Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft
File: xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft (raw, json)
Hash identifier: jUNgWobbrJyUEPH1n5igdIjWt+fKkVwv98iyPvg8v8Y=
Subject key identifier: 3B:A4:6F:2F:CD:B8:79:E5:CD:81:43:46:E2:69:7E:0B:3F:CB:8B:0E
Authority key identifier: C7:2E:71:63:53:EC:73:3A:B4:B5:08:53:08:B3:86:D8:9A:74:F1:47
Certificate issuer: /CN=c72e716353ec733ab4b5085308b386d89a74f147
Certificate serial: 019F93FF7CA94CE006C276E19F7BBA216CAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xy5xY1Psczq0tQhTCLOG2Jp08Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft
Manifest number: 1214
Signing time: Fri 24 Jul 2026 12:00:21 +0000
Manifest this update: Fri 24 Jul 2026 12:00:21 +0000
Manifest next update: Sat 25 Jul 2026 12:00:21 +0000
Files and hashes: 1: xy5xY1Psczq0tQhTCLOG2Jp08Uc.crl (hash: 7JIwSTa/qAkEurj17IElp6CBjWIHNeAUNAhzkaKr6xo=)
2: zWTdP30QPHHdohheUhhfVW3hF4c.roa (hash: /i9LH6nCZuFhrfLjUwLanr2mJf1UJXJyn992vVslFf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xy5xY1Psczq0tQhTCLOG2Jp08Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:7c:a9:4c:e0:06:c2:76:e1:9f:7b:ba:21:6c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c72e716353ec733ab4b5085308b386d89a74f147
Validity
Not Before: Jul 24 12:00:21 2026 GMT
Not After : Jul 25 12:00:21 2026 GMT
Subject: CN=3ba46f2fcdb879e5cd814346e2697e0b3fcb8b0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fa:12:bf:99:2c:60:f0:12:53:6b:94:80:5a:
08:04:20:1f:bf:05:00:6a:e4:4c:57:c3:42:f0:54:
7f:d5:0e:4a:ed:aa:2c:c0:89:84:42:8b:95:2a:4d:
fd:b2:d1:24:ea:9f:cd:00:38:fa:3a:1b:32:28:cd:
1e:c4:0f:18:34:3f:2f:0b:67:01:04:30:ed:85:c7:
99:dc:75:95:ad:0b:58:48:7a:3d:f2:05:bf:64:7c:
21:bb:86:cc:4d:1c:6a:0a:2c:39:c1:e4:d8:ce:20:
1f:16:fa:c2:40:c8:40:e8:22:84:9f:06:7f:a8:31:
de:4f:28:87:b6:e1:8a:b7:b9:55:46:2c:69:6d:d7:
92:ff:5f:ae:73:89:fc:3b:0d:f4:0b:d9:86:ea:8c:
da:66:20:bd:d4:3b:39:5d:d3:2e:e1:7c:e8:4e:49:
22:18:0c:7a:45:3a:e7:7e:f6:a9:5b:2e:d6:c6:ef:
7b:2c:d8:35:5a:11:52:91:41:0e:3c:9d:17:2a:82:
44:ee:c0:87:cf:94:f7:5f:fe:d0:5c:90:18:7d:8f:
9b:d6:58:b9:25:76:d2:ba:c8:3d:4c:1a:28:24:ae:
b4:0a:07:dd:29:6c:56:98:1a:45:24:4e:d8:38:54:
d4:34:f9:13:84:ea:63:52:78:5b:f1:f0:45:7b:d0:
5a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A4:6F:2F:CD:B8:79:E5:CD:81:43:46:E2:69:7E:0B:3F:CB:8B:0E
X509v3 Authority Key Identifier:
keyid:C7:2E:71:63:53:EC:73:3A:B4:B5:08:53:08:B3:86:D8:9A:74:F1:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xy5xY1Psczq0tQhTCLOG2Jp08Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:97:12:f0:a6:34:ac:e6:d6:89:1c:e2:9c:57:c1:4f:84:1b:
8f:83:94:8a:00:b0:92:c7:c1:e3:ca:03:cd:c7:8e:53:a4:8a:
91:99:dd:19:36:21:13:7a:c1:e3:c3:e1:80:0e:e1:2e:78:9d:
2d:5a:2d:30:4c:f3:2c:f1:ca:b0:65:4e:9a:7d:e2:34:c7:69:
ec:e1:2c:ff:22:a1:15:73:03:9e:8a:a2:e4:d8:39:c6:bb:fb:
4f:b8:3b:d6:db:37:6a:36:50:13:4c:7a:07:65:15:8e:a5:92:
ce:1e:bb:aa:26:8c:7b:7f:80:26:e3:56:e7:a0:49:99:41:25:
df:b6:33:8d:c0:72:d9:fc:bd:67:56:4b:ab:20:0d:5e:a6:cd:
e5:ce:98:88:a5:7c:98:92:c8:e6:34:7c:fc:60:05:26:09:50:
4c:b7:b4:e4:b3:54:8b:74:db:71:51:e5:4f:a4:30:18:66:2b:
eb:fb:a5:15:c3:19:0b:85:d6:61:35:23:6a:5f:f4:52:0c:0b:
63:f4:55:90:22:c5:a9:d4:d0:88:77:84:89:bf:6e:68:c6:c7:
c0:e5:98:fe:34:7b:a8:92:35:55:26:05:b2:72:f1:8d:a9:c5:
45:c3:7e:a0:19:c8:4f:1f:50:3e:e5:80:2d:b9:4b:43:2d:f7:
65:1f:f2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:04:13 2026 by rpki-client