Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft
File: x2omXKitcnOooTChdjKD0v8bTdo.mft (raw, json)
Hash identifier: 9r3MLDpN3ATsP6N6DDL94ELhJRP4dHFK8fSnWhjdY6o=
Subject key identifier: FD:65:79:D0:91:CC:62:0C:1C:8D:D8:E1:7E:E0:6A:65:33:05:8F:5D
Authority key identifier: C7:6A:26:5C:A8:AD:72:73:A8:A1:30:A1:76:32:83:D2:FF:1B:4D:DA
Certificate issuer: /CN=c76a265ca8ad7273a8a130a1763283d2ff1b4dda
Certificate serial: 019F8EA2AE169AA72CA3965B354FEC15D3E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2omXKitcnOooTChdjKD0v8bTdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft
Manifest number: 17EC
Signing time: Thu 23 Jul 2026 11:00:53 +0000
Manifest this update: Thu 23 Jul 2026 11:00:53 +0000
Manifest next update: Fri 24 Jul 2026 11:00:53 +0000
Files and hashes: 1: CakG1y3Fn5idWONRdZg7rbvxA_E.asa (hash: HQuMV/VeQz78G82BlBpcw445Ff5+K/MkRwLH08aG4Dc=)
2: IjN9w9R69yDRWNftVupxbr7ls4w.roa (hash: POnTpPRSP8kUYsMd04EyebP2yODd3r/J3rLB1OAAgGs=)
3: x2omXKitcnOooTChdjKD0v8bTdo.crl (hash: hxjtuuJ1UlKadGRe+PHF7CoXQSIildYTwqzkP4UQadI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2omXKitcnOooTChdjKD0v8bTdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:ae:16:9a:a7:2c:a3:96:5b:35:4f:ec:15:d3:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76a265ca8ad7273a8a130a1763283d2ff1b4dda
Validity
Not Before: Jul 23 11:00:53 2026 GMT
Not After : Jul 24 11:00:53 2026 GMT
Subject: CN=fd6579d091cc620c1c8dd8e17ee06a6533058f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:8c:e9:60:a2:79:42:81:d5:5a:be:30:ea:4a:
35:95:f9:20:3f:9d:36:80:50:06:52:1b:b2:32:bc:
be:85:b8:cd:4f:c2:d5:1c:17:05:a7:43:7e:07:33:
2f:20:98:24:62:89:49:e2:2e:1d:5e:ad:ef:2b:dd:
de:50:99:05:f9:f6:cd:c1:e7:c4:25:a4:89:3b:49:
fb:a2:4e:0c:bf:af:22:de:d6:d6:88:6f:9c:97:e6:
22:22:de:09:c5:e1:21:9f:d5:a3:6f:03:b4:b7:ae:
91:55:34:17:d8:a1:28:d9:10:99:49:45:24:96:40:
5f:1a:64:8a:be:31:3a:d8:49:3c:59:52:a6:02:da:
d3:5b:8d:d0:75:39:d0:ef:d0:82:30:da:0f:88:d2:
d3:f9:fa:36:69:0a:98:e1:34:bc:e2:fc:a6:40:ac:
d4:05:44:92:d3:8e:df:21:47:25:4a:91:4d:9b:90:
75:74:91:83:cb:1e:c2:55:8e:8e:e7:ff:0a:b4:07:
fa:cd:4e:4e:16:75:92:0b:a8:37:63:e7:76:c9:23:
99:2f:8f:88:f1:09:c3:21:8c:18:e7:0e:2f:2a:7f:
8f:b5:4b:16:11:d7:53:db:97:08:d8:53:47:2c:2f:
c0:59:1a:43:22:f6:59:5a:57:65:fb:fd:15:fa:0b:
99:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:65:79:D0:91:CC:62:0C:1C:8D:D8:E1:7E:E0:6A:65:33:05:8F:5D
X509v3 Authority Key Identifier:
keyid:C7:6A:26:5C:A8:AD:72:73:A8:A1:30:A1:76:32:83:D2:FF:1B:4D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2omXKitcnOooTChdjKD0v8bTdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:e8:4b:55:a8:d8:00:5d:f0:03:30:fa:53:56:c6:f0:ca:d9:
7e:8e:ae:a1:85:41:3d:e6:b4:d5:b3:f0:5d:22:89:cb:c4:81:
7c:09:ba:22:a9:fa:1b:9d:e5:c8:b9:bb:a3:dc:0f:02:9c:a1:
f1:31:c2:70:15:d9:ce:04:57:6e:3c:b5:e8:87:e8:30:78:af:
5d:35:a4:ca:4b:45:83:19:76:39:89:f5:5e:41:63:53:c2:0e:
5e:07:2e:77:64:34:1d:5c:d8:9a:29:8c:2b:e6:75:bb:86:e4:
9a:da:01:05:6a:11:8e:e1:54:3e:a7:26:f5:f4:67:bf:7d:73:
a9:ed:3e:c1:39:92:7b:7d:40:df:28:ef:16:7f:1d:7e:19:82:
13:e1:5c:f2:47:12:20:1a:e4:d7:da:02:7e:e5:bb:b4:3f:49:
87:ab:c4:64:31:c9:7f:2c:ae:f8:11:af:65:bc:70:74:6e:7a:
0c:d6:19:19:a3:6d:a5:50:89:92:70:63:c3:4d:5d:bc:67:82:
78:4c:39:8b:ab:f5:35:a1:68:82:af:eb:4c:6d:76:29:fb:19:
61:92:99:38:72:7a:95:f7:81:74:ed:21:dc:9c:c1:62:e6:c9:
83:ce:cc:a2:70:b0:91:95:41:86:25:dd:61:0e:c8:2f:47:59:
56:c9:a7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:02:56 2026 by rpki-client