Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
File: xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft (raw, json)
Hash identifier: K+e8ev6tgLhV3VH7VZdKrQSadatGkw+IXwZnswsYXe8=
Subject key identifier: C9:5A:AD:E3:09:58:C3:5C:27:C4:1F:25:E3:5B:A5:2F:EF:19:D6:61
Authority key identifier: C5:8A:FA:22:F9:8A:37:F6:D8:D0:29:3A:9B:31:94:16:EC:94:D3:86
Certificate issuer: /CN=c58afa22f98a37f6d8d0293a9b319416ec94d386
Certificate serial: 019F921115CB075E072F2691C5D96D275AA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
Manifest number: 195B
Signing time: Fri 24 Jul 2026 03:00:20 +0000
Manifest this update: Fri 24 Jul 2026 03:00:20 +0000
Manifest next update: Sat 25 Jul 2026 03:00:20 +0000
Files and hashes: 1: AorOXJjA6o7VIXG2KhmRn45N0UY.roa (hash: opct1yXiFy361tzWw8bb0wIPcRKu5irJGelwFQC/fvQ=)
2: ErvwJYNq58NBwdxg4NllytvGu58.roa (hash: L/oQiFOQUaagNx6+74y64js5tlg2OsPgxLI2bOEuDOs=)
3: xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl (hash: xkIP5e1jP60v5KouZidV2INX/T0iF4etdsVvTsFG7Uw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:15:cb:07:5e:07:2f:26:91:c5:d9:6d:27:5a:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c58afa22f98a37f6d8d0293a9b319416ec94d386
Validity
Not Before: Jul 24 03:00:20 2026 GMT
Not After : Jul 25 03:00:20 2026 GMT
Subject: CN=c95aade30958c35c27c41f25e35ba52fef19d661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c5:6f:7f:f6:fd:18:43:9c:7f:8d:82:7a:2c:
82:04:dd:0e:f6:b1:ee:79:0a:9c:4c:fe:8e:0a:75:
22:a0:93:04:af:e3:26:22:01:b8:5b:43:25:8d:ac:
6f:43:6f:13:9c:b0:89:fa:23:b2:da:06:43:b0:7f:
e2:0c:5e:d7:c4:27:a0:15:fd:24:ef:40:69:47:b2:
b2:5d:fa:d6:46:6e:c7:e4:d6:cc:7f:d6:34:16:ab:
1d:76:d7:f2:f2:dc:2a:20:d8:68:f2:3f:39:bf:1c:
23:16:6d:92:76:c2:1d:57:17:54:04:d0:1f:63:aa:
61:6d:82:8a:5e:5f:e2:3e:aa:69:b7:cf:94:cb:51:
9b:2d:ca:5f:3b:47:5e:e1:d3:e3:53:a1:c6:b6:af:
80:01:50:c2:a3:cb:e2:61:67:7c:16:8f:f0:5c:15:
d3:64:68:62:3d:44:c1:ea:09:21:01:1d:54:52:8e:
90:f1:4b:92:60:44:b0:75:ef:3b:e6:4a:61:e8:88:
92:f3:a3:74:39:ce:2f:e9:f8:42:16:2c:89:c8:c0:
23:9d:a3:ad:df:eb:8a:f1:85:19:bd:4c:c5:dd:99:
57:f6:90:8d:a8:58:13:57:53:a1:4e:31:66:64:24:
1d:25:30:2c:ad:38:57:d4:77:af:80:a5:85:59:e1:
dd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:5A:AD:E3:09:58:C3:5C:27:C4:1F:25:E3:5B:A5:2F:EF:19:D6:61
X509v3 Authority Key Identifier:
keyid:C5:8A:FA:22:F9:8A:37:F6:D8:D0:29:3A:9B:31:94:16:EC:94:D3:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:1f:77:bb:70:24:0b:ef:bc:d9:db:15:b8:40:a2:7b:82:e6:
ad:49:99:d5:1a:9a:05:74:6b:3e:53:ce:77:44:3e:ff:7c:d7:
c2:7d:bb:2c:ab:83:c9:3c:1c:0d:e3:72:eb:c3:2d:76:14:91:
e3:2b:bc:ea:3d:14:8d:28:7b:33:b9:53:f1:66:4c:57:18:96:
71:7b:83:ec:79:56:30:45:9a:b8:fb:68:74:ff:c4:08:df:e7:
11:71:63:dd:2b:b1:69:1b:0a:20:3f:e9:6a:bc:89:19:d6:86:
4d:a7:0f:91:f1:77:0b:7a:af:f1:92:51:c6:b9:9e:16:e2:a1:
ed:37:eb:62:94:97:3f:14:e2:51:73:f2:9f:d2:41:98:99:1d:
11:b4:d3:c7:6a:b3:86:1c:71:29:0c:dd:7e:7f:ae:c4:73:a7:
7f:8f:e8:f4:c3:66:1a:6d:ee:78:38:d3:c5:a6:ec:23:e9:a0:
64:a1:82:5b:1e:d0:81:4d:1b:69:6a:ad:29:ea:f3:4f:89:b9:
05:60:91:c8:4f:11:21:82:ae:f0:6d:a3:03:f0:84:41:e9:0f:
0a:71:5d:e2:c6:43:6c:a3:6b:28:ad:09:b6:32:7e:07:71:e3:
07:00:12:16:1e:24:ba:2c:70:3d:9e:b4:1e:2f:10:11:b7:b3:
61:35:e8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:23:41 2026 by rpki-client