
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/623b14-4e6e-4c31-96be-8ebcd09b2bca/1/xcidUmDLNP27s7wlv0rbr0zcaKA.mft
File: xcidUmDLNP27s7wlv0rbr0zcaKA.mft (raw, json)
Hash identifier: y05p288FCoxfENmbkf4Ps5jgrc7SwLuSUMpkqj24Gz0=
Subject key identifier: 76:28:F1:B8:AE:18:DC:2E:70:B6:8E:E0:12:EC:81:B4:FD:EB:F6:AE
Authority key identifier: C5:C8:9D:52:60:CB:34:FD:BB:B3:BC:25:BF:4A:DB:AF:4C:DC:68:A0
Certificate issuer: /CN=c5c89d5260cb34fdbbb3bc25bf4adbaf4cdc68a0
Certificate serial: 019F8F46E91876950B412DC5FCAEB8B26E2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xcidUmDLNP27s7wlv0rbr0zcaKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/623b14-4e6e-4c31-96be-8ebcd09b2bca/1/xcidUmDLNP27s7wlv0rbr0zcaKA.mft
Manifest number: 0982
Signing time: Thu 23 Jul 2026 14:00:16 +0000
Manifest this update: Thu 23 Jul 2026 14:00:16 +0000
Manifest next update: Fri 24 Jul 2026 14:00:16 +0000
Files and hashes: 1: JD_hILTLs5WiN-GGz9cnjaMmPmg.asa (hash: w3ngbPPlSEh0i5ZlPs9dJQ8lVMYy1vGnqLwn37EOyHY=)
2: xcidUmDLNP27s7wlv0rbr0zcaKA.crl (hash: TA9CAiGB5BgN6uxBUY/CNXjdcIlW/BZ3SO3d/tAIWd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/623b14-4e6e-4c31-96be-8ebcd09b2bca/1/xcidUmDLNP27s7wlv0rbr0zcaKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/623b14-4e6e-4c31-96be-8ebcd09b2bca/1/xcidUmDLNP27s7wlv0rbr0zcaKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xcidUmDLNP27s7wlv0rbr0zcaKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:46:e9:18:76:95:0b:41:2d:c5:fc:ae:b8:b2:6e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5c89d5260cb34fdbbb3bc25bf4adbaf4cdc68a0
Validity
Not Before: Jul 23 14:00:16 2026 GMT
Not After : Jul 24 14:00:16 2026 GMT
Subject: CN=7628f1b8ae18dc2e70b68ee012ec81b4fdebf6ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a1:7d:77:64:d7:9c:4c:4f:0b:cd:57:3e:d0:
07:fb:d9:4c:2a:8f:cc:08:92:e8:3f:8c:cc:f8:db:
2a:3a:3b:c5:cd:2a:c1:b8:70:da:5e:c5:a7:f4:8f:
de:6e:f5:b8:2f:1f:c3:c0:b6:9c:77:3b:9e:de:28:
a3:9d:2e:01:71:f2:52:c8:2f:85:1e:7b:42:5c:38:
dd:01:e2:d9:af:21:7b:e5:f9:63:43:f3:f7:fe:6b:
cb:1f:ba:b9:65:db:13:8e:f2:b2:e2:bf:f4:be:2e:
42:45:d2:90:bf:57:80:5e:10:c6:cf:fa:fc:28:6d:
99:28:4e:2d:70:03:5a:2c:6c:b1:e2:5e:ca:2a:ff:
2b:4c:6a:07:f3:93:38:03:4a:79:c8:d6:f5:7f:70:
bb:d5:45:37:d5:48:63:24:ae:ad:af:b9:a8:81:98:
8d:50:12:ef:1c:b5:cb:0a:07:74:81:49:bc:4e:52:
3e:78:7e:df:3b:f7:68:6b:dc:54:10:30:5a:b7:a0:
5d:4c:a3:c0:64:8f:01:1a:6a:77:0d:e0:8a:4b:76:
9a:e5:81:2f:8b:98:1c:e7:a5:bd:88:ff:25:4d:2f:
34:9f:a6:7c:08:3b:b0:2a:63:1c:fe:f7:b8:6c:2b:
ff:67:b7:dd:f8:07:84:04:2b:a6:14:a9:46:bd:dc:
42:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:28:F1:B8:AE:18:DC:2E:70:B6:8E:E0:12:EC:81:B4:FD:EB:F6:AE
X509v3 Authority Key Identifier:
keyid:C5:C8:9D:52:60:CB:34:FD:BB:B3:BC:25:BF:4A:DB:AF:4C:DC:68:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcidUmDLNP27s7wlv0rbr0zcaKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/623b14-4e6e-4c31-96be-8ebcd09b2bca/1/xcidUmDLNP27s7wlv0rbr0zcaKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/623b14-4e6e-4c31-96be-8ebcd09b2bca/1/xcidUmDLNP27s7wlv0rbr0zcaKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:8c:fd:f1:3e:c3:d8:52:a4:b0:6e:cd:56:3c:b7:0c:30:8b:
cf:b7:69:ac:ec:ae:41:c2:4f:99:a0:46:83:e7:13:c9:a3:55:
da:2a:97:5a:33:ec:a1:43:0f:dc:c6:d5:10:2e:ea:02:4c:38:
6a:75:57:f3:29:d5:7e:df:d6:41:a6:39:96:d7:8b:b4:45:17:
a1:18:8a:fd:9d:92:5f:82:e0:b3:f1:2f:10:12:cc:84:87:85:
c2:23:48:2b:e2:17:ab:64:f6:3f:b4:50:12:0d:e3:28:df:38:
40:21:a0:15:d2:76:94:aa:c1:88:71:3a:65:13:de:ee:c1:28:
ad:54:73:01:50:ca:12:ad:65:6e:f3:b9:96:1e:69:93:10:d8:
c5:fc:06:a8:bf:2b:36:cf:8c:84:46:ce:87:f0:06:29:55:3e:
e9:0b:01:ce:03:a4:42:93:8a:7b:18:3b:8b:10:d2:47:ae:e8:
91:30:51:0d:75:97:3c:59:71:9e:d9:8e:78:89:2a:28:a4:a3:
97:d4:08:fc:61:75:bb:f4:aa:1f:ec:0a:25:5f:bd:99:51:a6:
37:a9:44:a0:b4:09:16:be:ce:0b:63:47:38:fa:99:da:74:c8:
ea:41:7f:48:83:05:cc:00:e3:21:6e:35:e8:77:d6:41:1c:eb:
4e:b3:22:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:02:59 2026 by rpki-client