Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft
File: xyIeQCmYq8HwNUdeFYt06MdpIMA.mft (raw, json)
Hash identifier: SyYAy1QEreICkUFDBGYo1ZuHTh3uT5eOdtWxd1uv/tc=
Subject key identifier: 01:7D:A0:AA:E3:79:84:35:08:93:CD:5E:8A:B9:47:51:26:C4:87:51
Authority key identifier: C7:22:1E:40:29:98:AB:C1:F0:35:47:5E:15:8B:74:E8:C7:69:20:C0
Certificate issuer: /CN=c7221e402998abc1f035475e158b74e8c76920c0
Certificate serial: 019F9248812F91A7B21F6012EF0C057A86B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 04:00:52 +0000
Manifest this update: Fri 24 Jul 2026 04:00:52 +0000
Manifest next update: Sat 25 Jul 2026 04:00:52 +0000
Files and hashes: 1: F7bFWfa8raW6YPzNQdPQYhccFpw.roa (hash: XVhjnbPUE5xdXqpegewxKMJvfafoKnZU90EE9D+PlOg=)
2: JpOEIniBJHts2084NOqMHq98Ajc.roa (hash: bzhADrpPKOaVRuCZzxcDyjV658iQtircvowggSUU670=)
3: xyIeQCmYq8HwNUdeFYt06MdpIMA.crl (hash: 4LRea+XdkbY4Jv2+i23PSvMzdkAXQG4rXvJLDi4moLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:81:2f:91:a7:b2:1f:60:12:ef:0c:05:7a:86:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7221e402998abc1f035475e158b74e8c76920c0
Validity
Not Before: Jul 24 04:00:52 2026 GMT
Not After : Jul 25 04:00:52 2026 GMT
Subject: CN=017da0aae37984350893cd5e8ab9475126c48751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bd:77:62:31:27:e4:7a:fd:00:06:cc:61:79:
7f:f8:0c:7f:92:6e:0f:ee:34:2c:c3:e2:96:73:bc:
9d:4e:2c:11:d8:0c:44:6c:e0:8d:f7:0b:84:db:d1:
ee:ac:57:50:fc:22:35:8c:6e:fd:e5:3c:2f:23:cf:
e7:15:72:b9:6e:1d:15:e4:b8:b9:ca:2f:62:b8:26:
81:cd:f6:7c:43:81:d0:90:f0:d3:29:7a:8d:ca:20:
e1:5a:7a:8f:b8:3c:d3:b3:74:18:8f:27:cd:b5:26:
ba:86:91:d3:a3:8c:f7:2d:3d:66:0e:57:86:26:eb:
82:4c:85:38:6b:d2:63:86:ea:b6:f1:3d:21:b3:33:
53:b8:de:6f:50:ab:d0:f2:95:af:72:dc:d1:63:78:
42:c1:de:86:d7:21:51:f0:67:17:a9:bc:63:6c:1a:
bf:3d:0e:12:65:5c:1e:d6:3c:13:02:cd:86:ca:8c:
18:33:96:f1:6b:d6:e7:ac:72:be:bf:79:bf:85:4a:
4e:51:75:f6:2d:ad:19:a2:72:d1:04:93:dc:1b:de:
fb:d2:4f:37:84:69:48:d8:48:64:51:17:54:f3:1f:
1b:ac:7b:05:42:62:9f:14:41:d2:3e:de:04:c8:09:
e5:8e:c7:65:27:3a:12:db:8a:3a:66:4f:12:1f:2c:
e6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:7D:A0:AA:E3:79:84:35:08:93:CD:5E:8A:B9:47:51:26:C4:87:51
X509v3 Authority Key Identifier:
keyid:C7:22:1E:40:29:98:AB:C1:F0:35:47:5E:15:8B:74:E8:C7:69:20:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:2b:f3:9a:e4:7d:92:36:28:6e:ff:45:aa:1a:33:a8:59:3b:
9e:b7:5b:6a:dd:42:ab:12:29:36:1a:61:14:76:cb:c2:93:4e:
e1:02:f4:de:6f:de:a0:45:e4:27:5c:74:31:53:7f:da:e1:26:
79:75:f0:22:0c:63:cf:35:94:ef:01:20:f1:54:18:0b:25:58:
3a:77:ff:5e:1c:cd:77:59:96:39:92:49:fd:0a:25:89:72:4c:
1a:20:14:0d:72:49:1d:e6:99:16:9f:f5:c8:e2:71:2a:0c:dd:
a7:9f:09:47:03:0d:42:e1:e6:d3:64:6e:91:bb:2c:65:28:92:
5f:f5:ed:6b:c3:ca:00:3e:4f:90:f4:6f:dd:53:b4:c5:44:ef:
62:4f:8e:fc:d8:9c:76:7d:a9:cf:2b:68:9b:5e:57:23:45:57:
54:93:0e:19:1e:9a:7b:27:5c:aa:1e:e1:a1:c6:ac:cd:64:a7:
30:e7:54:d6:08:ac:2d:d5:6c:b0:25:b2:6e:ca:ca:45:94:3a:
00:84:80:82:7e:71:2e:e7:44:44:d6:99:a9:f1:b0:76:41:76:
5e:7f:63:7e:61:c0:de:28:9d:33:5f:ba:12:c4:1d:d0:3a:7f:
ae:b4:0e:64:51:01:23:84:71:05:46:f7:44:91:88:f3:69:27:
e7:b3:42:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:39:53 2026 by rpki-client