Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
File: XmFA8XMSeE72KuO-AwwMLMZhpwI.mft (raw, json)
Hash identifier: lAwS8yIOKQ8DbIb6FPYI0uo4vKyCGcjc/CCd5I4qqVs=
Subject key identifier: 60:1D:66:F8:9A:AB:40:68:4B:EE:A0:7F:81:81:CF:D6:60:FA:49:68
Authority key identifier: 5E:61:40:F1:73:12:78:4E:F6:2A:E3:BE:03:0C:0C:2C:C6:61:A7:02
Certificate issuer: /CN=5e6140f17312784ef62ae3be030c0c2cc661a702
Certificate serial: 019F91A43621602127D6CC61221731E1ACC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
Manifest number: 0EB0
Signing time: Fri 24 Jul 2026 01:01:25 +0000
Manifest this update: Fri 24 Jul 2026 01:01:25 +0000
Manifest next update: Sat 25 Jul 2026 01:01:25 +0000
Files and hashes: 1: XmFA8XMSeE72KuO-AwwMLMZhpwI.crl (hash: 2pvnC1SUd8wpZGcISiQdt0Io5bII4D6JSmxieljVh+c=)
2: vSKxJft-YrfZTgTcPvrZEBw-s-o.roa (hash: fXlVBWLEGWm5OQD/WI5lmOPHwN/6Yh6slPhBeiX8hgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 01:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a4:36:21:60:21:27:d6:cc:61:22:17:31:e1:ac:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6140f17312784ef62ae3be030c0c2cc661a702
Validity
Not Before: Jul 24 01:01:25 2026 GMT
Not After : Jul 25 01:01:25 2026 GMT
Subject: CN=601d66f89aab40684beea07f8181cfd660fa4968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a9:a4:90:8d:eb:a8:74:56:7b:90:ec:e0:e6:
75:8a:62:f1:bf:00:99:70:75:50:7b:19:79:f6:e6:
81:36:21:8d:fd:e2:1e:8b:d6:a0:aa:56:5f:b0:1c:
3d:df:67:c3:e5:48:42:b5:bb:0e:9a:b9:92:b6:15:
97:32:2d:f5:be:03:d9:2e:8e:3c:db:c2:a6:09:76:
af:c2:01:dd:14:b4:dd:f1:16:2f:ae:ef:5b:db:70:
c4:b1:7a:c3:61:11:b5:18:cf:08:6e:b2:30:c8:ea:
22:b4:b9:5f:52:ba:18:9c:5d:57:c2:2c:90:16:5c:
dc:0e:e0:db:ea:83:a6:2d:6c:de:44:a0:c6:23:3c:
74:fd:45:f7:3c:02:77:22:21:af:4b:ef:26:0b:95:
4a:6c:03:1f:6d:2d:30:00:34:00:01:de:b8:c1:27:
cb:a0:43:22:61:b9:50:e4:ef:21:39:0e:77:a7:c9:
92:0c:a1:ed:94:9c:85:fb:92:1f:40:0e:0a:05:a0:
1b:66:64:49:c1:b1:30:7e:29:bf:ad:c4:25:8b:21:
32:fc:eb:7c:43:af:4d:82:b1:59:d2:ae:98:06:05:
06:5e:0a:9a:bb:4d:57:fb:28:b0:49:3e:b2:bd:17:
0c:f1:ef:cc:6d:e1:de:25:ff:22:d0:02:08:dd:83:
c3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:1D:66:F8:9A:AB:40:68:4B:EE:A0:7F:81:81:CF:D6:60:FA:49:68
X509v3 Authority Key Identifier:
keyid:5E:61:40:F1:73:12:78:4E:F6:2A:E3:BE:03:0C:0C:2C:C6:61:A7:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:cc:50:e3:3c:29:19:d1:16:4f:13:b6:53:56:af:1d:12:74:
56:54:10:d8:71:a3:ec:62:6d:80:da:24:ff:2d:33:dc:b4:76:
11:da:78:79:c2:d8:0e:1f:99:7e:f7:f3:2f:47:3e:06:14:ad:
97:ef:71:56:11:35:59:41:69:12:f3:9c:b1:53:37:e4:c9:7e:
42:c3:8c:b5:18:ba:eb:12:3e:d2:f8:47:d0:20:e1:7a:13:2b:
b2:f3:c1:20:5a:17:4a:73:6b:33:47:3a:49:4e:1f:e7:bf:76:
73:ab:b3:74:d8:c7:fe:0c:8c:20:a3:ba:6b:6c:fe:78:11:42:
d6:71:cd:2b:16:f2:ee:16:21:ec:db:46:0c:f8:b4:44:8a:e0:
30:18:47:0f:aa:5b:18:35:5f:59:86:e5:94:c1:13:45:59:8b:
68:95:0f:4e:59:ce:ef:90:95:bb:4d:4c:82:91:58:2c:09:0d:
1f:42:49:a0:fd:86:25:cb:dd:86:23:53:87:e3:e9:f3:90:0b:
c0:95:10:8b:2b:ab:f0:5e:7d:54:40:34:d7:2d:88:62:2a:15:
00:a0:04:26:61:a6:a6:6c:8b:3a:fb:af:3f:a5:35:23:86:31:
ce:29:9c:ba:68:90:a0:13:ba:9d:f9:46:39:af:e9:88:2f:6f:
01:d8:55:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:45:29 2026 by rpki-client