Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/XSP6gsR1KG22BxT2A2Gg8crCPSM.mft
File: XSP6gsR1KG22BxT2A2Gg8crCPSM.mft (raw, json)
Hash identifier: 7J7w8T7pjeF15UnieDPt1cQn4XYDsy9p2NBL39fyZqM=
Subject key identifier: 00:B2:CF:86:82:67:20:33:0C:74:E4:EA:74:7C:98:F9:94:4E:FB:D8
Authority key identifier: 5D:23:FA:82:C4:75:28:6D:B6:07:14:F6:03:61:A0:F1:CA:C2:3D:23
Certificate issuer: /CN=5d23fa82c475286db60714f60361a0f1cac23d23
Certificate serial: 019F9135D568D03F7AAE012CA6E8A7309E06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XSP6gsR1KG22BxT2A2Gg8crCPSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/XSP6gsR1KG22BxT2A2Gg8crCPSM.mft
Manifest number: 016F
Signing time: Thu 23 Jul 2026 23:00:52 +0000
Manifest this update: Thu 23 Jul 2026 23:00:52 +0000
Manifest next update: Fri 24 Jul 2026 23:00:52 +0000
Files and hashes: 1: PSyjanuhqC4f8PoeId-FNS3SNIo.roa (hash: vXnguE1OuAVVzynxYiMUKXKD0YQ4Gbcmn/CdRYPzOQI=)
2: VcYSbieanIHo6vXwXzt_eynZ2hg.roa (hash: tT7q391ckh97qErQP/wSxRxUIvkJpwWEWY/156fqwXo=)
3: XSP6gsR1KG22BxT2A2Gg8crCPSM.crl (hash: apHsGqRB6tgMjLUShWKN/0m1HYb558VaaCVmgRZusJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/XSP6gsR1KG22BxT2A2Gg8crCPSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/XSP6gsR1KG22BxT2A2Gg8crCPSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XSP6gsR1KG22BxT2A2Gg8crCPSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:d5:68:d0:3f:7a:ae:01:2c:a6:e8:a7:30:9e:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d23fa82c475286db60714f60361a0f1cac23d23
Validity
Not Before: Jul 23 23:00:52 2026 GMT
Not After : Jul 24 23:00:52 2026 GMT
Subject: CN=00b2cf86826720330c74e4ea747c98f9944efbd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:aa:32:d5:c7:40:4e:6a:97:a8:0b:62:bd:61:
5e:ad:69:ae:d3:98:f1:20:8d:61:69:08:6f:7f:2d:
27:f4:2a:54:38:c8:05:62:1a:91:71:1b:24:32:e1:
62:c1:59:5b:77:e7:98:34:d2:44:3d:13:0a:e7:d9:
e9:82:8f:01:c1:08:60:4b:c9:0b:76:98:90:a2:25:
5e:7d:34:6c:e3:39:ec:f2:bf:92:e5:5e:dd:c2:30:
9c:b7:db:0d:68:c9:4b:ce:cd:b3:c9:53:1d:8f:8a:
6e:ed:3b:94:92:5b:9e:93:5a:85:ee:61:d3:77:38:
93:13:0b:9e:c5:d2:bd:e6:d7:ee:8a:8b:24:86:79:
39:81:a9:2d:55:67:0b:10:67:c6:61:61:7e:d0:56:
12:34:19:17:a2:fc:6a:03:d4:0f:88:4a:75:4c:c6:
43:74:92:2f:84:7d:44:90:8c:1c:f7:77:54:aa:37:
62:d1:bb:12:5a:5b:61:4c:ec:d5:00:77:9a:ac:f8:
62:66:8e:e5:5c:5c:be:4d:c7:f4:73:a8:78:a2:4a:
6f:22:4e:3e:7e:92:ab:00:0d:0a:b3:9d:53:35:3c:
24:ac:09:37:3b:ff:d9:2a:8f:0c:ca:e3:f0:70:9c:
d8:3f:b8:3e:f2:29:a6:1d:53:8d:cb:57:20:ae:84:
69:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B2:CF:86:82:67:20:33:0C:74:E4:EA:74:7C:98:F9:94:4E:FB:D8
X509v3 Authority Key Identifier:
keyid:5D:23:FA:82:C4:75:28:6D:B6:07:14:F6:03:61:A0:F1:CA:C2:3D:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XSP6gsR1KG22BxT2A2Gg8crCPSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/XSP6gsR1KG22BxT2A2Gg8crCPSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/XSP6gsR1KG22BxT2A2Gg8crCPSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:f8:3f:8f:63:01:87:f7:66:4a:dc:79:30:fd:5b:fc:e4:5b:
14:3f:b7:5e:65:ed:18:7a:d4:7c:4f:f6:73:73:85:5e:2f:5d:
f3:1f:41:cc:1e:49:27:bd:79:ce:24:45:e7:fc:c0:ef:26:7a:
80:4d:f1:08:ac:d9:bd:b0:f7:fa:12:42:78:79:d7:ab:1c:0d:
37:2a:05:ab:39:ea:c4:3c:b9:48:3a:af:c2:d8:b9:5e:70:92:
34:60:54:16:60:d4:98:2f:83:ba:d6:68:0a:bb:73:ba:11:8f:
7d:15:9f:ae:03:87:a2:7f:5d:c8:20:79:e9:6e:9c:52:38:a2:
bb:ed:c2:dc:54:32:7b:10:98:e0:ac:4e:86:f0:10:62:fc:5a:
7a:77:10:36:93:89:b7:48:50:74:1d:2d:1f:7a:82:ce:34:0e:
f4:6f:0f:f5:88:2d:4f:98:66:13:e2:c8:58:0a:84:ba:02:64:
4d:a6:b0:3b:66:ba:33:82:01:c2:06:92:77:c1:a6:a0:21:e9:
40:58:0d:31:15:56:a8:88:a8:e2:1f:06:b0:e6:d0:6a:0e:ee:
79:dd:df:82:28:2c:8d:4c:44:51:cc:23:8f:60:33:0f:0b:db:
09:76:73:9f:e8:b1:c6:26:a8:53:57:db:8f:be:2c:32:2b:cd:
fa:85:9c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:17:50 2026 by rpki-client