Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
File: XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft (raw, json)
Hash identifier: EFCzEyZs32Fv2ERpIWHYRKw5T8P6A/QueEgMux8gjQo=
Subject key identifier: F8:9C:05:9C:EF:AB:BE:F1:FD:2C:8E:F4:E8:72:21:98:5E:6E:97:BE
Authority key identifier: 5C:A0:53:DF:E7:71:2E:E6:3D:BF:F6:40:FA:E0:73:08:D6:6C:E7:48
Certificate issuer: /CN=5ca053dfe7712ee63dbff640fae07308d66ce748
Certificate serial: 019F9090D3354741A7086144AE04E63FA7A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
Manifest number: 19C9
Signing time: Thu 23 Jul 2026 20:00:38 +0000
Manifest this update: Thu 23 Jul 2026 20:00:38 +0000
Manifest next update: Fri 24 Jul 2026 20:00:38 +0000
Files and hashes: 1: JtY0Nc5KsnYFhq9gwtFkh9ll4_c.roa (hash: 2ee0ztpkOTTrJZ/rJndPjJzssmpY0MoOu/loesqHer8=)
2: XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl (hash: kxh9NR8AWYv/wci3RKAPxWuectvbHw41q4TqC6wzS04=)
3: XVPpnUXQ607rP--ePsLN9cz89_c.roa (hash: 0wqwWXvhEcuxDQDNA2phuoRTJPiVO88rNNJcF2GbNvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:d3:35:47:41:a7:08:61:44:ae:04:e6:3f:a7:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ca053dfe7712ee63dbff640fae07308d66ce748
Validity
Not Before: Jul 23 20:00:38 2026 GMT
Not After : Jul 24 20:00:38 2026 GMT
Subject: CN=f89c059cefabbef1fd2c8ef4e87221985e6e97be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:07:af:1f:9c:13:aa:6d:c6:fa:b2:a3:db:a5:
92:61:95:b9:c7:f7:77:18:ad:8e:5a:ef:09:79:3f:
2f:37:79:98:24:04:14:1b:ea:10:0d:91:8f:7a:88:
55:36:16:56:9a:6a:dc:d9:c7:dc:20:0b:e7:03:b6:
f2:1b:90:59:8f:39:1d:63:9a:a1:85:3c:5f:b1:b4:
27:db:8f:57:a3:4d:23:55:40:4f:2b:73:4d:17:94:
0c:d9:63:d4:e4:fc:e8:4f:c3:84:e6:76:33:dd:6e:
a7:4e:a1:45:aa:15:d5:e9:af:2e:c6:be:3e:a7:da:
e7:7c:08:84:ad:c0:3b:bc:84:af:de:c3:37:de:52:
7a:ed:9a:c5:4d:ba:2f:60:bf:6d:7b:a0:d6:55:f6:
af:f8:b4:fd:76:25:2a:7e:50:05:09:18:eb:e8:84:
95:2b:78:15:44:39:f6:c6:93:bd:b6:db:46:bc:80:
13:0f:fe:dd:82:10:00:d9:a4:eb:25:96:42:5b:a7:
73:8a:14:c0:2c:e9:12:5b:4e:18:af:b7:bf:ad:dd:
a5:62:a7:d1:c4:c2:ee:aa:7e:3d:4c:82:cb:ad:ff:
1c:0a:a6:c2:95:2d:47:44:fa:b5:ea:e2:ba:32:30:
3c:cc:a7:0c:60:13:4d:de:fb:f5:2a:80:a0:60:bc:
2e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:9C:05:9C:EF:AB:BE:F1:FD:2C:8E:F4:E8:72:21:98:5E:6E:97:BE
X509v3 Authority Key Identifier:
keyid:5C:A0:53:DF:E7:71:2E:E6:3D:BF:F6:40:FA:E0:73:08:D6:6C:E7:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:b6:db:09:19:b1:e8:90:d6:83:d2:77:5c:2c:b8:6b:8f:4f:
c6:1e:7f:52:e2:0b:0e:f2:8b:46:c8:6a:05:59:96:fa:90:ad:
74:d2:5e:e7:bb:5a:da:13:82:0a:fa:57:7b:d1:6e:20:bc:69:
96:55:2b:34:a5:d6:a9:45:2d:9e:0c:3a:34:d6:c0:57:6e:f0:
49:f6:b5:b8:b0:89:4c:83:58:70:c9:e1:04:4f:42:d7:1d:9e:
bd:4d:89:f5:08:c8:12:3f:da:8a:35:bc:de:cf:e2:80:a1:f7:
27:c7:cd:1b:8a:d9:90:28:c8:4a:6c:3b:67:ad:31:12:ed:b8:
c9:bf:03:f0:14:0d:99:b3:d5:dd:40:cc:9a:ba:b6:79:e1:73:
f4:f0:04:ea:28:6a:3e:1f:4a:dd:6d:37:66:8a:5b:69:5d:91:
13:68:ff:1e:1e:90:4a:cb:a5:84:64:5f:8a:b7:93:6d:46:9c:
78:00:d2:85:a6:cb:5a:a0:88:4b:58:81:7e:ab:e9:47:2b:ce:
81:89:6d:b2:03:b4:c0:07:23:f9:7a:1d:e3:f6:89:49:eb:95:
f6:70:de:b7:83:bc:db:cd:ee:0d:a9:bc:cc:6e:74:ac:83:9e:
46:8f:df:c2:54:ae:87:c7:d4:18:9d:4d:57:74:03:cd:d0:94:
73:60:ca:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:31:28 2026 by rpki-client