Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
File: XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft (raw, json)
Hash identifier: Ka4c4mnPt5qT37UCw7jFONOVMUxUx5bNb1jEj0TDTxE=
Subject key identifier: EF:4D:E0:32:13:3B:13:71:55:4B:25:CD:F6:18:E4:79:E3:B6:2E:42
Authority key identifier: 5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
Certificate issuer: /CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
Certificate serial: 019F916C9B92653AC71BB04EDCA1AC43182B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
Manifest number: 0C91
Signing time: Fri 24 Jul 2026 00:00:41 +0000
Manifest this update: Fri 24 Jul 2026 00:00:41 +0000
Manifest next update: Sat 25 Jul 2026 00:00:41 +0000
Files and hashes: 1: MXmi4elQgkZloOXKc5KxZJXFILw.roa (hash: 4eGKiA6fp/86boDwfJeXXyGqjfCWRwxGmH0ShZjDAuQ=)
2: XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl (hash: LUI/AG4TIpoa1IRYOKaU1ozZ0QQxT6F2YxrG1n1u4+0=)
3: taZbUsGibT55ZZu6Th_Go_ILjiU.roa (hash: d/WlzB5v4feaToE5n6krRnONbSIkTydQjlb9UBErHJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:9b:92:65:3a:c7:1b:b0:4e:dc:a1:ac:43:18:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
Validity
Not Before: Jul 24 00:00:41 2026 GMT
Not After : Jul 25 00:00:41 2026 GMT
Subject: CN=ef4de032133b1371554b25cdf618e479e3b62e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:96:93:07:75:7c:bf:e9:57:20:6e:3f:db:5b:
0f:28:78:a5:d2:57:da:d7:3a:49:7b:0e:5a:08:d4:
0d:e6:8c:14:3f:1b:67:57:04:38:f5:ab:39:8b:29:
e4:70:b2:35:dc:84:2a:ae:93:15:96:2f:1d:89:58:
31:91:c9:21:e8:23:a5:94:5a:14:77:6e:eb:04:ef:
73:68:93:0b:ae:c8:2e:1f:90:0d:f5:76:e4:56:97:
02:2c:27:61:f0:55:48:6a:a8:30:aa:fe:fb:12:7c:
0b:9a:aa:1f:11:67:42:a1:ba:91:c7:33:53:66:79:
49:8f:5c:de:8f:19:67:84:7b:da:62:e2:39:e7:c0:
ce:42:a1:cf:31:b2:84:f8:84:a6:30:14:aa:a8:33:
01:12:58:7d:f2:86:96:e3:75:64:94:d8:94:81:b5:
56:ae:fd:f3:f6:05:5e:6e:1a:20:f2:b0:28:27:39:
24:da:3f:ce:c6:27:34:17:ea:80:97:60:db:57:8c:
14:f6:bc:29:82:e0:64:61:54:5b:64:d0:89:0c:e7:
c1:0e:a9:c9:7c:88:77:3c:1f:0c:f9:bf:8b:87:22:
f2:79:c4:44:24:8b:77:95:19:22:8b:d2:61:bc:c6:
60:38:40:db:e6:6b:0c:09:fe:4d:17:6a:df:75:27:
70:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:4D:E0:32:13:3B:13:71:55:4B:25:CD:F6:18:E4:79:E3:B6:2E:42
X509v3 Authority Key Identifier:
keyid:5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:93:f2:db:24:16:08:53:4a:a0:f1:00:55:94:c4:f8:91:8c:
e0:d8:db:65:84:ff:08:4b:19:9c:de:a6:b8:5b:c8:96:9d:59:
c8:a1:b1:fb:29:a9:f1:bb:f9:42:d7:d6:3d:33:d6:4b:e5:8f:
56:ac:74:ce:24:b3:9b:a6:f0:73:68:be:01:e6:ae:96:73:6b:
f0:1d:25:5c:2a:3c:c6:e3:80:35:cd:ae:2d:b9:a6:b3:56:d2:
b5:a6:61:b7:f4:96:56:f1:d6:81:df:f0:e2:1e:d1:7a:b1:61:
c3:cb:ed:df:e7:d2:22:4d:1d:e2:29:35:90:a8:57:4e:57:84:
c5:f9:f0:c1:dd:70:12:2d:03:41:b4:35:bc:74:30:2b:81:01:
f0:d9:c4:89:23:8c:b6:10:e4:ad:c5:9f:63:78:7b:d9:25:72:
a1:61:a3:21:98:99:d5:c3:e7:23:db:ab:da:64:42:eb:e7:cf:
d7:e4:65:b8:78:1d:05:7c:68:f9:8b:97:10:95:b0:73:d6:0f:
9a:d1:90:05:de:6d:29:73:9f:51:73:0d:ba:d9:72:20:e0:7c:
db:12:6a:9e:16:0d:21:18:e9:92:77:d0:7e:8e:44:78:58:ba:
cf:f7:4b:74:c3:34:07:5f:80:f3:f1:d4:a6:00:04:fa:d7:12:
dd:f2:3b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:01:31 2026 by rpki-client