Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.mft
File: XOGq4Mk60EtymAgraL9qVPpovPA.mft (raw, json)
Hash identifier: XjdbhMsZMc4tKWUNqhzWjgaA9xMWmvxMLfBEPyvjAKg=
Subject key identifier: 19:EA:C3:9D:7A:56:9C:D4:B6:4C:DB:A1:11:6E:68:A8:82:93:63:6A
Authority key identifier: 5C:E1:AA:E0:C9:3A:D0:4B:72:98:08:2B:68:BF:6A:54:FA:68:BC:F0
Certificate issuer: /CN=5ce1aae0c93ad04b7298082b68bf6a54fa68bcf0
Certificate serial: 019F92ED4ED863E2E66643540FE1DB9EE8EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XOGq4Mk60EtymAgraL9qVPpovPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 07:00:53 +0000
Manifest this update: Fri 24 Jul 2026 07:00:53 +0000
Manifest next update: Sat 25 Jul 2026 07:00:53 +0000
Files and hashes: 1: 0Sfi1GQLepJdH6-nAUQ0Hu0ZdhY.roa (hash: +q6McyBv6XD45sefW820BUSULPS6zrmqGUIvxYOPOus=)
2: OADJfv4sJk1hBJpusL11pl6fFtI.roa (hash: CYKU8NdxaFNmdeaAWm70OIx6aPv3u8b/dlSWiMUH5iU=)
3: XOGq4Mk60EtymAgraL9qVPpovPA.crl (hash: vP1OAMaTzLVm3aqWCGXw2gaO8BxSJgWmO1TKWHPftt0=)
4: l0x0gNUieNkYXNEIZ0HnbvxPCtI.roa (hash: LOiTnDzO1qKX4OsX911ZfvLi+m4Ieb87SaoClzu9V+A=)
5: x8LHw7zDa42zMdIg9zthvEzV2kE.roa (hash: 4t3LBnliu+TFNqK0uHC8bitBdGAkSxERgzaOQAy67TM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XOGq4Mk60EtymAgraL9qVPpovPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:4e:d8:63:e2:e6:66:43:54:0f:e1:db:9e:e8:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ce1aae0c93ad04b7298082b68bf6a54fa68bcf0
Validity
Not Before: Jul 24 07:00:53 2026 GMT
Not After : Jul 25 07:00:53 2026 GMT
Subject: CN=19eac39d7a569cd4b64cdba1116e68a88293636a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:35:c3:c9:c4:e0:3e:41:8a:62:36:d1:66:e5:
79:5a:d6:39:59:31:51:36:85:39:0a:89:2d:09:df:
38:99:6e:6c:12:13:f7:6c:34:4a:0f:39:e0:46:52:
e4:ef:9a:ca:e2:95:d6:a1:8f:72:a5:93:84:35:71:
06:b4:7b:79:53:ad:a7:6a:4f:d6:43:18:ab:4e:63:
4d:30:95:f0:2f:91:01:ea:77:27:69:72:f1:b4:ae:
6f:7b:9e:e4:4d:bf:ce:82:8a:60:bf:20:3e:60:99:
17:20:24:7f:a4:ca:97:d4:b7:69:72:6f:e8:b9:77:
91:ef:31:2b:01:8c:52:9b:79:ae:e6:57:e6:c6:64:
41:6f:51:7e:77:10:12:db:c4:46:8d:9c:85:28:df:
89:05:c1:ad:ab:f5:02:03:cc:02:a5:ec:dd:dd:78:
65:51:10:cd:89:94:f0:04:a9:da:43:8b:f8:eb:7c:
f5:dc:15:09:c3:78:bd:70:1c:6b:32:34:00:3d:04:
2b:fd:22:2c:da:b9:76:c8:97:30:31:a8:94:8d:d3:
7a:e6:10:1c:07:e4:bf:c3:80:8b:6f:d3:33:36:f4:
33:da:0c:af:d3:ef:f1:c1:4b:49:03:11:12:77:2a:
ed:e3:da:9c:12:a7:22:b8:82:dd:ca:03:7d:6f:0a:
bb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:EA:C3:9D:7A:56:9C:D4:B6:4C:DB:A1:11:6E:68:A8:82:93:63:6A
X509v3 Authority Key Identifier:
keyid:5C:E1:AA:E0:C9:3A:D0:4B:72:98:08:2B:68:BF:6A:54:FA:68:BC:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XOGq4Mk60EtymAgraL9qVPpovPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:bc:ec:b3:25:3d:64:41:3c:47:95:a6:c2:49:2c:f3:11:72:
01:41:ba:59:9c:b3:5b:cc:3d:d8:68:f4:ba:57:58:97:0a:40:
a6:46:3c:26:d0:98:09:b9:79:c4:69:b9:c6:b8:f9:94:c5:f8:
03:6f:00:14:da:5f:eb:a8:d4:78:4c:eb:fb:79:c6:d4:a4:c2:
89:84:c5:d6:6e:56:8d:7a:7a:9c:8f:44:4e:99:77:62:64:40:
50:4e:31:6b:6f:cd:85:f3:f1:a4:74:7d:df:ff:10:72:3e:16:
94:ef:dc:84:92:a1:a7:2a:f2:9a:32:b0:e1:a9:e1:40:3b:29:
62:81:e9:1f:e4:04:dc:99:93:33:61:98:61:f1:13:2d:eb:d9:
d8:a5:28:84:68:a7:13:dc:18:ef:29:8a:e2:b0:8c:70:88:51:
c7:e5:38:4c:4d:07:67:44:17:1a:84:cd:a3:bb:97:c4:de:0e:
b2:a9:f1:21:ca:29:98:75:e3:49:2e:f8:29:43:4a:89:3a:e8:
91:02:28:9b:d5:b3:15:23:a7:75:f2:82:ac:39:cf:9c:dd:56:
1d:fb:b8:d0:01:35:4a:4e:4f:41:68:f6:c9:17:b9:fb:2b:e8:
d9:2c:52:bf:bd:d9:27:39:f1:c1:a6:90:11:f1:e6:07:11:94:
f0:0a:a3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:12:02 2026 by rpki-client