Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/Xquekv3YH0FBR5edBTHibe3SYqw.mft
File: Xquekv3YH0FBR5edBTHibe3SYqw.mft (raw, json)
Hash identifier: lrcHIIyS0sJmi8isLnQxxFeo+d6yaZAXE2qVI9Lhmf4=
Subject key identifier: 1C:E6:32:FA:C8:16:9D:7A:47:8C:0D:A1:5C:5F:76:8A:F2:C0:8B:D1
Authority key identifier: 5E:AB:9E:92:FD:D8:1F:41:41:47:97:9D:05:31:E2:6D:ED:D2:62:AC
Certificate issuer: /CN=5eab9e92fdd81f414147979d0531e26dedd262ac
Certificate serial: 019F935B2F6EE2CB0354CDDB6E9A1CF7D367
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xquekv3YH0FBR5edBTHibe3SYqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/Xquekv3YH0FBR5edBTHibe3SYqw.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:00:54 +0000
Manifest this update: Fri 24 Jul 2026 09:00:54 +0000
Manifest next update: Sat 25 Jul 2026 09:00:54 +0000
Files and hashes: 1: Xquekv3YH0FBR5edBTHibe3SYqw.crl (hash: DLyb+o+5Vfdb1Eq8AII8qXWROk/MCauxs2F1KIzcOes=)
2: yWSxVMHaA7K49CJJasfPgxf0K9U.roa (hash: Bq8kCXwpBRnHBgJBCumGdqGaVlW+LIt6xmOmyuq+Mck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/Xquekv3YH0FBR5edBTHibe3SYqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/Xquekv3YH0FBR5edBTHibe3SYqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xquekv3YH0FBR5edBTHibe3SYqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:2f:6e:e2:cb:03:54:cd:db:6e:9a:1c:f7:d3:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eab9e92fdd81f414147979d0531e26dedd262ac
Validity
Not Before: Jul 24 09:00:54 2026 GMT
Not After : Jul 25 09:00:54 2026 GMT
Subject: CN=1ce632fac8169d7a478c0da15c5f768af2c08bd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a3:37:7f:5f:0a:1a:44:cc:54:1a:23:e8:c8:
77:f5:6b:38:f4:e7:f9:15:f5:45:93:47:7d:bc:ab:
06:68:0e:6b:09:ae:2a:ab:e7:8c:f4:bd:ae:9d:42:
58:30:e3:1f:d3:b5:f2:20:70:ed:c1:a3:e6:d0:b1:
83:ab:cd:ff:e9:1f:a2:89:dc:9d:ef:e5:d8:f9:84:
61:48:0e:2f:a3:47:b8:ef:55:25:af:25:34:0c:c6:
48:10:f7:ad:b2:82:50:68:98:cf:74:4a:5f:d8:f0:
82:2e:79:a5:36:d5:2d:7d:ba:e5:18:b0:45:b5:1a:
a2:18:09:9d:75:24:5d:7c:a8:50:cb:a3:41:f7:d6:
bb:7f:d8:2d:13:84:a4:aa:de:af:7b:a6:58:cf:c0:
a8:1b:0c:89:c2:25:64:44:ff:29:32:d9:13:08:2b:
a8:92:76:6b:68:b8:fe:dc:3b:95:6a:11:d9:b7:b2:
9d:c0:48:68:6c:fa:c7:cc:56:94:1f:01:df:18:4b:
b0:0e:90:63:c2:19:22:de:68:c4:87:91:45:b2:51:
44:39:4c:70:5e:53:d0:ba:b4:6e:28:43:e1:b7:b1:
69:a6:20:4d:5b:0f:f3:9c:b2:7c:f2:64:b6:08:43:
cf:29:4c:65:ce:05:e2:70:70:4e:32:69:56:e6:75:
5d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E6:32:FA:C8:16:9D:7A:47:8C:0D:A1:5C:5F:76:8A:F2:C0:8B:D1
X509v3 Authority Key Identifier:
keyid:5E:AB:9E:92:FD:D8:1F:41:41:47:97:9D:05:31:E2:6D:ED:D2:62:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xquekv3YH0FBR5edBTHibe3SYqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/Xquekv3YH0FBR5edBTHibe3SYqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/Xquekv3YH0FBR5edBTHibe3SYqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:88:96:1b:07:13:b0:94:23:e4:7c:1a:c5:52:bd:05:56:5a:
2a:ec:07:d7:cb:0d:0e:b2:be:a2:b5:7c:f9:44:73:5b:77:ce:
a9:ef:6f:00:0f:99:48:57:ce:6c:27:86:72:57:ce:09:32:43:
81:0a:c6:37:52:87:9f:25:b8:8e:49:13:6d:e9:35:91:04:9e:
d8:7b:75:ac:93:7d:74:63:0a:8a:c4:63:1d:5a:db:3d:62:1c:
6a:ce:07:c6:3a:4d:46:24:ad:8b:a6:7b:18:fc:ba:34:ba:10:
35:f8:29:aa:9b:98:b6:7b:3d:ea:2a:56:2f:56:f6:7c:57:19:
1f:36:fa:c9:f7:ff:ee:b5:1a:a3:97:c2:a5:f0:34:7a:a4:49:
bb:c8:79:cf:dd:94:37:2b:12:2a:a4:ce:78:aa:51:b6:f5:e3:
4a:cc:23:72:d8:76:43:40:59:a4:73:e7:56:e0:3f:64:8d:55:
66:b3:86:43:4d:b4:8a:56:cf:cd:84:00:21:50:a9:1b:d9:97:
72:7a:df:02:cb:01:19:41:9b:eb:c3:8a:7a:a9:c7:65:f6:78:
16:b7:8d:2b:98:30:91:d3:1d:f0:bb:e8:55:74:0d:25:a8:36:
ac:98:38:98:15:fa:cc:7c:9f:c0:d7:e0:23:6f:78:69:ad:d7:
98:0a:5b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:45:22 2026 by rpki-client