Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/7298ab-7b9c-47ad-9085-50974bcdc248/1/XNhYOyEXQQSea7GalG2DGqvxGtM.mft
File: XNhYOyEXQQSea7GalG2DGqvxGtM.mft (raw, json)
Hash identifier: RNFjsqL11fJBhwI3dIRXZZMBIEI3n48B4ASs+sR2Uxw=
Subject key identifier: 84:7A:27:71:1D:EC:0D:84:A2:56:B5:51:58:86:4D:E9:14:4B:D0:64
Authority key identifier: 5C:D8:58:3B:21:17:41:04:9E:6B:B1:9A:94:6D:83:1A:AB:F1:1A:D3
Certificate issuer: /CN=5cd8583b211741049e6bb19a946d831aabf11ad3
Certificate serial: 019F954A3BF0D7798512E7ACFB4B1307123E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNhYOyEXQQSea7GalG2DGqvxGtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/7298ab-7b9c-47ad-9085-50974bcdc248/1/XNhYOyEXQQSea7GalG2DGqvxGtM.mft
Manifest number: 190A
Signing time: Fri 24 Jul 2026 18:01:37 +0000
Manifest this update: Fri 24 Jul 2026 18:01:37 +0000
Manifest next update: Sat 25 Jul 2026 18:01:37 +0000
Files and hashes: 1: S2GzX7bjyNfk8zuc_J7yDO8r8_A.roa (hash: 9cgwTQAZVGZH9VKGn5dJT7UJ2jaArnzhzVtmHDdrHjU=)
2: XNhYOyEXQQSea7GalG2DGqvxGtM.crl (hash: eU5jSEArgRciCVdhxSwEctZ7Zipfv0SdiMA59mTGpA4=)
3: rSchH_WpkAQtklBw4R5ArVw7Etg.roa (hash: FQrYCtK1inx5vQ38kiI4C/z5+zK3xo4th9Fjypdt9nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/7298ab-7b9c-47ad-9085-50974bcdc248/1/XNhYOyEXQQSea7GalG2DGqvxGtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/7298ab-7b9c-47ad-9085-50974bcdc248/1/XNhYOyEXQQSea7GalG2DGqvxGtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNhYOyEXQQSea7GalG2DGqvxGtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:4a:3b:f0:d7:79:85:12:e7:ac:fb:4b:13:07:12:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd8583b211741049e6bb19a946d831aabf11ad3
Validity
Not Before: Jul 24 18:01:37 2026 GMT
Not After : Jul 25 18:01:37 2026 GMT
Subject: CN=847a27711dec0d84a256b55158864de9144bd064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d9:de:7d:c5:25:9e:3b:ed:14:1f:ff:56:ad:
35:94:cc:b4:e3:e5:8d:37:4b:82:89:3d:52:08:b4:
60:5e:e6:0b:50:06:d3:b7:1d:e2:7a:8b:8f:05:0a:
85:11:10:32:cb:8e:93:49:4d:37:41:52:ed:91:6f:
4a:76:09:42:fd:67:9c:75:5c:33:37:f4:1f:59:32:
15:c3:b1:1f:32:22:d3:a0:6f:15:25:95:63:5e:81:
9c:8d:76:ed:7e:26:1e:af:04:71:2a:1f:96:f3:de:
5a:cd:74:3f:d5:14:4e:60:ef:da:15:ae:39:a0:89:
ad:2f:c7:b7:39:48:d0:8f:f2:0e:c8:75:96:71:7c:
9a:4c:aa:9b:ba:f2:93:93:81:ce:9a:64:75:e7:3d:
1c:7d:1c:a7:aa:92:5b:f3:0a:96:62:09:70:5d:0a:
a3:57:d5:fe:c0:32:12:0a:17:f3:ae:31:c0:c6:69:
50:ad:84:2e:00:e8:52:9b:4c:67:e4:4d:cb:bb:24:
aa:fc:75:0e:c6:5a:6b:2a:e6:9e:e3:11:f3:3a:ee:
43:6c:6f:0b:2b:7f:78:b4:a7:47:db:48:a6:9c:79:
1d:30:34:99:45:64:c4:53:e8:2c:9d:2e:81:62:6a:
a8:3f:ef:c7:25:ad:fd:f7:e1:33:05:2d:c8:1c:41:
05:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7A:27:71:1D:EC:0D:84:A2:56:B5:51:58:86:4D:E9:14:4B:D0:64
X509v3 Authority Key Identifier:
keyid:5C:D8:58:3B:21:17:41:04:9E:6B:B1:9A:94:6D:83:1A:AB:F1:1A:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNhYOyEXQQSea7GalG2DGqvxGtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/7298ab-7b9c-47ad-9085-50974bcdc248/1/XNhYOyEXQQSea7GalG2DGqvxGtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/7298ab-7b9c-47ad-9085-50974bcdc248/1/XNhYOyEXQQSea7GalG2DGqvxGtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:47:eb:6f:c5:f3:bc:47:06:d2:8f:3c:4d:d6:25:a3:b7:1e:
a4:20:d6:7c:b3:ad:82:08:4b:09:ff:48:a8:62:34:d5:32:e7:
25:ad:41:72:f9:07:6b:0b:96:5b:a1:1e:64:96:65:17:6d:97:
db:dc:1a:01:67:30:8c:ac:4a:34:5b:f0:c8:f2:cc:7e:be:a9:
50:83:95:59:16:4d:43:bf:12:be:67:93:d2:73:d3:6d:c7:f1:
75:ff:63:4d:79:e6:85:5e:93:e5:49:ae:c0:f6:7d:49:dd:56:
ad:c4:ac:ce:56:8e:96:6e:79:35:43:cc:16:de:72:89:f8:81:
a5:aa:a8:84:1f:7d:a2:a8:2b:0d:c6:d6:01:4f:74:ee:f6:a5:
7c:46:e8:ba:b2:46:c1:65:f3:80:22:01:72:6c:d9:14:0b:9b:
79:8d:b6:c5:b8:fc:e0:79:47:5c:d6:1a:33:31:5f:2f:67:98:
e5:e4:fb:96:6a:6f:24:61:18:73:c9:dd:23:38:ba:f3:9b:03:
bf:78:a3:33:0e:7b:0a:35:48:6b:ef:1a:60:57:48:64:98:0a:
69:ef:c8:34:ae:4e:ea:ed:8f:ec:1c:23:59:fd:d6:cf:68:71:
97:50:ba:2a:29:dc:7a:00:4f:25:a7:7e:78:0e:9a:5e:4a:c4:
2b:90:7e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:29:53 2026 by rpki-client