Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft
File: Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft (raw, json)
Hash identifier: OoV5jvBRqVbHSA82zNfrNGBwB4DQWLly5bplXbU/AuY=
Subject key identifier: 23:9E:2E:D7:70:09:65:60:BD:41:AA:72:9D:97:D7:65:B1:14:C0:59
Authority key identifier: 5E:CC:B7:CD:1B:9D:6F:C3:9D:71:58:F2:FE:9C:F5:21:7A:12:D3:74
Certificate issuer: /CN=5eccb7cd1b9d6fc39d7158f2fe9cf5217a12d374
Certificate serial: 019FABD14072EA7DA4D1004388BC2688FB15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft
Manifest number: 19D5
Signing time: Wed 29 Jul 2026 03:00:45 +0000
Manifest this update: Wed 29 Jul 2026 03:00:45 +0000
Manifest next update: Thu 30 Jul 2026 03:00:45 +0000
Files and hashes: 1: GqSD-huFyN5KnbmOJE2G9Ex44l8.roa (hash: 3Qs/JfYQSZ6IzynE4ipg87qcZBEyHL3uWN4yF6V7P0w=)
2: VS_M4cAagWUGuW9fqRkh-RrWxeM.roa (hash: hZcQF43INC8Yz5JTh0PAiO/K0ZNFR1rzI3rKsJwe74E=)
3: Xsy3zRudb8OdcVjy_pz1IXoS03Q.crl (hash: 3aD3koArlC8AVfLTgemaMcbQU1ODQGvvBU5vGSG9hqM=)
4: rwfC2i-yhf4UtPPyaXqIB4OR2c8.roa (hash: 7pkGwTQxoCILPcgqkjDlu2UDM7lXD5BJiZpj+8CPoC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 03:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:40:72:ea:7d:a4:d1:00:43:88:bc:26:88:fb:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eccb7cd1b9d6fc39d7158f2fe9cf5217a12d374
Validity
Not Before: Jul 29 03:00:45 2026 GMT
Not After : Jul 30 03:00:45 2026 GMT
Subject: CN=239e2ed770096560bd41aa729d97d765b114c059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7b:c2:58:51:f7:0f:d9:4d:8a:8b:77:db:03:
2f:6a:92:eb:23:46:61:00:44:9c:5a:4d:2c:a9:d9:
fd:1a:c8:73:1d:80:d4:5d:ba:7c:98:af:71:e1:5a:
e8:b0:b5:3e:83:34:1e:31:34:96:f4:8c:59:0e:b1:
69:84:7d:ce:ed:0c:13:d9:45:1d:17:c2:2b:46:de:
09:88:ac:41:30:ae:a3:59:13:09:03:0a:7a:2a:47:
9a:f6:30:48:cf:6e:b3:cb:25:fb:09:78:49:73:16:
0f:a7:53:36:a1:f4:fa:4a:19:d7:88:20:fc:44:0c:
19:9c:6a:81:1d:19:c1:9c:5f:da:51:4d:be:e7:4f:
ae:d0:48:36:89:ca:4d:32:5b:0f:c0:9a:91:58:9a:
f7:45:90:ef:0d:d3:88:e1:3a:b0:a6:7f:49:a5:de:
30:3a:a5:46:2c:5a:9a:ef:6f:51:ad:45:9e:69:9d:
ac:f8:44:0c:ad:c3:db:78:91:ba:fb:6d:0e:de:e0:
b6:57:ed:5f:9b:e5:c5:14:80:60:72:6a:11:88:d6:
03:8d:8a:84:7f:ad:42:35:01:54:e1:c4:ae:d3:12:
b1:a1:9d:32:e1:41:27:db:30:95:bd:d9:90:d9:6e:
d3:fe:eb:5c:a5:5c:a4:dd:e6:0a:79:f1:8d:e7:a5:
04:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:9E:2E:D7:70:09:65:60:BD:41:AA:72:9D:97:D7:65:B1:14:C0:59
X509v3 Authority Key Identifier:
keyid:5E:CC:B7:CD:1B:9D:6F:C3:9D:71:58:F2:FE:9C:F5:21:7A:12:D3:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:65:bc:40:3a:4e:ea:d4:c2:33:77:97:7c:17:3d:ee:68:7d:
da:9c:b2:9a:d5:19:91:65:67:8a:e9:b2:fb:32:97:6e:30:a0:
e1:bd:0f:7e:42:da:73:48:90:1b:53:6d:84:a8:29:52:20:98:
ee:d6:b6:74:b1:cd:53:80:a1:58:68:a5:7a:be:88:07:de:36:
c6:96:e9:ec:8c:e5:25:44:07:24:33:4f:80:ee:74:85:cd:6d:
25:24:ef:14:e1:cf:a0:14:2f:12:5c:1e:41:cd:1a:02:22:2f:
54:db:1c:90:6e:ce:78:54:1a:e0:d4:a8:24:d9:df:30:0a:e4:
cc:d8:0a:d8:b6:d1:5a:da:e8:50:57:ff:22:b3:ad:a7:7b:b8:
21:7b:61:76:08:0f:4c:e3:c2:1a:ab:ca:4e:07:b9:0a:d9:fa:
a7:71:e9:0f:93:13:7d:dd:7f:c0:dc:81:95:bc:5a:d9:20:99:
76:6e:d7:b7:f6:cd:9c:8e:2c:58:81:25:f5:5b:27:e1:44:55:
63:52:ed:4c:d0:a9:62:4e:37:10:40:33:33:60:1c:c6:81:82:
f7:f5:4e:bf:a7:f1:6d:13:25:ce:b2:d9:5a:e4:e6:67:29:ba:
d6:02:34:49:c7:cd:17:af:e9:d2:3f:75:e2:b4:a4:c8:47:b1:
a8:47:3c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:44:41 2026 by rpki-client