Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
File: Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft (raw, json)
Hash identifier: ExdZQwEFaUiaDlf3bKKR/zvXzbt3XF9IXeAsmP5pg0Y=
Subject key identifier: F5:AB:76:E2:DF:C1:D6:32:55:58:DE:80:87:9B:A3:63:DD:98:4D:E4
Authority key identifier: 5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
Certificate issuer: /CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Certificate serial: 019F94DC1AFB1D074FC10BA04C83577908C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
Manifest number: 0A1A
Signing time: Fri 24 Jul 2026 16:01:20 +0000
Manifest this update: Fri 24 Jul 2026 16:01:20 +0000
Manifest next update: Sat 25 Jul 2026 16:01:20 +0000
Files and hashes: 1: DNO1I-TkpArSeHYJmcY4l5DFhts.roa (hash: cJ58Vzw7QL+cL/8OgW9JpclMRUS3i5GfX5DaYn+9oUA=)
2: Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl (hash: c3Htv16nZVaK58b7GJqclJzelVA8CkYnYSgraOTDLug=)
3: zZWY_IAZTfyBj8nKZJLyKtz1FcA.roa (hash: yYASwQEw3rfD/lPBPxCKrlCfAsDJXhJw/JiI9s5QDDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:dc:1a:fb:1d:07:4f:c1:0b:a0:4c:83:57:79:08:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Validity
Not Before: Jul 24 16:01:20 2026 GMT
Not After : Jul 25 16:01:20 2026 GMT
Subject: CN=f5ab76e2dfc1d6325558de80879ba363dd984de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9e:77:8a:fd:bf:75:a8:ac:a1:41:0c:b2:01:
18:ae:d4:50:38:ff:23:80:5e:8c:48:c9:49:30:d2:
d3:e9:89:3e:b3:de:8c:b1:6c:2b:9e:16:18:8a:4f:
62:07:65:b8:b7:d5:35:20:f3:fb:3c:72:da:42:5e:
76:0a:48:a9:7a:76:ac:3b:4c:ea:02:ef:86:78:b9:
af:39:05:db:9c:71:bc:23:d8:17:57:09:87:37:02:
9c:19:6e:67:ca:26:75:69:bc:1c:43:10:70:1b:02:
e5:9c:75:df:2a:0f:d4:f6:56:56:ba:9f:7f:27:b6:
07:cb:55:df:2f:bd:da:61:84:a5:a9:df:7e:48:2c:
6d:f7:cc:8d:41:86:e7:94:8b:08:e3:61:32:04:94:
1e:1c:8d:de:21:11:e4:71:0e:f4:0f:43:bd:91:6e:
b2:c6:1d:04:07:d5:e8:5b:40:9b:af:87:e7:a6:b2:
92:89:a1:b1:bb:c1:f4:df:03:94:51:b4:d8:f2:88:
9b:28:e2:14:29:7c:13:4b:01:0e:6e:9c:b4:d4:99:
36:4b:74:cb:d9:7a:33:af:81:13:c5:e6:d2:ad:8c:
a5:7c:40:ac:1f:d6:99:ef:57:39:0b:d8:b0:f6:01:
d7:60:ee:0b:6b:0e:eb:da:b6:cb:f8:8d:d7:e8:c5:
f5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:AB:76:E2:DF:C1:D6:32:55:58:DE:80:87:9B:A3:63:DD:98:4D:E4
X509v3 Authority Key Identifier:
keyid:5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:bd:52:2a:86:0b:ec:4f:af:78:62:58:bf:66:40:3e:6d:c8:
a5:b4:64:54:ce:6f:ab:21:b6:44:76:78:18:c6:e8:dd:a1:c3:
15:98:e4:06:35:6e:15:15:79:48:41:95:a4:04:2f:af:72:37:
9c:02:64:a7:1d:ee:7f:29:fc:ca:ad:59:86:16:bf:f2:f1:be:
3d:08:7f:3b:8a:38:c4:b3:81:08:e2:52:dd:e8:a6:d4:05:2c:
bf:cc:88:c2:e4:09:b5:d6:11:a3:cd:e7:13:48:70:49:03:37:
a9:c5:39:79:c8:a6:7a:bf:d9:a9:c7:f5:25:39:4c:f2:34:4e:
64:88:9b:c2:77:ca:c9:cb:a1:77:1a:09:c8:b5:d1:02:45:f5:
b4:7d:a2:1e:51:8f:5b:56:86:98:65:99:f9:e5:32:7b:c2:eb:
86:d0:fe:ab:d7:4f:99:5d:a8:26:90:81:f0:db:ad:1d:2a:cd:
7a:ac:f6:bd:78:f5:45:f1:02:ce:01:d4:9b:12:3f:07:f1:90:
5d:57:c9:cd:a1:94:0d:b2:5c:4d:69:47:1f:e0:49:d4:fd:82:
83:5f:74:0f:9c:dc:d8:d1:e8:3c:09:44:bf:1c:e6:5c:a1:c1:
fd:6d:c8:0b:09:60:09:10:90:16:64:cf:f2:77:52:b0:9b:67:
d3:d3:f2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:06:39 2026 by rpki-client