Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e0223a-31fd-4cac-8164-fba074ba1b90/1/XL1s2RrWpyhrIfZQn92fUP7nXYc.mft
File: XL1s2RrWpyhrIfZQn92fUP7nXYc.mft (raw, json)
Hash identifier: vr/nIS2IMy5KIiMFng/zUHdAa8S62a1HvRMN0GhPy3w=
Subject key identifier: 2A:8B:85:55:50:38:53:A9:81:6D:9C:9D:94:09:05:94:97:F1:5B:17
Authority key identifier: 5C:BD:6C:D9:1A:D6:A7:28:6B:21:F6:50:9F:DD:9F:50:FE:E7:5D:87
Certificate issuer: /CN=5cbd6cd91ad6a7286b21f6509fdd9f50fee75d87
Certificate serial: 019F92B67D63F1D13B1293FB77713960FF66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XL1s2RrWpyhrIfZQn92fUP7nXYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e0223a-31fd-4cac-8164-fba074ba1b90/1/XL1s2RrWpyhrIfZQn92fUP7nXYc.mft
Manifest number: 18F4
Signing time: Fri 24 Jul 2026 06:01:00 +0000
Manifest this update: Fri 24 Jul 2026 06:01:00 +0000
Manifest next update: Sat 25 Jul 2026 06:01:00 +0000
Files and hashes: 1: XL1s2RrWpyhrIfZQn92fUP7nXYc.crl (hash: +SjqRWncl978SCKOTDumGHFXUO4GSdm3+KWqwj1Gw8U=)
2: aJRCmul5cvMFEkfsWwNh6YKtWg0.roa (hash: scsks3FGlAv25a5TwoetFCR7muYAvHPLPp8bABvEfPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/e0223a-31fd-4cac-8164-fba074ba1b90/1/XL1s2RrWpyhrIfZQn92fUP7nXYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/e0223a-31fd-4cac-8164-fba074ba1b90/1/XL1s2RrWpyhrIfZQn92fUP7nXYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XL1s2RrWpyhrIfZQn92fUP7nXYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:7d:63:f1:d1:3b:12:93:fb:77:71:39:60:ff:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cbd6cd91ad6a7286b21f6509fdd9f50fee75d87
Validity
Not Before: Jul 24 06:01:00 2026 GMT
Not After : Jul 25 06:01:00 2026 GMT
Subject: CN=2a8b8555503853a9816d9c9d9409059497f15b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d0:b9:28:74:56:6c:43:9c:c3:d5:7e:3c:55:
47:fa:d4:37:d9:40:9a:14:32:88:8e:5b:18:09:53:
1b:61:25:9a:c3:78:9b:28:fc:7a:57:65:06:b5:c1:
3e:f6:ee:8a:97:7b:af:73:5a:03:e2:26:07:78:6a:
91:12:8e:e8:05:73:4c:98:65:8b:cf:ec:c0:f3:ae:
aa:3b:6d:c3:15:62:81:4d:27:47:09:8c:37:3f:82:
00:5f:91:45:90:8d:57:56:73:1c:fd:54:fb:2a:f0:
e9:56:3c:bd:e6:f2:fb:3a:6e:11:01:5e:5b:f7:93:
ab:0a:e3:d8:00:d6:89:5c:be:75:9c:89:c3:1f:56:
5e:fe:b7:92:5f:83:b6:d0:56:24:2b:5c:85:ca:0f:
b4:fb:cd:cf:16:43:f8:ff:e9:de:6a:d5:2b:de:94:
3c:c5:3c:cd:53:b2:b5:f0:0b:d4:69:d2:58:87:90:
f4:44:cc:3f:40:c7:72:f3:a1:dd:9b:02:3a:c1:db:
8d:96:a9:5c:82:28:e1:48:89:b2:de:73:36:45:de:
ec:f2:77:b1:eb:f2:36:84:81:aa:3a:4a:b4:66:1c:
29:e1:68:50:b5:71:74:67:cc:29:59:0d:f5:40:84:
72:52:14:b3:48:92:83:3c:af:6c:d7:5f:d5:cf:fc:
b8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:8B:85:55:50:38:53:A9:81:6D:9C:9D:94:09:05:94:97:F1:5B:17
X509v3 Authority Key Identifier:
keyid:5C:BD:6C:D9:1A:D6:A7:28:6B:21:F6:50:9F:DD:9F:50:FE:E7:5D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XL1s2RrWpyhrIfZQn92fUP7nXYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e0223a-31fd-4cac-8164-fba074ba1b90/1/XL1s2RrWpyhrIfZQn92fUP7nXYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e0223a-31fd-4cac-8164-fba074ba1b90/1/XL1s2RrWpyhrIfZQn92fUP7nXYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:2e:79:3a:5c:58:30:7d:40:92:16:1a:bb:e3:05:3a:8d:2b:
0d:32:2b:6a:aa:cb:dc:77:04:3a:64:bc:22:12:2a:af:0e:15:
a3:35:a0:cd:f3:b1:0c:9d:1e:0b:64:3c:0c:6f:c3:8f:d7:a7:
15:6c:ca:53:36:12:3a:5e:0a:27:32:37:4a:72:48:54:eb:6c:
80:a4:d0:ed:9d:73:4f:78:91:69:72:2e:7c:22:50:c0:3e:03:
65:9a:32:7e:c2:2e:35:24:e7:cb:cd:b3:46:54:5f:b7:b4:9e:
13:f5:59:e9:8b:8a:ba:89:c1:77:98:00:4d:11:b8:72:58:89:
c8:1b:cf:48:fd:db:6b:6e:87:fe:6b:f6:fe:36:0f:df:e9:95:
f6:86:ac:46:f5:ba:12:cb:c3:f3:de:5c:84:11:79:86:18:28:
34:e1:44:39:45:bc:e1:ad:b6:19:b9:75:a7:a8:d0:6a:ba:9f:
3b:ee:36:17:b9:ac:7d:96:a0:ac:34:41:53:e4:b3:82:13:af:
89:f5:e2:a9:86:33:83:64:79:e5:f2:2c:db:89:af:95:0d:47:
cc:c5:83:49:85:2e:5c:8c:ad:9b:16:69:ce:1f:95:7e:04:ec:
17:06:c1:c5:70:5d:07:00:48:70:ff:34:0a:a0:71:f0:75:35:
9a:91:1c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:08:40 2026 by rpki-client