Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
File: xJsfdrtbrG0MeWukcTDHaLHHOxw.mft (raw, json)
Hash identifier: RG7DYAsqMtXSvTx5sNoWdSVObMHWUvFRnRv/Q64Vy4k=
Subject key identifier: 4D:47:A3:25:F4:5D:CB:D7:42:1E:4B:78:F5:35:6E:03:55:2C:41:5C
Authority key identifier: C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C
Certificate issuer: /CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
Certificate serial: 019F90C8229BF9D7E65CB2B62A972F56AC51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
Manifest number: 19C5
Signing time: Thu 23 Jul 2026 21:01:02 +0000
Manifest this update: Thu 23 Jul 2026 21:01:02 +0000
Manifest next update: Fri 24 Jul 2026 21:01:02 +0000
Files and hashes: 1: Ng0DQWDHTBmFSx5wv3FJ35llgcs.roa (hash: rjml5J5gqgFMe9KzjlWTkxUk0orx3tU+r2zl+R9xROo=)
2: wcLWWQG314JWSm8pfpN9yL_5EII.roa (hash: D4VS38hxLq9k1urmiJ5Azd8OYDvuYJ5hUnqD5WiA9F0=)
3: xJsfdrtbrG0MeWukcTDHaLHHOxw.crl (hash: J5yjTDD0lagmXSB7eZmskcTL7nMrb14GyI5Z0+AJpFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c8:22:9b:f9:d7:e6:5c:b2:b6:2a:97:2f:56:ac:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
Validity
Not Before: Jul 23 21:01:02 2026 GMT
Not After : Jul 24 21:01:02 2026 GMT
Subject: CN=4d47a325f45dcbd7421e4b78f5356e03552c415c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:20:61:4c:16:49:60:ba:dd:78:97:7f:80:58:
29:1e:c3:7c:bf:7e:63:88:20:95:c6:37:e3:53:fb:
0f:bc:89:14:33:1a:b6:02:39:ee:a1:9f:b7:0a:01:
85:5d:1b:67:b3:3e:c7:8e:00:19:b3:e8:46:4b:71:
6a:ff:1f:76:75:9d:ac:67:9b:0d:5a:39:2c:d6:3e:
7c:ad:fc:4c:b3:89:cf:99:3c:bb:63:8e:f7:a0:a7:
83:c9:77:75:82:7e:c9:99:55:75:69:af:1f:dc:52:
ff:e5:57:b5:df:10:de:5d:ec:09:76:97:73:87:f8:
fb:66:57:eb:13:c1:f4:ef:ea:7d:14:dd:6b:d1:bc:
d7:05:fe:49:b2:91:14:bf:f5:2b:53:79:9a:15:e3:
fc:07:6a:e1:0b:57:2b:e3:d5:10:1f:bc:96:8e:93:
68:59:3d:d2:b9:13:93:c9:6f:d0:74:58:b6:6a:b4:
2f:39:3c:45:e0:fd:a1:5e:53:4e:5e:ea:6b:f8:e6:
10:a4:5e:27:9a:31:55:21:8d:c9:65:dc:50:69:f4:
de:f5:c0:d9:1f:ea:90:cf:dc:8f:90:fe:cf:69:a2:
af:08:d7:e5:41:e3:18:55:4f:0b:be:75:19:8a:22:
ee:9a:6b:f6:b0:33:01:5e:ba:63:33:7f:2a:04:22:
c0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:47:A3:25:F4:5D:CB:D7:42:1E:4B:78:F5:35:6E:03:55:2C:41:5C
X509v3 Authority Key Identifier:
keyid:C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:20:ff:ed:d6:2d:46:29:26:bc:62:4b:1f:d8:c1:44:a7:dc:
0b:15:ff:95:36:16:a2:c9:f1:4d:e2:d2:c4:76:a3:15:fa:b1:
2c:27:a6:ac:eb:6d:6a:aa:45:94:7f:96:d1:a2:49:ba:3b:6c:
51:d5:9c:9f:53:88:f4:cf:43:5b:a8:d6:bd:cb:0a:40:ee:a2:
9a:e5:e2:ef:34:a1:d6:d7:91:a7:e6:96:ac:2f:90:d0:a9:c8:
5d:ea:36:52:6a:71:f8:a5:00:ed:81:e7:ae:34:93:99:37:33:
96:f2:56:bf:e0:c7:e6:46:83:4e:50:93:c5:7f:57:42:47:8c:
01:e2:46:da:d4:a5:a7:67:38:72:b1:95:c3:23:6b:a7:f4:67:
a3:8b:d2:c6:7b:27:1d:53:26:c6:5e:f6:83:7b:93:dd:4f:01:
42:d5:eb:38:2d:2d:9d:13:d8:9e:5d:2c:06:75:d7:31:4b:c8:
e1:8c:11:e9:34:77:ee:53:65:5c:b8:f6:ce:a4:33:00:82:37:
0d:44:1f:58:bb:cd:ca:9a:da:50:88:70:2f:d4:63:40:9d:f1:
45:c2:29:54:c8:34:80:70:5b:77:f4:d6:71:32:31:85:e6:ab:
2e:f2:22:f8:1a:bb:18:d8:bc:6a:a1:91:1c:45:48:be:b2:0b:
ec:9c:ba:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:16:27 2026 by rpki-client