Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
File: xtEbZP_hjvpC9DpsdlY53uONAn4.mft (raw, json)
Hash identifier: 5E3Es4zIZ2Tr1r/1AVPCKH1xHfnE6VbQvMJ3liXPtz4=
Subject key identifier: 0E:11:AE:35:E0:51:91:CE:1F:9A:51:9F:FB:F5:DE:13:39:3E:4D:0F
Authority key identifier: C6:D1:1B:64:FF:E1:8E:FA:42:F4:3A:6C:76:56:39:DE:E3:8D:02:7E
Certificate issuer: /CN=c6d11b64ffe18efa42f43a6c765639dee38d027e
Certificate serial: 019F91DABD3484F89525DA31956EFAC1FCE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
Manifest number: 124E
Signing time: Fri 24 Jul 2026 02:00:59 +0000
Manifest this update: Fri 24 Jul 2026 02:00:59 +0000
Manifest next update: Sat 25 Jul 2026 02:00:59 +0000
Files and hashes: 1: 1HMsGfdsMj6bVCe_HqSPHKmPGQA.roa (hash: Aa+3horScinkb91IcV06nuOTEkzdcEAPUq8TBlQGMDg=)
2: Q6q5ifTmogwJicn2e4z2f5_1UN8.roa (hash: ZCT+LPivkmFqXHHIYRE3kEHzKOk9mVM2bvW0OtpppFg=)
3: xtEbZP_hjvpC9DpsdlY53uONAn4.crl (hash: 6YHqlmgrQ2p+SANAYUdDc9x2pZAGrvN3d5uujPEAoOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:bd:34:84:f8:95:25:da:31:95:6e:fa:c1:fc:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6d11b64ffe18efa42f43a6c765639dee38d027e
Validity
Not Before: Jul 24 02:00:59 2026 GMT
Not After : Jul 25 02:00:59 2026 GMT
Subject: CN=0e11ae35e05191ce1f9a519ffbf5de13393e4d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:41:ec:21:67:7a:2c:9a:91:34:89:0c:c6:8d:
cc:f5:04:96:35:53:52:32:69:8e:15:84:c1:83:34:
38:03:35:01:f5:89:f8:33:63:9b:2d:56:3f:12:7b:
f4:a2:4f:f2:67:da:b4:3f:7e:09:7d:f4:ba:3d:bf:
d7:a3:57:49:6f:e5:0e:3f:f8:04:9c:c8:eb:02:0e:
78:27:48:be:72:c2:0f:33:57:ba:45:6f:fc:3a:6f:
e6:bf:d1:b8:a3:c7:26:82:c4:39:8d:c1:1a:a6:a2:
25:ad:9b:c0:e0:86:9c:32:d2:1e:9f:fa:e9:5b:13:
bb:51:6a:65:f7:03:79:fe:c1:99:7c:d6:b6:b1:88:
82:b1:9a:8c:ea:5c:76:72:a5:59:db:9b:ff:22:f4:
1b:09:85:de:52:50:9c:14:ff:cf:71:90:11:57:d6:
b9:3e:c8:52:ac:8f:71:9d:01:cb:78:6b:a6:ac:07:
94:e9:52:1c:ae:98:85:81:12:8d:ce:a3:c1:96:2b:
86:b3:8d:e8:16:99:76:22:22:c9:c8:72:03:38:4f:
7b:9e:5e:62:f2:2e:94:0d:0c:91:94:a3:0f:4a:35:
da:f5:da:72:20:d6:77:e0:73:7b:ed:fd:96:7e:88:
93:bb:00:fd:d5:c9:9f:63:ae:63:e8:0b:c4:32:42:
70:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:11:AE:35:E0:51:91:CE:1F:9A:51:9F:FB:F5:DE:13:39:3E:4D:0F
X509v3 Authority Key Identifier:
keyid:C6:D1:1B:64:FF:E1:8E:FA:42:F4:3A:6C:76:56:39:DE:E3:8D:02:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:31:a5:21:9c:f1:42:2e:2f:7c:f6:f3:47:9e:56:60:29:98:
79:9d:e7:e9:89:b6:75:5c:76:13:29:63:76:1a:a6:f3:15:a8:
b8:a5:f9:f6:5e:24:81:b0:26:fa:11:da:61:0b:fe:b0:2e:97:
96:65:59:35:fb:ef:de:54:0c:ec:7a:f0:00:76:67:b6:ef:16:
67:32:f3:e9:d2:3f:9d:37:2b:0e:05:b6:0e:85:29:46:4c:93:
e4:40:45:31:33:aa:4a:55:87:5e:3c:88:1b:49:76:b7:23:5e:
0f:e5:1e:1b:5c:e9:47:f7:b1:3c:fa:ce:19:66:15:f1:b9:1f:
12:bb:97:94:c4:fb:5e:27:ef:a9:1a:33:6a:9b:49:b7:94:30:
b0:9b:29:72:6b:49:46:ab:c5:8d:ce:ed:10:ea:25:59:df:9c:
c0:65:4c:82:f6:5d:75:7e:cb:9e:e2:87:ca:4f:f0:b7:1a:88:
5c:f1:ae:a5:c5:ab:23:16:29:ce:d7:21:16:00:42:c9:94:ed:
ad:bb:5f:ce:27:a0:ea:60:65:6b:b9:08:ad:8f:05:4d:f3:7e:
6b:11:90:6d:65:b2:16:d4:bc:ed:e7:b3:fd:8f:24:f3:8a:91:
d1:43:b7:0d:d5:47:55:30:f9:f6:e7:5a:5b:a2:1c:7e:a5:3e:
04:cb:ca:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:31:09 2026 by rpki-client