Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft
File: R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft (raw, json)
Hash identifier: BKKjivWqxXLIJ5zu59uQ162RTacXLBloU5RwTFli32A=
Subject key identifier: 83:7E:64:6D:21:08:DD:B4:CA:8E:63:AB:AA:87:3B:CC:E5:7A:04:65
Authority key identifier: 47:E5:D3:33:DA:D9:D6:2D:53:28:D1:25:78:A3:1D:EF:42:AF:8F:34
Certificate issuer: /CN=47e5d333dad9d62d5328d12578a31def42af8f34
Certificate serial: 019F95806D0C917CBC197BF46E6F43718A72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-XTM9rZ1i1TKNEleKMd70KvjzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft
Manifest number: 0C49
Signing time: Fri 24 Jul 2026 19:00:49 +0000
Manifest this update: Fri 24 Jul 2026 19:00:49 +0000
Manifest next update: Sat 25 Jul 2026 19:00:49 +0000
Files and hashes: 1: R-XTM9rZ1i1TKNEleKMd70KvjzQ.crl (hash: y/18B1OqArPGDKrNAqUAlZpzum2iavh9RcL8kegXnNg=)
2: lDMKh21Wt4FbbKS1OgeKAWJLOUA.roa (hash: 3L7WTrIU7aPDIrcLzqUSb6E2nzrLgIJ/FaZM9uhhyxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/R-XTM9rZ1i1TKNEleKMd70KvjzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:80:6d:0c:91:7c:bc:19:7b:f4:6e:6f:43:71:8a:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47e5d333dad9d62d5328d12578a31def42af8f34
Validity
Not Before: Jul 24 19:00:49 2026 GMT
Not After : Jul 25 19:00:49 2026 GMT
Subject: CN=837e646d2108ddb4ca8e63abaa873bcce57a0465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9b:42:e3:60:83:ab:20:a9:b7:95:c1:11:15:
d7:91:ef:66:86:18:a7:f3:fa:f6:3c:0b:59:dd:a6:
97:93:5a:ac:d8:8b:58:b0:00:2f:f6:ff:43:ab:74:
13:dc:89:fe:5b:4f:66:e3:a9:db:51:c1:d0:7c:05:
1e:8f:d9:e3:86:b5:b8:24:98:97:1c:7a:a6:3b:80:
81:87:4e:f5:0e:3b:86:3c:95:1f:49:8e:f4:3c:e7:
c2:3c:f2:a0:bb:01:63:47:3d:de:c8:3d:1a:65:64:
fb:f1:d4:31:5e:4d:ca:16:55:80:86:72:05:d6:05:
dd:c0:59:7d:c8:c3:ce:e7:d4:19:ef:4b:f0:ba:f8:
f5:d2:45:03:ab:31:2d:cc:98:ad:1f:a5:88:e6:f9:
60:ee:f6:6f:13:39:27:c0:6c:37:4c:84:2f:c5:82:
c6:e4:43:21:1e:4b:eb:21:bf:0e:53:eb:17:07:3d:
6d:ac:98:70:ef:c5:9a:c5:67:88:61:f4:91:0a:30:
72:5e:0d:2f:21:ba:0e:f7:79:47:df:5f:6b:fd:50:
be:10:9e:92:75:3e:6c:fd:d0:93:8f:e9:01:54:57:
23:95:51:37:4f:a1:9f:23:f0:f3:64:75:a1:e1:ec:
62:b3:1d:85:18:c9:40:35:53:89:5f:b7:7c:1f:9a:
26:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:7E:64:6D:21:08:DD:B4:CA:8E:63:AB:AA:87:3B:CC:E5:7A:04:65
X509v3 Authority Key Identifier:
keyid:47:E5:D3:33:DA:D9:D6:2D:53:28:D1:25:78:A3:1D:EF:42:AF:8F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-XTM9rZ1i1TKNEleKMd70KvjzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:72:d9:1d:e9:6d:3c:f6:f5:1b:7b:73:69:93:21:21:2d:bc:
c2:13:5a:af:b1:b7:ec:de:a7:09:ba:fa:10:d5:62:c3:5d:03:
ec:dd:00:5f:64:3b:aa:b4:aa:de:72:0e:36:ea:ea:60:8c:61:
b5:ca:80:88:81:40:7a:c3:62:8a:f6:a6:52:f3:f5:58:16:f3:
a9:73:7d:4c:f7:0b:7a:69:02:7b:13:3e:28:7f:e5:2b:29:35:
98:7e:17:6e:78:cc:92:f9:a2:e9:b3:64:6d:6b:52:ae:7a:7c:
78:34:99:94:3e:23:de:2a:e4:b6:c9:75:69:52:b3:23:54:2b:
64:6a:e8:4f:a6:d0:47:d8:a5:f6:3d:19:d4:2d:12:7c:26:d7:
5b:8b:c1:67:e2:3b:ea:c4:c2:f6:c3:09:55:a3:ea:7d:a0:40:
b3:48:68:d9:4e:c0:2f:e5:0d:b1:ec:40:c0:1f:ea:f4:13:21:
d0:e2:fc:75:31:82:d8:81:bf:69:de:72:e9:39:91:40:af:b3:
62:8c:a3:4e:70:3e:28:af:56:69:bf:af:d1:41:a3:d0:dd:b7:
1e:84:4b:95:74:3e:7f:ec:20:41:93:39:40:9e:7a:b1:f2:e4:
14:35:2a:38:a2:c1:3a:a4:06:2a:bc:b0:35:f2:22:13:c7:13:
c9:ce:3c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:01:14 2026 by rpki-client