Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
File: Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft (raw, json)
Hash identifier: 4ibHXzjuJ2/0IvaUz+IgduseKBn2NoEcKSZoLXCZbeQ=
Subject key identifier: B5:B9:BD:B8:82:E8:4D:B2:80:35:95:55:09:0E:09:E3:14:85:9A:8C
Authority key identifier: 5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08
Certificate issuer: /CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408
Certificate serial: 019F905A771D25BC5D599A263592D1EB60FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
Manifest number: 19CC
Signing time: Thu 23 Jul 2026 19:01:15 +0000
Manifest this update: Thu 23 Jul 2026 19:01:15 +0000
Manifest next update: Fri 24 Jul 2026 19:01:15 +0000
Files and hashes: 1: 2oiBg97yJfcku7AZ1xtBGexIP9I.roa (hash: ZkJc6vel+43QcyypXskCAIYVCyw1+ndC8Q1LjIoI34g=)
2: GWcwAEGL8dWNpctIdaHLmJt2F-M.roa (hash: icoIbE+7HxZrn6cToVlzjrHBi9MeFRezSthDAS8pPcs=)
3: Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl (hash: GrCa8VID6c3fBjenrabXSwNT6KQ4fNrNfrJ9lcG3Db8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:77:1d:25:bc:5d:59:9a:26:35:92:d1:eb:60:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408
Validity
Not Before: Jul 23 19:01:15 2026 GMT
Not After : Jul 24 19:01:15 2026 GMT
Subject: CN=b5b9bdb882e84db280359555090e09e314859a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2d:98:8d:af:ce:bc:46:6b:a5:3c:86:e1:73:
53:4f:d7:29:b9:ba:7c:e4:42:d8:1f:d9:2f:a7:c3:
e6:0e:dc:54:3e:1b:19:df:0f:0f:e3:c9:cf:7c:0d:
18:36:db:39:f4:1f:ae:ad:a1:bb:9d:0f:13:21:5c:
08:89:30:fd:77:bc:7b:9c:90:ab:09:f6:e8:ad:3d:
a5:1e:01:9b:5b:a9:8a:32:1c:b3:05:dd:25:52:0a:
db:41:6d:53:cb:60:e4:d3:df:6b:fd:62:f6:22:d9:
08:5e:e0:de:58:8c:49:d2:bc:ee:8a:5a:7e:b6:a4:
31:cb:35:3f:92:69:31:67:1c:2c:3f:a2:86:aa:42:
5e:03:fb:43:fa:e2:61:fa:4e:a7:3a:3b:81:1b:b4:
0b:f0:9b:0a:56:e1:57:1e:4d:90:0d:3e:cf:70:79:
e7:c1:41:f7:21:38:65:88:4f:8b:a6:0a:47:c3:02:
f6:30:cf:38:e0:1c:57:87:c7:36:35:39:f6:cf:18:
ff:b8:9b:c7:85:40:8e:9d:bc:d6:f3:f3:67:ec:7b:
27:e3:8f:ef:5d:d9:af:fb:8f:17:0b:53:98:73:96:
d6:3d:dd:cd:80:2d:2a:9a:a3:ad:26:2e:5f:da:3a:
54:17:f0:5c:66:ec:fe:01:55:68:62:94:e3:5f:24:
a5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B9:BD:B8:82:E8:4D:B2:80:35:95:55:09:0E:09:E3:14:85:9A:8C
X509v3 Authority Key Identifier:
keyid:5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:ed:a5:19:f7:c0:47:19:47:22:d5:4f:ba:8f:39:eb:49:26:
3d:01:c6:b7:b9:3e:bf:f4:c7:af:c0:cd:8c:be:69:b5:ab:02:
a8:c8:6b:50:8c:49:fa:c6:a9:94:0f:ea:94:71:eb:19:d0:dc:
82:6a:bd:8f:a1:83:4b:2f:ee:41:5d:f5:5c:24:de:27:1f:c0:
82:f2:58:11:c7:9d:49:df:e6:b7:72:f9:46:56:49:34:31:4d:
e0:de:d2:86:5a:ab:cd:b8:3a:a5:5c:be:5c:a8:06:a6:73:29:
b5:9a:3f:4e:31:74:ce:14:f1:a5:f9:19:66:b0:9d:f8:41:32:
d5:17:ca:96:ad:01:4f:54:5f:e0:25:3f:0d:ae:a1:c7:87:f0:
e5:e4:33:39:64:95:c9:2d:54:53:cb:03:c3:97:74:35:0f:98:
aa:f7:24:38:85:f9:35:22:b0:bb:4f:99:f7:0c:49:54:46:49:
20:0b:7e:9f:b9:b4:84:e3:ab:7e:b1:00:ff:dc:2a:41:18:7c:
19:20:b8:82:c4:81:d4:cb:61:3d:8d:09:40:2d:ed:df:4b:0d:
1d:dc:9b:f2:ef:b1:dd:33:35:30:54:ca:bd:70:c1:91:8f:2c:
8d:21:3a:73:50:56:88:f4:ae:f0:75:cc:83:ed:5d:43:67:26:
53:90:15:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:17:03 2026 by rpki-client