Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft
File: xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft (raw, json)
Hash identifier: N9aQWbZFTBnpJwP/8OEfI6YZq9DXJiV2CC0zQj6pUWE=
Subject key identifier: 42:A9:51:46:E9:70:E2:8D:1C:02:D9:FC:57:EB:6E:09:0D:79:75:11
Authority key identifier: C7:15:CD:3A:CF:3B:6B:2D:57:BC:34:85:67:58:27:53:C9:CC:09:33
Certificate issuer: /CN=c715cd3acf3b6b2d57bc348567582753c9cc0933
Certificate serial: 019F9248F0D4433B270161B90A3FF90873E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xxXNOs87ay1XvDSFZ1gnU8nMCTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft
Manifest number: 19C5
Signing time: Fri 24 Jul 2026 04:01:21 +0000
Manifest this update: Fri 24 Jul 2026 04:01:21 +0000
Manifest next update: Sat 25 Jul 2026 04:01:21 +0000
Files and hashes: 1: eOXpQIA6qLtSRKi37aaBf2fN-Nw.roa (hash: YlsuBpQ4jmohvQqxKmhcIgBvEbbXIh+AX1kjTabOK9c=)
2: xxXNOs87ay1XvDSFZ1gnU8nMCTM.crl (hash: YUL8RSMe8568ZMww/LBeVdxDCH5+NWX2ZZdP7KWfoRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xxXNOs87ay1XvDSFZ1gnU8nMCTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:f0:d4:43:3b:27:01:61:b9:0a:3f:f9:08:73:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c715cd3acf3b6b2d57bc348567582753c9cc0933
Validity
Not Before: Jul 24 04:01:21 2026 GMT
Not After : Jul 25 04:01:21 2026 GMT
Subject: CN=42a95146e970e28d1c02d9fc57eb6e090d797511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b5:fe:bd:23:42:f0:da:18:04:40:41:be:0d:
3a:b1:da:42:68:89:21:f8:6e:c8:c0:3f:19:11:09:
e5:32:c7:79:a9:7f:a9:60:62:25:17:2f:fa:bd:70:
c0:ef:7e:21:8b:63:3d:88:02:d4:9e:8b:29:a1:d0:
e0:dd:1a:4a:a3:98:74:d2:78:49:d3:ea:d2:c6:d3:
5f:e1:b7:8c:a9:79:e1:fd:96:22:49:b7:c9:0a:83:
db:c9:1f:89:ee:fa:d8:f6:7c:42:26:10:73:40:71:
da:a0:0f:8a:21:a4:79:ec:57:fd:5b:91:0b:87:be:
f4:84:3f:99:3b:51:14:54:83:7a:ed:35:bc:b5:7a:
a2:09:b2:96:d8:e6:1d:9f:c7:30:63:4a:a2:b1:08:
f3:13:90:5a:27:05:da:ad:f4:90:75:fd:de:97:9d:
d1:ee:65:fc:69:7b:60:7e:91:ea:bf:e8:07:fa:99:
9a:66:3b:ef:23:13:b7:b3:58:36:d0:a1:df:26:44:
10:49:18:57:ca:b5:d8:0c:cd:98:98:fb:77:bc:ae:
52:77:b0:7c:8c:c8:96:c5:42:c4:b9:2a:ec:0b:19:
9b:34:75:55:fe:4e:14:6e:1c:64:2d:f8:05:e2:ff:
f6:e2:25:16:d4:b2:0c:39:8a:72:1c:69:a2:79:de:
12:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A9:51:46:E9:70:E2:8D:1C:02:D9:FC:57:EB:6E:09:0D:79:75:11
X509v3 Authority Key Identifier:
keyid:C7:15:CD:3A:CF:3B:6B:2D:57:BC:34:85:67:58:27:53:C9:CC:09:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xxXNOs87ay1XvDSFZ1gnU8nMCTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:d1:dd:ce:01:3f:60:2f:1b:00:82:26:07:5c:58:7f:af:53:
87:5f:c0:70:fa:3b:97:39:4b:b4:f4:e9:f6:da:f0:0f:47:84:
1b:c8:c6:37:96:66:7c:b6:a5:c0:59:40:2e:b1:27:ef:e3:68:
b7:48:35:1c:91:dd:44:1a:bd:db:4f:14:87:6b:c9:69:79:c5:
10:f8:2a:e0:6a:bd:8d:05:fe:3f:17:46:8d:aa:b7:6b:74:37:
44:b2:e5:47:40:55:c8:2b:86:55:13:21:3c:3b:c1:df:1b:92:
5a:97:45:39:49:18:c2:44:17:f3:4f:0c:a1:86:9c:1b:bc:fe:
ca:a9:9e:a4:27:ab:cd:96:81:ea:b5:41:72:40:f5:2f:78:42:
0e:01:5d:2a:58:f5:e5:3d:c3:f4:f6:d7:bb:8e:87:75:d7:b0:
bb:29:bc:85:41:bf:47:cc:e0:8a:4a:22:df:5a:31:db:67:79:
6d:60:b7:a7:73:49:31:b0:f9:51:14:25:a9:6f:51:e2:65:eb:
97:52:cd:d0:c1:87:73:f0:00:e7:21:88:39:38:52:d1:7c:78:
f9:bc:01:0d:a0:d9:c8:62:6b:58:24:5a:1c:1f:0d:6f:c7:b9:
35:56:63:59:c3:e4:c0:75:8f:9d:b8:c3:99:28:a0:fb:3c:82:
0b:4a:b6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:06:45 2026 by rpki-client