Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
File: xReRpYEcf27YH9RBtQJlr16cYbA.mft (raw, json)
Hash identifier: CCyURTuL1fPiyCXvwM9uAzhe5+QOzQ7/tSBNwbJsJpg=
Subject key identifier: 97:56:AC:BA:7C:D7:51:82:67:F0:8A:B9:9B:93:82:87:AF:7A:85:65
Authority key identifier: C5:17:91:A5:81:1C:7F:6E:D8:1F:D4:41:B5:02:65:AF:5E:9C:61:B0
Certificate issuer: /CN=c51791a5811c7f6ed81fd441b50265af5e9c61b0
Certificate serial: 019F91DB2898A15BA7A84737C6EAAF150238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
Manifest number: 19CC
Signing time: Fri 24 Jul 2026 02:01:26 +0000
Manifest this update: Fri 24 Jul 2026 02:01:26 +0000
Manifest next update: Sat 25 Jul 2026 02:01:26 +0000
Files and hashes: 1: GpZIgv126Cl3UoGhkY1Uvof1iPY.roa (hash: fP30v2kEF8neAtWHSrqD3PG/OVeu+YIU3qixidi5CQc=)
2: idf0hZZENN-4_aae9KN1w6rgM4Q.roa (hash: qK834woHIrutz8SD0paYhf0sMnrUCo/j6IC8hJut1/0=)
3: xReRpYEcf27YH9RBtQJlr16cYbA.crl (hash: AxJ9WuhdMsA+dX3kJMtO77T3jm2tt0OsQHYuYsDyyHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:db:28:98:a1:5b:a7:a8:47:37:c6:ea:af:15:02:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c51791a5811c7f6ed81fd441b50265af5e9c61b0
Validity
Not Before: Jul 24 02:01:26 2026 GMT
Not After : Jul 25 02:01:26 2026 GMT
Subject: CN=9756acba7cd7518267f08ab99b938287af7a8565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e6:43:9d:24:32:26:be:0b:22:39:4f:0f:8b:
76:b6:8d:49:fb:ad:0b:6a:4c:26:b2:29:8b:d0:ca:
d8:2b:d5:cd:b2:6a:9e:64:e5:24:20:e4:35:17:e3:
64:90:41:a9:bc:75:23:eb:3d:0e:9a:0b:14:f2:1a:
c2:cf:74:a6:80:66:20:04:68:7e:ac:82:cd:b8:50:
a5:59:20:e4:1d:ba:4f:90:26:d5:94:c9:47:23:93:
cf:72:3a:42:00:63:be:c7:0a:f9:83:91:1b:0a:34:
ff:35:b3:01:0d:14:be:ab:ff:db:37:20:de:7a:46:
64:f1:58:f6:2b:21:32:90:1c:77:66:13:61:d9:db:
71:f6:8e:0a:54:66:97:26:6c:12:be:65:20:6f:34:
9d:77:ac:84:22:ad:23:f8:5b:e3:9e:1c:3e:4b:9e:
4d:41:b3:13:54:58:1a:56:56:13:82:b6:21:f3:45:
cc:8f:d5:79:9b:fb:7c:05:75:fd:ff:42:8d:ec:40:
cd:cb:47:d6:d9:91:b3:de:6a:4f:b1:cb:f9:c8:b6:
73:80:24:bb:8e:14:e1:5e:0d:77:7e:f9:53:de:77:
7c:eb:41:bb:ea:f3:a4:a7:a4:40:1e:e8:a2:7d:98:
be:8b:20:82:9e:74:75:3c:1c:fd:71:9d:c1:f9:b8:
31:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:56:AC:BA:7C:D7:51:82:67:F0:8A:B9:9B:93:82:87:AF:7A:85:65
X509v3 Authority Key Identifier:
keyid:C5:17:91:A5:81:1C:7F:6E:D8:1F:D4:41:B5:02:65:AF:5E:9C:61:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:e5:08:46:28:2d:c8:68:a0:54:d0:e9:b8:0a:63:cb:a2:a6:
4c:7e:23:fb:93:1c:1f:da:e4:23:a1:b8:f4:19:ea:e0:10:99:
f3:68:d6:aa:1c:d7:d3:f3:aa:ca:73:64:67:15:1a:67:d6:c9:
6a:41:16:73:c2:f3:60:b8:4a:93:24:97:cc:ec:c2:35:76:b4:
24:1c:2a:1e:61:d2:be:88:a5:a8:72:d4:d1:b5:73:24:34:8c:
e6:bb:9e:dc:63:d8:8a:88:ce:ea:80:2a:08:0c:85:a5:39:4d:
17:81:af:ee:eb:77:b8:02:6d:aa:fc:10:84:94:d3:6e:05:d1:
23:c3:61:42:ad:9e:a0:20:80:ca:16:ea:72:36:6d:a9:e7:b6:
70:49:67:b7:8d:62:ae:70:3c:32:93:24:e1:ad:03:c4:a5:37:
f2:80:03:13:84:6d:ed:bf:47:ec:05:05:29:ac:d5:7c:76:29:
9c:28:ec:fc:01:14:e4:72:ba:2e:3d:28:e0:3f:32:aa:90:27:
31:f6:7a:1c:6c:c2:9f:e0:a3:30:9c:ef:e7:d9:aa:7c:4b:8b:
e7:bd:b4:ec:c2:e3:05:a6:1d:18:86:6f:35:ed:d9:dc:f3:7a:
1c:35:8c:0f:b9:3c:01:2c:82:b6:e5:b3:1f:94:dc:77:07:b9:
e1:40:c5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:18:21 2026 by rpki-client