Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
File: XTcKSLWfuBFJXxHElzRILyKxo5I.mft (raw, json)
Hash identifier: dtanphEMSnb/qKfVjbgSZGvTJoPsXClIwdZp5oQOV3M=
Subject key identifier: 17:D5:A0:44:DE:AA:A7:BB:A6:DB:2E:A4:D8:C8:FD:54:41:0F:FE:6D
Authority key identifier: 5D:37:0A:48:B5:9F:B8:11:49:5F:11:C4:97:34:48:2F:22:B1:A3:92
Certificate issuer: /CN=5d370a48b59fb811495f11c49734482f22b1a392
Certificate serial: 019F946D550FE7E6032C058406BA03B71674
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
Manifest number: 16D1
Signing time: Fri 24 Jul 2026 14:00:20 +0000
Manifest this update: Fri 24 Jul 2026 14:00:20 +0000
Manifest next update: Sat 25 Jul 2026 14:00:20 +0000
Files and hashes: 1: IcvWLfVUU_qQmUluK1ZJPZKwDUE.roa (hash: 5KtWCkiCc0spLueO4XERS0KkPgjFXkSMZZzwBDaPptQ=)
2: XTcKSLWfuBFJXxHElzRILyKxo5I.crl (hash: LVDzNZ7FUkaxs8yZbpQ+ytK8IUiwrh5HGMSGmPaltZQ=)
3: iTA00PhnwnNaKrIdb7Sf-BOFNWU.roa (hash: VqBJga5+IchMfnf1RmPYAK4MIX90SZMIG8XmiqppDnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 14:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:55:0f:e7:e6:03:2c:05:84:06:ba:03:b7:16:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d370a48b59fb811495f11c49734482f22b1a392
Validity
Not Before: Jul 24 14:00:20 2026 GMT
Not After : Jul 25 14:00:20 2026 GMT
Subject: CN=17d5a044deaaa7bba6db2ea4d8c8fd54410ffe6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:33:e4:9c:3d:41:1f:3d:93:dc:96:b5:07:6c:
70:1c:d6:1f:2a:b8:49:44:d4:18:a0:41:be:0f:9f:
da:9c:af:ad:ed:3a:73:5b:86:3e:d8:c8:39:4f:41:
51:10:60:d6:e1:d5:7b:28:42:64:99:c6:83:72:3e:
ca:49:eb:99:d7:3a:d4:2b:ed:01:4d:be:8c:4b:95:
dc:58:6e:a7:c0:66:5a:7e:29:67:b7:3e:44:74:47:
f2:98:17:5b:75:24:09:25:72:87:f4:33:3c:48:4b:
a0:0d:8c:7f:33:8e:f6:2a:e9:b7:b7:ec:9b:29:19:
59:16:7e:e5:b9:b4:4a:00:1e:47:c4:06:b1:2e:5c:
81:a2:0f:72:12:5b:de:ce:9f:ed:36:05:4e:28:29:
e7:a9:26:70:7d:64:21:d0:61:cd:8d:60:1b:60:95:
73:a2:8a:7b:8c:49:f1:89:07:2c:47:a0:84:f2:74:
53:9c:f7:95:62:9a:31:70:e9:05:cc:56:eb:c0:2e:
1b:5f:49:67:0f:e7:8a:49:c3:b1:e6:a5:2e:d1:c6:
9b:3f:0d:39:4e:7e:d8:36:03:05:9d:9a:9f:dc:08:
e2:9f:64:46:21:c2:58:ee:4b:2b:0e:cd:34:0a:2f:
3e:26:8c:db:c5:51:93:a1:6d:a9:84:67:e1:fe:ce:
22:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D5:A0:44:DE:AA:A7:BB:A6:DB:2E:A4:D8:C8:FD:54:41:0F:FE:6D
X509v3 Authority Key Identifier:
keyid:5D:37:0A:48:B5:9F:B8:11:49:5F:11:C4:97:34:48:2F:22:B1:A3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:46:95:2f:54:d3:08:51:06:f1:11:22:26:b4:5a:bc:ad:60:
b1:90:98:0e:e7:c2:6e:9f:03:e3:4c:4a:9c:21:51:40:77:89:
1e:6b:1a:7b:af:75:f8:45:ba:5f:7f:51:e5:8f:dd:86:50:41:
08:f8:4d:b9:15:c3:04:ae:73:f0:bc:e3:5d:8c:d9:c6:f4:3e:
6c:c8:d9:db:80:d1:60:a9:81:7b:12:8c:df:e1:35:74:0c:bd:
fe:dc:ca:e7:0e:31:dc:25:ea:7b:55:79:99:e7:25:09:35:65:
4b:97:de:e4:d4:81:5f:07:0a:d3:8f:cf:f6:aa:ea:6a:de:6f:
50:a0:c8:68:6c:ef:01:fc:2a:9a:9c:7b:0f:1c:a7:8a:02:87:
d9:c7:c3:97:3a:27:ea:b8:79:fc:1f:39:e0:e4:9b:8b:0c:1b:
01:3c:8d:98:47:1f:5f:5d:54:a8:de:7e:16:b8:e1:a3:ee:24:
be:64:45:7d:64:0a:04:0c:8a:78:b4:ed:fa:55:c9:d5:09:6d:
3a:63:cf:83:3e:87:5a:20:69:e5:45:d8:f5:9c:de:4e:28:c7:
23:56:24:60:39:2f:ae:e2:00:2c:34:dc:0c:a7:d9:79:d8:ce:
f7:76:89:ff:9f:cf:8a:e2:5d:98:c8:87:01:31:21:44:d5:9a:
b1:17:c5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:10:29 2026 by rpki-client