Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
File: XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft (raw, json)
Hash identifier: qd/ucLQQGccvB3k2OI2/DFVH7KsBCgtkPuVncc4VJ9k=
Subject key identifier: E6:D1:75:EC:C3:E9:8F:A9:15:89:3E:F2:A1:AD:F0:1E:C0:F9:03:A6
Authority key identifier: 5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
Certificate issuer: /CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Certificate serial: 019F90C79ECFEBB6127FBFCA22DA7D1BEB9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
Manifest number: 18DA
Signing time: Thu 23 Jul 2026 21:00:29 +0000
Manifest this update: Thu 23 Jul 2026 21:00:29 +0000
Manifest next update: Fri 24 Jul 2026 21:00:29 +0000
Files and hashes: 1: 7oVXpAJyEuxYNuHmvd9aRWGoKfo.roa (hash: aOBhiDvMAxK+XYQzQVgLlx3/xd+jEySWQ2727ke/inY=)
2: Ey3m-lZEA987v9BNrn8LK_J0g00.roa (hash: bt6vCGnGpQLk0MF/D7iRAV+4/yJjQaAzG7ZTnezd07w=)
3: XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl (hash: znu5r9raYuXjKveMlKr/4zszkGZfQCcO6NkeQwVbxqE=)
4: YTkSY80BXrrm0yOSSyQ4NcWfFCg.roa (hash: Srwxxn9T4n8eBKaxltWuAJ0FzIn1uI4bI96/Rm2hnBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:9e:cf:eb:b6:12:7f:bf:ca:22:da:7d:1b:eb:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Validity
Not Before: Jul 23 21:00:29 2026 GMT
Not After : Jul 24 21:00:29 2026 GMT
Subject: CN=e6d175ecc3e98fa915893ef2a1adf01ec0f903a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:f9:93:8d:7e:ec:23:a8:62:8d:4a:d5:3c:0d:
4a:84:46:1d:24:ed:5b:cc:b0:f6:67:3f:4e:4a:be:
d3:5a:b6:b8:ab:31:80:54:c7:2c:47:bb:bd:1f:dc:
cc:c8:51:f7:63:c1:94:51:af:a0:53:41:ae:8b:9d:
6c:9c:61:83:38:7f:e8:f5:7a:00:86:72:90:3a:bb:
18:1f:01:b1:67:9e:4c:99:37:5b:d9:d2:2b:47:02:
43:68:6d:b5:2a:14:0a:76:0c:91:ad:c6:16:72:40:
24:39:cf:e8:6e:a6:7a:9e:7c:07:2a:6f:7f:33:e0:
6a:2b:c7:d5:57:57:34:d1:3f:8c:b6:8b:29:c2:1a:
cf:97:e0:d1:b5:8e:1e:dd:74:f3:d2:04:8b:7e:9a:
2a:14:a8:84:6e:42:41:b2:00:6e:94:8f:37:dc:b8:
30:d7:9d:02:d7:4d:90:26:97:fe:6c:94:3d:05:67:
29:22:29:ef:c2:b8:fb:d6:18:9a:88:8d:3e:4a:b8:
b0:d1:b2:56:3a:94:39:2a:d3:6d:b3:86:72:23:29:
bc:10:97:ab:28:0d:a9:aa:4f:8a:17:5f:4d:24:13:
d1:6f:8f:51:98:e9:63:81:38:b2:6f:0b:00:ef:4a:
76:d3:47:90:81:49:4d:b2:72:99:1f:25:03:a1:3b:
34:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D1:75:EC:C3:E9:8F:A9:15:89:3E:F2:A1:AD:F0:1E:C0:F9:03:A6
X509v3 Authority Key Identifier:
keyid:5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:f9:d4:51:21:f1:b1:c1:49:55:d0:eb:c3:d1:b7:ec:c1:92:
c0:0b:98:1c:74:89:fc:ed:a2:2e:21:75:9a:ad:32:82:af:e4:
ab:10:95:dc:6d:3e:10:bf:5a:a9:7c:79:2b:f2:d4:29:94:ce:
13:2a:52:d1:55:44:9b:5a:d1:e8:23:c0:48:99:4c:76:77:9f:
79:f5:46:13:8c:f5:d2:7f:8c:99:81:6c:c6:cd:6f:21:a5:97:
30:2b:2e:31:1c:86:4b:ef:d6:d9:75:a9:f5:7d:1f:fa:e4:b9:
b5:e6:34:f8:97:45:a8:21:ca:46:7e:94:b3:13:16:e7:b4:57:
09:3c:33:0d:5f:a4:5e:99:2f:ed:d5:50:e8:e7:dd:68:6a:ef:
b3:9c:0d:ff:79:dc:e3:04:03:e1:69:38:e4:de:99:41:24:c1:
44:59:11:ed:ec:9a:61:71:5f:6e:15:58:67:da:0e:db:22:eb:
ef:ef:38:80:08:bf:7b:43:e6:d9:28:e2:63:75:4e:09:c3:2d:
1e:30:84:8e:b3:30:e6:c2:f3:6c:59:4b:55:b3:89:4d:f3:a5:
58:1c:02:96:bf:58:4e:bc:ea:9b:f0:ae:ef:fe:36:2a:f1:34:
34:d1:8a:87:5b:f4:2e:93:ce:60:85:6c:ef:84:fe:54:ff:97:
6b:1c:b0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:52:39 2026 by rpki-client