Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft
File: Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft (raw, json)
Hash identifier: t3CiFKbKneZx94FKOM7MRNYUrocMbsJhQf4BqnP6Nd4=
Subject key identifier: 6C:42:A1:DD:E6:61:2A:06:F6:89:B5:84:C6:3C:1C:8E:29:9B:0E:45
Authority key identifier: 5E:3A:62:F1:34:7C:17:42:E5:B6:E3:74:02:44:D3:98:B5:3A:51:3C
Certificate issuer: /CN=5e3a62f1347c1742e5b6e3740244d398b53a513c
Certificate serial: 019F9392807D15607359BA968FE65932AE90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xjpi8TR8F0LltuN0AkTTmLU6UTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft
Manifest number: 19CB
Signing time: Fri 24 Jul 2026 10:01:19 +0000
Manifest this update: Fri 24 Jul 2026 10:01:19 +0000
Manifest next update: Sat 25 Jul 2026 10:01:19 +0000
Files and hashes: 1: 7_n1YNS1aUe0Bo_pCtHt0pUhIqw.roa (hash: xzYsTyhKWQal1xfqWksT1weyCxFWFp7bUNSd2LqW3lA=)
2: Xjpi8TR8F0LltuN0AkTTmLU6UTw.crl (hash: 4NT1IHI2LQdLqD3adZimNaGvIKkPag3SFxIKPvpDNwM=)
3: qMmguo9Z2V-BC5t7evoX7K1Fbss.roa (hash: V408yrY8gn/eWE6bGQXHDcnC3POLPttI1BvbFvBLTFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xjpi8TR8F0LltuN0AkTTmLU6UTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:80:7d:15:60:73:59:ba:96:8f:e6:59:32:ae:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3a62f1347c1742e5b6e3740244d398b53a513c
Validity
Not Before: Jul 24 10:01:19 2026 GMT
Not After : Jul 25 10:01:19 2026 GMT
Subject: CN=6c42a1dde6612a06f689b584c63c1c8e299b0e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c3:22:54:0e:5c:2f:99:3f:e0:f2:5d:40:0d:
fc:50:29:3f:58:b4:db:73:e1:80:37:84:e3:fb:df:
50:e5:7d:c8:b1:81:52:d8:30:56:84:b1:5d:3b:3f:
ea:b2:a5:c2:e9:48:b9:66:11:a5:94:f2:62:d8:24:
2a:66:e9:10:2c:48:cc:6c:66:4d:5d:54:30:80:21:
2e:0f:ef:c7:9f:78:df:a6:39:d8:53:1f:3b:69:fe:
2a:91:ef:f2:92:5e:50:38:4d:d5:7e:10:c3:45:96:
87:c8:61:4c:46:83:6d:4f:01:f3:ac:9b:4c:b1:17:
22:7d:76:58:a6:25:80:61:d9:94:69:9a:eb:3c:4c:
37:8f:f5:aa:31:b5:a5:f8:bb:24:64:58:82:60:d2:
e7:3f:13:7e:93:84:11:1e:ee:b7:9b:53:e3:6e:54:
33:2a:d8:e4:40:39:60:64:2d:0a:8a:85:53:06:90:
68:8d:8a:81:d8:cb:08:23:b1:dd:2e:56:ae:9b:c3:
7a:c4:cf:0c:93:5f:9f:61:b7:30:95:bc:ca:7b:eb:
af:b8:4a:93:e4:f7:07:dc:1d:4b:61:9c:d5:0e:9a:
56:02:af:89:6c:ab:6a:36:05:57:77:c2:e4:20:70:
a1:d6:1e:74:7d:54:93:37:46:61:44:ba:95:34:11:
d7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:42:A1:DD:E6:61:2A:06:F6:89:B5:84:C6:3C:1C:8E:29:9B:0E:45
X509v3 Authority Key Identifier:
keyid:5E:3A:62:F1:34:7C:17:42:E5:B6:E3:74:02:44:D3:98:B5:3A:51:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xjpi8TR8F0LltuN0AkTTmLU6UTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:43:06:cb:04:5e:67:76:d4:7e:b5:e7:28:5a:81:73:b1:4f:
0d:0c:d4:41:66:c8:3f:5e:99:a6:03:c4:a6:73:50:a2:61:c6:
56:e1:cc:7b:4a:99:a5:71:ff:1b:a5:86:b8:bd:e2:cc:54:c0:
10:bb:04:de:fa:92:12:d6:0a:12:b3:1b:e5:e2:5c:bd:ed:d8:
c6:de:b9:ae:12:b0:60:46:9a:8c:7d:b0:4b:01:ee:98:e8:e4:
05:9a:cf:99:2c:b4:a9:0c:64:08:4a:e1:c1:b6:3d:21:a9:dd:
0b:23:8b:b8:42:fb:c8:05:12:89:6a:ab:de:7f:b3:0d:04:af:
24:02:a9:e3:c1:cb:32:8f:4a:b5:a5:fe:f5:65:4f:46:0b:4f:
0b:8f:02:39:51:28:b5:07:98:ed:25:27:17:c1:a9:7e:7a:92:
ff:84:79:ab:37:2b:be:0b:d2:a2:09:08:44:c0:b8:8b:76:8a:
ca:ea:11:4f:21:67:2d:c9:2b:22:1e:16:8c:83:b1:67:21:87:
18:43:a3:fb:58:88:16:15:f1:cd:fc:7e:84:8d:53:51:bd:99:
39:8c:ff:5e:ec:84:28:26:78:3c:0f:ca:21:58:9e:8e:2c:3a:
e4:c4:9e:86:a1:b0:56:e5:eb:19:88:86:d6:a9:ae:a1:88:eb:
6f:ad:31:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TkoB9FWBzWbqWj+ZZMq6QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlM2E2MmYxMzQ3YzE3NDJlNWI2ZTM3NDAyNDRkMzk4YjUz
YTUxM2MwHhcNMjYwNzI0MTAwMTE5WhcNMjYwNzI1MTAwMTE5WjAzMTEwLwYDVQQD
Eyg2YzQyYTFkZGU2NjEyYTA2ZjY4OWI1ODRjNjNjMWM4ZTI5OWIwZTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8MiVA5cL5k/4PJdQA38UCk/WLTb
c+GAN4Tj+99Q5X3IsYFS2DBWhLFdOz/qsqXC6Ui5ZhGllPJi2CQqZukQLEjMbGZN
XVQwgCEuD+/Hn3jfpjnYUx87af4qke/ykl5QOE3VfhDDRZaHyGFMRoNtTwHzrJtM
sRcifXZYpiWAYdmUaZrrPEw3j/WqMbWl+LskZFiCYNLnPxN+k4QRHu63m1PjblQz
KtjkQDlgZC0KioVTBpBojYqB2MsII7HdLlaum8N6xM8Mk1+fYbcwlbzKe+uvuEqT
5PcH3B1LYZzVDppWAq+JbKtqNgVXd8LkIHCh1h50fVSTN0ZhRLqVNBHXcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGxCod3mYSoG9om1hMY8HI4pmw5FMB8GA1UdIwQY
MBaAFF46YvE0fBdC5bbjdAJE05i1OlE8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGpwaThUUjhGMExsdHVOMEFrVFRtTFU2VVR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS80MjVjYzEtNTAxNC00OTc5LTg0ZWIt
MDI1NTQwYWZmMTVkLzEvWGpwaThUUjhGMExsdHVOMEFrVFRtTFU2VVR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS80MjVjYzEtNTAxNC00OTc5LTg0ZWItMDI1NTQwYWZmMTVk
LzEvWGpwaThUUjhGMExsdHVOMEFrVFRtTFU2VVR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk0MGywRe
Z3bUfrXnKFqBc7FPDQzUQWbIP16ZpgPEpnNQomHGVuHMe0qZpXH/G6WGuL3izFTA
ELsE3vqSEtYKErMb5eJcve3Yxt65rhKwYEaajH2wSwHumOjkBZrPmSy0qQxkCErh
wbY9IandCyOLuEL7yAUSiWqr3n+zDQSvJAKp48HLMo9KtaX+9WVPRgtPC48COVEo
tQeY7SUnF8GpfnqS/4R5qzcrvgvSogkIRMC4i3aKyuoRTyFnLckrIh4WjIOxZyGH
GEOj+1iIFhXxzfx+hI1TUb2ZOYz/XuyEKCZ4PA/KIViejiw65MSehqGwVuXrGYiG
1qmuoYjrb60xiw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:22:35 2026 by rpki-client