
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft
File: xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft (raw, json)
Hash identifier: k0LsJ644kR0mltL8+n2iJTYxL0B94JsQPOYvUKCRq0k=
Subject key identifier: 62:29:F9:9A:DA:E0:0E:89:84:86:B4:06:18:ED:68:88:53:97:7B:2A
Authority key identifier: C4:D8:C1:98:5C:50:C7:EA:D4:CF:D8:D3:A9:3D:63:E5:61:1F:6F:B6
Certificate issuer: /CN=c4d8c1985c50c7ead4cfd8d3a93d63e5611f6fb6
Certificate serial: 019F935A93D2B1A75D93CDFEE09DB037AC24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft
Manifest number: 19CB
Signing time: Fri 24 Jul 2026 09:00:14 +0000
Manifest this update: Fri 24 Jul 2026 09:00:14 +0000
Manifest next update: Sat 25 Jul 2026 09:00:14 +0000
Files and hashes: 1: 7yu1vZA6sQopFbJ477QSAd_T4No.roa (hash: y294/GuVma254ox9Je2JWpyy0Aod0Bh8Uh2WyhLyqks=)
2: AOST2v0fOQI-ty-pWahAGdkHAEs.roa (hash: jxMvz/MnFmWAmclh3cHyqmlZEVpCA/u6934edlXvIDs=)
3: v92-Eaw03d123_02nzbPzAiBgtc.roa (hash: EG21x+MWDXMZMqTlMifEMC9yWAbNwFpO2h6QDrwu7Io=)
4: xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl (hash: L5ZrCG95jBDokuc0EcVkuYyO7TRU5IKOj3szjJJl3EA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:93:d2:b1:a7:5d:93:cd:fe:e0:9d:b0:37:ac:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4d8c1985c50c7ead4cfd8d3a93d63e5611f6fb6
Validity
Not Before: Jul 24 09:00:14 2026 GMT
Not After : Jul 25 09:00:14 2026 GMT
Subject: CN=6229f99adae00e898486b40618ed688853977b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d7:e3:8a:93:90:5b:f2:07:93:14:27:d9:a5:
03:8a:29:21:03:c7:fc:25:29:60:03:05:73:74:f5:
f7:96:fb:67:e0:0b:e9:0a:95:4e:65:c8:eb:15:8f:
c2:48:1d:d9:21:08:58:77:a5:03:0d:93:42:5e:61:
a5:41:d9:71:3b:e6:b2:94:ab:35:c7:3c:94:39:c2:
a1:7a:3b:79:5d:a5:1b:c0:e9:3d:de:24:f0:2d:ff:
35:6e:20:41:ef:24:7f:e6:69:d9:ff:cb:f9:1a:20:
90:6a:ea:f4:34:e2:75:bf:76:b5:61:87:11:ac:dc:
11:ac:7e:3b:6b:4e:ab:0b:42:35:bb:dc:0d:7f:aa:
e1:c4:97:9d:72:8c:54:e2:52:5c:85:52:7f:85:f5:
f0:ae:07:b8:0e:f0:d4:38:25:da:e1:3f:05:f7:fa:
5a:de:5a:76:66:ca:ba:f5:56:3b:a5:d9:88:ca:60:
ca:1e:b0:d7:76:db:76:bf:90:25:25:a2:83:dc:26:
56:2d:ce:46:b7:cf:13:3a:32:cd:87:66:d6:bb:6c:
a2:cc:a7:cd:c8:d8:ee:89:19:24:6d:79:c3:17:e5:
2b:12:3c:fc:18:49:d8:4c:3a:a6:1e:4e:0b:54:e6:
99:10:e9:47:20:55:6a:21:e1:e2:ba:6c:4a:33:ca:
c0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:29:F9:9A:DA:E0:0E:89:84:86:B4:06:18:ED:68:88:53:97:7B:2A
X509v3 Authority Key Identifier:
keyid:C4:D8:C1:98:5C:50:C7:EA:D4:CF:D8:D3:A9:3D:63:E5:61:1F:6F:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:2f:90:ca:b0:1e:93:a5:19:5a:2d:48:79:dc:54:c0:3d:66:
21:d3:98:47:a4:5d:dc:41:bc:c9:26:ac:e1:74:25:08:a3:cf:
5a:45:80:c8:cb:c2:a8:07:bb:eb:46:e9:52:d0:98:83:34:88:
dd:c3:df:4e:24:ef:24:50:8c:a2:be:7b:e7:32:27:fa:7b:a7:
02:a6:e2:59:31:ab:54:f5:4a:91:17:87:1f:2c:d4:4b:3c:09:
12:29:18:56:05:0a:90:3d:3c:af:ea:eb:a6:5f:7c:92:d0:d5:
71:a4:0d:fe:4d:4e:3f:ac:f0:02:bf:6a:1f:95:80:39:58:25:
20:33:95:f9:8f:3d:77:fc:27:80:94:98:aa:58:61:82:58:90:
11:a6:8e:42:a9:49:92:9f:87:65:fb:5e:54:83:62:01:14:79:
ac:a8:ef:3a:ea:b7:91:6d:a5:a0:98:b0:7b:de:55:26:09:8d:
d1:92:5d:99:68:06:72:d2:3f:e9:f7:99:bd:b0:4b:d0:15:c8:
c7:32:72:89:66:a5:51:f1:47:f8:ee:c9:97:e2:19:06:ca:d2:
c5:30:55:79:bd:87:d8:9c:f5:7f:99:84:77:c5:a9:c8:68:5a:
5e:35:5d:d9:68:6f:16:71:59:0c:5e:4d:8a:33:7d:c8:ab:c5:
3b:03:80:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:29:31 2026 by rpki-client