Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.mft
File: _XF_OrY5RaG-c5wrOiWJvqVd224.mft (raw, json)
Hash identifier: xhaQfqZf5WX/fHXjV+MA0/GuOd2iXyHLraKOgRW+NeQ=
Subject key identifier: 21:67:11:58:12:C7:50:E6:EB:FD:F3:58:E2:70:EF:8F:20:6D:09:F7
Authority key identifier: FD:71:7F:3A:B6:39:45:A1:BE:73:9C:2B:3A:25:89:BE:A5:5D:DB:6E
Certificate issuer: /CN=fd717f3ab63945a1be739c2b3a2589bea55ddb6e
Certificate serial: 019F916C9CFDDC65A7ACAC1AACA2945913D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_XF_OrY5RaG-c5wrOiWJvqVd224.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.mft
Manifest number: 0F78
Signing time: Fri 24 Jul 2026 00:00:41 +0000
Manifest this update: Fri 24 Jul 2026 00:00:41 +0000
Manifest next update: Sat 25 Jul 2026 00:00:41 +0000
Files and hashes: 1: 0k0SMXdBc9F-S0u5frPj7VZDATI.roa (hash: fH1r/M4QH7i4V9CfzqHbwrIzNmtm+Dkd+L50E5BaVjo=)
2: _XF_OrY5RaG-c5wrOiWJvqVd224.crl (hash: 5jDDzHoXqzAdAzl/nclpAfkgVGd8nHFfxXHBnsxP8Tc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.mft
rsync://rpki.ripe.net/repository/DEFAULT/_XF_OrY5RaG-c5wrOiWJvqVd224.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:9c:fd:dc:65:a7:ac:ac:1a:ac:a2:94:59:13:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd717f3ab63945a1be739c2b3a2589bea55ddb6e
Validity
Not Before: Jul 24 00:00:41 2026 GMT
Not After : Jul 25 00:00:41 2026 GMT
Subject: CN=2167115812c750e6ebfdf358e270ef8f206d09f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6e:06:24:a4:03:28:e1:58:08:51:82:03:5a:
e0:da:0d:1b:7e:aa:16:47:08:f0:21:14:cf:af:9b:
3d:7b:c1:0b:65:18:f8:58:70:9f:e2:e2:f9:a2:96:
5b:ae:79:d6:c7:8d:5b:d2:28:74:fc:4c:91:8d:a7:
a7:bc:97:4e:27:06:c3:0a:5c:9c:9b:6f:d1:0f:5a:
c4:9b:53:e3:b6:46:7d:b6:23:c7:d7:12:05:0b:9f:
4e:ad:e2:ed:42:7e:17:e4:09:68:13:a4:5a:cf:28:
bf:53:71:ea:2e:21:95:6f:a0:d4:07:11:50:91:ad:
c7:0e:9d:1b:71:cc:0c:c1:20:c6:6b:c4:9f:e7:55:
07:53:76:b9:ee:72:b3:c3:f9:62:4f:cc:d1:14:5e:
bd:58:66:25:b7:d4:db:7e:89:a3:0e:0d:2c:d0:d9:
27:0b:62:37:f2:c8:b8:84:5e:b8:b5:9b:25:12:4a:
14:7d:e5:01:48:8e:60:33:6c:10:b1:3c:4b:d4:79:
f4:d6:da:ae:95:71:9b:61:83:e1:02:17:60:db:ef:
51:1f:be:b6:0c:27:64:2a:cc:2b:9e:27:52:f3:ab:
18:ea:65:4e:3d:b5:67:3f:ae:2c:e5:ce:9f:bd:1b:
4e:26:8c:70:23:f3:a1:86:dc:a3:f6:1d:1c:9a:d8:
4e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:67:11:58:12:C7:50:E6:EB:FD:F3:58:E2:70:EF:8F:20:6D:09:F7
X509v3 Authority Key Identifier:
keyid:FD:71:7F:3A:B6:39:45:A1:BE:73:9C:2B:3A:25:89:BE:A5:5D:DB:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_XF_OrY5RaG-c5wrOiWJvqVd224.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:6d:f2:3a:07:8b:e7:8a:65:c8:47:75:27:8f:71:ae:af:b5:
e6:30:b7:2a:b2:1a:30:fd:39:fb:23:87:a1:2e:14:f1:38:c6:
fd:a2:8d:8a:4d:ad:8d:0e:cf:10:32:7d:29:93:36:93:01:fb:
12:33:ed:38:3a:27:00:6a:07:bf:7b:d1:87:b9:1e:b6:3c:cd:
2f:d9:63:18:f4:7a:29:61:ee:14:0b:c1:86:99:34:eb:97:66:
d1:8c:c6:1f:70:4c:cf:4b:98:8b:f6:9a:ab:82:19:14:d8:a0:
89:21:28:d0:10:be:ab:48:5c:f7:cb:04:c2:4a:b2:8f:e4:0e:
e1:89:45:98:05:8f:44:c6:b5:27:c0:33:81:68:75:87:d3:f7:
8b:ec:66:db:61:b9:81:4c:04:37:98:8f:df:d8:ab:5d:8d:c3:
37:93:12:94:e1:7c:16:84:52:e1:8c:44:08:38:80:d1:14:76:
fe:ae:65:4b:a5:11:85:e4:ff:d1:b2:33:58:89:ce:35:f9:87:
11:8d:b9:94:c2:a0:a2:0d:3c:bf:28:5c:0e:1b:b6:36:f5:52:
e6:e9:84:cd:1a:33:cf:a4:23:e7:4b:54:a0:cc:8c:49:c1:a3:
18:68:d3:9c:a5:b0:d6:b5:2b:98:a0:40:25:31:a2:2b:24:34:
83:b2:dc:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:17:07 2026 by rpki-client