Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
File: XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft (raw, json)
Hash identifier: uSDaMJlDfDd4XL/IBaz/T4W21wLQ989P7QAqPmqMnYI=
Subject key identifier: 55:E6:C8:38:0F:0B:61:BE:7C:68:AB:9C:2D:37:6A:E8:5B:36:34:34
Authority key identifier: 5E:06:6D:E9:82:9B:76:1E:DC:E1:71:E8:EA:3C:59:35:E4:4F:4E:9A
Certificate issuer: /CN=5e066de9829b761edce171e8ea3c5935e44f4e9a
Certificate serial: 019F8F7DF896006232DE04C876711E69078B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
Manifest number: 08FB
Signing time: Thu 23 Jul 2026 15:00:25 +0000
Manifest this update: Thu 23 Jul 2026 15:00:25 +0000
Manifest next update: Fri 24 Jul 2026 15:00:25 +0000
Files and hashes: 1: O9do_tpuJS2IYg238tFeLgPwuLo.roa (hash: inPkQd2M/OOC4cE+kZAGV36qocuoxkiJ2VIdZgql1s8=)
2: OQMR_FkQfBmNWWsOByMgzVQchtc.roa (hash: E+VXuwQXys0IVzb1O36G+Zcgxr0/sBSG/vjRsxKVhO0=)
3: XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl (hash: 5RUruG23sDepc5giVYMSXQ9tN5nvxKFYObZroVzAwp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7d:f8:96:00:62:32:de:04:c8:76:71:1e:69:07:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e066de9829b761edce171e8ea3c5935e44f4e9a
Validity
Not Before: Jul 23 15:00:25 2026 GMT
Not After : Jul 24 15:00:25 2026 GMT
Subject: CN=55e6c8380f0b61be7c68ab9c2d376ae85b363434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:89:5f:5b:7e:18:f4:52:49:f2:82:bd:dc:60:
f6:d1:b5:09:7b:bc:e7:2e:29:29:12:7b:f1:48:fc:
6a:96:13:e1:05:43:6a:11:64:98:28:84:97:de:91:
ed:b3:70:46:a9:32:37:18:2a:ac:d7:12:af:a7:0f:
e1:f2:0b:1e:18:29:13:90:5f:f5:82:45:10:84:10:
e2:de:3f:ef:dd:b4:92:48:28:24:d2:7d:65:56:68:
7c:35:a7:1a:b7:b4:0e:82:9a:aa:9e:0a:d6:93:61:
44:74:9c:fc:c0:9d:d3:30:40:08:c4:51:35:f6:b2:
7d:ce:aa:57:0e:6c:d2:19:ad:03:17:6b:fa:3e:14:
72:0d:cd:ed:35:bc:6e:62:d9:a9:00:29:9c:82:0e:
80:fd:66:a7:9f:cf:c5:e7:cf:d2:7a:96:18:b0:60:
02:9b:82:b6:9b:bb:00:ae:0e:1c:17:98:4f:e5:c9:
eb:95:09:6f:c8:9c:a3:98:e7:dc:00:5d:85:0f:4b:
8a:ae:04:6e:5c:99:1c:ca:13:49:67:6f:4b:69:2f:
63:79:a2:b7:1c:9a:12:e2:83:f7:1d:21:33:60:48:
47:2d:a6:e7:02:36:4d:39:bd:69:47:3c:11:38:87:
d8:58:ea:d3:df:24:95:ea:46:24:18:18:87:78:60:
1f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E6:C8:38:0F:0B:61:BE:7C:68:AB:9C:2D:37:6A:E8:5B:36:34:34
X509v3 Authority Key Identifier:
keyid:5E:06:6D:E9:82:9B:76:1E:DC:E1:71:E8:EA:3C:59:35:E4:4F:4E:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:e3:e7:32:3c:fb:97:88:0f:af:ad:81:97:6e:1a:a9:b4:17:
10:b2:5b:57:e1:9c:cf:e7:85:26:4d:15:a4:f7:27:5f:3d:04:
31:fd:7b:c7:78:e4:16:2d:27:99:99:ef:d2:2f:38:46:2b:a2:
e2:fa:12:73:05:17:35:b5:ed:36:25:ac:1e:91:45:cb:22:16:
2b:3d:20:5c:e8:bb:71:a5:e0:d9:5a:ab:57:f5:23:cd:27:66:
07:2f:80:e4:04:4c:6c:b5:49:b5:cc:6f:03:e3:23:79:6e:c3:
9d:65:13:5e:4c:a5:2a:e4:a9:b4:c9:20:35:40:c6:9c:4e:f9:
32:ac:2d:9c:b6:a0:6b:1a:35:20:3a:82:4b:6b:da:79:ff:62:
63:a9:bf:90:3c:0a:32:14:59:57:17:db:2e:ff:ee:84:30:e3:
ab:32:a3:df:c0:24:9b:88:72:af:a7:50:42:7e:00:57:a8:23:
fe:64:41:28:c0:3c:6f:34:84:63:9b:b5:ad:aa:bf:77:48:81:
04:2d:50:a1:9d:d7:d6:ef:11:c6:40:6e:38:be:ef:31:10:4a:
fe:d6:11:84:72:65:8f:c6:39:07:77:7f:cf:f9:c7:98:9f:a1:
ce:ab:2f:b3:e7:f7:c3:57:ce:70:fa:d5:3c:46:1f:8b:3b:f8:
d1:37:d2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:12:43 2026 by rpki-client