Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.mft
File: XM97P9h86bzpn5ALZBmdYGvxYGk.mft (raw, json)
Hash identifier: iJcaSdiVc1cCBMPCJyM8CeyalqTHmCZxyGHCpycLvPo=
Subject key identifier: C1:78:7A:CA:7C:49:B5:F2:D7:38:18:B1:42:3C:87:CC:E0:2A:AC:67
Authority key identifier: 5C:CF:7B:3F:D8:7C:E9:BC:E9:9F:90:0B:64:19:9D:60:6B:F1:60:69
Certificate issuer: /CN=5ccf7b3fd87ce9bce99f900b64199d606bf16069
Certificate serial: 019FAC769232AD115150DEEF55A651DCD5FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XM97P9h86bzpn5ALZBmdYGvxYGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.mft
Manifest number: 1967
Signing time: Wed 29 Jul 2026 06:01:19 +0000
Manifest this update: Wed 29 Jul 2026 06:01:19 +0000
Manifest next update: Thu 30 Jul 2026 06:01:19 +0000
Files and hashes: 1: KhLnM9UHZFCOQul_YnhOlrlNWQg.roa (hash: F9XQk4xPu6hZHYNZKH9uTFT9zpakfltc+2j9WkGLNVk=)
2: XM97P9h86bzpn5ALZBmdYGvxYGk.crl (hash: 14E+tagn551D3yQLjSKEV1su0r9BCIkI3cM0oA12l24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XM97P9h86bzpn5ALZBmdYGvxYGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:92:32:ad:11:51:50:de:ef:55:a6:51:dc:d5:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ccf7b3fd87ce9bce99f900b64199d606bf16069
Validity
Not Before: Jul 29 06:01:19 2026 GMT
Not After : Jul 30 06:01:19 2026 GMT
Subject: CN=c1787aca7c49b5f2d73818b1423c87cce02aac67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6e:37:0a:59:72:22:8d:69:27:16:00:16:d6:
3a:c1:cc:60:8f:a8:d5:3e:fb:4f:fe:75:5a:dd:43:
2e:a1:55:5c:17:eb:5b:f4:1c:9e:f4:be:99:4b:5a:
32:28:a6:63:fe:4d:5c:fe:11:65:c2:ec:84:c5:63:
25:5d:55:13:04:20:e5:60:43:77:44:10:eb:56:db:
95:0f:e7:21:e3:b5:55:af:6a:91:28:34:b8:5d:6c:
ea:aa:c1:32:0c:02:3a:4c:77:2e:7c:76:b2:02:8f:
51:e2:fc:90:e4:d3:a2:0a:4b:ac:c2:37:bf:00:3f:
16:fd:2b:94:d4:6a:45:4c:a8:1c:3d:84:90:04:db:
29:17:c8:d8:1b:8c:a5:15:01:f5:9a:bd:8a:c6:55:
8e:57:fd:64:3d:34:11:d7:eb:68:01:7b:ad:aa:ef:
a3:d6:76:07:af:b1:5a:ab:bd:0e:8a:91:90:27:30:
0a:13:c3:e1:9d:40:ee:cd:fc:ed:58:23:32:c0:b2:
bd:49:13:77:bb:13:3a:6e:c5:36:1d:d9:e2:06:a5:
e5:a8:fa:06:ae:c2:59:d7:14:4d:d1:e7:fa:51:9b:
ab:50:dd:16:cf:68:2a:7a:50:e2:8c:d7:fe:e5:fc:
18:9f:3b:a3:d8:ef:0e:c7:c1:c0:bf:db:47:02:88:
ea:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:78:7A:CA:7C:49:B5:F2:D7:38:18:B1:42:3C:87:CC:E0:2A:AC:67
X509v3 Authority Key Identifier:
keyid:5C:CF:7B:3F:D8:7C:E9:BC:E9:9F:90:0B:64:19:9D:60:6B:F1:60:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XM97P9h86bzpn5ALZBmdYGvxYGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:33:2d:02:f8:1e:fa:78:2f:d9:5c:49:df:a2:c4:d2:64:c7:
bc:b1:94:f7:24:7c:e4:94:78:5a:f4:30:ad:64:d5:8c:ff:3d:
59:b7:3c:58:36:69:a1:2e:18:9b:d4:ed:1a:66:f0:ab:33:95:
7c:ad:31:a6:74:74:f5:10:7e:c4:45:6d:ce:0f:fd:c2:6f:c5:
1d:63:34:2b:ca:ec:1e:1d:fd:7c:15:18:c9:8e:4c:af:fe:cb:
3f:5d:ed:dd:c5:f9:c8:68:2b:1f:28:08:63:0b:56:75:0c:0e:
7f:f8:32:63:97:33:f2:91:d1:fe:9e:cd:82:1b:4e:a8:2e:03:
3f:9d:35:ae:08:cd:22:d3:c4:ff:e5:2c:0d:83:4e:b9:1a:2e:
9a:5d:19:94:1a:65:33:60:d2:9c:5c:24:12:f9:c1:c6:23:91:
b3:83:f5:a8:47:ac:2c:ba:28:d7:ed:41:d1:2c:97:49:3a:e6:
31:54:24:f1:45:73:de:75:fd:95:46:07:36:86:81:b8:3b:9b:
2f:fc:15:77:85:2d:57:ee:2d:f0:ed:2d:81:cc:73:3b:42:cb:
25:6f:35:5c:03:7e:64:72:3c:eb:f3:5f:73:1e:f0:e7:6e:f4:
59:81:78:aa:17:01:dc:8b:89:26:73:9f:25:a8:74:ef:1e:57:
80:52:2c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:31:17 2026 by rpki-client