Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.mft
File: xVfBn2xy2JAMTYnsers11PqSEUs.mft (raw, json)
Hash identifier: NNk4VQZ2S3hfggeuPOCoJA7TcI6lQgbOjSD9q6tEN9U=
Subject key identifier: 9A:7F:A6:3E:54:C6:62:F3:35:EA:86:12:A2:17:3A:12:7A:7A:D1:86
Authority key identifier: C5:57:C1:9F:6C:72:D8:90:0C:4D:89:EC:7A:BB:35:D4:FA:92:11:4B
Certificate issuer: /CN=c557c19f6c72d8900c4d89ec7abb35d4fa92114b
Certificate serial: 019F9091795679316B46720AB49E54F0C8AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVfBn2xy2JAMTYnsers11PqSEUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.mft
Manifest number: 19C7
Signing time: Thu 23 Jul 2026 20:01:20 +0000
Manifest this update: Thu 23 Jul 2026 20:01:20 +0000
Manifest next update: Fri 24 Jul 2026 20:01:20 +0000
Files and hashes: 1: UHPJaWl80QM_ZyHpNl4B0tVvbT0.roa (hash: aDJ3tJRmYftllAauT3ZEK2YDL9vFANpr/wdc/+xRph4=)
2: xVfBn2xy2JAMTYnsers11PqSEUs.crl (hash: UEk+z+TXtJ65un6ONR1yZCcCXqYKUp6Awxh//n5d4g0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVfBn2xy2JAMTYnsers11PqSEUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:79:56:79:31:6b:46:72:0a:b4:9e:54:f0:c8:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c557c19f6c72d8900c4d89ec7abb35d4fa92114b
Validity
Not Before: Jul 23 20:01:20 2026 GMT
Not After : Jul 24 20:01:20 2026 GMT
Subject: CN=9a7fa63e54c662f335ea8612a2173a127a7ad186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:84:30:c2:2a:78:ba:10:a8:2f:5e:89:90:2f:
95:0d:a5:71:07:d5:77:28:e4:9d:2a:ed:37:b9:05:
c6:ee:e8:e2:b1:78:51:63:8c:0a:de:25:08:16:a1:
05:54:68:4a:a3:62:c2:56:e8:94:69:10:9e:30:90:
ec:39:d2:54:5e:d5:53:43:8e:18:93:e6:6c:23:08:
53:bc:82:c8:bf:c6:13:9a:74:6f:7c:d9:70:6e:56:
52:a1:ce:56:33:a6:99:e0:0d:00:9a:c7:b3:7c:c3:
00:df:ff:e6:0e:cc:c1:ce:14:49:c5:1b:f7:c0:a4:
46:08:13:8b:8f:b7:97:41:3e:4c:10:82:dc:8c:ed:
cf:d3:20:b7:87:6f:19:ed:e5:d6:db:32:b7:61:38:
98:e2:6b:09:b5:98:38:88:31:95:32:54:d0:bf:6a:
9d:0c:3d:c1:51:5d:7f:02:cb:2c:ac:9c:ed:3b:4e:
01:41:c5:ec:8c:52:ef:06:55:1c:6b:e9:e7:3e:82:
70:c8:11:8e:a4:f3:17:b6:da:f5:24:43:9d:88:3a:
35:25:f1:07:bc:46:f0:11:84:6e:d5:57:75:97:c6:
4c:6d:31:02:fd:bb:b6:c4:7d:02:9a:5b:60:19:12:
32:1a:54:82:bf:20:33:e1:db:03:ac:97:e8:99:1e:
a5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:7F:A6:3E:54:C6:62:F3:35:EA:86:12:A2:17:3A:12:7A:7A:D1:86
X509v3 Authority Key Identifier:
keyid:C5:57:C1:9F:6C:72:D8:90:0C:4D:89:EC:7A:BB:35:D4:FA:92:11:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVfBn2xy2JAMTYnsers11PqSEUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:61:90:05:e0:71:86:ec:cd:87:dc:9d:bd:63:a7:57:66:e0:
25:cc:11:02:03:fb:b0:7b:3f:8d:f0:e9:a3:04:4c:a0:9e:ac:
9a:45:d9:8d:b2:b1:a4:23:c4:d4:97:f9:7f:19:89:5e:fe:08:
bd:30:59:9b:e0:1e:7a:a1:82:71:5b:50:d1:6e:52:84:b4:d0:
ad:de:24:34:82:31:0f:66:d9:2e:b1:7b:a9:f8:99:80:05:43:
47:e0:9a:01:91:10:f4:b0:81:12:61:97:ab:ff:f4:3e:13:eb:
27:ea:62:bb:79:0d:aa:0a:10:33:cb:62:02:33:37:e9:33:4c:
3d:ee:c2:f7:e9:1b:86:ad:cd:c9:aa:c5:99:50:ea:a1:a7:e5:
a5:27:27:d7:27:c6:9a:4e:58:4e:54:11:45:42:ba:b8:9d:55:
23:55:2f:b8:a0:86:33:e0:09:e6:b5:ba:e1:9a:c9:11:10:94:
50:97:e2:85:4e:47:6d:e2:92:22:81:0b:45:57:8a:99:1a:41:
5b:92:e0:98:71:51:97:6f:6e:a0:b7:cd:37:fb:04:b6:51:67:
73:0a:1d:84:d1:17:ae:cb:46:54:fe:32:f4:93:c2:5d:60:51:
c2:c2:c0:4f:8e:71:eb:c2:aa:f8:88:72:66:ba:b4:bb:0e:46:
9e:35:d8:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:53:56 2026 by rpki-client