Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
File: XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft (raw, json)
Hash identifier: SWB3nSrTfwlofantbq0ZF5MHgoIsbg31XWO5zakEgr8=
Subject key identifier: B0:6C:4E:D2:78:12:E9:D4:E2:56:6C:29:10:54:F8:0D:E5:AC:C5:AE
Authority key identifier: 5E:74:01:F3:2C:D2:81:69:9F:BE:4D:CF:3B:B5:02:A6:3A:2A:60:DE
Certificate issuer: /CN=5e7401f32cd281699fbe4dcf3bb502a63a2a60de
Certificate serial: 019F9436F1C9FCE4C9163D160EE9ED7D81FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
Manifest number: 1189
Signing time: Fri 24 Jul 2026 13:00:56 +0000
Manifest this update: Fri 24 Jul 2026 13:00:56 +0000
Manifest next update: Sat 25 Jul 2026 13:00:56 +0000
Files and hashes: 1: XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl (hash: jfxT9ecm4dua4Sz8oyGhkyR0IGSxrI3mlO/nq25CFBw=)
2: jr0yuNLqeK_xhbuJCsSNuRbhB6M.roa (hash: iEdWiLEjiAZO/NJAgyr1vdLHg3AlGR9Y7mg3YwAaB/Q=)
3: txhV4jAB0u0krXb4kFMl_-o4obY.roa (hash: s+N5nLT8dkenkTXD8VPGodvyzkSe6kSpR2hC6MCplu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:f1:c9:fc:e4:c9:16:3d:16:0e:e9:ed:7d:81:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7401f32cd281699fbe4dcf3bb502a63a2a60de
Validity
Not Before: Jul 24 13:00:56 2026 GMT
Not After : Jul 25 13:00:56 2026 GMT
Subject: CN=b06c4ed27812e9d4e2566c291054f80de5acc5ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bc:0b:2c:fb:95:8b:cc:fc:d8:ab:cf:e1:a5:
a6:f2:f7:02:ac:b6:61:6f:ed:60:2a:bf:c0:10:c4:
4a:e6:87:bf:14:0d:a8:a8:cf:69:b8:49:d5:f5:9f:
6d:87:57:cb:72:ea:60:29:a5:4a:88:cb:af:3e:25:
2b:7a:74:6d:fb:a3:7a:ee:2d:2e:84:f9:89:13:a4:
2e:9d:2f:3a:f3:83:52:bc:fc:32:0e:7e:00:aa:d8:
56:5f:eb:b7:13:ff:bb:db:39:58:b6:74:f7:ef:3c:
35:b7:66:9b:40:10:4d:da:33:b1:e5:57:ca:b8:49:
8a:4c:39:41:b6:dc:b2:f5:d4:a8:9b:c1:c9:22:16:
59:4e:d8:bb:0f:b8:f8:d3:98:1a:77:5d:02:63:e6:
02:c8:08:e9:68:f8:42:ee:c1:6c:1b:bc:47:f6:45:
4d:99:aa:ee:2d:2c:ea:29:a7:5a:54:91:c5:1c:fa:
e5:52:65:1a:b7:e8:08:84:5c:75:a5:c2:6c:33:2c:
82:58:9e:40:0e:df:ee:1d:8f:02:07:91:73:ca:c0:
dd:65:99:00:82:ad:9b:05:d9:6e:98:c9:c9:66:da:
e2:d7:c7:82:f1:ea:58:25:db:b0:26:d0:19:20:32:
7b:d3:2f:cb:07:95:86:df:1b:80:ae:7a:bb:62:f5:
1a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:6C:4E:D2:78:12:E9:D4:E2:56:6C:29:10:54:F8:0D:E5:AC:C5:AE
X509v3 Authority Key Identifier:
keyid:5E:74:01:F3:2C:D2:81:69:9F:BE:4D:CF:3B:B5:02:A6:3A:2A:60:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:2c:ca:a8:0f:9f:42:bd:b8:20:eb:5f:97:b2:99:04:2f:be:
84:dc:8e:95:88:ad:63:03:35:91:f7:48:1b:42:7f:1e:58:80:
31:6e:cc:7c:eb:6c:67:cf:30:b3:a9:5b:1a:8f:65:63:bc:1e:
87:f1:eb:c0:73:08:56:f6:10:76:ce:ca:0e:bc:23:75:1c:45:
40:74:8f:7c:e7:2f:12:99:47:a3:ad:7c:8a:67:5e:65:22:86:
a0:4b:a0:c4:30:3c:f7:2c:12:df:65:67:e5:d0:da:49:2e:15:
3e:5d:25:86:4f:dd:cc:0a:1b:ff:9d:16:d9:8f:d6:cc:65:89:
2d:f6:13:77:e8:2e:e5:c7:3d:24:ab:bc:3c:84:e2:60:38:f1:
ef:88:fc:65:8d:1a:af:2f:11:cf:ca:aa:f2:f3:6b:79:55:95:
8a:91:48:f8:f7:5e:c8:32:e0:62:dc:9d:c5:38:7e:1d:60:e8:
6d:95:06:12:bf:0e:7e:ca:e4:ed:a1:d0:5d:8a:63:ae:c5:a6:
1c:63:9e:91:56:0d:8f:a4:be:36:9d:6b:d3:28:14:c2:37:dd:
6a:8b:ca:83:a4:d7:a7:80:b4:2f:10:7d:58:89:cd:01:90:fa:
e3:00:d4:6f:95:67:bc:b9:64:c9:cd:65:0a:80:53:70:76:09:
7c:ba:72:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:17:55 2026 by rpki-client