Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
File: XCnLotrPDvn6IgkAMrsVmhCRQPA.mft (raw, json)
Hash identifier: 0yBJmnCOG6tnZsi2r3m+t4CPKV5Dmt1lIqHQuOuqZ1U=
Subject key identifier: 7D:4F:93:70:88:1C:8E:89:7F:1D:FE:19:10:52:66:D8:2F:BA:02:FA
Authority key identifier: 5C:29:CB:A2:DA:CF:0E:F9:FA:22:09:00:32:BB:15:9A:10:91:40:F0
Certificate issuer: /CN=5c29cba2dacf0ef9fa22090032bb159a109140f0
Certificate serial: 019F91A363A150018FF13AB82527E1B09837
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XCnLotrPDvn6IgkAMrsVmhCRQPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
Manifest number: 19C5
Signing time: Fri 24 Jul 2026 01:00:31 +0000
Manifest this update: Fri 24 Jul 2026 01:00:31 +0000
Manifest next update: Sat 25 Jul 2026 01:00:31 +0000
Files and hashes: 1: XCnLotrPDvn6IgkAMrsVmhCRQPA.crl (hash: kYTiu554tqspUu1FuSeqisPZx+qDUg7ED7GkFvky8sU=)
2: aeEP89HKT7e7KYklfEV6GwzzRq4.roa (hash: +iLAVwj6kbQSZH9/6AWgoWRz5/OYd1yxCHRY7Br0+CU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XCnLotrPDvn6IgkAMrsVmhCRQPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:63:a1:50:01:8f:f1:3a:b8:25:27:e1:b0:98:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c29cba2dacf0ef9fa22090032bb159a109140f0
Validity
Not Before: Jul 24 01:00:31 2026 GMT
Not After : Jul 25 01:00:31 2026 GMT
Subject: CN=7d4f9370881c8e897f1dfe19105266d82fba02fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:81:60:53:19:b5:c4:f9:83:c7:c3:7a:64:bd:
1f:ca:b5:a8:3e:6f:44:86:3c:1d:e8:18:a8:a9:e5:
13:6d:b1:8a:bf:3b:a5:f8:70:5f:2f:70:90:7b:e1:
f8:03:63:90:dd:42:90:a8:fa:ff:de:d7:c3:79:8a:
6c:4a:3d:07:e3:68:bc:a9:b8:9b:f7:94:38:fc:51:
c8:a6:05:37:b8:f3:99:32:ce:8a:e4:cb:0e:e7:cf:
2f:c7:ec:c6:f3:73:ef:7c:e5:ca:69:ff:c0:b5:7f:
7e:0d:b2:7b:0b:1b:26:04:91:1c:e7:7e:d3:77:c8:
92:0f:1f:88:eb:98:20:fd:b9:a7:f8:39:bb:26:af:
42:dc:04:35:21:38:f4:9a:c3:b8:e4:ae:31:46:e4:
18:22:fd:6b:06:2b:42:3b:d9:d8:8a:68:bc:af:08:
13:39:4e:ba:0f:e1:03:8b:87:b5:1c:4e:91:1f:d5:
cb:4f:a0:27:ed:da:0d:a1:a0:fe:98:ab:ed:d7:f5:
d6:7d:44:ec:c9:84:33:5b:13:e7:26:4e:f9:08:87:
ec:6f:ec:03:77:9b:09:17:91:3a:f6:fb:bc:d1:99:
39:26:53:81:3a:de:1e:23:74:fc:fa:ed:9f:15:ff:
53:58:9e:46:dd:d4:45:3a:c8:c5:52:b6:7d:3e:22:
95:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:4F:93:70:88:1C:8E:89:7F:1D:FE:19:10:52:66:D8:2F:BA:02:FA
X509v3 Authority Key Identifier:
keyid:5C:29:CB:A2:DA:CF:0E:F9:FA:22:09:00:32:BB:15:9A:10:91:40:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XCnLotrPDvn6IgkAMrsVmhCRQPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:a4:ac:90:19:d0:89:ea:35:9d:93:32:df:9f:07:f3:4c:97:
41:d6:35:a7:49:28:91:56:77:25:17:b0:c9:73:c3:fa:08:a6:
5a:38:4d:81:63:cf:46:2b:e7:40:03:16:88:25:07:52:c8:8b:
0c:51:8f:92:8d:b1:5b:fa:41:13:f5:3f:59:0f:d8:c6:7c:a7:
e0:03:dc:f3:98:5d:d4:9e:5c:b6:8a:46:dc:0d:30:4c:15:f4:
1c:9d:b4:4d:db:26:5d:ee:8e:a7:13:ec:16:d1:ee:48:b6:c7:
59:c8:59:f9:45:f2:77:30:0a:a9:25:da:38:f5:5e:8c:b6:d2:
e4:3a:3b:ee:23:08:8c:a8:f1:b1:22:a2:c0:d2:d5:19:2a:c5:
17:5f:47:26:6d:27:fb:e2:fa:84:6a:20:a9:ab:86:9b:d3:fa:
f7:08:27:12:d6:d9:29:c5:7a:0b:5e:16:fa:53:96:c9:81:c0:
49:16:03:25:e8:83:20:92:32:16:d8:74:78:e4:3f:11:47:aa:
e3:fe:91:d8:8f:b2:15:90:5f:8d:65:34:a6:d5:0a:29:e1:ce:
8b:26:4e:82:f7:e9:cc:3d:91:58:1b:e5:db:7f:a2:df:a0:47:
17:de:2e:87:b4:c3:1d:bf:c8:56:16:1b:34:e6:77:3b:1e:f5:
44:6e:2d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:39:59 2026 by rpki-client