Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
File: XBEKKwrrN_DJMqlr279-82whGXw.mft (raw, json)
Hash identifier: q/gIFCDzIrh/7n4L6YA20eh3BSs8FuNtluSPhgrR5SU=
Subject key identifier: 1F:A6:03:74:45:8B:CF:A9:5F:55:2A:77:01:42:8A:1B:88:D9:A7:01
Authority key identifier: 5C:11:0A:2B:0A:EB:37:F0:C9:32:A9:6B:DB:BF:7E:F3:6C:21:19:7C
Certificate issuer: /CN=5c110a2b0aeb37f0c932a96bdbbf7ef36c21197c
Certificate serial: 019F93C91413F1215D6B009E1C7DB362D932
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XBEKKwrrN_DJMqlr279-82whGXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
Manifest number: 1534
Signing time: Fri 24 Jul 2026 11:00:56 +0000
Manifest this update: Fri 24 Jul 2026 11:00:56 +0000
Manifest next update: Sat 25 Jul 2026 11:00:56 +0000
Files and hashes: 1: NrZRCuerFzj4EhFGKoh_NKbZNxM.roa (hash: 5QAUpIfqv2CVCHxJDOL189fybpsclOVK/PxPIJsB8Xs=)
2: XBEKKwrrN_DJMqlr279-82whGXw.crl (hash: 3fpCVFejgr9Lj+YmyE0m2yvtSKVGyO0bYtdNxnDMt4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XBEKKwrrN_DJMqlr279-82whGXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:14:13:f1:21:5d:6b:00:9e:1c:7d:b3:62:d9:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c110a2b0aeb37f0c932a96bdbbf7ef36c21197c
Validity
Not Before: Jul 24 11:00:56 2026 GMT
Not After : Jul 25 11:00:56 2026 GMT
Subject: CN=1fa60374458bcfa95f552a7701428a1b88d9a701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8d:8d:7c:3c:48:1c:42:7e:d4:dc:ad:cc:0f:
f1:84:92:21:92:14:44:cd:41:61:01:84:ba:6a:7a:
9d:5e:75:f2:59:46:4d:eb:df:21:cb:b6:47:9f:cd:
08:e7:65:6f:3d:aa:d9:57:0f:4d:e5:a3:73:d8:31:
b0:08:60:f7:88:81:4e:29:39:d5:6a:6f:56:3e:22:
43:c7:a7:40:5d:9c:52:90:d1:28:be:56:bb:47:3b:
ee:4d:c3:34:50:bb:0e:f4:70:e4:79:71:60:31:6c:
68:5a:90:75:ed:d0:fd:98:4f:b7:3b:45:49:49:13:
52:7e:3c:ae:c1:e3:c0:c9:a6:6b:37:54:41:9a:af:
f3:63:4e:37:c9:25:cf:a4:fd:31:1d:85:af:d9:77:
30:91:e0:94:06:dd:e5:6c:98:aa:71:8e:4e:d7:67:
67:4f:bd:2d:31:b2:77:b9:5f:10:9f:af:d0:4a:0d:
3e:3b:b3:a5:6e:dd:7a:16:dd:3e:45:36:f1:af:ed:
c9:24:31:6d:41:ea:83:1d:60:1b:0b:a3:27:dd:60:
93:39:74:94:9a:ee:5a:12:17:d0:88:2d:36:a9:b8:
75:43:c5:1e:23:86:a6:8d:96:34:0e:96:fe:b7:2d:
e5:d3:e2:56:ef:81:72:b0:9b:d7:10:b0:65:37:fa:
25:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A6:03:74:45:8B:CF:A9:5F:55:2A:77:01:42:8A:1B:88:D9:A7:01
X509v3 Authority Key Identifier:
keyid:5C:11:0A:2B:0A:EB:37:F0:C9:32:A9:6B:DB:BF:7E:F3:6C:21:19:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XBEKKwrrN_DJMqlr279-82whGXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:bf:90:3d:ce:99:71:be:dd:b1:cc:cd:b2:25:52:7a:90:56:
66:1b:07:45:8a:c3:b0:2c:42:ec:62:51:6d:b7:30:79:61:ca:
f4:fc:56:68:4b:08:d8:52:f3:5f:5d:fe:03:fd:b3:0a:b5:74:
8e:53:58:78:c8:47:5f:eb:b4:fa:a4:40:76:19:98:ae:44:70:
4e:0f:4a:ec:93:73:aa:96:02:66:72:96:1f:7b:ac:30:ca:9e:
65:a6:86:cf:72:e2:da:1b:a8:85:94:46:2e:2a:b9:4b:56:6f:
c2:a7:28:87:db:f8:1a:19:28:2e:48:4e:4c:67:fd:75:c3:3c:
14:79:e7:70:6a:a0:c5:9e:00:1c:fa:a9:75:30:c1:c3:d3:41:
dc:ab:bb:dc:40:50:c1:95:1b:5a:9d:1d:15:0f:e4:dc:c6:34:
e2:c8:cf:b2:16:59:d2:02:c0:26:0e:40:ef:24:69:e5:69:e0:
e8:92:b6:13:82:77:01:7b:38:09:c2:c5:f5:1a:41:a9:bc:71:
8f:60:a6:7f:f6:34:9c:63:b0:2a:20:1c:fd:a3:8c:37:d9:ff:
c0:67:c5:a6:1a:ff:92:50:8f:93:01:c6:81:b8:0c:d7:69:f4:
3f:4b:cf:f4:6c:7a:56:e0:49:04:91:b9:04:51:db:8f:d8:a7:
73:59:84:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:52:43 2026 by rpki-client