Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.mft
File: xtGGU_v7b9VzLclAwdZdd6sLv6M.mft (raw, json)
Hash identifier: q1yDmL26n0Y6jdMs+p/+hn/XI559jS/YRyW7+TISs30=
Subject key identifier: 52:86:7B:11:56:DC:5C:B4:94:15:F6:70:22:91:E3:FE:1C:3A:16:89
Authority key identifier: C6:D1:86:53:FB:FB:6F:D5:73:2D:C9:40:C1:D6:5D:77:AB:0B:BF:A3
Certificate issuer: /CN=c6d18653fbfb6fd5732dc940c1d65d77ab0bbfa3
Certificate serial: 019F93244690EF5C55EF672CBC290EF8BA4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.mft
Manifest number: 19CF
Signing time: Fri 24 Jul 2026 08:00:55 +0000
Manifest this update: Fri 24 Jul 2026 08:00:55 +0000
Manifest next update: Sat 25 Jul 2026 08:00:55 +0000
Files and hashes: 1: 2S0egMPr-zdQkgAq_bpCVGy4WpA.roa (hash: re4isGbhSWMB6fqoWf7gvs6FB5l6F8k5c1sHfF3v4hQ=)
2: bdjR-oD_Oii7Pli7R8XyAmbHV-o.roa (hash: ggKFIgIElCHZMireZeFZrOPcIaJP8Yn+MeT51gputK0=)
3: xtGGU_v7b9VzLclAwdZdd6sLv6M.crl (hash: Xqr616CMr6EZIOcMfB603zTgMIZ++kuBh9z2vjqjA+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:46:90:ef:5c:55:ef:67:2c:bc:29:0e:f8:ba:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6d18653fbfb6fd5732dc940c1d65d77ab0bbfa3
Validity
Not Before: Jul 24 08:00:55 2026 GMT
Not After : Jul 25 08:00:55 2026 GMT
Subject: CN=52867b1156dc5cb49415f6702291e3fe1c3a1689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8e:bd:ed:42:5d:cc:57:94:08:72:d6:ee:b2:
a7:cb:2e:f6:4e:10:f6:a2:3c:41:cd:62:43:bf:2f:
45:3d:43:2a:e4:10:24:e6:f8:47:1e:94:9e:37:c1:
d1:ef:b7:0e:8e:47:d9:0f:88:e7:8c:f0:c5:6f:30:
e0:0b:a2:27:58:fd:c4:a2:15:41:47:00:0c:0e:1b:
28:48:b4:d3:8b:58:a5:31:f7:19:c4:aa:56:10:0e:
08:1d:43:9b:3c:06:1d:36:87:22:9c:c4:66:6e:c9:
34:7c:98:58:9b:9f:f7:17:7d:1a:b7:30:36:49:93:
05:73:54:ed:57:26:4b:16:46:7f:94:49:5b:75:9d:
aa:2f:f9:0b:17:34:f5:30:ec:ad:3d:eb:12:11:df:
23:5e:13:50:0a:dd:70:8b:58:98:4f:2f:93:1c:f9:
d4:54:0c:17:80:42:67:0a:0f:e3:81:e1:4a:36:a7:
9e:c3:7e:dc:6f:87:6d:dc:0b:65:ae:e7:26:30:65:
7d:01:4e:fa:97:0b:91:93:19:e5:cd:7d:e9:fc:e5:
d0:e3:58:d1:03:75:cc:44:27:17:33:96:e4:47:c1:
8a:d6:18:28:37:78:c5:3a:ce:3c:35:e7:38:3c:eb:
a0:5f:32:3e:e2:13:39:f4:b5:6b:32:96:40:e2:47:
08:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:86:7B:11:56:DC:5C:B4:94:15:F6:70:22:91:E3:FE:1C:3A:16:89
X509v3 Authority Key Identifier:
keyid:C6:D1:86:53:FB:FB:6F:D5:73:2D:C9:40:C1:D6:5D:77:AB:0B:BF:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:ff:74:1b:94:43:05:95:c8:d4:e1:bf:05:d9:e2:2f:3d:c9:
ff:d1:cf:13:71:91:92:6b:c9:8e:ca:80:4b:b3:a5:79:ea:0b:
8f:2d:5e:0f:be:55:68:1f:45:7b:b8:e7:40:4c:34:a7:78:16:
95:81:b6:a7:cf:a1:5d:bb:6c:14:22:75:d7:0b:69:38:38:bc:
90:af:da:ca:07:66:0c:2f:a9:6b:0b:57:bd:14:06:40:ef:6f:
6b:b7:1f:c1:61:e7:da:8f:5e:b3:0a:0d:c2:d2:d0:17:8e:2e:
9c:9e:96:d3:4b:27:0a:dd:ea:80:29:cb:82:64:f0:7a:fa:2e:
33:8f:94:3e:cd:48:af:8b:dd:bc:32:07:5d:00:e0:5c:76:c1:
34:8f:e5:ca:d5:28:53:53:34:39:34:91:8f:4f:e5:7d:e2:09:
9d:60:08:db:14:71:f9:a7:4e:92:80:a4:5a:40:12:dd:06:b5:
64:f7:1e:53:26:29:45:a2:62:71:94:5a:8d:fc:4c:b7:b5:92:
2f:3f:be:e8:00:a6:4a:6e:02:22:63:cb:26:ac:e4:38:c3:fd:
c7:a4:5d:5c:cf:93:dd:8f:a7:04:88:ba:db:22:0d:c1:4f:73:
aa:1d:04:34:6c:aa:f5:d5:b6:a2:be:1a:47:b5:8c:c7:4c:1f:
9f:6c:ee:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:56:42 2026 by rpki-client