Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
File: XxaylLGmR79tZ2g7UWFEl-dR8h8.mft (raw, json)
Hash identifier: /7+66Z5fv08h/py+gWo3atxGPgGp5lPVmZdYDkKywFE=
Subject key identifier: 68:48:D0:70:F0:7C:94:9C:64:AB:11:D2:D4:EF:DD:0C:66:53:29:48
Authority key identifier: 5F:16:B2:94:B1:A6:47:BF:6D:67:68:3B:51:61:44:97:E7:51:F2:1F
Certificate issuer: /CN=5f16b294b1a647bf6d67683b51614497e751f21f
Certificate serial: 019F8E6BC9D246B39078C320A91A747E544A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
Manifest number: 19C5
Signing time: Thu 23 Jul 2026 10:00:56 +0000
Manifest this update: Thu 23 Jul 2026 10:00:56 +0000
Manifest next update: Fri 24 Jul 2026 10:00:56 +0000
Files and hashes: 1: NKg93JWQUnBu80RX13MwmqJxvVc.roa (hash: nG4jnHVVr/B/zg5snhsHaHEVH2wq5BQYMoc/wJLZKCM=)
2: XxaylLGmR79tZ2g7UWFEl-dR8h8.crl (hash: FSgZmLs5mQ+z4dR6vEeF+takhKwvT0tLYNv+FXxTGjU=)
3: wGoncIYhxzrOvpFggApuVrKV4Vk.asa (hash: S/6luEA1foPNyWEYWaj/UsXwLkgTP/ejkSFX9YYjOE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 10:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:6b:c9:d2:46:b3:90:78:c3:20:a9:1a:74:7e:54:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f16b294b1a647bf6d67683b51614497e751f21f
Validity
Not Before: Jul 23 10:00:56 2026 GMT
Not After : Jul 24 10:00:56 2026 GMT
Subject: CN=6848d070f07c949c64ab11d2d4efdd0c66532948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a4:11:50:4d:ca:96:7b:16:f5:9f:f9:3b:f8:
df:9b:1b:a0:91:2d:9c:b0:80:b6:16:0e:0f:b5:93:
a9:50:fe:ac:ce:61:dd:39:97:b8:13:df:c3:54:bc:
86:b2:39:d2:8e:ec:4a:fe:3c:6b:cf:25:3d:ea:28:
a9:df:d6:09:fe:7e:dd:c6:38:fd:0d:3b:3e:70:7b:
cb:5a:74:92:07:dc:b6:f9:21:12:f7:46:88:61:62:
9f:ec:fa:d5:56:b1:d1:ae:99:93:76:72:ac:58:ee:
d9:30:cd:3d:ff:71:af:89:b7:e6:da:d3:17:57:ca:
7a:93:3f:e2:62:ff:71:2d:87:f5:d1:d9:1a:46:31:
c3:b4:26:fd:72:33:ae:eb:27:09:de:e1:79:98:29:
51:e6:0a:20:ab:98:ae:50:cc:69:b0:59:b2:e0:23:
41:23:08:5d:96:cf:10:7f:78:05:e5:bc:ea:a5:e5:
8d:1e:d5:49:0c:03:24:00:e3:ba:a0:78:b1:db:f9:
6b:14:df:ab:93:4a:cb:bd:a8:06:94:53:54:d8:56:
18:9b:21:9e:ea:ba:f5:b0:84:c4:bf:64:4c:5f:96:
d9:e0:f7:ad:ea:e9:b9:8c:93:53:a6:a5:e5:b4:41:
ce:d2:a8:c6:8c:99:00:66:bc:d0:db:b5:ee:e3:db:
23:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:48:D0:70:F0:7C:94:9C:64:AB:11:D2:D4:EF:DD:0C:66:53:29:48
X509v3 Authority Key Identifier:
keyid:5F:16:B2:94:B1:A6:47:BF:6D:67:68:3B:51:61:44:97:E7:51:F2:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:25:e9:47:5f:47:fd:45:e9:95:fd:b5:3c:85:ca:cc:e5:eb:
84:f5:1a:35:55:bd:d7:c2:8d:2d:29:e3:ba:ea:f2:8f:21:a3:
62:8e:8a:06:08:72:b6:a9:01:b9:28:40:16:75:0b:ed:69:40:
22:6a:c5:21:32:66:cf:c7:98:12:bb:45:76:12:81:8b:8a:29:
47:64:c3:d7:3d:da:58:92:5f:25:7d:1e:af:a9:85:f6:d3:41:
d5:88:15:ca:5c:b1:af:d9:7b:47:e0:77:71:69:91:71:51:88:
ba:12:4a:48:aa:3b:a7:5c:4b:43:58:a9:d0:8f:c9:c6:a7:84:
a3:a0:b7:04:21:b0:a0:83:ab:f7:d5:43:41:5b:ad:cb:f1:25:
3b:a8:8c:f2:a6:35:f7:8a:02:b3:60:c3:ab:ab:45:12:94:a2:
1b:d6:cb:74:6b:3b:a8:cd:0b:39:ec:cf:cd:03:42:b5:8e:e8:
8b:8f:3d:05:17:43:43:11:de:d6:9e:35:66:af:0d:67:73:bd:
8e:1f:05:49:14:f3:10:b0:11:d6:ff:50:1c:94:7d:98:cd:03:
35:27:7e:01:48:d4:52:f5:59:e2:64:dd:ec:a6:9a:d2:a1:9e:
c6:fc:43:a5:18:b5:69:b8:3c:4e:e6:61:b3:61:81:33:47:dd:
05:69:8f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:26:40 2026 by rpki-client