4c:cf:
d8:fa:74:be:de:a7:1c:de:1b:05:f5:b2:e2:66:08:
4e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:31:A2:44:9A:B0:C3:E7:5B:18:AC:76:5C:A5:FB:33:6F:E4:45:32
X509v3 Authority Key Identifier:
keyid:5E:04:B0:2D:A5:7B:00:37:9B:56:1A:30:21:22:E7:8E:5D:50:89:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgSwLaV7ADebVhowISLnjl1Qick.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/XgSwLaV7ADebVhowISLnjl1Qick.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/XgSwLaV7ADebVhowISLnjl1Qick.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:12:f3:30:fe:b8:69:40:9f:dd:26:f1:01:94:c9:61:27:a7:
6d:38:f4:b7:78:a0:47:26:61:54:94:e3:a7:93:aa:5a:65:8f:
5f:92:3f:4e:b3:ab:87:e7:8f:13:54:a0:ff:66:04:0e:54:7b:
38:d6:bb:49:33:f6:10:46:88:dd:9a:65:c5:4a:87:0b:2c:22:
b7:85:5b:41:d8:ee:11:c2:dd:8b:08:61:68:30:54:31:81:8d:
14:17:b8:60:3a:91:18:cb:cf:ce:98:b9:2c:bf:49:0a:66:e4:
0a:64:f0:c6:fc:67:d7:55:c6:3b:2a:88:87:1c:99:91:fa:ed:
c8:2f:89:4b:2f:dc:d6:bc:d4:d1:01:34:9e:ca:99:6a:81:2d:
1a:0f:ed:4e:32:2b:ad:2c:8f:24:53:d0:dc:ed:7e:e1:3f:52:
44:dd:d3:56:33:4f:40:c3:e2:c4:6c:a9:ae:50:7a:58:ee:2e:
10:66:a0:af:31:3b:7a:35:d9:ab:96:20:24:f9:b6:c3:d6:07:
e0:40:f6:3c:c3:75:8e:a4:75:50:48:59:33:0b:ac:27:2b:60:
8f:29:c0:6f:1a:d6:f2:f8:fe:21:24:b0:2d:60:1e:47:d8:a9:
0d:56:2d:0d:51:d5:ad:26:f2:2d:be:47:14:ca:6c:56:2f:93:
8e:76:0a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:48:36 2026 by rpki-client