Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft
File: xyIeQCmYq8HwNUdeFYt06MdpIMA.mft (raw, json)
Hash identifier: q7gJBrS1AjT2l6rLN2Qsy/O/+PouCH/YQwzC0H7JbIk=
Subject key identifier: 2F:F2:38:14:BF:60:F6:0A:55:BB:3B:73:97:AF:67:CF:70:3F:8C:09
Authority key identifier: C7:22:1E:40:29:98:AB:C1:F0:35:47:5E:15:8B:74:E8:C7:69:20:C0
Certificate issuer: /CN=c7221e402998abc1f035475e158b74e8c76920c0
Certificate serial: 019F943699B2F0C35BE8B7DB202792E4B668
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 13:00:33 +0000
Manifest this update: Fri 24 Jul 2026 13:00:33 +0000
Manifest next update: Sat 25 Jul 2026 13:00:33 +0000
Files and hashes: 1: F7bFWfa8raW6YPzNQdPQYhccFpw.roa (hash: XVhjnbPUE5xdXqpegewxKMJvfafoKnZU90EE9D+PlOg=)
2: JpOEIniBJHts2084NOqMHq98Ajc.roa (hash: bzhADrpPKOaVRuCZzxcDyjV658iQtircvowggSUU670=)
3: xyIeQCmYq8HwNUdeFYt06MdpIMA.crl (hash: xSsVZ6c+KmqRsMd+ywsXnfw0p/VASzxdCaUOJhTQ3mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:99:b2:f0:c3:5b:e8:b7:db:20:27:92:e4:b6:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7221e402998abc1f035475e158b74e8c76920c0
Validity
Not Before: Jul 24 13:00:33 2026 GMT
Not After : Jul 25 13:00:33 2026 GMT
Subject: CN=2ff23814bf60f60a55bb3b7397af67cf703f8c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:de:de:46:e5:2c:48:db:4e:29:4c:98:c7:8c:
3d:91:04:35:f0:b4:ec:80:75:ca:8a:ae:a1:e5:9a:
be:29:b7:51:ce:4f:b9:39:aa:be:3c:e7:a3:e9:c1:
b2:d0:f5:2e:13:a8:d3:2a:88:00:47:05:e8:22:1e:
aa:f0:e9:9c:76:0d:06:f7:48:6e:2d:db:41:dd:37:
fc:61:17:87:bf:49:5e:33:05:4b:c1:21:8c:cf:03:
3e:f8:93:47:fe:ea:a7:6c:fb:3e:2d:3a:93:6d:c7:
fe:01:56:67:9d:34:22:54:35:3f:50:2c:4c:df:0a:
d6:99:df:38:e5:15:0b:51:3e:bc:5d:b8:50:d7:72:
1d:58:c4:f7:99:45:87:1a:c4:99:6a:01:5b:11:de:
c9:4e:18:71:73:c2:d8:d8:c9:ec:17:a4:51:75:0b:
3c:3d:54:68:f4:90:10:7e:f4:76:37:1a:c8:d4:cd:
0a:51:3c:e2:79:9e:aa:9e:ce:09:c0:ff:f2:3b:87:
b4:e5:2c:eb:83:8a:3d:59:47:3c:42:7b:c6:0b:3f:
38:3a:69:fc:03:83:1a:a6:5f:b0:2c:14:96:7d:82:
3f:d1:b0:a4:19:35:5e:a5:e5:67:d6:91:71:eb:a4:
42:bb:4b:72:92:af:e3:e1:78:28:bb:ab:8f:53:ba:
0d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F2:38:14:BF:60:F6:0A:55:BB:3B:73:97:AF:67:CF:70:3F:8C:09
X509v3 Authority Key Identifier:
keyid:C7:22:1E:40:29:98:AB:C1:F0:35:47:5E:15:8B:74:E8:C7:69:20:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:de:a0:cf:ea:e4:b9:8f:fc:60:b7:4a:a2:f7:b5:5e:16:ae:
86:11:af:a0:d5:31:90:d3:60:34:7d:78:e8:28:f0:51:08:4a:
5a:61:f0:a3:bd:ff:2d:53:d7:3a:ad:e8:21:bc:cd:13:90:b1:
0b:d3:2c:11:49:da:9b:78:da:6e:2e:5c:7e:67:71:4b:95:48:
17:50:0f:1f:c1:4c:fe:8c:e0:05:4e:74:6b:6c:b0:85:ea:5d:
82:36:42:96:41:ef:ed:a7:14:63:1e:ef:a8:de:af:89:3a:c9:
75:15:51:69:87:8e:9e:50:58:37:03:6f:31:63:0b:e9:01:7f:
f4:3f:0e:1a:55:72:9d:23:f3:7c:dd:8f:8f:30:ab:44:ab:8c:
2e:4f:88:73:4b:b6:8c:40:a4:17:6c:c4:ee:0b:f0:87:0d:4f:
55:df:a2:e0:da:15:94:ce:7a:c6:87:b7:52:c5:41:23:f2:72:
b3:08:ef:1f:4f:0c:f7:c3:3a:65:27:ee:72:1b:c0:d4:e3:b5:
9f:c2:45:5a:42:04:9e:e9:69:ec:2b:ed:0d:70:ce:f7:53:5c:
bc:63:37:fd:da:af:74:7a:5e:74:6a:50:41:09:12:d0:ef:30:
d9:11:9a:ab:a4:56:4b:ab:a9:9a:57:46:0c:e3:4e:e4:ed:97:
7e:6d:d9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:08:54 2026 by rpki-client