Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
File: XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft (raw, json)
Hash identifier: U85ZWfJAaJ8cyyWqG+gqIhwTEl2Xo/97+pm5HNUipMo=
Subject key identifier: 79:00:ED:44:D5:0F:CF:F8:62:EE:E5:72:E5:FF:34:38:DA:CD:FD:DE
Authority key identifier: 5E:06:6D:E9:82:9B:76:1E:DC:E1:71:E8:EA:3C:59:35:E4:4F:4E:9A
Certificate issuer: /CN=5e066de9829b761edce171e8ea3c5935e44f4e9a
Certificate serial: 019F916C5CA8EFD72968A66822746E8E2778
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
Manifest number: 08FC
Signing time: Fri 24 Jul 2026 00:00:25 +0000
Manifest this update: Fri 24 Jul 2026 00:00:25 +0000
Manifest next update: Sat 25 Jul 2026 00:00:25 +0000
Files and hashes: 1: O9do_tpuJS2IYg238tFeLgPwuLo.roa (hash: inPkQd2M/OOC4cE+kZAGV36qocuoxkiJ2VIdZgql1s8=)
2: OQMR_FkQfBmNWWsOByMgzVQchtc.roa (hash: E+VXuwQXys0IVzb1O36G+Zcgxr0/sBSG/vjRsxKVhO0=)
3: XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl (hash: ESxqy1Lu/wQGznjj5lCyEDLDFKkvkFeGzDgexD5PtTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:5c:a8:ef:d7:29:68:a6:68:22:74:6e:8e:27:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e066de9829b761edce171e8ea3c5935e44f4e9a
Validity
Not Before: Jul 24 00:00:25 2026 GMT
Not After : Jul 25 00:00:25 2026 GMT
Subject: CN=7900ed44d50fcff862eee572e5ff3438dacdfdde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:72:b6:13:04:b5:f4:5f:ad:4b:7b:34:a5:7b:
c1:50:0d:22:db:9a:f3:a9:8b:b3:b2:06:f4:ab:b7:
6a:42:e9:31:b4:6a:75:c1:22:ee:c1:32:71:d5:5b:
4e:db:1f:dd:1a:53:37:c2:10:fb:e9:c1:88:84:47:
c8:24:df:76:f3:fb:82:cc:6d:5d:5e:d6:33:66:65:
35:84:1c:56:5f:6e:7b:54:77:08:9d:09:33:3a:1b:
27:d3:18:58:15:52:af:c8:5b:80:07:1f:df:a8:15:
0e:27:9a:01:2e:fb:18:82:ef:ad:cc:be:20:04:21:
e1:b0:b5:22:8f:27:47:69:bc:b7:10:fa:fd:3e:d7:
d6:e9:dd:59:57:c3:e4:81:7b:80:60:33:64:b7:e4:
72:20:a4:d7:6e:28:c2:ed:b6:39:5f:5a:59:80:9e:
23:b8:bd:37:c8:ba:57:80:d9:96:ec:5d:aa:b7:c1:
a5:40:f6:93:91:b4:c8:e4:2b:4a:51:34:ef:51:80:
88:08:7d:94:27:94:42:a6:95:f2:42:79:8f:99:fd:
51:e9:ac:1e:de:3e:bb:65:ab:94:58:17:78:fa:43:
84:1f:7b:43:38:50:fd:cd:e7:04:cc:b0:f9:43:4c:
7a:39:f6:f3:bc:e1:7a:d2:b6:0d:50:e3:2c:74:45:
0f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:00:ED:44:D5:0F:CF:F8:62:EE:E5:72:E5:FF:34:38:DA:CD:FD:DE
X509v3 Authority Key Identifier:
keyid:5E:06:6D:E9:82:9B:76:1E:DC:E1:71:E8:EA:3C:59:35:E4:4F:4E:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:a0:aa:64:a1:0b:54:75:2f:08:5b:18:b3:6b:e8:17:b2:af:
ae:e6:dd:93:9e:68:a2:dd:b5:c1:88:79:21:32:4f:c1:7e:dc:
cc:0d:6c:37:26:82:88:7b:5a:19:22:5d:62:f7:eb:e5:60:7e:
b1:9a:86:d5:f3:8d:5b:60:f3:44:06:69:0f:bf:74:88:d3:3b:
83:bf:70:6c:f1:04:aa:65:15:25:c2:d6:1f:d9:07:e6:a4:7f:
95:c7:76:6b:63:6f:bb:29:f7:3e:3c:24:1c:da:d5:19:f9:b5:
2f:04:de:ad:41:47:a8:c8:c7:40:e5:36:ec:7e:10:a2:ff:29:
93:bd:78:b1:c6:cd:e6:9b:31:20:5c:58:d9:d8:43:10:cd:85:
90:f2:c9:59:1c:90:7d:ac:a7:dc:a0:ce:02:e4:7a:93:94:df:
c0:2a:2b:fd:e6:af:6c:6e:a6:69:89:22:d5:ef:29:f3:4c:80:
07:88:71:cd:9f:1c:40:11:c5:27:c9:7a:07:f1:30:16:1f:f1:
99:99:b5:4a:91:e6:d4:60:36:c8:0f:8b:ae:06:a6:d2:c5:97:
a5:8d:b2:08:9c:46:4f:da:e8:c0:49:1d:58:b1:ed:60:8c:fd:
20:98:3f:16:18:13:d0:72:f4:88:42:0b:56:ca:a9:4a:42:bb:
92:a6:68:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:56:15 2026 by rpki-client