Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
File: X6OG6XZW1kirU4GylmZBQIGwAIQ.mft (raw, json)
Hash identifier: z7PSZpW352xf4p861Pa+ifp7VcXdYvxXJvWw/XvVZ8o=
Subject key identifier: 4C:84:3D:06:AB:15:0B:04:C4:DA:5D:F8:56:E7:5F:CB:66:AA:CA:BE
Authority key identifier: 5F:A3:86:E9:76:56:D6:48:AB:53:81:B2:96:66:41:40:81:B0:00:84
Certificate issuer: /CN=5fa386e97656d648ab5381b29666414081b00084
Certificate serial: 019F946DAFCA98045931673EDCF4C65A6CA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
Manifest number: 094F
Signing time: Fri 24 Jul 2026 14:00:43 +0000
Manifest this update: Fri 24 Jul 2026 14:00:43 +0000
Manifest next update: Sat 25 Jul 2026 14:00:43 +0000
Files and hashes: 1: X6OG6XZW1kirU4GylmZBQIGwAIQ.crl (hash: L5zjKEVRTNUBhYncDZ7QmrNpnYPfO177LYMH/DQb5kc=)
2: xhYgnKDXKCLXTlxGKn83qxGD5Wk.roa (hash: 4Tr8pcApL7OMPNYK6DHiqFf/BMOwe5lvOFY1rUx8z6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:af:ca:98:04:59:31:67:3e:dc:f4:c6:5a:6c:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fa386e97656d648ab5381b29666414081b00084
Validity
Not Before: Jul 24 14:00:43 2026 GMT
Not After : Jul 25 14:00:43 2026 GMT
Subject: CN=4c843d06ab150b04c4da5df856e75fcb66aacabe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:dd:2c:6f:8b:32:28:fd:e9:03:4d:86:b5:c4:
c9:b3:be:c3:c8:2b:9f:62:98:03:a0:c9:77:b7:8b:
ac:65:b9:5a:e6:ec:34:b1:8f:20:47:b8:6f:88:89:
9e:9d:39:8f:83:9b:dc:8a:a4:1f:b5:e9:fc:a5:4b:
8f:76:52:3c:9f:df:6c:ba:3a:09:eb:db:70:d0:1a:
09:0f:b0:b0:2d:51:97:03:a2:cc:8d:39:84:34:a2:
ed:40:ef:67:9c:15:07:60:25:3f:ea:d1:f9:7b:97:
c9:c9:1d:ea:b3:43:be:d5:aa:82:2b:32:40:7c:13:
e4:46:9c:82:3b:f2:64:cd:19:9f:94:66:ed:17:02:
16:03:fb:1c:01:a4:5d:f0:ec:23:ca:38:bd:5b:82:
97:53:50:a5:f3:10:c2:6a:19:91:d9:af:36:9d:c2:
84:08:6e:1c:91:64:26:29:b5:50:11:3f:13:6e:c8:
41:56:d8:4f:a5:92:e8:30:8a:83:0d:d8:16:fa:4d:
ed:67:19:3a:a1:10:35:72:0c:11:ca:64:40:59:d6:
05:b9:99:7c:07:ef:02:b5:34:50:7b:2b:c2:38:35:
91:60:6c:66:d7:eb:6f:a3:cb:1d:c4:24:3d:79:50:
3d:5e:5a:89:49:50:8e:42:00:b0:58:74:29:56:fa:
10:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:84:3D:06:AB:15:0B:04:C4:DA:5D:F8:56:E7:5F:CB:66:AA:CA:BE
X509v3 Authority Key Identifier:
keyid:5F:A3:86:E9:76:56:D6:48:AB:53:81:B2:96:66:41:40:81:B0:00:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:ef:4b:93:22:0a:3e:6b:b3:cb:c4:69:94:93:68:9b:fb:91:
26:f8:23:ac:45:d8:39:b8:e1:9d:2b:61:06:39:25:9f:c7:01:
84:69:b9:94:a2:25:aa:8c:50:f0:17:71:88:62:17:29:e5:64:
1f:04:e9:9f:dd:af:92:d7:16:e6:fd:83:d5:3f:dd:78:95:68:
45:a4:b7:c6:41:5d:41:98:1e:46:66:e3:2b:df:6b:42:47:30:
bf:11:26:fc:57:ef:0f:33:cd:bd:ac:6e:58:3c:41:f5:c0:b7:
ce:ad:a8:72:96:52:3d:bb:ec:f0:89:32:51:62:a6:3a:c3:84:
c0:27:61:84:0b:65:7d:59:56:80:91:91:04:75:75:3e:23:8d:
3a:47:e5:90:4d:51:ae:f8:f3:9e:ed:b6:4d:c5:35:1c:44:c5:
05:2f:96:e4:ba:e5:96:00:0a:96:9c:0e:17:8d:be:e5:34:00:
ec:b3:1a:cb:ce:d4:4c:70:5a:33:1f:73:72:55:f8:c2:cf:07:
5a:fb:1c:92:c5:81:25:82:08:7a:c5:94:5d:57:4c:ad:81:c4:
fe:bc:df:cb:83:e3:95:cb:82:5d:5d:d8:b9:ea:5e:ea:31:22:
fa:fb:53:0a:ee:c4:d7:43:67:fa:4d:f8:61:f6:48:61:8f:b9:
85:4c:67:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:55:20 2026 by rpki-client