Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
File: XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft (raw, json)
Hash identifier: hNYNngiLUgFI16tisif3madY5L0Rs2q+RDVeCM0ta9I=
Subject key identifier: F6:C9:50:AF:4B:15:15:49:BA:4C:5B:E0:C4:D9:D9:F0:E7:B3:B6:EE
Authority key identifier: 5E:7C:13:F5:FF:16:9A:FE:D8:25:B7:5D:8F:C0:77:AF:CA:50:D6:A1
Certificate issuer: /CN=5e7c13f5ff169afed825b75d8fc077afca50d6a1
Certificate serial: 019F95EE3A01EB82C6775626854BCA556957
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
Manifest number: 0DB1
Signing time: Fri 24 Jul 2026 21:00:45 +0000
Manifest this update: Fri 24 Jul 2026 21:00:45 +0000
Manifest next update: Sat 25 Jul 2026 21:00:45 +0000
Files and hashes: 1: XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl (hash: KJxWie9dgBBFMNIOCrSFS5Gs6UiXw0EE/09ptoqSmEQ=)
2: YNrAk_rW-_hv_7y0q7L07WQbD3k.roa (hash: Q+lutWQbfqBQmTQcTTUR6g2UUXMHO1t1l0Opc14EpV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:ee:3a:01:eb:82:c6:77:56:26:85:4b:ca:55:69:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7c13f5ff169afed825b75d8fc077afca50d6a1
Validity
Not Before: Jul 24 21:00:45 2026 GMT
Not After : Jul 25 21:00:45 2026 GMT
Subject: CN=f6c950af4b151549ba4c5be0c4d9d9f0e7b3b6ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3b:da:d8:f9:19:37:10:43:93:2b:25:25:56:
bf:75:5a:5f:4f:27:fc:fb:00:d9:db:be:c6:7a:b0:
ee:4a:42:14:10:8b:b5:ad:87:0e:03:1c:53:c0:f1:
7a:76:db:96:03:00:69:cc:9f:64:70:90:d9:90:7a:
d9:97:dd:74:5b:b0:1a:46:b7:03:93:85:1a:f9:7e:
bb:3c:4b:92:a8:68:01:64:52:46:ee:7b:49:0c:ef:
0c:b9:13:30:88:9c:03:4e:3f:e3:52:c9:52:71:68:
7d:03:6e:a9:5f:ac:bd:d3:63:90:63:fe:96:bb:2b:
4e:68:d3:46:d9:e1:47:ee:bf:70:f9:b6:13:58:ce:
5a:c6:d2:ea:a2:22:5c:0d:b0:04:43:c9:66:b9:b1:
a1:e0:2b:fb:b7:4b:17:7a:2e:04:cf:7e:67:9a:34:
71:e0:ad:92:ff:ba:f5:86:09:20:fd:ce:58:6f:cb:
ec:07:72:78:88:3f:6c:99:76:e1:83:e0:6d:ff:c1:
03:d4:e6:9e:1a:33:b6:e8:c6:e7:df:b2:e0:46:d3:
01:65:5d:00:69:54:2b:bd:c0:81:16:b2:5d:c6:8b:
5b:f4:c4:b8:1e:ee:8a:b0:ee:47:3c:ce:ec:43:a3:
97:27:cc:e7:df:83:53:62:ef:f9:12:79:ea:f6:b1:
d7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C9:50:AF:4B:15:15:49:BA:4C:5B:E0:C4:D9:D9:F0:E7:B3:B6:EE
X509v3 Authority Key Identifier:
keyid:5E:7C:13:F5:FF:16:9A:FE:D8:25:B7:5D:8F:C0:77:AF:CA:50:D6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:44:ef:df:86:1a:8f:26:81:1c:0d:d1:7a:02:01:b4:ad:1e:
7e:94:19:43:43:12:5c:73:e6:e0:da:b7:b9:fa:9b:86:92:f0:
61:7a:1d:6f:57:b8:62:30:9b:3e:63:08:a4:4d:8c:d7:ad:9b:
1b:a9:16:35:80:78:02:0b:3c:e6:86:5b:bd:09:4d:c6:a5:de:
0f:54:be:55:a4:60:91:77:0c:a2:ba:03:4e:36:80:3a:c2:b4:
fa:ce:c4:5a:82:b1:0e:dc:41:52:44:57:00:d5:5d:d2:48:04:
a0:43:ff:d6:0c:d1:6e:3b:d5:74:83:e3:a4:51:3e:56:48:ec:
43:eb:67:cb:5d:6a:64:1e:b3:59:9a:d4:45:f2:14:15:7f:ee:
e3:b1:7b:9c:f1:55:03:8d:45:96:95:55:55:b0:a8:26:d8:a8:
c6:e7:b4:f8:23:be:0c:23:9a:02:73:1a:07:27:5a:c2:42:07:
14:96:40:f9:10:39:0e:34:4a:6b:1d:b2:aa:1f:db:36:2b:16:
d2:d6:3a:87:c6:e9:c6:c1:c1:2c:e4:7e:8f:d8:8a:4e:64:2f:
51:b9:e5:25:a0:8a:83:5c:62:8e:42:d6:9e:71:d0:ac:6d:0d:
8b:15:c2:58:a7:ee:1a:db:57:5b:a3:2f:63:42:ea:7e:30:4a:
46:53:ca:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:52:33 2026 by rpki-client