Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft
File: Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft (raw, json)
Hash identifier: XTEMzEUze/SAY5ZTw4DWYgbQqoclYhx+83QlTb3FtiQ=
Subject key identifier: 91:6B:1C:33:7C:13:3C:F1:A1:1C:83:01:BE:CF:7E:5D:59:4F:52:EA
Authority key identifier: 5E:7F:D9:58:6F:9C:CB:0F:B4:48:7B:20:8C:DF:46:75:E5:BB:F3:30
Certificate issuer: /CN=5e7fd9586f9ccb0fb4487b208cdf4675e5bbf330
Certificate serial: 019F946D7D3709A2AA1F91BD453B1982AA19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft
Manifest number: 167D
Signing time: Fri 24 Jul 2026 14:00:31 +0000
Manifest this update: Fri 24 Jul 2026 14:00:31 +0000
Manifest next update: Sat 25 Jul 2026 14:00:31 +0000
Files and hashes: 1: 7iD4K1gccNErcwUL56fdA_X6dFo.roa (hash: im8taFI4fIVJ8hCEmSfog0Wq6myLmqj/L7AJRggXUII=)
2: Xn_ZWG-cyw-0SHsgjN9GdeW78zA.crl (hash: Ro+0gHu9+GEKoM8hy102Yz774RwsWip8soDrCSK/I80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 14:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:7d:37:09:a2:aa:1f:91:bd:45:3b:19:82:aa:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7fd9586f9ccb0fb4487b208cdf4675e5bbf330
Validity
Not Before: Jul 24 14:00:31 2026 GMT
Not After : Jul 25 14:00:31 2026 GMT
Subject: CN=916b1c337c133cf1a11c8301becf7e5d594f52ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ab:40:60:ba:80:b0:23:e8:96:6f:02:84:3c:
72:54:c4:94:06:44:56:ae:d3:b3:ad:11:1f:37:02:
62:28:b4:98:78:6e:9a:21:a9:eb:5b:f9:95:47:c6:
c2:1a:e2:bc:70:67:fd:db:e9:56:8f:d8:f9:72:e2:
f0:15:11:0a:2d:2b:f5:aa:22:c5:be:40:24:be:52:
8d:f9:90:9d:0d:51:0c:14:5f:3c:78:1c:23:61:97:
5d:58:a5:4f:00:40:ee:38:79:f1:58:57:de:b8:a9:
70:b2:13:c7:52:6e:73:47:cc:95:8e:bb:5c:a4:83:
75:93:f6:81:f6:45:10:d3:90:32:95:b4:b3:a1:a3:
aa:f0:a1:03:a7:d8:03:b3:bf:26:76:fa:1f:44:1d:
eb:b4:92:d0:35:cf:e0:ee:b2:53:55:60:69:23:48:
a2:15:b4:08:ea:4f:5f:9f:e7:1e:bd:5e:7e:43:a0:
91:4f:2d:d8:6c:57:85:5e:bc:18:66:1a:aa:ee:05:
fb:c2:ae:e6:f4:b4:22:72:31:8a:86:39:97:8b:48:
af:25:46:20:b3:60:ee:c0:fd:8c:4a:24:49:9b:7c:
ed:b5:4d:f2:df:78:9f:0a:ca:8c:8f:a7:e6:d9:a9:
ee:b6:6a:0c:d8:95:64:bb:43:c8:62:38:1c:1a:12:
cb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:6B:1C:33:7C:13:3C:F1:A1:1C:83:01:BE:CF:7E:5D:59:4F:52:EA
X509v3 Authority Key Identifier:
keyid:5E:7F:D9:58:6F:9C:CB:0F:B4:48:7B:20:8C:DF:46:75:E5:BB:F3:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:4a:72:34:af:0a:f0:8e:62:92:2f:ac:74:f7:d2:84:ab:d6:
e3:3c:24:a4:0b:5f:e0:dd:e7:9c:61:eb:9a:92:f4:86:9f:47:
90:fe:9d:66:19:9e:52:15:07:0d:66:a0:d3:ae:e4:8f:e6:81:
ad:d1:80:d1:d2:d3:e7:dd:a3:6c:97:39:c3:4f:d6:35:40:45:
dc:31:26:26:05:b9:86:ca:c3:67:40:8f:d5:10:96:7a:8a:59:
c7:5c:f1:18:c9:aa:51:67:fa:de:4a:52:47:4e:1c:97:59:45:
1f:97:30:5e:45:39:8f:69:d3:40:6b:ec:9d:98:bb:27:da:5b:
75:ba:c8:7f:79:b1:6e:ac:cb:71:29:61:bf:b6:63:f6:d2:1d:
83:36:85:87:93:38:8e:66:9e:b6:e0:1f:d3:56:16:87:b1:cc:
a7:6b:78:9c:65:b0:89:55:55:83:ef:4e:83:a5:59:89:e0:a8:
81:4b:19:e6:a6:18:d0:8e:b5:df:d2:b6:a3:01:3e:43:d9:65:
da:96:17:fe:f8:55:61:df:f8:82:3c:6b:e0:90:47:a5:18:6c:
69:59:86:21:17:2d:50:cd:68:68:af:39:9b:2b:0d:f5:4c:d9:
9d:62:22:47:73:0c:e0:bb:2f:ae:02:6b:0d:44:6b:80:30:91:
c7:1e:ff:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:01:12 2026 by rpki-client