Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
File: xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft (raw, json)
Hash identifier: gnFGZD7y7QRJz53WwmSpFBoFTnN+jdgpyqXG20P1nXg=
Subject key identifier: 24:6A:6A:36:27:D6:7E:7D:2A:0F:15:77:CA:E5:0B:94:70:83:66:38
Authority key identifier: C5:3B:29:17:0B:56:A8:42:41:F4:B8:4F:D4:DA:FF:08:36:D5:03:C6
Certificate issuer: /CN=c53b29170b56a84241f4b84fd4daff0836d503c6
Certificate serial: 019F92114E9123CF8CFE6E9D9A3011C80E34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
Manifest number: 0DB2
Signing time: Fri 24 Jul 2026 03:00:35 +0000
Manifest this update: Fri 24 Jul 2026 03:00:35 +0000
Manifest next update: Sat 25 Jul 2026 03:00:35 +0000
Files and hashes: 1: QehD96f5TABcvSMwJKFdikzIbO8.roa (hash: SRLpbEp6q6uyhKVlw7Pt60kWZXK8snPed5qV+0O6aV8=)
2: xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl (hash: raetxNLnm/pNWlpd6DtGNYfc7ayFVcTDDYSqh+vc9qw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:4e:91:23:cf:8c:fe:6e:9d:9a:30:11:c8:0e:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53b29170b56a84241f4b84fd4daff0836d503c6
Validity
Not Before: Jul 24 03:00:35 2026 GMT
Not After : Jul 25 03:00:35 2026 GMT
Subject: CN=246a6a3627d67e7d2a0f1577cae50b9470836638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5e:10:5a:8b:9e:65:12:b3:f4:c7:2e:87:41:
1d:75:c5:53:51:02:80:bd:25:48:c8:dd:d8:da:b4:
52:f0:63:a0:2e:21:71:c9:7f:89:0b:81:41:0f:dd:
a5:c6:24:8a:cf:e3:56:e0:34:5d:14:b3:7e:39:82:
8c:0f:60:6c:ac:3f:10:2a:23:e7:0d:88:29:9e:93:
49:2a:f5:fa:04:78:ed:27:a2:c2:b1:f3:20:8b:35:
7e:7c:72:b3:84:93:76:35:69:44:d6:56:a8:ee:2e:
b8:68:c4:b3:45:82:16:7a:8e:08:a8:1f:ea:99:7b:
b7:4b:34:7e:03:bd:71:1e:41:f4:e2:15:3f:ac:a9:
ba:92:95:0c:0a:17:73:62:97:dc:28:c3:46:29:60:
4c:c3:6e:98:84:bb:4f:9f:08:65:fe:85:d7:9d:c8:
18:1a:00:97:77:bd:b3:0b:66:02:6e:72:ae:47:a7:
39:45:b3:6d:dd:ff:09:55:a3:78:f1:90:38:f7:23:
cc:75:61:27:1c:95:b5:c6:41:a1:11:ba:8a:b2:ee:
62:dc:b9:62:1e:4e:57:4d:f8:bb:68:97:43:c2:47:
bc:bf:56:60:03:90:11:2c:7b:ff:f0:bc:ad:51:a4:
a5:10:89:7b:20:59:3d:19:4c:88:b3:25:f6:26:81:
e8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:6A:6A:36:27:D6:7E:7D:2A:0F:15:77:CA:E5:0B:94:70:83:66:38
X509v3 Authority Key Identifier:
keyid:C5:3B:29:17:0B:56:A8:42:41:F4:B8:4F:D4:DA:FF:08:36:D5:03:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:a3:6e:53:ad:db:6f:93:7b:3f:e9:bd:f9:16:f7:95:2a:6c:
f9:82:80:c3:49:f7:05:02:aa:28:25:a9:19:40:a9:a8:5e:4d:
38:27:58:81:9f:82:e9:cc:46:43:3c:ae:73:30:eb:fb:99:b0:
80:f7:e9:ba:ec:d6:4a:ba:ce:f2:89:97:a5:96:94:bf:96:69:
c7:d2:cb:0f:a7:2e:07:38:24:37:4b:8d:07:fd:d2:9f:69:93:
91:c8:80:b9:10:77:50:07:56:b4:6b:c4:72:86:ae:89:7c:51:
33:0e:b2:55:d7:49:04:01:48:f5:24:b3:d6:cc:39:23:25:fb:
ee:ca:49:9b:0c:a8:56:cd:74:5a:05:45:65:4d:d1:cb:d7:4d:
0c:4e:c5:37:ba:d4:f9:70:d1:e2:24:6a:10:6f:3a:6b:ea:a0:
87:af:2a:46:ab:11:57:ac:d8:ce:b6:b5:0e:3c:ce:83:b9:39:
15:d6:76:a6:4d:ec:d7:fb:dd:9a:0f:b0:8c:f7:51:0e:39:c3:
13:68:07:86:26:ee:3f:89:a0:7a:3d:aa:26:c5:af:f0:7d:53:
8a:f9:fc:56:61:d3:48:4c:e8:21:08:fc:ee:a5:ff:82:5e:91:
d1:01:e8:c4:f0:47:d5:d1:eb:ee:62:e2:56:81:32:6e:ad:e6:
fd:df:5b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:20:03 2026 by rpki-client