Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
File: XWlT20hASwxmoV8Npu-n-sCpNp4.mft (raw, json)
Hash identifier: umo9SpmlDvwCSazs9ao4UTpjkeGMc6HK7Q2/Q/t0qMU=
Subject key identifier: 9D:12:77:7A:B4:70:C1:E9:86:32:B0:F6:33:5D:BB:20:DB:B0:11:EA
Authority key identifier: 5D:69:53:DB:48:40:4B:0C:66:A1:5F:0D:A6:EF:A7:FA:C0:A9:36:9E
Certificate issuer: /CN=5d6953db48404b0c66a15f0da6efa7fac0a9369e
Certificate serial: 019F95EE604DB15D8D29AB59B1C54087B8F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 21:00:55 +0000
Manifest this update: Fri 24 Jul 2026 21:00:55 +0000
Manifest next update: Sat 25 Jul 2026 21:00:55 +0000
Files and hashes: 1: PnV6MRrCbEDbUgZOWZkw0F-5fTw.roa (hash: gpEq7vfgynN+KUY61gV3ilXsbaQKj+P9YjZ3SCCvLxo=)
2: XWlT20hASwxmoV8Npu-n-sCpNp4.crl (hash: gZzIKpv8LuEOzW7n5yps8HbNWPsqDE25d+rnMnztcH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:ee:60:4d:b1:5d:8d:29:ab:59:b1:c5:40:87:b8:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6953db48404b0c66a15f0da6efa7fac0a9369e
Validity
Not Before: Jul 24 21:00:55 2026 GMT
Not After : Jul 25 21:00:55 2026 GMT
Subject: CN=9d12777ab470c1e98632b0f6335dbb20dbb011ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:98:2c:b2:cd:68:d3:eb:c4:c9:2e:35:1c:89:
0f:49:80:6b:11:fd:aa:51:23:ef:c9:ae:93:de:ee:
0e:ac:d3:fc:e2:ed:e5:4c:31:79:8c:c6:df:4b:a9:
24:56:c1:0b:d8:7d:db:f5:32:a9:b6:5b:f0:18:c6:
78:35:bf:ce:57:84:a0:1a:b6:7d:d2:35:b8:09:c2:
a8:05:27:c0:94:1e:18:53:26:28:9f:61:17:5c:5d:
c0:e3:1b:e8:1b:cd:dd:6f:76:f2:19:71:44:0e:2b:
4c:7b:95:1e:d2:ae:24:42:3b:bd:06:0b:97:f5:6a:
02:99:91:21:80:3e:07:c3:49:7e:4f:58:94:75:40:
05:c0:fb:a1:3c:2d:d2:88:7f:60:31:86:0e:ef:43:
f4:d7:b5:cc:90:4c:ec:d1:c0:71:9a:38:88:c3:d9:
84:d6:bc:4f:40:9d:30:98:2c:1f:3e:e0:51:5d:39:
ed:d4:f3:49:f0:e2:4d:75:66:ed:d0:4d:6a:29:98:
76:61:0c:14:c7:81:04:4e:57:a3:14:73:0e:20:9d:
af:b1:a2:21:fd:ba:02:b8:3c:fd:4e:84:d3:a3:5b:
a5:8a:06:31:af:12:a0:1f:19:29:48:a8:24:a7:7c:
a5:27:4a:63:20:8a:d5:7c:5d:61:34:8d:72:27:b7:
df:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:12:77:7A:B4:70:C1:E9:86:32:B0:F6:33:5D:BB:20:DB:B0:11:EA
X509v3 Authority Key Identifier:
keyid:5D:69:53:DB:48:40:4B:0C:66:A1:5F:0D:A6:EF:A7:FA:C0:A9:36:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:5c:78:9f:d3:a8:73:f6:65:8a:94:58:79:a4:f1:ae:ea:af:
20:36:4f:c7:d4:96:fe:b6:b1:d2:bc:86:a4:66:9d:03:96:8d:
cc:ec:43:52:61:94:b2:04:82:92:cb:61:1a:e6:73:7b:72:76:
b2:bf:9b:45:fa:09:e3:9f:1d:93:19:c4:d8:b5:c5:7e:78:b7:
57:12:a7:a5:0f:70:f4:8c:06:1a:18:a1:3b:50:3b:85:c6:fc:
89:14:6f:cc:d8:46:95:02:00:ae:56:27:03:35:a6:53:1d:9e:
4e:02:2a:93:50:40:5b:0d:50:28:28:2d:bb:b1:73:83:6e:ee:
b7:1d:eb:24:43:54:e3:8b:11:08:a6:18:f2:a3:12:05:f5:17:
ef:a5:fa:e2:72:3e:4c:53:00:7a:16:57:97:2e:c5:3b:72:f7:
aa:5c:42:83:3d:0d:d9:dd:02:c2:8a:84:13:32:4a:86:99:c2:
a8:ea:e2:10:89:e2:9a:f6:f7:ba:32:02:25:65:b7:b0:1e:a4:
45:32:d1:c8:88:fb:08:a8:c3:96:61:82:08:89:4c:3c:2c:5d:
9c:37:17:12:2f:62:d4:81:ec:f5:dd:1a:96:40:62:61:cf:1b:
4c:8e:40:15:10:2b:69:ff:b1:5f:0c:18:d2:9e:18:df:1d:99:
a0:31:56:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:25:02 2026 by rpki-client