Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.mft
File: _XjxP_qS8HTr5VfSotKa0Noz5dg.mft (raw, json)
Hash identifier: ve0gHPm0MvNwkK/BQKxgoFb9qO2NjIQirIgE5a9d/BA=
Subject key identifier: 08:7F:B1:2F:CE:E1:80:1E:88:A1:4D:5F:13:88:37:56:FA:6F:BC:45
Authority key identifier: FD:78:F1:3F:FA:92:F0:74:EB:E5:57:D2:A2:D2:9A:D0:DA:33:E5:D8
Certificate issuer: /CN=fd78f13ffa92f074ebe557d2a2d29ad0da33e5d8
Certificate serial: 019F92ED0F2BC8824CB91E52871B9D98F609
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_XjxP_qS8HTr5VfSotKa0Noz5dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.mft
Manifest number: 0F20
Signing time: Fri 24 Jul 2026 07:00:37 +0000
Manifest this update: Fri 24 Jul 2026 07:00:37 +0000
Manifest next update: Sat 25 Jul 2026 07:00:37 +0000
Files and hashes: 1: H7yvjO1PteMvFud2cVf980xvhOM.roa (hash: RhQsj0SDsU/JKqzjG9Bf/mkgnMQmL8vD/s9sreGOu30=)
2: _XjxP_qS8HTr5VfSotKa0Noz5dg.crl (hash: V39EgJp+8Tw3NK1oAkCoZh/7szKgJ2iwT4FIjrUBNcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_XjxP_qS8HTr5VfSotKa0Noz5dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:0f:2b:c8:82:4c:b9:1e:52:87:1b:9d:98:f6:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd78f13ffa92f074ebe557d2a2d29ad0da33e5d8
Validity
Not Before: Jul 24 07:00:37 2026 GMT
Not After : Jul 25 07:00:37 2026 GMT
Subject: CN=087fb12fcee1801e88a14d5f13883756fa6fbc45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e5:4a:c0:83:50:14:54:ec:16:c4:c5:2f:20:
0d:80:eb:d7:2b:2d:61:9a:bd:ba:a3:96:3f:6f:27:
26:be:e5:f7:3f:25:cf:dd:66:ab:fa:85:03:ce:c1:
7d:0d:51:7a:5c:65:4e:66:26:cb:35:03:23:fc:5b:
15:3c:00:9b:0f:06:31:40:a1:66:ae:f3:d3:2e:45:
b8:e1:01:4d:92:3d:5f:2d:0f:43:93:6b:73:8e:c0:
e9:d2:ff:0d:87:5f:8f:27:51:fc:f1:b0:04:a6:ef:
a5:75:7c:37:3d:8a:76:46:2b:02:b4:2b:2b:4b:c1:
16:49:d7:b5:46:eb:a6:24:ba:b3:e0:65:95:0f:87:
78:ed:7b:26:1e:89:c8:18:ed:24:1c:ca:99:41:66:
3b:ab:57:98:9b:e9:9b:7b:8a:6b:ab:57:c1:b1:3b:
2c:45:15:0e:45:6a:67:c2:90:39:20:56:89:a9:13:
eb:01:4e:a8:90:38:4f:4c:de:c6:10:79:55:ad:2b:
dd:d4:8e:bc:40:d1:d9:4a:45:40:e9:f9:3e:03:f2:
a4:2c:8e:6e:b4:04:80:fe:a4:42:cf:a7:3d:4e:60:
e6:f8:e7:a6:2d:75:94:5b:29:a9:3c:08:bd:94:67:
85:c5:92:eb:18:bf:89:ca:da:bc:e1:05:d0:56:7a:
8d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:7F:B1:2F:CE:E1:80:1E:88:A1:4D:5F:13:88:37:56:FA:6F:BC:45
X509v3 Authority Key Identifier:
keyid:FD:78:F1:3F:FA:92:F0:74:EB:E5:57:D2:A2:D2:9A:D0:DA:33:E5:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_XjxP_qS8HTr5VfSotKa0Noz5dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:92:37:db:03:a1:36:ce:bb:4b:01:3f:52:9f:4d:44:23:3f:
5f:64:2c:e0:5b:1b:5e:7a:9b:fb:17:d1:1b:7f:4c:cd:dd:0c:
a8:1d:be:29:27:98:4b:2d:6f:3d:39:dc:71:98:27:84:ba:7a:
28:cc:32:2f:3a:7d:d9:a1:50:51:30:81:d8:fb:d2:6f:1e:b4:
20:e2:e1:be:ed:f4:34:64:7f:d2:c3:ca:88:4a:38:f5:ff:4a:
74:14:04:05:09:f1:43:d9:d9:2f:32:c1:c1:cf:ea:3c:94:09:
10:e7:cf:06:fd:f2:7f:53:70:de:96:b8:35:ff:34:0f:ff:93:
41:a3:3f:6d:8c:bf:15:b6:0d:a3:e2:15:1b:0d:76:8a:a3:3a:
11:7a:9c:a4:1b:4c:58:0d:7d:1f:7b:da:46:08:02:1c:b2:cc:
2a:0c:d6:d2:98:f2:a6:e6:7c:fa:24:db:f8:19:32:1e:ea:62:
00:a6:d8:34:c3:08:59:08:4d:e9:d2:2a:0e:1c:a8:1c:e1:4b:
7e:c5:66:de:39:ea:69:0f:aa:8c:ba:ff:43:41:73:d2:78:ec:
ac:c0:2c:d3:1a:91:f0:0e:51:f8:28:e2:88:c8:0c:77:42:a9:
56:f8:7d:a6:78:49:45:22:f4:a4:0c:db:44:44:8e:56:a0:89:
36:61:67:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:27:48 2026 by rpki-client