Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
File: xLG0WKv3l97cxmHlSmhfZRg0tdE.mft (raw, json)
Hash identifier: RCj6t5nQRC9/ZLQ7qfMbZ2vxJDzPKoOUPk7H2ChRvAg=
Subject key identifier: B7:AD:A9:DF:F4:FB:16:43:29:81:9D:C6:29:19:C7:46:99:E2:45:C1
Authority key identifier: C4:B1:B4:58:AB:F7:97:DE:DC:C6:61:E5:4A:68:5F:65:18:34:B5:D1
Certificate issuer: /CN=c4b1b458abf797dedcc661e54a685f651834b5d1
Certificate serial: 019F91DAE5AE6D8EEF3343AB9AE06806B1C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
Manifest number: 16CE
Signing time: Fri 24 Jul 2026 02:01:09 +0000
Manifest this update: Fri 24 Jul 2026 02:01:09 +0000
Manifest next update: Sat 25 Jul 2026 02:01:09 +0000
Files and hashes: 1: Vu85Nu-HoLeRv_52CEznI8bQbss.roa (hash: c6ty/wCdDrBOcI9jUvVNl5APK8YZjil4x8ZlNRshHvo=)
2: hwEYkWKezFU1S6DS8A0TF6JXUos.roa (hash: dJKRSf7F67Dm6ZGKlb7G6KP8NQfxdE863RZT2JIwE9k=)
3: lo3R5w_kTel81Z1irkIbzAD6F8Q.roa (hash: PuU1Xdn3kY1LjMwZS3Qaqe5MniakxiQ+Y+f6yTPGRCQ=)
4: nb0hXlBPQhPWTuMEqZzkSxkwpXI.roa (hash: 55gzjqx5n4gyySLdEurC8vvFbXFEosab3sYhqOZ+WA8=)
5: xLG0WKv3l97cxmHlSmhfZRg0tdE.crl (hash: eaBSnv4ZFvIdnsHzcaDGiCZ+sbLiv9fWdsLpI390fxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:e5:ae:6d:8e:ef:33:43:ab:9a:e0:68:06:b1:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b1b458abf797dedcc661e54a685f651834b5d1
Validity
Not Before: Jul 24 02:01:09 2026 GMT
Not After : Jul 25 02:01:09 2026 GMT
Subject: CN=b7ada9dff4fb164329819dc62919c74699e245c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:24:c5:ed:8b:58:8b:25:51:77:b3:50:e4:4e:
13:5a:8e:28:27:99:4e:a8:2a:c4:a3:cd:4e:73:4d:
58:69:01:fc:86:33:44:a7:52:09:e2:47:65:12:cd:
75:fa:c8:96:15:00:6e:b5:00:cc:ad:f1:1f:99:2f:
14:da:ba:de:ff:5f:d2:5b:b5:22:22:c2:4a:83:f3:
2e:23:c0:9c:8b:2b:ba:04:f4:d8:97:07:d9:97:81:
6f:4d:f5:dd:ac:d1:d5:2d:88:af:f3:6d:fb:e9:d7:
0b:3f:c8:f6:51:38:eb:4b:88:06:b9:ae:7c:82:a0:
a9:6b:e4:23:b9:5d:74:29:90:63:a9:bc:99:cb:5f:
22:2e:d3:c8:06:f9:a0:96:68:1b:58:4a:9e:0e:fc:
72:dd:90:e3:e9:eb:04:7d:92:98:fe:a5:1b:f8:53:
f3:21:14:89:e8:d1:bc:3e:06:58:01:6e:df:2f:16:
49:3b:42:11:91:ff:c3:67:f3:10:f9:b0:78:f7:7c:
88:74:a7:20:a9:89:44:d5:5e:4e:f9:7e:22:b9:0f:
56:12:82:9c:af:2c:0a:18:77:69:3e:fe:fa:de:2d:
6b:16:47:2f:b2:55:67:82:d9:52:c8:ad:86:e0:8b:
62:6a:d2:3e:41:4c:e8:75:e6:3f:85:9f:fd:2e:3c:
bb:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:AD:A9:DF:F4:FB:16:43:29:81:9D:C6:29:19:C7:46:99:E2:45:C1
X509v3 Authority Key Identifier:
keyid:C4:B1:B4:58:AB:F7:97:DE:DC:C6:61:E5:4A:68:5F:65:18:34:B5:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:8c:5c:6f:76:42:1b:d5:47:df:38:ed:e2:2c:c2:61:89:39:
9e:ed:aa:8e:1a:8b:d0:d9:24:0a:fc:c7:06:b3:45:39:52:d3:
e4:0b:36:eb:e7:34:e2:94:49:6a:99:b8:78:0e:a8:13:e7:04:
81:19:e1:17:57:b9:9d:d0:68:98:0e:d4:8e:55:b9:f8:e1:80:
a5:56:e9:3e:7d:ca:40:02:3f:b0:fa:da:3b:6f:ff:33:f5:7c:
42:5f:42:ba:ed:ed:85:21:f2:3e:83:72:f4:e7:4d:8f:8c:20:
cb:ea:0a:a0:c1:cf:70:44:56:31:49:d1:4d:6c:d6:d0:cd:aa:
13:db:2b:bf:c7:9f:92:55:38:b6:a5:68:9c:fa:31:b2:cd:a5:
65:be:28:60:5d:1c:62:13:f1:33:d8:03:53:bf:1c:12:9d:aa:
75:d7:b4:2b:48:a3:3e:ac:5a:be:86:e9:f6:25:61:ee:77:5b:
4f:89:5d:c1:88:b3:29:10:00:fd:c7:5c:ef:7f:21:30:e8:e7:
88:c7:5f:30:df:c4:4c:5a:a9:a1:19:f2:a6:d5:77:cb:b5:3b:
99:91:05:64:12:a2:2e:39:70:80:03:f6:2c:ea:6f:cd:ca:a9:
76:59:c4:34:b9:13:6d:3b:be:c1:24:8f:ca:95:d1:2c:0b:61:
26:b2:41:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:31:12 2026 by rpki-client